Bump phalcon/phalcon from 6.0.0alpha5 to 6.0.0beta4

[dependabot]

Bumps phalcon/phalcon from 6.0.0alpha5 to 6.0.0beta4.

Release notes

Sourced from phalcon/phalcon's releases.

v6.0.0beta4

Changed

• Changed Phalcon\ADR\Router\Router to derive exactly one Action class per path: the class name is the verb followed by every static segment concatenated. #17410 [doc]

Added

• Added classFor() to the Phalcon\Contracts\ADR\Router\Router contract and to Phalcon\ADR\Router\Router. It names the Action class the convention would use for a static path. #17410 [doc]

Fixed

• Fixed Phalcon\Mvc\Model::find() and Phalcon\Mvc\Model::findFirst() raising an error Call to undefined method static::getpreparedquery(). Using self vs. 'static` for the internal calls. #17409 [doc]

Removed

v6.0.0beta3

Changed

• Changed Phalcon\ADR\Router\Router from a candidate chain to a namespace descent: a path segment becomes a namespace segment only if the matching directory exists, after which at most two Action classes are probed instead of five. An Action can no longer be silently shadowed by an earlier candidate. Requires setActionDirectory(). #17405 [doc]

Added

• Added pathFor(), setActionDirectory() and setWordSeparator() to the Phalcon\Contracts\ADR\Router\Router contract and to Phalcon\ADR\Router\Router; the two setters are also on Phalcon\ADR\Application. pathFor() is the inverse of the routing convention, returning the canonical path an Action answers or null. Added Phalcon\ADR\Exceptions\ActionDirectoryNotSet. #17405 [doc]
• Added Phalcon\Container\Container::getServiceNames(), returning the names of every registered service definition. Names that only exist as an alias, a pre-set instance or a parameter are not included. #17406 [doc]
• Added Phalcon\Events\Manager::getEventTypes(), returning the event types that currently have at least one listener attached, including those contributed by subscribers. Listeners attached with attach() were previously not enumerable at all, since getListeners() requires a known event type. #17406 [doc]

Fixed

• Fixed Phalcon\ADR\Router\Router treating - and _ as the same delimiter, so /forgot-password and /forgot_password resolved to the same Action and the path-to-class map had no inverse. A single separator now applies in both directions, default - and settable with setWordSeparator(); _ is literal. #17405 [doc]

Removed

v6.0.0beta2

Changed

• Changed Phalcon\Mvc\Model::getRelated() and Phalcon\Mvc\Model::isRelationshipLoaded() to test the relation cache with array_key_exists() instead of isset(), so a to-one relation that resolves to no record is no longer re-queried on every access #17331 [doc]
• Changed Phalcon\Mvc\Model\Manager::mergeFindParameters() from final protected to final public static #17331

Added

• Added Phalcon\ADR\Responder\ViewResponder, which renders a .phtml template and returns it as an HTML response. The action picks the template with withTemplate(), and the view receives result, messages and status. Any renderer implementing the new Phalcon\Contracts\View\Renderer can be used - Phalcon\Mvc\View\Simple now does. #17379 [doc]
• Added opt-in route-parameter pre-filtering to the ADR convention router via the new Phalcon\ADR\Router\AttributeFilter. An Action that declares a static params() method has its positional route segments validated against a regex, cast to a scalar type (int, float, string) and optionally passed through a converter closure, then written to the request as named attributes - all before the Action runs. A regex miss is treated as a route miss (404). #17393 [doc]
• Added eager loading of model relations: Phalcon\Mvc\Model::find() accepts an eager parameter - an array of dot-delimited relation paths, optionally path => options - which pre-loads the named relations with one query per relation instead of one per record. Phalcon\Mvc\Model\Criteria::eager() exposes the same on the criteria surface. #17331 [doc]
• Added candidatesFor() to the Phalcon\Contracts\ADR\Router\Router contract and to Phalcon\ADR\Router\Router. It returns every Action class the convention router would try for a given HTTP method and path, in the order it tries them and unfiltered by existence. #17403 [doc]

Fixed

• Fixed Phalcon\Http\Response\Cookies::delete() not deleting a cookie that was not set in the same request; it now falls back to the $_COOKIE superglobal. Phalcon\Http\Cookie::delete() expires the cookie with its stored path and domain instead of the defaults. #17395 [doc]

Removed

... (truncated)

Changelog

Sourced from phalcon/phalcon's changelog.

