Browse Source

release version 2.0.38

tags/2.0.38^0 2.0.38
Alexander Makarov 4 years ago
parent
commit
6e694ee249
No known key found for this signature in database
GPG Key ID: 3617B79C6A325E4A
  1. 2
      framework/BaseYii.php
  2. 29
      framework/CHANGELOG.md
  3. 6
      framework/di/Container.php
  4. 1
      framework/rbac/DbManager.php

2
framework/BaseYii.php

@ -93,7 +93,7 @@ class BaseYii
*/ */
public static function getVersion() public static function getVersion()
{ {
return '2.0.38-dev'; return '2.0.38';
} }
/** /**

29
framework/CHANGELOG.md

@ -1,25 +1,26 @@
Yii Framework 2 Change Log Yii Framework 2 Change Log
========================== ==========================
2.0.38 under development 2.0.38 September 14, 2020
------------------------ -------------------------
- Bug: (CVE-2020-15148): Disable unserialization of `yii\db\BatchQueryResult` to prevent remote code execution in case application calls unserialize() on user input containing specially crafted string (samdark, russtone)
- Enh #18213: Do not load fixtures with circular dependencies twice instead of throwing an exception (JesseHines0)
- Bug #18066: Fix `yii\db\Query::create()` wasn't using all info from `withQuery()` (maximkou)
- Bug #18269: Fix integer safe attribute to work properly in `yii\base\Model` (Ladone)
- Enh #18236: Allow `yii\filters\RateLimiter` to accept a closure function for the `$user` property in order to assign values on runtime (nadar)
- Bug #18248: Render only one stack trace on a console for chained exceptions (mikehaertl)
- Bug #18233: Add PHP 8 support (samdark)
- Enh #18196: `yii\rbac\DbManager::$checkAccessAssignments` is now `protected` (alex-code)
- Bug #18239: Fix support of no-extension files for `FileValidator::validateExtension()` (darkdef)
- Bug #18229: Add a flag to specify SyBase database when used with pdo_dblib (darkdef)
- Bug #13973: Correct alterColumn for MSSQL & drop constraints before dropping a column (darkdef) - Bug #13973: Correct alterColumn for MSSQL & drop constraints before dropping a column (darkdef)
- Bug #18040: Display width specification for integer data types was deprecated in MySQL 8.0.19 (terabytesoftw)
- Bug #15265: PostgreSQL > 10.0 is not pass tests with default value of timestamp CURRENT_TIMESTAMP (terabytesoftw) - Bug #15265: PostgreSQL > 10.0 is not pass tests with default value of timestamp CURRENT_TIMESTAMP (terabytesoftw)
- Bug #18232: Fail tests pgsql v-10.14, v-11.9, v-12-latest (terabytesoftw)
- Bug #16892: Validation error class was not applied to checkbox and radio when validationStateOn = self::VALIDATION_STATE_ON_INPUT (dan-szabo, samdark) - Bug #16892: Validation error class was not applied to checkbox and radio when validationStateOn = self::VALIDATION_STATE_ON_INPUT (dan-szabo, samdark)
- Bug #18040: Display width specification for integer data types was deprecated in MySQL 8.0.19 (terabytesoftw)
- Bug #18066: Fix `yii\db\Query::create()` wasn't using all info from `withQuery()` (maximkou)
- Bug #18229: Add a flag to specify SyBase database when used with pdo_dblib (darkdef)
- Bug #18232: Fail tests pgsql v-10.14, v-11.9, v-12-latest (terabytesoftw)
- Bug #18233: Add PHP 8 support (samdark)
- Bug #18239: Fix support of no-extension files for `FileValidator::validateExtension()` (darkdef)
- Bug #18245: Make resolving DI references inside of arrays in dependencies optional (SamMousa, samdark, hiqsol) - Bug #18245: Make resolving DI references inside of arrays in dependencies optional (SamMousa, samdark, hiqsol)
- Bug #18248: Render only one stack trace on a console for chained exceptions (mikehaertl)
- Bug #18269: Fix integer safe attribute to work properly in `yii\base\Model` (Ladone)
- Bug: (CVE-2020-15148): Disable unserialization of `yii\db\BatchQueryResult` to prevent remote code execution in case application calls unserialize() on user input containing specially crafted string (samdark, russtone)
- Enh #18196: `yii\rbac\DbManager::$checkAccessAssignments` is now `protected` (alex-code)
- Enh #18213: Do not load fixtures with circular dependencies twice instead of throwing an exception (JesseHines0)
- Enh #18236: Allow `yii\filters\RateLimiter` to accept a closure function for the `$user` property in order to assign values on runtime (nadar)
2.0.37 August 07, 2020 2.0.37 August 07, 2020
---------------------- ----------------------

6
framework/di/Container.php

@ -93,8 +93,8 @@ use yii\helpers\ArrayHelper;
* *
* @property array $definitions The list of the object definitions or the loaded shared objects (type or ID => * @property array $definitions The list of the object definitions or the loaded shared objects (type or ID =>
* definition or instance). This property is read-only. * definition or instance). This property is read-only.
* * @property bool $resolveArrays Whether to attempt to resolve elements in array dependencies. This property
* @property bool $resolveArrays whether to attempt to resolve elements in array dependencies * is write-only.
* *
* @author Qiang Xue <qiang.xue@gmail.com> * @author Qiang Xue <qiang.xue@gmail.com>
* @since 2.0 * @since 2.0
@ -122,12 +122,12 @@ class Container extends Component
* is associated with a list of constructor parameter types or default values. * is associated with a list of constructor parameter types or default values.
*/ */
private $_dependencies = []; private $_dependencies = [];
/** /**
* @var bool whether to attempt to resolve elements in array dependencies * @var bool whether to attempt to resolve elements in array dependencies
*/ */
private $_resolveArrays = false; private $_resolveArrays = false;
/** /**
* Returns an instance of the requested class. * Returns an instance of the requested class.
* *

1
framework/rbac/DbManager.php

@ -106,6 +106,7 @@ class DbManager extends BaseManager
*/ */
protected $checkAccessAssignments = []; protected $checkAccessAssignments = [];
/** /**
* Initializes the application component. * Initializes the application component.
* This method overrides the parent implementation by establishing the database connection. * This method overrides the parent implementation by establishing the database connection.

Loading…
Cancel
Save