Release 2.3.0

Author: giuscris

CHANGELOG.md

@@ -1,5 +1,98 @@
 # Changelog
 
+# [2.3.0](https://github.com/getformwork/formwork/releases/tag/2.3.0)
+
+**Enhancements**
+- **Add Events functionality**
+- **Add Plugins functionality**
+- **Add support for AVIF images**
+- **Expose error messages in the panel for invalid fields after submission**
+- **Add Hungarian and Swedish translations** (🤖 AI generated, reviews are welcome)
+- **Improve dark color scheme styles in the panel**
+- **Add new `Authenticator` service to decouple authentication from panel**
+- **Implement PSR-3 compatible `Logger`**
+- **Implement PSR-11 `ContainerInterface`**
+- **Implement PSR-14 `EventDispatcherInterface`**
+- Store validated data with `Model::set()` if there is a corresponding field
+- Correctly set `ReadonlyModelProperty` attribute to avoid unexpected changes to model properties
+- Move fields initialization and validation to `Page::load()`
+- Add the possibility to create pages from the constructor by retrieving `App` instance if not provided
+- Sync page data with fields in `Page::load()`
+- Add `Config::hasMultiple()`
+- Add `Config::getMultiple()`
+- Add `Config::set()` and `Config::setMultiple()`
+- Add `Schemes::getMultiple()` and `Schemes::getAll()`
+- Add `Translations::getMultiple()` and `Translations::getAll()`
+- Allow Scheme extension with `Scheme::extend()` and `Scheme::extendWith()`
+- Set validated status even if validation fails
+- Add context to `InvalidValueException`
+- Add the possibility to get translated validation error
+- Add styles for invalid fields
+- Add the possibility to pass route actions parameters
+- Add view namespaces
+- Make Assets a service resolving namespaced resources
+- Add the possibility to set `NavigationItem` visibility in the panel
+- Add the possibility to specify config prefix with `Config::loadFile()` and `Config::loadFromPath()`
+- Add `Arr::extend()`, `Arr::override()` and `Arr::exclude()` to handle data with more consistency
+- Add default values support to field config files
+- Add `Form` class to streamline incoming data process and validation
+- Add Plugins views to panel
+- Add specific exception classes for `Image`
+- Add `User::save()`, `User::delete()` and `User::deleteImage()`
+- Add custom session handler
+- Add the possibility to specify the number of retry attempts (by default 10) of the `serve` command to bind to an available port
+- Improve panel navigation spacing
+- Improve panel header styles
+- Use consistent border-radius and box-shadow values in panel styles
+- Improve array input spacing and sortable styles in panel
+- Use click event instead of mousedown to avoid unexpected actions in the panel
+- Allow `Container::buildArguments()` to use default values for unspecified classes, interfaces and support variadic parameters
+- Add the possibility to set auto color scheme to the panel login
+- Avoid processing HTTP ranges for responses requiring empty content
+
+**Bug fixes**
+- Allow and return an appropriate value for empty non-required fields
+- Correctly merge dotted keys with `Config::loadFile()`
+- Ignore empty values passed to `Html::classes()`
+- Iterate all fields to ensure all validations are run in `FieldCollection::isValid()`
+- Validate unique slug with unspecified root
+- Fix HTTP Range handling for file responses (RFC 7233–compliance and Safari compatibility)
+- Define default section for layoutless schemes
+- Clear image transforms after processing images in `Image::saveAs()`
+- Fix `serve` command failing with log messages containing brackets
+- Fix config service loading with missing cache/config folder
+- Fix translations service loading with missing site/translations folder
+- Normalize and ensure `Panel::route()` is inside the panel root
+- Fix no tab selection from invalid local storage value in the panel interface
+- Fix backtrace frame dumping for unreflectable functions
+- Handle potential exceptions when initializing contentFile in Page class
+- Correctly add tooltips to panel editor toolbar commands
+- Check if site/files is a directory before getting files
+- Fix metadata prefix set even if a colon is not present in the name
+- Fix `DomSanitizer::sanitizeUri()` throwing exception for valid empty values
+- Remove leading and trailing whitespace with `Text::normalizeWhitespace()`
+- Return empty array if input is empty with `Text::splitWords()`
+- Fix discarded stdout/stderr data while serving pages with the `serve` command
+- Always close connections and restore error handlers in the `Client` class
+- Always close streams in `FileResponse::send()`
+- Avoid errors for undefined data keys in `Str::interpolate()`
+- Set correct 403 Forbidden status when CSRF token is invalid on XHR requests
+- Ensure `MimeType::fromFile()` is given a readable file
+- Check if file was actually uploaded in `FileUploader::upload()`
+
+**Security**
+- Normalize assets paths to avoid directory traversal
+- Avoid potentially broken "deflate" responses and throw on unsupported content encodings
+
+**Deprecations**
+- Poorly-named `$dateField->toDuration()` deprecated in favor of `$dateField->toTimeDistance()`
+- `Log` class deprecated in favor of the new PSR-3 compatible `Logger`
+- Page setter methods deprecated in favor of using `$page->set()`
+- `Page::isSlugEditable()` and `Page::isSlugReadonly()`
+- `Panel::assets()` in favor of the `Assets` service
+- `system.panel.loginAttempts` and `system.panel.loginResetTime` options in favor of `system.authentication.limits.maxAttempts` and `system.authentication.limits.resetTime`
+- `system.panel.sessionDuration` option in favor of `system.session.duration`
+
 # [2.2.2](https://github.com/getformwork/formwork/releases/tag/2.2.2)
 
