CakePHP官网安全更新（2023-10-15）

安全更新

The CakePHP core team is happy to announce the immediate availability of CakePHP 4.5.0. This is the first stable release of 4.5.0. 4.5.0 provides a number improvements to CakePHP. 4.5.0 introduces a large number of deprecation warnings aimed at assisting with future upgrades to CakePHP 5.0.<br/><br/>Upgrading to 4.5.0<br/>------------------<br/><br/>You can use composer to upgrade to CakePHP 4.5.0:<br/><br/> php composer.phar require --update-with-dependencies &amp;quot;cakephp/cakephp:4.5.*&amp;quot;<br/><br/>Deprecation Warnings<br/>--------------------<br/><br/>4.5 introduces a few deprecations. All of these features will continue for the duration of 4.x but will be removed in 5.0. See the [migration guide](https://book.cakephp.org/4/en/appendices/4-5-migration-guide.html).<br/><br/>What&amp;#039;s new in 4.5.0?<br/>--------------------<br/><br/>The [migration guide](https://book.cakephp.org/4/en/appendices/4-5-migration-guide.html) has a complete list of what&amp;#039;s new in 4.5.0. We recommend you give that page a read when upgrading. A few highlights from 4.5.0 are:<br/><br/>- ``bin/cake cache clear_group &amp;lt;name&amp;gt;`` was added. This command gives a CLI interface to clearing a specific cache group.<br/>- ``ComponentRegistry`` is now automatically added to your application&amp;#039;s DI container.<br/>- ``Controller::addViewClasses()`` was added. This method lets you build a controller&amp;#039;s view classes programatically.<br/>- Database and ORM connections now support ``read`` and ``write`` connection roles. Connection roles let you scale an application up by using read-replicas. When defining connections, roles can be configured with ``read`` and ``write`` keys in the connection config that override the shared config.<br/>- New methods were added to queries to select the ``read`` or ``write`` connection role to be used.<br/>- ``ModelAwareTrait::fetchModel()`` was added. This method works similar to ``loadModel()`` but does not set the model as an attribute.<br/>- The development error page design has been improved. It now renders chained exceptions and makes navigating stack traces easier as each frame can be collapsed individually.<br/>- Console exception messages now include stack traces for chained exceptions.<br/>- ``EntityTrait::$_hasAllowsNull`` was added. This property allows you to incrementally opt-in to a breaking change present in 5.x for ``EntityTrait::has()``.<br/>- ``View::addHelper()`` was added. This method compliments ``addBehavior()`` and ``addComponent()``.<br/><br/>Contributors to 4.5.0<br/>---------------------<br/><br/>Thank you to all the contributors that helped make 4.5 happen:<br/><br/>* ADmad<br/>* Alejandro Ibarra<br/>* Brian French<br/>* Chris Nizzardini<br/>* Jaro Varga<br/>* Jose Daian<br/>* Kevin Pfeifer<br/>* Lars Ebert<br/>* leon.schaub<br/>* Marcelo Rocha<br/>* Mark Scherer<br/>* Mark Story<br/>* Matthias Wirtz<br/>* othercorey<br/>* Roland Waldner<br/>* wowDAS Ing. Markus Ramšak<br/><br/>As always, a huge thanks to all the community members that helped make this release happen by reporting issues and sending pull requests. 4.5.0 is a large release and would not have been possible without the community support and feedback.<br/><br/>What&amp;#039;s Next<br/>-----------<br/><br/>With both 5.0 and 4.5 shipped the core team&amp;#039;s focus will be primarily on CakePHP 5.x. Future 4.x releases will be primarily community driven. Feature and bugfix releases for 4.x will continue until September 2025. Security fixes will continue for 4.x until September 2026.<br/><br/>The roadmap for 5.x is still under development. We&amp;#039;re interested in making the upgrade from 4.5.0 to 5.0 a smooth one, and would appreciate any feedback you have on upgrade difficulties. Please open an issue and get the discussion started.

CakePHP是一个运用了诸如ActiveRecord、Association Data Mapping、Front Controller和MVC等著名设计模式的快速开发框架

暂无

暂无

暂无

https://github.com/cakephp/cakephp/releases/tag/4.5.0