slackero/phpwcms v1.12.5

phpwcms v1.12.5

on GitHub

Maintenance release. Fixes the revision engine so pending database revisions can no longer be skipped during an upgrade, cleans up obsolete schema left by very old installations, and refreshes dependencies.

🐛 Fixed

• Skipped revisions on upgrade: phpwcms_revision_check() now runs every revision up to the target revision instead of only the newest available file, and persists the checked markers in phpwcms_sysvalue. An upgrade from 1.9.50 previously skipped the r554 date conversion and left all articles hidden behind the 0000-00-00 end date. Fixes #389.
• Obsolete sysvalue_tstamp column and Bad Behavior table: r554 no longer aborts when an optional module table is missing; missing tables and columns are skipped and failures are reported per table. The revision engine also drops the legacy sysvalue_tstamp column, which made marker INSERTs fail under strict NO_ZERO_DATE, and the phpwcms_bad_behavior table left from the Bad Behavior library removed in 1.5. Fixes #390.
• PHPStan report clean: removed a redundant status check in phpwcms_revision_r554() and five stale baseline entries; PHPStan reports no errors against the updated dependency set.

📦 Dependency Updates

• league/commonmark 2.10.4 → 2.10.7
• tinymce/tinymce 8.10.0 → 8.10.1
• current simplepie/simplepie, phpstan/phpstan 2.3.4 and roave/security-advisories snapshots

🔒 Note

The unauthenticated .phtml upload fix (CVE-2026-110025) already shipped in 1.12.4; its changelog entry is now recorded there. No new security fix is contained in this release.

Requires PHP 8.2+.