This release includes more than 30 bug fixes.

You may download it from the Zend Framework site: http://framework.zend.com/download/latest

For a full list of resolved issues, you can visit the changelog: http://framework.zend.com/changelog/1.10.6

Issues resolved for this release:

• [ZF-9877]: Initialize Zend_Translate cache from application configuration
• [ZF-8007]: using own namespace for resource plugins
• [ZF-9960]: Zend_Auth_Adapter_DbTable
• [ZF-7510]: Zend_Auth_Adapter_DbTable to use the default adapter
• [ZF-9963]: Color management in Zend/Barcode/Renderer/Pdf.php
• [ZF-9950]: Class name wrong, current is name Zend_Pdf_Color_RGB
• [ZF-9941]: Zend_Currency::toCurrency() options
• [ZF-9891]: Zend_Date::equals() issues when 2 objects have different TZs
• [ZF-9885]: CLONE -logging not found translations does not work with Zend_Validate, Zend_Form_Element_Multi, Zend_Dojo_Form_Element_DijitMulti
• [ZF-9944]: Zend_Form_Element_File loses breakChainOnFailure option if NotEmpty validator is not supplied
• [ZF-9896]: Zend_Form::getValidValues(): dont’t return values for ignored elements
• [ZF-9168]: Zend Form Element Captcha Decorator
• [ZF-8622]: Zend_Form_Element::setDecorators() can’t set what getDecorators() returned
• [ZF-7552]: Same type decorators are lost when getting and setting back decorators
• [ZF-5197]: Decorator aliases are lost when Zend_Form_Element_Captcha adds its own decorators in ‘render’ method
• [ZF-9894]: Typo in Zend_Http_Client Advanced
• [ZF-9416]: Zend_Json_Encoder creates invalid JSON for Zend_Json_Decoder
• [ZF-10024]: Autoloader doesn not make use of PHP5.3 closures as callbacks
• [ZF-9937]: Problems with arrays
• [ZF-9889]: Wrong test for exists locale
• [ZF-9655]: Zend_Locale::getTranslation method (‘LanguageToTerritory’ type) description
• [ZF-7603]: Syslog writer facility should be long
• [ZF-8914]: Specifying numeric parameter name for page link generates incorrect URL
• [ZF-10019]: Zend_Oauth_Consumer::getAccessToken() overrides request parameters if oauth_verifier exists.
• [ZF-7732]: Zend_Pageinator : clearPageItemCache()’s var “$cleanTags” is not required.
• [ZF-6989]: Zend_Paginator DbSelect should not use Select object in serialization
• [ZF-9750]: Spelling in constructor Zend Pdf
• [ZF-8791]: Error: Pdf file syntax error. ‘startxref’ keyword expected. Offset – 0×2180.
• [ZF-9976]: Zend_Translate_Adapter rerouting problem
• [ZF-9938]: Malformed tag in documentation/manual/en/module_specs/Zend_Translate-Additional.xml
• [ZF-9967]: Can’t disable locale in IBAN validator
• [ZF-9930]: Spanish translation for Zend_Validate messages
• [ZF-9871]: Ignore next validators
• [ZF-9295]: escape callback doesn’t accept additional params

You may download it from the Zend Framework site: http://framework.zend.com/download/latest

A couple weeks ago, the Dojo Foundation announced a security advisory regarding Dojo Toolkit, which Zend Framework bundles in its releases.

The new releases of Zend Framework incorporate the updates made to Dojo Toolkit.

You can read more about the advisory on the Zend Framework security blog: http://framework.zend.com/security

For a full list of non-security-related, resolved issues, you can visit the changelog: http://framework.zend.com/changelog/1.10.3

* Zend_Barcode, contributed by Mickael Perraud

* Zend_Cache_Backend_Static, contributed by Pádraic Brady

* Zend_Cache_Manager, contributed by Pádraic Brady

* Zend_Exception – previous exception support, contributed by Marc Bennewitz

* Zend_Feed_Pubsubhubbub, contributed by Pádraic Brady

* Zend_Feed_Writer, contributed by Pádraic Brady

* Zend_Filter_Boolean, contributed by Thomas Weidner

* Zend_Filter_Compress/Decompress, contributed by Thomas Weidner

* Zend_Filter_Null, contributed by Thomas Weidner

* Zend_Log::factory(), contributed by Mark van der Velden and Martin Roest (of ibuildings)

* Zend_Log_Writer_ZendMonitor, contributed by Matthew Weier O’Phinney

* Zend_Markup, contributed by Pieter Kokx

* Zend_Oauth, contributed by Pádraic Brady

* Zend_Serializer, contributed by Marc Bennewitz

* Zend_Service_DeveloperGarden, contributed by Marco Kaiser

* Zend_Service_LiveDocx, contributed by Jonathan Marron

* Zend_Service_WindowsAzure, contributed by Maarten Balliauw

* Zend_Validate_Barcode, contributed by Thomas Weidner

* Zend_Validate_Callback, contributed by Thomas Weidner

* Zend_Validate_CreditCard, contributed by Thomas Weidner

* Zend_Validate_PostCode, contributed by Thomas Weidner

* Zend_Pdf parsing speed has been improved by around 40%

* Additions to Zend_Application resources, including Cachemanager, Dojo, Jquery, Layout, Log, Mail, and Multidb (contributed primarily by Dolf Schimmel)

