phalcon/cphalcon v5.11.0 on GitHub

5.12.0 (2026-04-03)

Changed Phalcon\Filter\Sanitize\IP to optimize the sanatization of IP address #16838
Changed Phalcon\Encryption\Security\JWT\Builder::setPassphrase() to require digits and special characters #16847
Changed Phalcon\Encryption\Security\JWT\Builder::getAudience() to return an empty array if not set #16846
Changed Phalcon\Encryption\Security\Random::base() to use 16 bits by default #16845
Changed Phalcon\Logger\Logger to use lowercase when reporting log levels (previously uppercase) #16852
Changed Phalcon\Logger\Adapter\Stream to use a more efficient way to write messages in the logger instead of opening and closing the stream per message #16852
Changed Phalcon\Logger\Adapter\Syslog to use the Enum instead of Logger constants #16852
Changed the whole testing suite to run on phpunit only #16860 #16861 #16862

Added PIE (PHP Installer for Extensions) support #16832
Added the ability to specify aliases for Phalcon\Di\Di services.#13042
Added Phalcon\Encryption\Security\JWT\Validator::validateClaim() to validate custom claims #16843

Fixed Phalcon\Forms\Form::isValid() to apply field filters even when no validators are specified #16936
Fixed Phalcon\Http\Request method getClientAddress() when using trustForwardedHeader #16836
Fixed Phalcon\Acl\Adapter\Memory::isAllowed() and Phalcon\Mvc\Model\Binder to handle PHP 8.1+ union and intersection types by checking for ReflectionNamedType before calling getName() #16261
Fixed memory leak in PHQL parser (phql_internal_parse_phql()) during repeated query execution. #16854
Fixed a deadlock issue when running the db suite #16862