6.0.0 beta 4 (2026-07-28)

Changed

• Changed Phalcon\ADR\Router\Router to derive exactly one Action class per path: the class name is the verb followed by every static segment concatenated. #17410 [doc]

Added

• Added classFor() to the Phalcon\Contracts\ADR\Router\Router contract and to Phalcon\ADR\Router\Router. It names the Action class the convention would use for a static path. #17410 [doc]

Fixed

• Fixed Phalcon\Mvc\Model::find() and Phalcon\Mvc\Model::findFirst() raising an error Call to undefined method static::getpreparedquery(). Using self vs. 'static` for the internal calls. #17409 [doc]

Removed

6.0.0 beta 3 (2026-07-27)

Changed

• Changed Phalcon\ADR\Router\Router from a candidate chain to a namespace descent: a path segment becomes a namespace segment only if the matching directory exists, after which at most two Action classes are probed instead of five. An Action can no longer be silently shadowed by an earlier candidate. Requires setActionDirectory(). #17405 [doc]

Added

• Added pathFor(), setActionDirectory() and setWordSeparator() to the Phalcon\Contracts\ADR\Router\Router contract and to Phalcon\ADR\Router\Router; the two setters are also on Phalcon\ADR\Application. pathFor() is the inverse of the routing convention, returning the canonical path an Action answers or null. Added Phalcon\ADR\Exceptions\ActionDirectoryNotSet. #17405 [doc]
• Added Phalcon\Container\Container::getServiceNames(), returning the names of every registered service definition. Names that only exist as an alias, a pre-set instance or a parameter are not included. #17406 [doc]
• Added Phalcon\Events\Manager::getEventTypes(), returning the event types that currently have at least one listener attached, including those contributed by subscribers. Listeners attached with attach() were previously not enumerable at all, since getListeners() requires a known event type. #17406 [doc]

Fixed

• Fixed Phalcon\ADR\Router\Router treating - and _ as the same delimiter, so /forgot-password and /forgot_password resolved to the same Action and the path-to-class map had no inverse. A single separator now applies in both directions, default - and settable with setWordSeparator(); _ is literal. #17405 [doc]

Removed

6.0.0 beta 2 (2026-07-26)

Changed

• Changed Phalcon\Mvc\Model::getRelated() and Phalcon\Mvc\Model::isRelationshipLoaded() to test the relation cache with array_key_exists() instead of isset(), so a to-one relation that resolves to no record is no longer re-queried on every access #17331 [doc]
• Changed Phalcon\Mvc\Model\Manager::mergeFindParameters() from final protected to final public static #17331

Added

• Added Phalcon\ADR\Responder\ViewResponder, which renders a .phtml template and returns it as an HTML response. The action picks the template with withTemplate(), and the view receives result, messages and status. Any renderer implementing the new Phalcon\Contracts\View\Renderer can be used - Phalcon\Mvc\View\Simple now does. #17379 [doc]
• Added opt-in route-parameter pre-filtering to the ADR convention router via the new Phalcon\ADR\Router\AttributeFilter. An Action that declares a static params() method has its positional route segments validated against a regex, cast to a scalar type (int, float, string) and optionally passed through a converter closure, then written to the request as named attributes - all before the Action runs. A regex miss is treated as a route miss (404). #17393 [doc]
• Added eager loading of model relations: Phalcon\Mvc\Model::find() accepts an eager parameter - an array of dot-delimited relation paths, optionally path => options - which pre-loads the named relations with one query per relation instead of one per record. Phalcon\Mvc\Model\Criteria::eager() exposes the same on the criteria surface. #17331 [doc]
• Added candidatesFor() to the Phalcon\Contracts\ADR\Router\Router contract and to Phalcon\ADR\Router\Router. It returns every Action class the convention router would try for a given HTTP method and path, in the order it tries them. #17403 [doc]

Fixed

... (truncated)

Commits

• 3d0965e updating changelog
• 75fccb7 cphalcon sync #17409
• b9741ea phpcs
• b6c1767 cphalcon sync #17410
• a454f74 Merge pull request #780 from phalcon/dependabot/github_actions/k1LoW/octocov-...
• 3c3028b Bump k1LoW/octocov-action from 1.5.1 to 1.5.2
• 1cb50b8 Fix release date for 6.0.0 beta 3
• 25cb4c9 cphalcon sync #17406
• de18ae3 composer update
• 7b2f721 #17405 - cphalcon sync #17405
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Code Metrics Report

	master (5bc446b)	#128 (20f99c5)	+/-
Coverage	97.0%	97.0%	0.0%
Test Execution Time	8s	8s	0s

Details

  |                     | master (5bc446b) | #128 (20f99c5) | +/-  |
  |---------------------|------------------|----------------|------|
  | Coverage            |            97.0% |          97.0% | 0.0% |
  |   Files             |               38 |             38 |    0 |
  |   Lines             |              752 |            752 |    0 |
  |   Covered           |              730 |            730 |    0 |
  | Test Execution Time |               8s |             8s |   0s |

---

Reported by octocov