Skip to content

Release history

Joomla! releases

Advanced Content Management System (CMS).

All releases

10 shown

Upgrade now
6.1.1 Mixed
Auth Dependencies

Security + UI fixes

Upgrade now
5.4.6 Bug fix

Documentation, Contributors, Bugfixes, PhpMyAdmin

6.1.0 Breaking risk
⚠ Upgrade required
  • A new migration guide is provided at https://manual.joomla.org/migrations/60-61/. Follow it when upgrading from a version older than 5.4.
  • Important: Do not update directly from versions lower than 5.4; first upgrade to 5.4 then proceed to 6.x.
Breaking changes
  • Direct upgrades from any Joomla version < 5.4 are no longer supported; users must first upgrade to 5.4 before moving to 6.x.
Full changelog

👀 Release information

🚀 Download information

[!NOTE]
Userfacing information about this Joomla! release can be found on the release page

🔥 Installation Packages

| New Joomla! Installations | SHA-256 Checksums |
|---------------------------|-------------------|
| ZIP Archive (.zip) | 1442712071ac9db6aef09c46d3c51f6093211114d6145cd7cf8b29c44293807e |
| GNU Zip Archive (.tar.gz) | 4a8b066abdd490a4ea77a0e57afc330e6dd4a9b88f0ea628967abcc9bb7b8724 |
| Zstandard Archive (.tar.zst) | 730bebec12307337126935aad238d0b37cc4a26194d5d8bb005a776d4162c316 |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

[!IMPORTANT]
Don't update directly from a version lower than 5.4 it is important that you first update to 5.4 and then update to 6.x

| Update from a previous version | SHA-256 Checksums |
|--------------------------------|-------------------|
| ZIP Archive (.zip) | 4dbc14b51d4361803a2bbca6f8b1face4a59c6426cf514fbe3025f9f9aee8e43 |
| GNU Zip Archive (.tar.gz) | 61c05df8f2eeab5f478931dd840a60d32cf63e128c2a25f083194e46f78964c5 |
| Zstandard Archive (.tar.zst) | 973b99eed6f2aefae25ae43ae73434d797b54edc4cb174f78b5d0f4f4f89a7ce |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

💆 New Contributors

  • @samuelagus made their first contribution in https://github.com/joomla/joomla-cms/pull/46047
  • @e4e5Ke2 made their first contribution in https://github.com/joomla/joomla-cms/pull/46787
  • @itsnewtjam made their first contribution in https://github.com/joomla/joomla-cms/pull/45978
  • @Vikash-Kumar-23 made their first contribution in https://github.com/joomla/joomla-cms/pull/47248
  • @Api-cmd made their first contribution in https://github.com/joomla/joomla-cms/pull/47499

