Skip to content

Joomla!

Productivity & Wikis

Joomla! is an open‑source Content Management System (CMS) for building websites and web applications.

PHP Latest 6.1.1 · 8d ago Security brief →

Features

  • Provides a full‑featured CMS platform for creating and managing websites
  • Supports PHP with MySQL, MariaDB or PostgreSQL back‑ends
  • Free and distributed under the GNU GPL v2+

Recent releases

View all 10 releases →
Upgrade now
6.1.1 Mixed
Auth Dependencies

Security + UI fixes

Upgrade now
5.4.6 Bug fix

Documentation, Contributors, Bugfixes, PhpMyAdmin

6.1.0 Breaking risk
⚠ Upgrade required
  • A new migration guide is provided at https://manual.joomla.org/migrations/60-61/. Follow it when upgrading from a version older than 5.4.
  • Important: Do not update directly from versions lower than 5.4; first upgrade to 5.4 then proceed to 6.x.
Breaking changes
  • Direct upgrades from any Joomla version < 5.4 are no longer supported; users must first upgrade to 5.4 before moving to 6.x.
Full changelog

👀 Release information

🚀 Download information

[!NOTE]
Userfacing information about this Joomla! release can be found on the release page

🔥 Installation Packages

| New Joomla! Installations | SHA-256 Checksums |
|---------------------------|-------------------|
| ZIP Archive (.zip) | 1442712071ac9db6aef09c46d3c51f6093211114d6145cd7cf8b29c44293807e |
| GNU Zip Archive (.tar.gz) | 4a8b066abdd490a4ea77a0e57afc330e6dd4a9b88f0ea628967abcc9bb7b8724 |
| Zstandard Archive (.tar.zst) | 730bebec12307337126935aad238d0b37cc4a26194d5d8bb005a776d4162c316 |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

[!IMPORTANT]
Don't update directly from a version lower than 5.4 it is important that you first update to 5.4 and then update to 6.x

| Update from a previous version | SHA-256 Checksums |
|--------------------------------|-------------------|
| ZIP Archive (.zip) | 4dbc14b51d4361803a2bbca6f8b1face4a59c6426cf514fbe3025f9f9aee8e43 |
| GNU Zip Archive (.tar.gz) | 61c05df8f2eeab5f478931dd840a60d32cf63e128c2a25f083194e46f78964c5 |
| Zstandard Archive (.tar.zst) | 973b99eed6f2aefae25ae43ae73434d797b54edc4cb174f78b5d0f4f4f89a7ce |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

💆 New Contributors

  • @samuelagus made their first contribution in https://github.com/joomla/joomla-cms/pull/46047
  • @e4e5Ke2 made their first contribution in https://github.com/joomla/joomla-cms/pull/46787
  • @itsnewtjam made their first contribution in https://github.com/joomla/joomla-cms/pull/45978
  • @Vikash-Kumar-23 made their first contribution in https://github.com/joomla/joomla-cms/pull/47248
  • @Api-cmd made their first contribution in https://github.com/joomla/joomla-cms/pull/47499