 **Enhancements**

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2018-2025 Giuseppe Criscione
+Copyright (c) 2018-2026 Giuseppe Criscione and contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

formwork/fields/date.php

@@ -48,7 +48,7 @@
              * @deprecated since 2.3.0 Use `$field->toTimeDistance()` instead
              */
             'toDuration' => function (Field $field): string {
-                trigger_error('$field->toDuration() is deprecated since Formwork 2.3.0 and will be removed in a future release. Use $field->toTimeDistance() instead', E_USER_DEPRECATED);
+                trigger_error('$field->toDuration() is deprecated since Formwork 2.3.0. Use $field->toTimeDistance() instead', E_USER_DEPRECATED);
                 return $field->toTimeDistance();
             },
 
@@ -57,6 +57,8 @@
              *
              * The string is formatted as a human-readable translated string representing
              * the distance between the field value and the current time.
+             *
+             * @since 2.3.0
              */
             'toTimeDistance' => function (Field $field) use ($app): string {
                 return $field->isEmpty() ? '' : Date::formatTimestampAsDistance($field->toTimestamp(), $app->translations()->getCurrent());

formwork/src/Assets/Assets.php

@@ -31,6 +31,8 @@ public function __construct()
      * Set assets resolution paths
      *
      * @param array<string, array{path: string, uri: string}> $paths
+     *
+     * @since 2.3.0
      */
     public function setResolutionPaths(array $paths): void
     {
@@ -105,6 +107,8 @@ public function images(): AssetCollection
      * Resolve asset path and URI from key, supporting namespaced syntax
      *
      * @return array{path: string, uri: string}
+     *
+     * @since 2.3.0
      */
     protected function resolve(string $key): array
     {

formwork/src/Assets/Exceptions/AssetResolutionException.php

@@ -4,4 +4,7 @@
 
 use RuntimeException;
 
+/**
+ * @since 2.3.0
+ */
 class AssetResolutionException extends RuntimeException {}

formwork/src/Authentication/Authenticator.php

@@ -10,6 +10,9 @@
 use Formwork\Users\Users;
 use SensitiveParameter;
 
+/**
+ * @since 2.3.0
+ */
 class Authenticator
 {
     public const string SESSION_LOGGED_USER_KEY = '_formwork_logged_user';

formwork/src/Authentication/Exceptions/AuthenticationFailedException.php

@@ -4,4 +4,7 @@
 
 use RuntimeException;
 
+/**
+ * @since 2.3.0
+ */
 class AuthenticationFailedException extends RuntimeException {}

formwork/src/Authentication/Exceptions/RateLimitExceededException.php

@@ -5,6 +5,9 @@
 use RuntimeException;
 use Throwable;
 
+/**
+ * @since 2.3.0
+ */
 class RateLimitExceededException extends RuntimeException
 {
     /**

formwork/src/Authentication/Exceptions/UserNotLoggedException.php

@@ -4,4 +4,7 @@
 
 use RuntimeException;
 
+/**
+ * @since 2.3.0
+ */
 class UserNotLoggedException extends RuntimeException {}

formwork/src/Authentication/RateLimiter.php

@@ -6,6 +6,9 @@
 use Formwork\Http\Request;
 use Formwork\Log\Registry;
 
+/**
+ * @since 2.3.0
+ */
 final class RateLimiter
 {
     /**