🧹 What has been changed

  • [6.1] Preparation for Joomla! 6.1 by @HLeithner in https://github.com/joomla/joomla-cms/pull/46019
  • [6.1] Remove dropdown and split save in updatesite view by @bembelimen in https://github.com/joomla/joomla-cms/pull/46345
  • [6.1] Implement copy child template by @bembelimen in https://github.com/joomla/joomla-cms/pull/46278
  • [6.1] LogTask not translated by @brianteeman in https://github.com/joomla/joomla-cms/pull/46375
  • [6.1] Add filter featured to content admin menuitem articles by @chmst in https://github.com/joomla/joomla-cms/pull/46252
  • [6.1] Meaningful uninstall message by @brianteeman in https://github.com/joomla/joomla-cms/pull/46277
  • [6.1] Replace meaningless element div by element output by @hans2103 in https://github.com/joomla/joomla-cms/pull/46227
  • [6.1] Sort Module Logged-in Users by Datetime by @samuelagus in https://github.com/joomla/joomla-cms/pull/46047
  • [6.1] User Action Log Emails IP Address by @brianteeman in https://github.com/joomla/joomla-cms/pull/45991
  • [6.1] Remove useless empty () check # by @joomdonation in https://github.com/joomla/joomla-cms/pull/45039
  • [6.1] Add proof-of-work captcha by @SniperSister in https://github.com/joomla/joomla-cms/pull/46514
  • [6.1] Action Log notification mail translate ip_address in case collecting ips is disabled by @HLeithner in https://github.com/joomla/joomla-cms/pull/46511
  • [6.1] add composer scripts for cs check and add excludes to php-cs-fixer config by @LadySolveig in https://github.com/joomla/joomla-cms/pull/44498
  • [6.1] Update composer dependencies by @HLeithner in https://github.com/joomla/joomla-cms/pull/46565
  • [6.1] NPM audit fix security vulnerabilities and update other dependencies 2025-12-19 by @richard67 in https://github.com/joomla/joomla-cms/pull/46592
  • [6.1] Add "nocache" as version option to webasset manager by @HLeithner in https://github.com/joomla/joomla-cms/pull/46379
  • [6.1] Update deleted files and folders in script.php for the upcoming 6.1.0-alpha2 by @richard67 in https://github.com/joomla/joomla-cms/pull/46575
  • [6.1] delete the unnecessary file build xml by @tecpromotion in https://github.com/joomla/joomla-cms/pull/46611
  • [6.1] tinymce and sa11y updates by @brianteeman in https://github.com/joomla/joomla-cms/pull/46600
  • [6.1] make media action crop aspect ratio configurable by @hans2103 in https://github.com/joomla/joomla-cms/pull/46421
  • [6.1] Adding date filtering to popular articles module ( admin ) by @hiteshm0 in https://github.com/joomla/joomla-cms/pull/46605
  • [6.1] Fix log format configurations by @muhme in https://github.com/joomla/joomla-cms/pull/46422
  • [6.1] remove featured article menu item by @alikon in https://github.com/joomla/joomla-cms/pull/46225
  • [6.1] Allow to force or never force MFA for superusers by @zero-24 in https://github.com/joomla/joomla-cms/pull/46248
  • [6.1] UX feature: Filter by Author (Include/Exclude/Current User) option for Category List by @coolcat-creations in https://github.com/joomla/joomla-cms/pull/46539
  • [6.1] [CLI] enable or disable extension command by @alikon in https://github.com/joomla/joomla-cms/pull/43977
  • [6.1] Re-ordering of tabs and fields in frontend by @chmst in https://github.com/joomla/joomla-cms/pull/45081
  • [6.1] simplify class usage by @Denitz in https://github.com/joomla/joomla-cms/pull/41986
  • [6.1] Replace all Factory::getSession() usages by @Hackwar in https://github.com/joomla/joomla-cms/pull/45869
  • [6.1] Fix language usage in SiteMenu class to use the internal value by @bembelimen in https://github.com/joomla/joomla-cms/pull/46603
  • [6.1] Fix $language default parameter by @janschoenherr in https://github.com/joomla/joomla-cms/pull/44575
  • [6.1] Remove default empty string param in addControlField() by @Denitz in https://github.com/joomla/joomla-cms/pull/46381
  • [6.1] Subform Grid layout, an alternative for unresponsive Table layout by @Fedik in https://github.com/joomla/joomla-cms/pull/42347
  • [6.1] Update version in composer.json so they fit to the updates previously made with PR 46646 by @richard67 in https://github.com/joomla/joomla-cms/pull/46661
  • [6.1] Remove use of deprecated dispatcher from the plugin constructor by @heelc29 in https://github.com/joomla/joomla-cms/pull/46683
  • [6.1] Add email to authentication response object by @nordmograph in https://github.com/joomla/joomla-cms/pull/46691
  • [6.1] Fix SiteMenu class to use correct language by @Fedik in https://github.com/joomla/joomla-cms/pull/46710
  • [6.1] Update deleted files in script.php for the upcoming 6.1.0-alpha3 by @richard67 in https://github.com/joomla/joomla-cms/pull/46712
  • [6.1] fix webauthn attestation support by @heelc29 in https://github.com/joomla/joomla-cms/pull/45708
  • [6.1] Feature Module associations by @rdeutz in https://github.com/joomla/joomla-cms/pull/46671