🧹 What has been changed

  • [6.1] Preparation for Joomla! 6.1 by @HLeithner in https://github.com/joomla/joomla-cms/pull/46019
  • [6.1] Remove dropdown and split save in updatesite view by @bembelimen in https://github.com/joomla/joomla-cms/pull/46345
  • [6.1] Implement copy child template by @bembelimen in https://github.com/joomla/joomla-cms/pull/46278
  • [6.1] LogTask not translated by @brianteeman in https://github.com/joomla/joomla-cms/pull/46375
  • [6.1] Add filter featured to content admin menuitem articles by @chmst in https://github.com/joomla/joomla-cms/pull/46252
  • [6.1] Meaningful uninstall message by @brianteeman in https://github.com/joomla/joomla-cms/pull/46277
  • [6.1] Replace meaningless element div by element output by @hans2103 in https://github.com/joomla/joomla-cms/pull/46227
  • [6.1] Sort Module Logged-in Users by Datetime by @samuelagus in https://github.com/joomla/joomla-cms/pull/46047
  • [6.1] User Action Log Emails IP Address by @brianteeman in https://github.com/joomla/joomla-cms/pull/45991
  • [6.1] Remove useless empty () check # by @joomdonation in https://github.com/joomla/joomla-cms/pull/45039
  • [6.1] Add proof-of-work captcha by @SniperSister in https://github.com/joomla/joomla-cms/pull/46514
  • [6.1] Action Log notification mail translate ip_address in case collecting ips is disabled by @HLeithner in https://github.com/joomla/joomla-cms/pull/46511
  • [6.1] add composer scripts for cs check and add excludes to php-cs-fixer config by @LadySolveig in https://github.com/joomla/joomla-cms/pull/44498
  • [6.1] Update composer dependencies by @HLeithner in https://github.com/joomla/joomla-cms/pull/46565
  • [6.1] NPM audit fix security vulnerabilities and update other dependencies 2025-12-19 by @richard67 in https://github.com/joomla/joomla-cms/pull/46592
  • [6.1] Add "nocache" as version option to webasset manager by @HLeithner in https://github.com/joomla/joomla-cms/pull/46379
  • [6.1] Update deleted files and folders in script.php for the upcoming 6.1.0-alpha2 by @richard67 in https://github.com/joomla/joomla-cms/pull/46575
  • [6.1] delete the unnecessary file build xml by @tecpromotion in https://github.com/joomla/joomla-cms/pull/46611
  • [6.1] tinymce and sa11y updates by @brianteeman in https://github.com/joomla/joomla-cms/pull/46600
  • [6.1] make media action crop aspect ratio configurable by @hans2103 in https://github.com/joomla/joomla-cms/pull/46421
  • [6.1] Adding date filtering to popular articles module ( admin ) by @hiteshm0 in https://github.com/joomla/joomla-cms/pull/46605
  • [6.1] Fix log format configurations by @muhme in https://github.com/joomla/joomla-cms/pull/46422
  • [6.1] remove featured article menu item by @alikon in https://github.com/joomla/joomla-cms/pull/46225
  • [6.1] Allow to force or never force MFA for superusers by @zero-24 in https://github.com/joomla/joomla-cms/pull/46248
  • [6.1] UX feature: Filter by Author (Include/Exclude/Current User) option for Category List by @coolcat-creations in https://github.com/joomla/joomla-cms/pull/46539
  • [6.1] [CLI] enable or disable extension command by @alikon in https://github.com/joomla/joomla-cms/pull/43977
  • [6.1] Re-ordering of tabs and fields in frontend by @chmst in https://github.com/joomla/joomla-cms/pull/45081
  • [6.1] simplify class usage by @Denitz in https://github.com/joomla/joomla-cms/pull/41986
  • [6.1] Replace all Factory::getSession() usages by @Hackwar in https://github.com/joomla/joomla-cms/pull/45869
  • [6.1] Fix language usage in SiteMenu class to use the internal value by @bembelimen in https://github.com/joomla/joomla-cms/pull/46603
  • [6.1] Fix $language default parameter by @janschoenherr in https://github.com/joomla/joomla-cms/pull/44575
  • [6.1] Remove default empty string param in addControlField() by @Denitz in https://github.com/joomla/joomla-cms/pull/46381
  • [6.1] Subform Grid layout, an alternative for unresponsive Table layout by @Fedik in https://github.com/joomla/joomla-cms/pull/42347
  • [6.1] Update version in composer.json so they fit to the updates previously made with PR 46646 by @richard67 in https://github.com/joomla/joomla-cms/pull/46661
  • [6.1] Remove use of deprecated dispatcher from the plugin constructor by @heelc29 in https://github.com/joomla/joomla-cms/pull/46683
  • [6.1] Add email to authentication response object by @nordmograph in https://github.com/joomla/joomla-cms/pull/46691
  • [6.1] Fix SiteMenu class to use correct language by @Fedik in https://github.com/joomla/joomla-cms/pull/46710
  • [6.1] Update deleted files in script.php for the upcoming 6.1.0-alpha3 by @richard67 in https://github.com/joomla/joomla-cms/pull/46712
  • [6.1] fix webauthn attestation support by @heelc29 in https://github.com/joomla/joomla-cms/pull/45708
  • [6.1] Feature Module associations by @rdeutz in https://github.com/joomla/joomla-cms/pull/46671
