LoginSign Up
← Back to all sparks
J

Joomla

MKT AUTO
Velocity5.0

Open-source content management system for websites and portals

www.joomla.org ↗

Joomla 6.2 is out, and every branch now ships patches in lockstep.

cmsphpsecurityrelease-cadencejoomla-7
◆Current state
Joomla 6.2.0 shipped on 13 October after two release candidates, with more than 116 merged pull requests including a refactored MVCFactory, Crypt package deprecation and build tooling. The 5.4 line released 5.4.10 the same day with an API PATCH timezone fix and banner access checks, and late September brought paired security releases, 5.4.9 and 6.1.4.
◆Where it's heading
The project runs three lines on one calendar: a feature minor on 6.x, security and bug patches on 6.1 and 5.4, all released together. 6.2 is mostly framework work aimed at Joomla 7, with deprecations now targeted at version 7. Several fixes are tagged [AI], meaning contributors used AI tools to write them.
◆Prediction
With 6.2 out, 6.1 maintenance should wind down while 6.2.x patches start on the same paired schedule as 5.4. Further deprecations ahead of Joomla 7 are the likely theme of the next minor.

◆Recent moves

  1. 1mo ago

    Joomla 6.2.0 ships with framework refactors aimed at Joomla 7

    Joomla 6.2.0 lands with over 116 merged pull requests, mostly framework work: an easier-to-extend MVCFactory, the Crypt package deprecated, deprecations re-targeted to version 7 and new asset build tooling. It completes the 6.2 cycle the betas set up.

    View source ↗
  2. 1mo ago

    5.4.10 fixes API PATCH dates and banner access checks

    Six fixes for the 5.4 line, including API PATCH calls shifting dates by the timezone offset and banners ignoring category access. Routine maintenance shipped alongside 6.2.0.

    View source ↗
  3. 1mo ago

    6.2.0 RC2 adds a what's-new tour and association fix

    The second 6.2 release candidate adds a what's-new tour and fixes associations returning the requested item itself. Final polish before the stable release a week later.

    View source ↗
  4. 1mo ago

    5.4.10 RC1 previews API PATCH and banner fixes

    The candidate for 5.4.10, with the same six fixes that shipped in the final release.

    View source ↗
  5. 1mo ago

    5.4.9 security release hardens TOTP checks and exports

    A security release for 5.4 with 52 merged pull requests, including constant-time TOTP code checks, CSV formula escaping in banner exports and an open_basedir fix. Users are told to install it immediately.

    View source ↗
  6. 1mo ago

    6.2.0 RC1 treats MariaDB as a first-class database

    The first 6.2 release candidate makes MariaDB a first-class database and moves tests to PHPUnit 12. Four pull requests, mostly housekeeping.

    View source ↗