Bump phalcon/phalcon from 6.0.0alpha6 to 6.0.0beta1

[dependabot]

Bumps phalcon/phalcon from 6.0.0alpha6 to 6.0.0beta1.

Release notes

Sourced from phalcon/phalcon's releases.

v6.0.0beta1

Changed

Added

• Added Phalcon\ADR\Responder\ViewResponder, which renders a .phtml template and returns it as an HTML response. The action picks the template with withTemplate(), and the view receives result, messages and status. Any renderer implementing the new Phalcon\Contracts\View\Renderer can be used - Phalcon\Mvc\View\Simple now does. #17379 [doc]
• Added opt-in route-parameter pre-filtering to the ADR convention router via the new Phalcon\ADR\Router\AttributeFilter. An Action that declares a static params() method has its positional route segments validated against a regex, cast to a scalar type (int, float, string) and optionally passed through a converter closure, then written to the request as named attributes - all before the Action runs. A regex miss is treated as a route miss (404). #17393 [doc]

Fixed

Removed

Changelog

Sourced from phalcon/phalcon's changelog.

6.0.0 beta 1 (2026-07-24)

Changed

Added

• Added Phalcon\ADR\Responder\ViewResponder, which renders a .phtml template and returns it as an HTML response. The action picks the template with withTemplate(), and the view receives result, messages and status. Any renderer implementing the new Phalcon\Contracts\View\Renderer can be used - Phalcon\Mvc\View\Simple now does. #17379 [doc]
• Added opt-in route-parameter pre-filtering to the ADR convention router via the new Phalcon\ADR\Router\AttributeFilter. An Action that declares a static params() method has its positional route segments validated against a regex, cast to a scalar type (int, float, string) and optionally passed through a converter closure, then written to the request as named attributes - all before the Action runs. A regex miss is treated as a route miss (404). #17393 [doc]

Fixed

Removed

6.0.0 alpha 7 (2026-xx-xx)

Fixed

• Fixed Phalcon\Container\Definition\ServiceDefinition::resolveArgs() treating any constructor-argument object that merely exposes a resolve() method as a lazy value, using method_exists(). Because Phalcon\Container\Container defines a private resolve(), autowiring a service whose constructor receives the container - for example __construct(?Container $container), as Phalcon\ADR\Application does - mistook the injected container for a lazy resolvable and called its private resolve(), raising Error: Call to private method Phalcon\Container\Container::resolve() from scope Phalcon\Container\Definition\ServiceDefinition. The lazy check now tests instanceof Phalcon\Contracts\Container\Resolver\Resolvable. #17391

6.0.0 alpha 6 (2026-07-22)

Changed

• Changed Phalcon\ADR\Application into a self-contained composition root: it owns (or accepts) a Phalcon\Container\Container and exposes a small registration surface - bind(), define(), factory(), set(), extend() and getContainer() - plus setBaseNamespace() and secureWith() for convention-router and namespace-prefix guard configuration. Phalcon\ADR\Front\AbstractHttpFront gained a protected getApplication() hook returning Phalcon\Contracts\ADR\Application, so a front controller can configure the application or wire a different implementation. #17389 [doc]

Added

Fixed

Removed

6.0.0 alpha 5 (2026-07-21)

Added

• Added the Action-Domain-Responder (ADR) HTTP stack under Phalcon\ADR, an alternative to MVC that splits request handling into three focused roles: an Action (one invokable class per route) drives a Domain (your business logic, which returns a Phalcon\ADR\Payload\Payload and never touches HTTP) and hands the result to a Responder that turns it into a response. Phalcon\ADR\Application::handle() routes the request with the convention-based Phalcon\ADR\Router\Router - the HTTP method, resource and optional operation resolve the Action class (e.g. GET /invoices/list maps to MyApp\Action\Invoices\GetInvoicesList), with no route table - writes the matched positional attributes onto the request, and runs the Action through Phalcon\ADR\Dispatcher, which resolves it from the container and wraps it in a middleware pipeline (Phalcon\ADR\Middleware\CorsMiddleware, MethodOverrideMiddleware, RequestIdMiddleware and TimingMiddleware ship built-in). The Action reads request data through the extendable Phalcon\ADR\Input\Input bag and returns a response built by a responder - Phalcon\ADR\Responder\JsonResponder, TextResponder, RedirectResponder, StatusResponder and the composable ChainResponder/FormatResponder - each mapping the payload's Phalcon\ADR\Payload\Status to an HTTP status via Phalcon\ADR\Responder\StatusMapper. Any escaping Throwable is turned into a response by the always-wired Phalcon\ADR\ErrorResponder, and Phalcon\ADR\Emitter\SapiEmitter sends it to the client. Phalcon\ADR\Front\HttpFront - a Phalcon\Contracts\Front\FrontController following the front-interop contract - boots the whole stack with a single run(), and Phalcon\ADR\Container\AdrProvider registers every service. Because route attributes are positional, Phalcon\Http\Request\Bag\AbstractBag now accepts integer keys alongside string keys. Contracts live under Phalcon\Contracts\ADR. #17341 [doc]
• Added request attributes support to Phalcon\Http\Request. Phalcon\Http\Request::getAttributes() returns a Phalcon\Http\Request\Bag\AttributeBag, a mutable, string-keyed bag of arbitrary application-defined values attached to the request during its lifecycle (router, dispatcher, security components etc.). Writing with a null key (the $bag[] = ... append form) throws the new Phalcon\Http\Request\Exceptions\NullKeyException, since bag elements are always string-keyed. #17367 [doc]

Fixed

• Fixed Phalcon\Mvc\Model ignoring attributes registered with skipAttributes(), skipAttributesOnCreate() and skipAttributesOnUpdate(), so a skipped column was emitted in the generated INSERT/UPDATE (breaking, for instance, inserts into a table with a MySQL generated column). The skip list is keyed with null values, which isset() reports as absent, so every skipped attribute read as not registered; the checks in doLowInsert(), doLowUpdate() and the not-null validation now use array_key_exists(). #17382 [doc]
• Fixed Phalcon\Mvc\Model inserting a literal null for a column the database can supply a value for, instead of the DEFAULT keyword (or omitting the column on an adapter without DEFAULT support, such as SQLite). A nullable column carrying no explicit default is registered in the metadata default values with a null value, which the isset() check in doLowInsert() read as absent; it now uses array_key_exists(). This makes inserts work against a MySQL GENERATED ALWAYS AS (...) STORED column, which rejects an explicit null with SQLSTATE[HY000]: General error: 3105 but accepts DEFAULT. #17382 [doc]

6.0.0 alpha 4 (2026-07-13)

Changed

• Converted the internal test suite to the phalcon/talon testing framework and added octocov coverage reporting. #769

Added

... (truncated)

Commits

• 8514b92 bumping version
• c9b6d93 changelog update
• 5f3e806 cphalcon sync #17393
• 8bfa573 cphalcon sync #17391
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)