  • [6.1] Refactor SiteApplication language detection by @joomdonation in https://github.com/joomla/joomla-cms/pull/46549
  • [6.1] Subform: add order-changed event by @Fedik in https://github.com/joomla/joomla-cms/pull/46093
  • [6.1] Add the possibility to show unpublished articles in mod_articles by @drmenzelit in https://github.com/joomla/joomla-cms/pull/45990
  • [6.1] Passwort reset request: fix legend by @chmst in https://github.com/joomla/joomla-cms/pull/46454
  • [6.1] Use AdminModel save for category saving by @bembelimen in https://github.com/joomla/joomla-cms/pull/46631
  • [6.1] Deprecate OPTGROUP handling in HTMLHelper select.options by @HLeithner in https://github.com/joomla/joomla-cms/pull/46737
  • [6.1] code cleanup by @janschoenherr in https://github.com/joomla/joomla-cms/pull/46770
  • [6.1] Same alias behavior for webservices by @alikon in https://github.com/joomla/joomla-cms/pull/46144
  • [6.1] Tinymcelang by @brianteeman in https://github.com/joomla/joomla-cms/pull/46777
  • [6.1] Versions for Modules by @rdeutz in https://github.com/joomla/joomla-cms/pull/46772
  • [6.1] Provide #__extensions.custom_data for components, menus, modules and template styles by @Denitz in https://github.com/joomla/joomla-cms/pull/46622
  • [6.1] Add fido.jwt to path for all CI jobs using the composer cache - fix failing CI 2nd try by @richard67 in https://github.com/joomla/joomla-cms/pull/46855
  • [6.1] Email templates: make tags case insensitive by @e4e5Ke2 in https://github.com/joomla/joomla-cms/pull/46787
  • [6.1] Menu item : add inline help button by @conseilgouz in https://github.com/joomla/joomla-cms/pull/46762
  • [6.1] CMSPlugin: use Lazy Object feature by @Fedik in https://github.com/joomla/joomla-cms/pull/45062
  • [6.1] Deploy_version by @brianteeman in https://github.com/joomla/joomla-cms/pull/46867
  • [6.1] Support class and additional attribute for optgroup by @HLeithner in https://github.com/joomla/joomla-cms/pull/46739
  • [6.1] Implementation of graphical workflow editor feature by @Dileepadari in https://github.com/joomla/joomla-cms/pull/46021
  • [6.1] Code cleanup (render modules in order of appearance) by @janschoenherr in https://github.com/joomla/joomla-cms/pull/46861
  • [6.1] TinyMCE add/edit/remove abbr element [a11y] by @brianteeman in https://github.com/joomla/joomla-cms/pull/46820
  • [6.1] Minor performance improvement for System - Language Filter plugin by @joomdonation in https://github.com/joomla/joomla-cms/pull/46812
  • [6.1] MailTemplate: Allow to read existing template data by @Fedik in https://github.com/joomla/joomla-cms/pull/46711
  • [6.1] Refactor CMSApplication getTemplate logic by @joomdonation in https://github.com/joomla/joomla-cms/pull/46551
  • [6.1] Reactor MVC FormController class by @joomdonation in https://github.com/joomla/joomla-cms/pull/46537
  • [6.1] Batch Copy & Move tags by @beni71 in https://github.com/joomla/joomla-cms/pull/46501
  • [6.1] Allow the module updater to automatically delete obsolete files by @Bakual in https://github.com/joomla/joomla-cms/pull/46474
  • [6.1] [webservices] Implement schema.org data integration by @alikon in https://github.com/joomla/joomla-cms/pull/46524
  • [6.1] UX Improvement Show language override status and quick-create missing overrides by @coolcat-creations in https://github.com/joomla/joomla-cms/pull/46559
  • [6.1] Add file types for media custom field plugin. by @sergeytolkachyov in https://github.com/joomla/joomla-cms/pull/45013
  • [6.1] Move fido file to it's own cache by @laoneo in https://github.com/joomla/joomla-cms/pull/46875
  • [6.1] Guide not docs by @brianteeman in https://github.com/joomla/joomla-cms/pull/46786
  • [6.1] Echo result of onAfterDisplay event by @janschoenherr in https://github.com/joomla/joomla-cms/pull/46771
  • [6.1] Lazyload all plugins except compat plugin by @HLeithner in https://github.com/joomla/joomla-cms/pull/46862
  • [6.1][webservices] add filter state to banners endpoint by @alikon in https://github.com/joomla/joomla-cms/pull/46656
  • [6.1] code style trim trailing spaces by @brianteeman in https://github.com/joomla/joomla-cms/pull/46877
  • [6.1] fix webauth phpstan issues by @heelc29 in https://github.com/joomla/joomla-cms/pull/46735
  • [6.1] change three links from docs to guide by @tecpromotion in https://github.com/joomla/joomla-cms/pull/46882
  • [6.1] Child templates extend language instead of override by @dgrammatiko in https://github.com/joomla/joomla-cms/pull/46353
  • [6.1] Complimentary to #46353 by @dgrammatiko in https://github.com/joomla/joomla-cms/pull/46755
  • [6.1] Add title attribute to links in actionlog messages by @chmst in https://github.com/joomla/joomla-cms/pull/46883
  • [6.1] Complete Action Log title attributes (Users & Extensions) by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/46884
