Changelog v1.8.2

This keeps track of important changes to the 1.x branch.

When you decide to upgrade to a new version, pay attention to the changes documented in this changelog, and the upgrade procedures documented.

Security advisories

• [SEC-CORE-009]: Unzip vulnerability to slip-attack!

See the website for more information about reported security issues and their status.

Important fixes, changes, notes. Read them carefully.

• The code has been scanned for new warnings emitted by PHP 7.2. and PHP 7.3.

Security related

Backward compatibility notes

System changes

Specific classes

• Fixed a bug in get_common_path() returning incorrect results when the first path passed is an empty string.
• DB: Broken database cached results object has been fixed (1.8.1.1 hotfix).
• DB: Fixed last_query() no longer returning the last query after a call to count_last_query().
• DB: Fixed database result iteration (1.8.1.4 hotfix).
• Crypt: Replaced a PHP5.6+ function that creeped in by a coded alternative (1.8.1.3 hotfix).
• Session: Re-initialize if a session is started after it was closed (1.8.1.2 hotfix).

Packages

• Email: Mailgun driver has been made compatible with the Mailgun v3 API.
• Email: It is now possible to define stream socket options for SMTP connections.
• Email: A bug that failed to strip HTML comments from HTML email bodies correctly has been fixed.
• Oil: Fixed broken SQL being generated for tables with Unique indexes in migrations.
• Oil: Fixed pagination when generating admin pages for tables.
• Oil: Admin scaffolding has been updated to generate better code.
• Oil: Everything related to Fuel Cells have been removed, it was never properly implemented.
• ORM: A few PHP warnings have been fixed when calling to_array() on an object with relations.
• ORM: to_array() now returns related data correctly.
• ORM: Observer_Typing no longer truncates float values with more than 6 digits precision.
• ORM: Observer_Typing now supports columns of type 'date', 'time' and 'datetime'.
• ORM: Models now have the option to allow PK's to be set. This is required for non-autoincrement PK's.
• ORM: Fixed a NestedSets bug that caused the tree-id not to be set on multi-tree models.
• ORM: Fixed bug that allowed Models derived from a database view to be updated (causing a DB error).
• ORM: Allow is_changed() to run observers before comparing, to prevent it always returning True when using the Typing observer bidirectionally.
• ORM: Fixed bug in which not all Model properties were initialized on a forge() with partial data.