smi2/phpclickhouse

Bug Fixes

• Distributed DDL (ON CLUSTER) formatting reworked (#241, #263, #262) — Http::prepareWrite() no longer appends FORMAT JSON to the SQL of ON CLUSTER queries. Instead the response format is requested via the default_format=JSON query setting:
  • CREATE USER / GRANT / ALTER ... ON CLUSTER no longer fail with SYNTAX_ERROR from a stray FORMAT JSON (#241)
  • CREATE / ALTER ... ON CLUSTER results are now parseable JSON again — no more Can't find meta when reading the per-host execution status (#263)
  • a bare ON CLUSTER substring inside INSERT data (e.g. 'REGION CLUSTER') is no longer mistaken for the keyword — \b word boundaries match the real keyword only (#262)
• False-positive error detection on large JSON responses (#261) — Statement::hasErrorClickhouse() now confirms a tail-regex match with json_validate() (PHP 8.3+) before flagging an error, so valid JSON whose data legitimately contains ClickHouse exception text is not reported as a failure (@jradtilbrook)

Testing

• New tests/ClickHouse26/OnClusterTest.php — distributed DDL regression tests (CREATE / ALTER / CREATE USER ... ON CLUSTER); skips gracefully when no Keeper/ZooKeeper backend is configured
• Embedded ClickHouse Keeper added to the test environment (tests/clickhouse-latest-config/keeper.xml, mounted in docker-compose.yaml and copied in CI) so the single-node default cluster can execute ON CLUSTER queries
• testInsertWithOnClusterInData added to both CH 21 and CH 26 client tests (#262)

Merged PRs

• #261 — Fix false positive error detection when JSON data contains ClickHouse exception text (@jradtilbrook)

Closed Issues

• #241 — ALTER / CREATE / DROP / RENAME queries fail when using ON CLUSTER
• #262 — extra FORMAT JSON in the query when inserting a record (superseded by the default_format fix)
• #263 — "Can't find meta" error since 1.24.406

2026-04-23 [Release 1.26.423]

Bug Fixes

• Escape single quotes and backslashes in scalar string native params (#258, #259) — convertParamValue() now escapes \ → \\ and ' → \' for scalar String params in selectWithParams() / writeWithParams(). Previously strings like hello\ caused CANNOT_PARSE_ESCAPE_SEQUENCE in ClickHouse (@sander-hash, @tom-on-the-internet)

Testing

• 5 new native-params tests — scalar strings with trailing backslash, embedded backslash, single quote, injection attempt, and writeWithParams with backslash

Merged PRs

• #259 — Added escape for scalar string (@sander-hash)

Closed Issues

• #258 — Scalar string params are not escaped, causing CANNOT_PARSE_ESCAPE_SEQUENCE

2026-04-17 [Release 1.26.417]

Bug Fixes

• Correctly encode arrays for native param binding (#257) — convertParamValue() now produces ClickHouse-compatible array literals ['foo','bar'] (single quotes) instead of JSON format ["foo","bar"]. Previously any Array(String) parameter in selectWithParams() / writeWithParams() failed with a parse error (@sander-hash)
• Escape single quotes and backslashes in array strings — follow-up to #257. Strings containing ' or \ are now properly escaped (e.g. "it's" → 'it\'s'), preventing query errors and array-element injection

Testing

• 6 new native-params tests — cover Array(UInt32), Array(String), empty arrays, strings with single quotes, strings with backslashes, and injection attempts

Merged PRs

• #257 — Correctly encode array for native param binding (@sander-hash)

2026-04-12 [Release 1.26.412]

Bug Fixes

• Fix bindParams() TypeError with numeric keys (#256) — bindParams() now casts integer array keys to string before passing to bindParam(string $column), restoring backward compatibility with numerically-indexed arrays. Affected downstream packages like phpclickhouse-laravel (@yehezkel-fullpath)