  • [6.1] Add workflow stage filter to articles endpoint by @itsnewtjam in https://github.com/joomla/joomla-cms/pull/45978
  • [6.1] Update deleted files in script.php for the upcoming 6.1.0-beta1 by @richard67 in https://github.com/joomla/joomla-cms/pull/46890
  • [6.1] update script browserlist:update by @tecpromotion in https://github.com/joomla/joomla-cms/pull/46903
  • [6.1] Bugfix - Filteroptions Category List padding CSS by @coolcat-creations in https://github.com/joomla/joomla-cms/pull/47207
  • [6.1] Fix TinyMCE editor not respecting width and height settings by @RickR2H in https://github.com/joomla/joomla-cms/pull/46438
  • [6.1] Improve Multilanguage::getSiteHomePages() by @Denitz in https://github.com/joomla/joomla-cms/pull/41507
  • [6.1] fix failing joomla update (postgresql) by @heelc29 in https://github.com/joomla/joomla-cms/pull/47230
  • [6.1] Workflow Graph Translate "From Any" by @brianteeman in https://github.com/joomla/joomla-cms/pull/47234
  • [6.1] Workflow Graph shortcuts by @brianteeman in https://github.com/joomla/joomla-cms/pull/47233
  • [6.1] workflow graph clean joomla dialog by @heelc29 in https://github.com/joomla/joomla-cms/pull/47275
  • [6.1] New Media Fields use by @brianteeman in https://github.com/joomla/joomla-cms/pull/47279
  • [6.1] com_finder unused factory by @brianteeman in https://github.com/joomla/joomla-cms/pull/47280
  • [6.1] Update deleted files and folders in script.php for the upcoming 6.1.0-beta2 by @richard67 in https://github.com/joomla/joomla-cms/pull/47289
  • [6.1] - a11y - Contain page content by landmark by @hans2103 in https://github.com/joomla/joomla-cms/pull/45988
  • [6.1] workflows missing default stage by @brianteeman in https://github.com/joomla/joomla-cms/pull/47290
  • [6.1] Workflow Shortcuts by @brianteeman in https://github.com/joomla/joomla-cms/pull/47276
  • [6.1] Enhance translation handling in Workflow component by @Dileepadari in https://github.com/joomla/joomla-cms/pull/47299
  • [6.1] Update link by @brianteeman in https://github.com/joomla/joomla-cms/pull/47333
  • [6.1] Add update SQL script for PR #46438 to fix TinyMCE editor default width and height settings on core update by @richard67 in https://github.com/joomla/joomla-cms/pull/47326
  • [6.1] Fix none/codemirror editor width and height by @RickR2H in https://github.com/joomla/joomla-cms/pull/47305
  • [6.1] TinyMCE height and width strings by @brianteeman in https://github.com/joomla/joomla-cms/pull/47341
  • [6.1] Deprecate language strings by @brianteeman in https://github.com/joomla/joomla-cms/pull/47356
  • [6.1] NPM update indirect development dependency "immutable" to fix a high severity security vulnerability by @richard67 in https://github.com/joomla/joomla-cms/pull/47323
  • [6.1] Fix SQL error "Duplicate entry '14' for key '#__content_types.PRIMARY'" when updating to 6.1 by @richard67 in https://github.com/joomla/joomla-cms/pull/47361
  • [6.1] Fix toggling Editor window lost width, height by @Fedik in https://github.com/joomla/joomla-cms/pull/47363
  • [6.1] Migrate to Cypress.expose as Cypress.env is deprecated by @laoneo in https://github.com/joomla/joomla-cms/pull/46876
  • [6.1] Remove invalid second argument from LayoutFile::render() call by @joomdonation in https://github.com/joomla/joomla-cms/pull/47377
  • [6.1] Fix Filter Options not opening after Batch modal by @adarshdubey03 in https://github.com/joomla/joomla-cms/pull/47237
  • [6.1] What's new tour for Joomla 6.1 by @obuisard in https://github.com/joomla/joomla-cms/pull/47229
  • [6.1] Fix workflow graph strings and assets by @Vikash-Kumar-23 in https://github.com/joomla/joomla-cms/pull/47248
  • [6.1] Rename and improve update SQL scripts for the 6.1.0 what's new guided tour by @richard67 in https://github.com/joomla/joomla-cms/pull/47389
  • [6.1] NPM update indirect dependency "flatted" to fix a high severity security vulnerability by @richard67 in https://github.com/joomla/joomla-cms/pull/47407
  • [6.1] Fix fancy-select duplication while AJAX search by @Fedik in https://github.com/joomla/joomla-cms/pull/47426
  • [6.1] Correct doc block for document property by @laoneo in https://github.com/joomla/joomla-cms/pull/47450
  • [6.1] update phpstan-baseline.neon by @tecpromotion in https://github.com/joomla/joomla-cms/pull/47475
  • [6.1] Fix switching media type on field reload by @HLeithner in https://github.com/joomla/joomla-cms/pull/47468
  • [6.1] Fix: Correct possessive apostrophe 'user's' to 'users'' in stats plug… by @Api-cmd in https://github.com/joomla/joomla-cms/pull/47499
  • [6.1] Translation Update by @joomla-translation-bot in https://github.com/joomla/joomla-cms/pull/47537
  • [6.1] Translation Update by @joomla-translation-bot in https://github.com/joomla/joomla-cms/pull/47552
  • [6.1] Add dispatcher support to jooa11y plugin by @HLeithner in https://github.com/joomla/joomla-cms/pull/47579

