List view
Feature release (minor)
No due date•1/1 issues closedFeature release (minor)
No due date•2/2 issues closed- No due date•2/2 issues closed
Feature release (minor)
No due date•5/5 issues closedFeature release (minor)
No due date•2/2 issues closedFeature release (minor)
No due date•4/4 issues closedFeature release (minor)
No due date•2/2 issues closed**This is a SECURITY release. All users are encouraged to upgrade immediately.** ### Changed - This release bumps the minimum-supported version of laminas/laminas-diactoros to 2.11.2 in order to pick up security updates. **Users who are still pinning to Diactoros 1.x versions will need to update to the later release.** - Modifies the `Mezzio\Swoole\ServerRequestSwooleFactory` such that it checks the container for a `Laminas\Diactoros\ServerRequestFilter\FilterServerRequestInterface` service, creating one via `Laminas\Diactoros\ServerRequestFilter\FilterUsingXForwardedHeaders::trustReservedSubnets()` if none is present. This change ensures that `X-Forwarded-*` request headers are only honored when the request comes from a reserved, private subnet (localhost; classes A, B, and C subnets; and IPv6 private and local-link subnets). If you need to trust from any source, or never want to trust these headers, you may provide an alternate server request filter by registering an alternate implementation of the `Laminas\Diactoros\ServerRequestFilter\FilterServerRequestInterface` service. - The new `FilterServerRequestInterface` capabilities can also be used to accomplish addition of features like request identifiers to incoming requests, and we have updated our cookbook recipes to detail such usage.
No due date•1/1 issues closedFeature release (minor)
No due date•2/2 issues closed4.1.x bugfix release (patch)
No due date•1/1 issues closedFeature release (minor)
No due date•1/1 issues closed**This is a SECURITY release. All users are encouraged to upgrade immediately.** ### Changed - This release bumps the minimum-supported version of laminas/laminas-diactoros to 2.11.2 in order to pick up security updates. **Users who are still pinning to Diactoros 1.x versions will need to update to the later release.** - Modifies the `Mezzio\Swoole\ServerRequestSwooleFactory` such that it checks the container for a `Laminas\Diactoros\ServerRequestFilter\FilterServerRequestInterface` service, creating one via `Laminas\Diactoros\ServerRequestFilter\FilterUsingXForwardedHeaders::trustReservedSubnets()` if none is present. This change ensures that `X-Forwarded-*` request headers are only honored when the request comes from a reserved, private subnet (localhost; classes A, B, and C subnets; and IPv6 private and local-link subnets). If you need to trust from any source, or never want to trust these headers, you may provide an alternate server request filter by registering an alternate implementation of the `Laminas\Diactoros\ServerRequestFilter\FilterServerRequestInterface` service.
No due dateFeature release (minor)
No due date•7/7 issues closed3.5.x bugfix release (patch)
No due date•1/1 issues closedFeature release (minor)
No due date•1/1 issues closed### Added - This release adds support for [Open Swoole](https://www.swoole.co.uk).
No due date•3/3 issues closed### Changed - This version is tested against Swoole 4.6.7.
No due date•3/3 issues closed### Added - Adds support for laminas/laminas-cli 1.0 versions; 0.1.5+ is still supported.
No due date•1/1 issues closed3.2.x bugfix release (patch)
No due date•1/1 issues closed3.1.x bugfix release (patch)
No due date•2/2 issues closedFeature release (minor)
No due date•3/3 issues closed3.1.x bugfix release (patch)
No due date•2/2 issues closed### Changed - This release updates the [laminas/laminas-httphandlerrunner](https://docs.laminas.dev/laminas-httphandlerrunner/) dependency constraint from `^1.0.1` to `^2.1`. Doing so changes the inheritance tree for the `Mezzio\Swoole\SwooleRequestHandlerRunner` class, as it can no longer extend `Laminas\HttpHandlerRunner\RequestHandlerRunner` (this class is now marked final), but must instead implement `Laminas\HttpHandlerRunner\RequestHandlerRunnerInterface`. Additionally, we have chosen at this time to mark `SwooleRequestHandlerRunner` as `final`, preventing extension; you may change the behavior via either decoration or by supplying listeners for the various events it triggers.
No due date•2/2 issues closedFeature release (minor)
No due date•2/2 issues closed3.0.x bugfix release (patch)
No due date•1/1 issues closed2.8.x bugfix release (patch)
No due date•1/1 issues closedFeature release (minor)
No due date•3/3 issues closed- No due date•9/9 issues closed
- No due date•5/5 issues closed
- Due by April 6, 2020•2/2 issues closed
- No due date•2/2 issues closed