  • [6.1] Refactor SiteApplication language detection by @joomdonation in https://github.com/joomla/joomla-cms/pull/46549
  • [6.1] Subform: add order-changed event by @Fedik in https://github.com/joomla/joomla-cms/pull/46093
  • [6.1] Add the possibility to show unpublished articles in mod_articles by @drmenzelit in https://github.com/joomla/joomla-cms/pull/45990
  • [6.1] Passwort reset request: fix legend by @chmst in https://github.com/joomla/joomla-cms/pull/46454
  • [6.1] Use AdminModel save for category saving by @bembelimen in https://github.com/joomla/joomla-cms/pull/46631
  • [6.1] Deprecate OPTGROUP handling in HTMLHelper select.options by @HLeithner in https://github.com/joomla/joomla-cms/pull/46737
  • [6.1] code cleanup by @janschoenherr in https://github.com/joomla/joomla-cms/pull/46770
  • [6.1] Same alias behavior for webservices by @alikon in https://github.com/joomla/joomla-cms/pull/46144
  • [6.1] Tinymcelang by @brianteeman in https://github.com/joomla/joomla-cms/pull/46777
  • [6.1] Versions for Modules by @rdeutz in https://github.com/joomla/joomla-cms/pull/46772
  • [6.1] Provide #__extensions.custom_data for components, menus, modules and template styles by @Denitz in https://github.com/joomla/joomla-cms/pull/46622
  • [6.1] Add fido.jwt to path for all CI jobs using the composer cache - fix failing CI 2nd try by @richard67 in https://github.com/joomla/joomla-cms/pull/46855
  • [6.1] Email templates: make tags case insensitive by @e4e5Ke2 in https://github.com/joomla/joomla-cms/pull/46787
  • [6.1] Menu item : add inline help button by @conseilgouz in https://github.com/joomla/joomla-cms/pull/46762
  • [6.1] CMSPlugin: use Lazy Object feature by @Fedik in https://github.com/joomla/joomla-cms/pull/45062
  • [6.1] Deploy_version by @brianteeman in https://github.com/joomla/joomla-cms/pull/46867
  • [6.1] Support class and additional attribute for optgroup by @HLeithner in https://github.com/joomla/joomla-cms/pull/46739
  • [6.1] Implementation of graphical workflow editor feature by @Dileepadari in https://github.com/joomla/joomla-cms/pull/46021
  • [6.1] Code cleanup (render modules in order of appearance) by @janschoenherr in https://github.com/joomla/joomla-cms/pull/46861
  • [6.1] TinyMCE add/edit/remove abbr element [a11y] by @brianteeman in https://github.com/joomla/joomla-cms/pull/46820
  • [6.1] Minor performance improvement for System - Language Filter plugin by @joomdonation in https://github.com/joomla/joomla-cms/pull/46812
  • [6.1] MailTemplate: Allow to read existing template data by @Fedik in https://github.com/joomla/joomla-cms/pull/46711
  • [6.1] Refactor CMSApplication getTemplate logic by @joomdonation in https://github.com/joomla/joomla-cms/pull/46551
  • [6.1] Reactor MVC FormController class by @joomdonation in https://github.com/joomla/joomla-cms/pull/46537
  • [6.1] Batch Copy & Move tags by @beni71 in https://github.com/joomla/joomla-cms/pull/46501
  • [6.1] Allow the module updater to automatically delete obsolete files by @Bakual in https://github.com/joomla/joomla-cms/pull/46474
  • [6.1] [webservices] Implement schema.org data integration by @alikon in https://github.com/joomla/joomla-cms/pull/46524
  • [6.1] UX Improvement Show language override status and quick-create missing overrides by @coolcat-creations in https://github.com/joomla/joomla-cms/pull/46559
  • [6.1] Add file types for media custom field plugin. by @sergeytolkachyov in https://github.com/joomla/joomla-cms/pull/45013
  • [6.1] Move fido file to it's own cache by @laoneo in https://github.com/joomla/joomla-cms/pull/46875
  • [6.1] Guide not docs by @brianteeman in https://github.com/joomla/joomla-cms/pull/46786
  • [6.1] Echo result of onAfterDisplay event by @janschoenherr in https://github.com/joomla/joomla-cms/pull/46771
  • [6.1] Lazyload all plugins except compat plugin by @HLeithner in https://github.com/joomla/joomla-cms/pull/46862
  • [6.1][webservices] add filter state to banners endpoint by @alikon in https://github.com/joomla/joomla-cms/pull/46656
  • [6.1] code style trim trailing spaces by @brianteeman in https://github.com/joomla/joomla-cms/pull/46877
  • [6.1] fix webauth phpstan issues by @heelc29 in https://github.com/joomla/joomla-cms/pull/46735
  • [6.1] change three links from docs to guide by @tecpromotion in https://github.com/joomla/joomla-cms/pull/46882
  • [6.1] Child templates extend language instead of override by @dgrammatiko in https://github.com/joomla/joomla-cms/pull/46353
  • [6.1] Complimentary to #46353 by @dgrammatiko in https://github.com/joomla/joomla-cms/pull/46755
  • [6.1] Add title attribute to links in actionlog messages by @chmst in https://github.com/joomla/joomla-cms/pull/46883
  • [6.1] Complete Action Log title attributes (Users & Extensions) by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/46884