:technologist: Test contributions

Thank you to all the testers who help us maintain high quality standards and deliver a robust product.

@465645 (1), @adarshdubey03 (2), @alikon (5), @Api-cmd (1), @basd82 (1), @bembelimen (2), @Bodge-IT (1), @brianteeman (17), @ceford (12), @chaitali-tekdi (3), @chmst (3), @ChrisHoefliger (1), @ChristineWk (2), @conseilgouz (1), @crimle (3), @crommie (1), @cyrez (1), @dautrich (4), @degobbis (1), @Denitz (1), @Dileepadari (3), @drankwiler (1), @drmenzelit (3), @Elfangor93 (1), @elh-ds (1), @exlemor (23), @Fedik (3), @gioacchino54 (2), @gug2 (1), @hamby (1), @hans2103 (3), @heelc29 (2), @HLeithner (5), @idefax (3), @imrohitkodam (1), @JeroenMoolenschot (1), @KishoriBKarale (1), @kkbiswal (1), @komalm (2), @Kostelano (2), @krishnagandhicode (4), @LadySolveig (3), @laoneo (2), @lemuelvdm (3), @manojLondhe (1), @mariantanase (2), @mortezahonar (2), @muhme (4), @nadjak77 (2), @obuisard (2), @paternax (1), @pranotiTechjoomla (1), @Quy (1), @Rajat-1804 (2), @Razzo1987 (4), @rbuelund (2), @rdeutz (2), @richard67 (1), @RickR2H (2), @rinka88 (2), @sergeytolkachyov (1), @Simran2525-eng (1), @SRV-KILLER09 (1), @tecpromotion (26), @ThomasFinnern (2), @TLWebdesign (3), @torstenhoppe (1), @VaishnaviSidral (3), @vijayholve (2), @Vineet7875 (1), @viocassel (2), @web-eau-net (1), @webgras (3), @webnet-assmann (2)

