Issues

Issues

• RateLimit: rate limiters use time(), so DateTime::setTestNow() can't freeze them

  cakephp/cakephp#19798 · opened on Nov 12, 2026 · 5.4.5

• RedisEngine cannot authenticate Redis 6 ACL users (no username key, DSN username ignored)

  cakephp/cakephp#19792 · opened on Nov 10, 2026

• FunctionsBuilder::cast() rejects valid SQL types with modifiers since the CVE-2026-79752 fix

  cakephp/cakephp#19775 · opened on Nov 9, 2026 · 5.4.5
  2

• Align EntityInterface::setHidden() and setAccess()

  Enhancement

  cakephp/cakephp#19597 · opened on Aug 17, 2026 · 5.5.0
  2

• Impossible to mock ConsoleIo::createFile() via ConsoleIntegrationTestTrait

  Enhancement

  cakephp/cakephp#19578 · opened on Aug 1, 2026 · 5.5.0
  1

• Machine-readable version lifecycle data for the Supported Versions page

  cakephp/cakephp#19575 · opened on Aug 1, 2026 · 5.4.5
  4

• parseDsn() does not URL-decode username/password, breaking encoded DSN credentials

  cakephp/cakephp#19557 · opened on Jul 21, 2026 · 6.0
  3

• Support for HTTP QUERY method

  Enhancement

  cakephp/cakephp#19535 · opened on Jul 10, 2026 · 5.5.0
  3

• RFC – 6.0 – Routing: reduce string-magic by instead using class/method references

  Enhancement

  cakephp/cakephp#19509 · opened on Jun 18, 2026 · Future
  7

• Improve helper option/HTML attribute discoverability

  cakephp/cakephp#19508 · opened on Jun 16, 2026 · 5.5.0

• RFC: Make find() always return entities — explicit type-tracked reshaping via map()

  cakephp/cakephp#19482 · opened on May 30, 2026 · 5.5.0
  6

• RFC: Move certain exception handling outside ErrorHandlerMiddleware

  Enhancement

  cakephp/cakephp#19165 · opened on Jan 1, 2026 · 6.0
  8

• RFC - 6.0 - Don't nest input inside label by default for checkboxes/radios

  Enhancement

  cakephp/cakephp#18083 · opened on Dec 13, 2024 · 6.0
  13