  • [6.1] Add workflow stage filter to articles endpoint by @itsnewtjam in https://github.com/joomla/joomla-cms/pull/45978
  • [6.1] Update deleted files in script.php for the upcoming 6.1.0-beta1 by @richard67 in https://github.com/joomla/joomla-cms/pull/46890
  • [6.1] update script browserlist:update by @tecpromotion in https://github.com/joomla/joomla-cms/pull/46903
  • [6.1] Bugfix - Filteroptions Category List padding CSS by @coolcat-creations in https://github.com/joomla/joomla-cms/pull/47207
  • [6.1] Fix TinyMCE editor not respecting width and height settings by @RickR2H in https://github.com/joomla/joomla-cms/pull/46438
  • [6.1] Improve Multilanguage::getSiteHomePages() by @Denitz in https://github.com/joomla/joomla-cms/pull/41507
  • [6.1] fix failing joomla update (postgresql) by @heelc29 in https://github.com/joomla/joomla-cms/pull/47230
  • [6.1] Workflow Graph Translate "From Any" by @brianteeman in https://github.com/joomla/joomla-cms/pull/47234
  • [6.1] Workflow Graph shortcuts by @brianteeman in https://github.com/joomla/joomla-cms/pull/47233
  • [6.1] workflow graph clean joomla dialog by @heelc29 in https://github.com/joomla/joomla-cms/pull/47275
  • [6.1] New Media Fields use by @brianteeman in https://github.com/joomla/joomla-cms/pull/47279
  • [6.1] com_finder unused factory by @brianteeman in https://github.com/joomla/joomla-cms/pull/47280
  • [6.1] Update deleted files and folders in script.php for the upcoming 6.1.0-beta2 by @richard67 in https://github.com/joomla/joomla-cms/pull/47289
  • [6.1] - a11y - Contain page content by landmark by @hans2103 in https://github.com/joomla/joomla-cms/pull/45988
  • [6.1] workflows missing default stage by @brianteeman in https://github.com/joomla/joomla-cms/pull/47290
  • [6.1] Workflow Shortcuts by @brianteeman in https://github.com/joomla/joomla-cms/pull/47276
  • [6.1] Enhance translation handling in Workflow component by @Dileepadari in https://github.com/joomla/joomla-cms/pull/47299
  • [6.1] Update link by @brianteeman in https://github.com/joomla/joomla-cms/pull/47333
  • [6.1] Add update SQL script for PR #46438 to fix TinyMCE editor default width and height settings on core update by @richard67 in https://github.com/joomla/joomla-cms/pull/47326
  • [6.1] Fix none/codemirror editor width and height by @RickR2H in https://github.com/joomla/joomla-cms/pull/47305
  • [6.1] TinyMCE height and width strings by @brianteeman in https://github.com/joomla/joomla-cms/pull/47341
  • [6.1] Deprecate language strings by @brianteeman in https://github.com/joomla/joomla-cms/pull/47356
  • [6.1] NPM update indirect development dependency "immutable" to fix a high severity security vulnerability by @richard67 in https://github.com/joomla/joomla-cms/pull/47323
  • [6.1] Fix SQL error "Duplicate entry '14' for key '#__content_types.PRIMARY'" when updating to 6.1 by @richard67 in https://github.com/joomla/joomla-cms/pull/47361
  • [6.1] Fix toggling Editor window lost width, height by @Fedik in https://github.com/joomla/joomla-cms/pull/47363
  • [6.1] Migrate to Cypress.expose as Cypress.env is deprecated by @laoneo in https://github.com/joomla/joomla-cms/pull/46876
  • [6.1] Remove invalid second argument from LayoutFile::render() call by @joomdonation in https://github.com/joomla/joomla-cms/pull/47377
  • [6.1] Fix Filter Options not opening after Batch modal by @adarshdubey03 in https://github.com/joomla/joomla-cms/pull/47237
  • [6.1] What's new tour for Joomla 6.1 by @obuisard in https://github.com/joomla/joomla-cms/pull/47229
  • [6.1] Fix workflow graph strings and assets by @Vikash-Kumar-23 in https://github.com/joomla/joomla-cms/pull/47248
  • [6.1] Rename and improve update SQL scripts for the 6.1.0 what's new guided tour by @richard67 in https://github.com/joomla/joomla-cms/pull/47389
  • [6.1] NPM update indirect dependency "flatted" to fix a high severity security vulnerability by @richard67 in https://github.com/joomla/joomla-cms/pull/47407
  • [6.1] Fix fancy-select duplication while AJAX search by @Fedik in https://github.com/joomla/joomla-cms/pull/47426
  • [6.1] Correct doc block for document property by @laoneo in https://github.com/joomla/joomla-cms/pull/47450
  • [6.1] update phpstan-baseline.neon by @tecpromotion in https://github.com/joomla/joomla-cms/pull/47475
  • [6.1] Fix switching media type on field reload by @HLeithner in https://github.com/joomla/joomla-cms/pull/47468
  • [6.1] Fix: Correct possessive apostrophe 'user's' to 'users'' in stats plug… by @Api-cmd in https://github.com/joomla/joomla-cms/pull/47499
  • [6.1] Translation Update by @joomla-translation-bot in https://github.com/joomla/joomla-cms/pull/47537
  • [6.1] Translation Update by @joomla-translation-bot in https://github.com/joomla/joomla-cms/pull/47552
  • [6.1] Add dispatcher support to jooa11y plugin by @HLeithner in https://github.com/joomla/joomla-cms/pull/47579