5.4.5 Breaking risk
Security fixes
  • Composer update phpseclib/phpseclib to 3.0.50 fixes one high‑severity security vulnerability
  • NPM indirect dependencies updated to fix eight additional security vulnerabilities
Full changelog

👀 Release information

🚀 Download information

[!NOTE]
Userfacing information about this Joomla! release can be found on the release page

🔥 Installation Packages

| New Joomla! Installations | SHA-256 Checksums |
|---------------------------|-------------------|
| ZIP Archive (.zip) | d873c2c0c753036089470551fa9fe958cb289f954afb66ded149a5cf4eaf97bc |
| GNU Zip Archive (.tar.gz) | ba9ffe164ecfd68c45e8e7b0fe57ee2f1ed3631dbdc6cd070c167ead460937d9 |
| Zstandard Archive (.tar.zst) | 3197e4eded5c4a7e1d1aa2090ab588b1384a8033890e8e18055041d3d1f90f32 |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

[!IMPORTANT]
Don't update directly from a version lower than 4.4 it is important that you first update to 4.4 and then update to 5.x

| Update from a previous version | SHA-256 Checksums |
|--------------------------------|-------------------|
| ZIP Archive (.zip) | 788c911c1a24c1846cc86065b0bec8f7055882a752f4852873d0d2cab794639e |
| GNU Zip Archive (.tar.gz) | 1ca406009ce5ca4818c0c435225d76a6f138a1e1d7208f9cc1c2b4685b717ca5 |
| Zstandard Archive (.tar.zst) | ce2e3fb9802b6e59a068e7ca4327c1462b21489804a1b73da7aa563ff995ab2f |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

🧹 What has been changed

  • [5.4] Fix regex pattern in ShowOnRule for custom fields by @LadySolveig in https://github.com/joomla/joomla-cms/pull/47474
  • [5.4] Update version in allowEdit method documentation by @brianteeman in https://github.com/joomla/joomla-cms/pull/47520
  • [5.4] Use the full path for $this in association template file by @laoneo in https://github.com/joomla/joomla-cms/pull/47523
  • [5.4] Fix double timezone conversion in Media Manager file dates by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/47433
  • [5.4] use logical top corner radius for RTL/LTR consistency by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/47448
  • [5.4] Fix rotate angle input resetting to 0 in media manager by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/47462
  • [5.4] onContentPrepare in mod_articles by @chmst in https://github.com/joomla/joomla-cms/pull/47467
  • [5.4] TinyMCE: Load non minified custom CSS when no minified version … by @adarshdubey03 in https://github.com/joomla/joomla-cms/pull/47478
  • [5.4] Fix required modal category field highlighting on validation error by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/47505
  • [5.4] Composer update phpseclib/phpseclib to 3.0.50 to fix one high severity security vulnerability by @richard67 in https://github.com/joomla/joomla-cms/pull/47529
  • [5.4] NPM update indirect dependencies to fix 8 security vulnerabilities by @richard67 in https://github.com/joomla/joomla-cms/pull/47530
  • [5.4] warn when duplicate subform fields are removed on save by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/47511
  • [5.4] Correct possessive apostrophe 'user's' to 'users'' by @tecpromotion in https://github.com/joomla/joomla-cms/pull/47540
  • [5.4] Prevent recursions in loadposition/loadmodule plugin by @Hackwar in https://github.com/joomla/joomla-cms/pull/47208
  • [5.4] NPM update indirect development dependency lodash to 4.18.1 by @richard67 in https://github.com/joomla/joomla-cms/pull/47534

Full Changelog: https://github.com/joomla/joomla-cms/compare/5.4.4...5.4.5

:technologist: Test contributions

Thank you to all the testers who help us maintain high quality standards and deliver a robust product.

