NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Packagist · #2296 most downloaded on Packagist
Yii Web Programming Framework
Last release 9 months ago
23 Dec 2025
Ships fairly regularly
a new release about every 9 months
Nearly every release is documented
notes for 19 of 19 stable releases
Nothing withdrawn
no release was ever pulled
13 years old
20 releases · first in 2013
https://www.yiiframework.com/news/775/yii-1-1-32-is-released
CRedisCache (mateusmetzker)CCaptchaAction for PHP 8.1+ (rob006)Dec 23, 2025
We are very pleased to announce that Yii Framework version 1.1.32 is released. You can download it at yiiframework.com/download/ .
Yii 1.1.32 adds support for PHP 8.4 and improves compatibility with PHP 8.
This release is a release of Yii 1.1, which has reached maintenance mode and will only receive security and compatibility fixes. For the complete list of changes in this release, please see the change log . For upgrading, always make sure to read the upgrade instructions .
We would like to express our gratitude to all contributors who have spent their precious time helping improve Yii and made this release possible.
Yii 1.1.31 is released
Yii 2.0.53
Yii 2.0.54
Yii 2.0.55
Yii 1.1.33 is released and security support extended
release
Yii 1.1
One column per quarter.
https://www.yiiframework.com/news/710/yii-1-1-31-is-released
https://www.yiiframework.com/news/669/yii-1-1-30-is-released
https://www.yiiframework.com/news/587/yii-1-1-29-is-released
https://www.yiiframework.com/news/549/yii-1-1-28-is-released-and-security-support-extended
https://www.yiiframework.com/news/510/yii-1-1-27-is-released
https://www.yiiframework.com/news/495/yii-1-1-26-is-released
GLOB_BRACE in CFileHelper::removeDirectory (ivany4)https://www.yiiframework.com/news/419/yii-1-1-25-is-released
https://www.yiiframework.com/news/369/yii-1-1-24-is-released-and-security-support-extended
https://www.yiiframework.com/news/318/yii-1-1-23-is-released
CJavaScript::encode() (marcovtwout)samesite as a session cookie option (tomfotherby)$htmlOptions argument in CHtml::errorSummary and CHtml::error (shidenko97)Bug #4256: PHP 7 compatibility: Fixed deprecated usage of create_function() in markdown.php (samdark)
Bug #4234: CVE-2018-14773. Drop support for HTTP_X_REWRITE_URL (kenguest)
create_function in CHttpRequest and CProfileLogRoute (martinpetrasch, freezy-sk)CJavaScript::quote() (stevoh6, ddziaduch)Bug #4197: Fixed PHP 7.2 assert with string argument is deprecated warning using Gii (ThePepster)
CActiveFinder and CController::renderDynamic() (softark, ThePepster)CDbHttpSession PHP 7.1 compatibility (csears123)CHttpCacheFilter::sendCacheControlHeader PHP 7.2 compatibility (b1rdex)Bug #4155: Ignore PHP 7.1 warnings about deprecated mcrypt (samdark)
Bug #4004: Better fix for PostgreSQL Session storage (GuillaumeSmaha)
CHttpSession::getIsStarted() PHP 7 compatibility (tomotomo)CJavaScript::quote() to properly escape Unicode characters (samdark)CArrayDataProvider (kf99916, andrewnester)eCRedisCache::executeCommand() when the previous connection timeout exception was catched (taobig)$embedExpiry=false (cebe)Bug #1191: Fixed undefined index in CListIterator when data removed in parent CList (steven-hadfield)
$acceptedLanguage in CHttpRequest::getPreferredLanguage() (cebe, ddebin)CSecurityManager to work properly is case cryptAlgorithm specified as array (samdark)CSecurityManager::legacyDecrypt in version 1.1.16 was not compatible with 1.1.15 method (DanaLuther)CPgsqlSchema::dropIndex() (samdark)CEmailValidator::validateValue() should not allow empty values to pass (cebe)CHttpRequest::sendFile() range support in case mbstring.internal_encoding=UTF-8 (MonkeyMaster)CWebService::getMethodName() (samdark)array_diff when one of CDbCriteria->select contains "false" (askobara, cebe)mbstring.func_overload and UTF-8 as mbstring.internal_encoding (Lexx918)display:none instead of visibility:hidden to not affect the layout (cebe, alaabadran)CHtml::activeLabelEx() (matteosistisette)$overwriteAll argument to CConsoleCommand::copyFiles() which can be set to true in noninteractive commands (dmitrivereshchagin)Bug #264: Fixed wrong timestamp precision value in postgres schema (nineinchnick)
CRangeValidator validator (samdark)build autoload produces the same output on both Windows and Unix platforms (GerHobbelt)y pattern to CDateTimeParser (mrpelle)_method field. (phpnode)mime.types file from apache http project to dected mime types by file extension (cebe, pavel-voronin, trejder)X-HTTP-Method-Override header in CHttpRequest (pawzar)fileHeader option to MessageCommand (mbdwey)maxFiles is not > 1 (cebe)itemscope attribute is now rendered as HTML5 boolean (vercotux)Bug (CVE-2014-4672): CDetailView may be exploited to allow executing arbitrary PHP script on the server (cebe, qiangxue)
Bug: There was unnecessary echo in CRUD views generated by Gii (samdark)
console object in MSIE 8 and 9 (resurtm)framework\views\fr) (Ragazzo)var_export dumper by changing it to print_r (resurtm)NULL instead of DEFAULT as default value for the primary keys of serial type (resurtm)<p></p> not just with <br /> as it was before (resurtm)idn extension in case it is available (idn_to_ascii and idn_ to_ utf8 functions) and Net_IDNA2 otherwise (resurtm, creocoder)Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →