zend-session 2.9.1

Added

• Nothing.

Changed

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #123 fixes a bug preventing two first hash functions from hash_algos()
  (usually md2 and md4) from being used in SessionConfig::setHashFunction.

zend-session 2.9.0

Added

• #115 adds support for PHP 7.3.

Changed

• Nothing.

Deprecated

• Nothing.

Removed

• #115 removes support for zend-stdlib v2 releases.

Fixed

• Nothing.

zend-session 2.8.7

Added

• Nothing.

Changed

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #122 fixes
  type check for configuration of session storage. Allows input to be
  an instance of ArrayAccess or an array.

zend-session 2.8.6

Added

• Nothing.

Changed

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #120 fixes issue "Commands out of sync; you can't run this command now" with DbTableGateway save handler while using Mysqli adapter.

• #106 fixes issue with Garbage collection of MongoDB save handler where maxlifetime is provided in seconds.

• #114 fixes Validator\Id compatibility with PHP 7.1. INI setting session.sid_bits_per_character can be now used with PHP 7.1+ instead of session.hash_bits_per_character (used with PHP versions prior to 7.1).

  In some very specific situations this can lead to an issue with previously generated sessions.
  See issue #121.

• #118 avoid unnecessary phpinfo() call when register own save handler which is an object.

zend-session 2.8.5

Added

• Nothing.

Changed

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #108 fixes a dependency
  conflict in composer.json which prevented phpunit/phpunit 6.5 or newer from
  being installed together with zendframework/zend-session.

zend-session 2.8.4

Added

• Nothing.

Changed

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #107 fixes an error raised by ini_set() within SessionConfig::setStorageOption() that occurs for certain INI values that cannot be set if the session is active. When this situation occurs, the class performs a session_write_close(), sets the new INI value, and then restarts the session. As such, we recommend that you either set production INI values in your production php.ini, and/or always pass your fully configured session manager to container instances you create.

• #105 fixes an edge case whereby if the special __ZF session value is a non-array value, initializing the session would result in errors.

• #102 fixes an issue introduced with 2.8.0 with AbstractContainer::offsetGet. Starting in 2.8.0, if the provided $key did not exist, the method would raise an error regarding an invalid variable reference; this release provides a fix that resolves that issue.

zend-session 2.8.3

Added

• Nothing.

Changed

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #101 fixes an issue created with the 2.8.2 release with regards to setting a session save path for non-files save handlers; prior to this patch, incorrect validations were run on the path provided, leading to unexpected exceptions being raised.

zend-session 2.8.2

Added

• Nothing.

Changed

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #85 fixes an issue with how the expiration seconds are handled when a long-running request occurs. Previously, when called, it would use the value of $_SERVER['REQUEST_TIME'] to calculate the expiration time; this would cause failures if the expiration seconds had been reached by the time the value was set. It now correctly uses the current time().

• #99 fixes how Zend\Session\Config\SessionConfig handles attaching save handlers to ensure it will honor any handlers registered with the PHP engine (e.g., redis, rediscluster, etc.).

zend-session 2.8.1

Added

• #92 adds PHP 7.2 support.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #57 and #93 provide a fix for when data found in the session is a Traversable; such data is now cast to an array before merging with new data.

zend-session 2.8.0

Added

• #78 adds support for PHP 7.1, and specifically the following options:
  • session.sid_length
  • session.sid_bits_per_character

Changed

• #73 modifies the SessionManagerFactory to take into account the $requestedName; if the $requestedName is the name of a class that implements ManagerInterface, that class will be instantiated instead of SessionManager, but using the same arguments ($config, $storage, $savehandler, $validators, $options).

• #78 updates the SessionConfig class to emit deprecation notices under PHP 7.1+ when a user attempts to set INI options no longer supported by PHP 7.1+, including:

  • session.entropy_file
  • session.entropy_length
  • session.hash_function
  • session.hash_bits_per_character

Deprecated

• Nothing.

Removed

• #78 removes support for PHP 5.5.

• #78 removes support for HHVM.

Fixed

• Nothing.