@adarshdubey03 (3), @brianteeman (7), @chmst (1), @ChristineWk (1), @exlemor (7), @krishnagandhicode (3), @LadySolveig (1), @muhme (1), @ramalama (1), @SRV-KILLER09 (1), @tecpromotion (1), @ThomasFinnern (2)

6.0.4 Security relevant
Security fixes
  • NPM development dependencies updated to fix nine security vulnerabilities.
Full changelog

👀 Release information

🚀 Download information

[!NOTE]
User-facing information about this Joomla! release can be found on the release page

🔥 Installation Packages

| New Joomla! Installations | SHA-256 Checksums |
|---------------------------|-------------------|
| ZIP Archive (.zip) | 3f5d8ef731fa068c5f08518892c5751432c48d1ff307f01c746db7fd8bc25b8a |
| GNU Zip Archive (.tar.gz) | 90b233ab1de8cfaaa223008ca7d109da843e12333610714366db67efe390d4ba |
| Zstandard Archive (.tar.zst) | 82e370bdcb2dc964f2a52107396e7c006886158d710b2f90e8cc6a7c14a30371 |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

[!IMPORTANT]
Don't update directly from a version lower than 5.4 it is important that you first update to 5.4 and then update to 6.x

| Update from a previous version | SHA-256 Checksums |
|--------------------------------|-------------------|
| ZIP Archive (.zip) | 4bad4bc3a923796bf83e56a6ab4d01d793a996b0ae65ccbf911201026a241482 |
| GNU Zip Archive (.tar.gz) | 5f279b288f973a8cf46cc790edcf9ddc934d3283739f1be03ccfa05e573167ca |
| Zstandard Archive (.tar.zst) | 3c048eef997042e5db7b12ba8705071dcfda5ef7f23fc9491f99ab904667c8df |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

🧹 What has been changed

  • [6.0] Reduce exclusions in phpstan-baseline.neon by @richard67 in https://github.com/joomla/joomla-cms/pull/46858
  • [6.0] Fix sidebar admin flashing icons (alternative to #47268) by @LadySolveig in https://github.com/joomla/joomla-cms/pull/47271
  • [6.0] Update deleted files and folders in script.php for the upcoming 6.0.4 release (if any) by @richard67 in https://github.com/joomla/joomla-cms/pull/47259
  • [6.0] Update browserlist 2026-03-07 by @richard67 in https://github.com/joomla/joomla-cms/pull/47329
  • [6.0] NPM update development dependencies to fix 9 security vulnerabilities by @richard67 in https://github.com/joomla/joomla-cms/pull/47322
  • [6.0] Event Deprecation code comments by @brianteeman in https://github.com/joomla/joomla-cms/pull/47337
  • [6.0] HTMLHelper deprecation message by @brianteeman in https://github.com/joomla/joomla-cms/pull/47345
  • [6.0] Toolbar Deprecations by @brianteeman in https://github.com/joomla/joomla-cms/pull/47346
  • [6.0] route deprecation by @brianteeman in https://github.com/joomla/joomla-cms/pull/47347
  • [6.0] codemirror language deprecations by @brianteeman in https://github.com/joomla/joomla-cms/pull/47398
  • [6.0] Fix PHP warnings when opening Page Break modal by @sathwikre in https://github.com/joomla/joomla-cms/pull/46908
  • [6.0] GET content/articles render the placeholder only by @alikon in https://github.com/joomla/joomla-cms/pull/45357
  • [6.0] partly revert strings in pr #47398 by @tecpromotion in https://github.com/joomla/joomla-cms/pull/47439

Full Changelog: https://github.com/joomla/joomla-cms/compare/6.0.3...6.0.4

:technologist: Test contributions

Thank you to all the testers who help us maintain high quality standards and deliver a robust product.

@basn63, @brianteeman, @ChristineWk, @dautrich, @exlemor, @gioacchino54, @krishnagandhicode, @MacJoom, @mariantanase, @muhme, @OctavianC, @Razzo1987, @richard67, @tecpromotion, @ThomasFinnern

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
5,086
Forks
3,856
Languages
PHP JavaScript SCSS

Community & Support

Beta — feedback welcome: [email protected]