Testing

• Flaky tests excluded from default runs — testConnectTimeout, testStreamInsert, testStreamInsertFormatJSONEachRow marked @group flaky and excluded via PHPUnit config. Run separately with ./vendor/bin/phpunit --group flaky
• 2 new binding tests — testBindParamsWithNumericKeys, testBindParamsWithMixedKeys covering #256 regression

Closed Issues

• #256 — Breaking change: strict string type on Bindings::bindParam() rejects integer keys

2026-04-10 [Release 1.26.410]

New Features

• readWithParams() (#254) — stream query results with native ClickHouse typed parameters ({name:Type} syntax), combining server-side parameter binding with streaming output (@sander-hash)

Code Quality

• Stringable interfaces (#252) — all Type classes now explicitly implement Stringable for consistency (@sander-hash)
• PHPStan test fixes (#253) — removed redundant assertions in static tests, improved assertion quality (@sander-hash)
• Documentation sync — updated GitHub Pages (docs/) with readWithParams() in native-params, streaming, and per-query-settings guides

Merged PRs

• #252 — Add Stringable interfaces for types (@sander-hash)
• #253 — Fix phpstan errors in test files (@sander-hash)
• #254 — Added native params for read function (@sander-hash)

2026-04-06 [Release 1.26.406]

WARNING : PHP 8.1+

New Features

• Boolean Type (#251) — new ClickHouseDB\Type\Boolean class with fromString(), fromBool(), getValue(), __toString() (@sander-hash)

Code Quality

• PHP 8.1+ native type declarations — full migration across all 33 src/ files: property types, parameter types, return types. Interfaces (Degeneration, IStream, Type) unchanged for backward compatibility
• PR Security Review rules — added supply-chain attack detection checklist to CLAUDE.md (outbound network calls, data exfiltration, obfuscation, credential leakage patterns)
• Security audit — full code audit of src/, results saved in secure-scan.md. All clean: no backdoors, exfiltration, or obfuscation found

Testing

• 153 new static unit tests — run without ClickHouse server:
  • ValueFormatterTest (28) — SQL escaping, types, DateTimeInterface, Expression
  • StrictQuoteLineTest (32) — CSV/TSV/Insert formatting, encodeString
  • SettingsTest (24) — get/set/is, sessions, timeouts, readonly
  • WriteToFileTest (15) — file validation, formats, gzip
  • TypesTest (26+5) — UInt64, DateTime64, MapType, TupleType, Boolean and more
  • BindingsUnitTest (16) — compile_binds, Conditions {if}/{else}
  • CurlerRequestResponseTest (35) — headers, auth, URL, JSON, dump
• Total: 313+ tests (CH 21.9 + CH 26.3 + static), all passing

Merged PRs

• #251 — feat: Add Boolean type (@sander-hash)

2026-04-04 [Release 1.26.4]

Many changes see change.log

Co-Authored-By: Claude Opus 4.6 (1M context) [email protected]

2025-01-14 [Release 1.6.0]

• Support php 8
• And some pr & fixes

2024-01-18 [Release 1.5.3]

• Fix release 1.5.2
• Support php 7
• Update Statement.php #204
• fix(#202): Fix converting boolean when inserting into int and fix(#194): Fix unexpected readonly mode with specific string in query #203
• Update README.md #199
• remove dev files for --prefer-dist #192

• fix timeout error and add test

• exception on error write

• init

• Version/Release names: [ zero dot year dot month]
• Support cluster: new class Cluster and ClusterQuery
• output_format_write_statistics, for clickhouse version > v1.1.54019-stable
• WriteToFile in select,selectAsync
• Degeneration for Bindings & Conditions
• $db->select(new Query("Select..."));
• remove findActiveHostAndCheckCluster , clusterHosts , checkServerReplicas
• Add cleanQueryDegeneration(),addQueryDegeneration()
• Need $db->enableQueryConditions(); for use Conditions ; default Conditions - disabled;
• float in CurlerRequest->timeOut(2.5) = 2500 ms
• tablesSize() - add sizebytes