First release of CSRF package was tagged. The package provides PSR-15 middleware for CSRF protection:

• It supports two algorithms out of the box:
  • Synchronizer CSRF token with customizable token generation and storage. By default, it uses random data and session.
  • HMAC based token with customizable identity generation. Uses session by default.
• It has ability to apply masking to CSRF token string to make BREACH attack impossible.

Extensive documentation is available.

Two minor versions of test support package were tagged. Both are about event dispatcher:

• 1.1.0 adds SimpleEventDispatcher::clearEvents() that clear all events in event dispatcher.
• 1.2.0 adds SimpleEventDispatcher::getEventClasses() that return classes of dispatched events.

First version of event dispatcher package was tagged. The dispatcher provides an ability to dispatch events and listen to events dispatched. It is:

• PSR-14 compatible.
• Simple and lightweight.
• Encourages designing event hierarchy.
• Can combine multiple event listener providers.

Usage description and examples are available in the package readme.

First verisons of yiisoft/log and some of the drivers called "targets" were released.

Log is PSR-3 compatible so using it in your apps is easy:

final class MyClass
{
    private \Psr\Log\LoggerInterface $logger;
    
    public function __construct(\Psr\Log\LoggerInterface $logger)
    {
    	$this->logger = $logger;
    }
    
    public function doIt(): void
    {
    	$this->logger->info('Doing it!');
        
        // ...
    }
}

First version of yiisoft/auth-jwt package was released. The package provides JWT authentication method for Yii Auth.

Configuration instructions are provided in the readme of the package.

First stable version of yiisoft/var-dumper package was released.

It enhances functionality of var_dump() and var_export() by dealing with recursive references, syntax highlighting and closures export.

It also provides convenient d() and dd() functions that may be used for quick dump-and-die style debugging.

More details are available in the package readme.

First versions of yiisoft/files package was released. The package provides useful methods to manage files and directories.

More details could be found in package readme.

A major version of strings package was released. The changes are about \Yiisoft\Strings\WildcardPattern. ** was introduced and the class was overall simplified.

It is not backwards compatible with 1.x.x versions so check upgrade guide if you decide to upgrade.

More details could be found in the package CHANGELOG.

First version of request body parser package was released. The package is a PSR-15 middleware that allows parsing PSR-7 server request body selecting the parser according to the server request mime type.

Out of the box it parses application/json requests where JSON is in the body. More parsers for mime types could be added by implementing a very simple ParserInterface.

Check README for details.

First versions of cache package and its drivers were released.

Main library is to be used as a wrapper around PSR-16 compatible caching libraries. We call these drivers. It adds an ability to set default TTL and key prefix per cache instance, provides a built-in behavior to cache stampede prevention, and adds cache invalidation dependencies on top of PSR-16. Check the details in README.

The following drivers were released along with main package:

First stable release of arrays package was tagged.

The package provides:

• ArrayHelper that has static methods to work with arrays;
• ArraySorter that has static methods for sort arrays;
• ArrayAccessTrait provides the implementation for \IteratorAggregate, \ArrayAccess and \Countable;
• ArrayableInterface and ArrayableTrait for use in classes who want to support customizable representation of their instances.

As usual with Yii 3 packages, there is 100% unit test coverage, high level of Psalm static analysis and high MSI mutation score. The package isn't dependent on the framework so could be either used as part of Yii or separately.

A minor version of strings package was released:

• Add method StringHelper::split() that split a string to array with non-empty lines.
• Add method NumericHelper::isInteger() that checks whether the given string is an integer number.
• Add support of a boolean values to NumericHelper::normalize().

More details could be found in the package CHANGELOG.

A major version of yiisoft/auth standalone package was released.

IdentityWithTokenRepositoryInterface does not extend IdentityRepositoryInterface so these could be used independently.

More description and usage examples are available in readme.

Version 1.1.0 of yiisoft/http package was released.

ContentDispositionHeader was introduced. It helps building Content-Disposition header that complies to RFC-6266 and works in majority of modern browsers:

$name = \Yiisoft\Http\ContentDispositionHeader::name();

Session package implements a session service, PSR-15 session middleware, and a flash message service which helps use one-time messages.

You can access session data through SessionInterface.

/** @var \Yiisoft\Session\SessionInterface $session */
$myId = $session->get('my_id');
if ($myId === null) {
    $session->set('my_id', 42);
}

Another Yii3 family package is released. This time it is yiisoft/i18n. The package provides common internationalization utilities and currently includes a Locale class. It stores locale information created from BCP 47 formatted string. Can parse locale string, modify locale parts, form locale string from parts, and derive fallback locale.

$locale = new \Yiisoft\I18n\Locale('es-CL');
echo $locale->language(); // es
echo $locale->region(); // CL

$locale = $locale->withLanguage('en');
echo $locale->asString(); // en-CL

echo $locale->fallbackLocale()->asString(); // en

The package has 100% code coverage and 100% mutation score.

First release of test support package was tagged. The package is intended to simplify the process of testing application elements that depend on PSR interfaces and is currently covering:

• Container Interface, PSR-11
• Event Dispatcher, PSR-14
• Simple Cache, PSR-16

More interfaces are to be covered in the subsequent releases. Extensive documentation is available.

Patch release of aliases package was tagged. It is fixing a bug with nested aliases and getAll().

Update does not require anything special. Just do composer update.

A pre-release version 0.5.0 of Composer config plugin was tagged. The plugin takes care of assembling configuration from multiple sources as configured in composer.json. That usually happens on composer update or composer install. Assembled configs are then used in the application cutting application bootstrap time significantly.

The plugin is still under development so there still could be configuration syntax changes.

Imagine extension version 2.3.0 was released.

Image::thumbnail() now accepts ImageInterface::THUMBNAIL_FLAG_UPSCALE flag to allow thumbnail upscaling. Since this option is only supported in imagine/imagine v1.0.0 or later, support for older version was dropped.

See CHANGELOG for details.