3.12.6

Fixes

• Fix autoPrefixUrl() calling urlExists() with invalid URL when input already has https:// protocol

Full Changelog: 3.12.5...3.12.6

3.12.5

Fixes

• Add timeout to urlExists() cURL request (#315)

  • CURLOPT_TIMEOUT (5s) - total request timeout
  • CURLOPT_CONNECTTIMEOUT (3s) - connection timeout
  • CURLOPT_FOLLOWLOCATION with MAXREDIRS (3) - follow redirects
  • curl_close() - properly clean up handle

• Add timeout to remaining HTTP requests (#316)

  • Utility::urlExists() fallback: 5s stream context timeout
  • Utility::getHeaderFromUrl(): 5s timeout
  • Mime::getMimeTypeByUrl(): 5s timeout
  • Message::_readFile(): 10s timeout

• Fix autoPrefixUrl() calling urlExists() with invalid URL

  • URLs with https:// are now returned as-is
  • URLs with http:// are properly upgraded by replacing the prefix
  • Prevents invalid URLs like https://https://example.com

This prevents requests from hanging indefinitely when servers don't respond.

3.12.4

Improvements

• Use ServerRequest::clientIp() instead of env('REMOTE_ADDR') for proper proxy header handling

Full Changelog: 3.12.3...3.12.4

3.12.3

Fixes

• Fix page action URLs to use dasherized format instead of camelCase

Enhancements

• Add dynamic scope and onDirty options to SluggedBehavior

Full Changelog: 3.12.2...3.12.3

3.12.2

Improvements

• Fix CakePHP 5.3.0 behavior method deprecations - #310
• Add uniqueCallback option to SluggedBehavior - #312

Full Changelog: 3.12.1...3.12.2

3.12.1

Fixes

• Remove deprecated _execute() method from ContactForm
• Fix double base64 encoding of blob attachments

Note: PHP 8.2+ now.

Full Changelog: 3.12.0...3.12.1

3.12.0

Improvements

• Adjust for CakePHP 5.3+

Full Changelog: 3.11.2...3.12.0

3.11.2

Fixes

• Fix up validate(Date)(Time) around before/after.

Full Changelog: 3.11.1...3.11.2

3.11.1

Fixes

• Removed deprecations
• Replaced hardcoded 'token' with configurable query parameter by @tobse in #303

New Contributors

• @tobse made their first contribution in #303

Full Changelog: 3.11.0...3.11.1

3.11.0

Improvements

• Allow Jsonable behavior to store comma separated list in a text field.
• Allow only specific extensions (or non-ext routing) for controller actions and throw 404 otherwise.

Full Changelog: 3.10.3...3.11.0