* Refactoring of Zend_Loader::loadClass() to conform to the PHP Framework Interop Group reference implementation, which allows for autoloading PHP 5.3 namespaced code

* Updated Dojo version to 1.4

Zend_Tool was refactored to eliminate issues and bottlenecks, as well as to add a number of new features:

* New CLI runner with home directory and configuration support

* New providers for Model generation, DbAdapter setup, Layouts and Form Generation

* Default project structure comes with logging support in the ErrorController

Almost a month has passed since our alpha release of 1.10.0, but the activity on the Zend Framework trunk has done anything but slow down. A number of contributors have completed features that were only near-completion during the alpha, and others have undergone further community review to add a bit of polish to their APIs. At this time, I’m happy to announce a BETA release of 1.10.0.

http://framework.zend.com/download/latest

Please note that the alpha is only available on the ZF site, not from the zend.com CDN.

Beta means that the release is considered feature-complete, and that any new APIs added are now considered final. In this release you’ll find the following new features:

* Zend_Barcode, contributed by Mickael Perraud

* Zend_Cache_Backend_Static, contributed by Pádraic Brady

* Zend_Cache_Manager, contributed by Pádraic Brady

* Zend_Exception – previous exception support, contributed by Marc Bennewitz

* Zend_Feed_Pubsubhubbub, contributed by Pádraic Brady

* Zend_Feed_Writer, contributed by Pádraic Brady

* Zend_Filter_Boolean, contributed by Thomas Weidner

* Zend_Filter_Compress/Decompress, contributed by Thomas Weidner

* Zend_Filter_Null, contributed by Thomas Weidner

* Zend_Log::factory(), contributed by Mark van der Velden and Martin Roest (of ibuildings)

* Zend_Log_Writer_ZendMonitor, contributed by Matthew Weier O’Phinney

* Zend_Markup, contributed by Pieter Kokx

* Zend_Oauth, contributed by Pádraic Brady

* Zend_Serializer, contributed by Marc Bennewitz

* Zend_Service_DeveloperGarden, contributed by Marco Kaiser

* Zend_Service_LiveDocx, contributed by Jonathan Marron

* Zend_Service_WindowsAzure, contributed by Maarten Balliauw

* Zend_Validate_Barcode, contributed by Thomas Weidner

* Zend_Validate_Callback, contributed by Thomas Weidner

* Zend_Validate_CreditCard, contributed by Thomas Weidner

* Zend_Validate_PostCode, contributed by Thomas Weidner

* Additions to Zend_Application resources, including Cachemanager, Dojo, Jquery, Layout, Log, Mail, and Multidb (contributed primarily by Dolf Schimmel)

* Refactoring of Zend_Loader::loadClass() to conform to the PHP Framework Interop Group reference implementation, which allows for autoloading PHP 5.3 namespaced code

* Updated Dojo version to 1.4

In addition, Zend_Tool has had undergone a ton of refactoring to eliminate issues and bottlenecks, as well as to add a number of new features:

* New CLI runner with home directory and configuration support

* New providers for Model generation, DbAdapter setup, Layouts and Form Generation

* Default project structure comes with logging support in the ErrorController

This is a BETA release, and should by no means be used in production. While the feature-set and API is complete, there may be a number of issues that still need to be addressed before the final release. As such, we do ask you to test your applications against the beta, and provide us feedback via the issue tracker so that we can have a solid and stable release.

Our tentative release schedule is:

* 1.10.0rc1: Wednesday, 20 January 2010

* 1.10.0: Tuesday, 26 January 2010

I’d like to extend a hearty congratulations to all contributors, who have worked tirelessly over the past few weeks to finalize and test new features; the release could not have happened without their efforts!

You may download it from the Zend Framework site:

http://framework.zend.com/download/latest

During the month of December, one of our contributors, Pádraic Brady,
performed a preliminary security audit of the framework, and worked with
the Zend Framework team to confirm the reports as well as resolve them.

The following security vulnerabilities are resolved in these releases:

* ZF2010-06: Potential XSS or HTML Injection vector in Zend_Json
* ZF2010-05: Potential XSS vector in Zend_Service_ReCaptcha_MailHide
* ZF2010-04: Potential MIME-type Injection in Zend_File_Transfer
* ZF2010-03: Potential XSS vector in Zend_Filter_StripTags when comments allowed
* ZF2010-02: Potential XSS vector in Zend_Dojo_View_Helper_Editor
* ZF2010-01: Potential XSS vectors due to inconsistent encodings

You canget more information on these advisories from our security page:

http://framework.zend.com/security/advisories

For a full list of non-security-related, resolved issues, you can visit
changelogs for each release:

* http://framework.zend.com/changelog/1.9.7
* http://framework.zend.com/changelog/1.8.5
* http://framework.zend.com/changelog/1.7.9

This will be the last scheduled release in the 1.9 series. We released
an alpha of 1.10.0 mid-December, and plan a beta release this week, with
the final release later in the month; keep posted for developments along
that front in the coming weeks.