:technologist: Test contributions

Thank you to all the testers who help us maintain high quality standards and deliver a robust product.

@465645 (1), @adarshdubey03 (2), @alikon (5), @Api-cmd (1), @basd82 (1), @bembelimen (2), @Bodge-IT (1), @brianteeman (17), @ceford (12), @chaitali-tekdi (3), @chmst (3), @ChrisHoefliger (1), @ChristineWk (2), @conseilgouz (1), @crimle (3), @crommie (1), @cyrez (1), @dautrich (4), @degobbis (1), @Denitz (1), @Dileepadari (3), @drankwiler (1), @drmenzelit (3), @Elfangor93 (1), @elh-ds (1), @exlemor (23), @Fedik (3), @gioacchino54 (2), @gug2 (1), @hamby (1), @hans2103 (3), @heelc29 (2), @HLeithner (5), @idefax (3), @imrohitkodam (1), @JeroenMoolenschot (1), @KishoriBKarale (1), @kkbiswal (1), @komalm (2), @Kostelano (2), @krishnagandhicode (4), @LadySolveig (3), @laoneo (2), @lemuelvdm (3), @manojLondhe (1), @mariantanase (2), @mortezahonar (2), @muhme (4), @nadjak77 (2), @obuisard (2), @paternax (1), @pranotiTechjoomla (1), @Quy (1), @Rajat-1804 (2), @Razzo1987 (4), @rbuelund (2), @rdeutz (2), @richard67 (1), @RickR2H (2), @rinka88 (2), @sergeytolkachyov (1), @Simran2525-eng (1), @SRV-KILLER09 (1), @tecpromotion (26), @ThomasFinnern (2), @TLWebdesign (3), @torstenhoppe (1), @VaishnaviSidral (3), @vijayholve (2), @Vineet7875 (1), @viocassel (2), @web-eau-net (1), @webgras (3), @webnet-assmann (2)

5.4.5 Breaking risk
Security fixes
  • Composer update phpseclib/phpseclib to 3.0.50 fixes one high‑severity security vulnerability
  • NPM indirect dependencies updated to fix eight additional security vulnerabilities
Full changelog

👀 Release information

🚀 Download information

[!NOTE]
Userfacing information about this Joomla! release can be found on the release page

🔥 Installation Packages

| New Joomla! Installations | SHA-256 Checksums |
|---------------------------|-------------------|
| ZIP Archive (.zip) | d873c2c0c753036089470551fa9fe958cb289f954afb66ded149a5cf4eaf97bc |
| GNU Zip Archive (.tar.gz) | ba9ffe164ecfd68c45e8e7b0fe57ee2f1ed3631dbdc6cd070c167ead460937d9 |
| Zstandard Archive (.tar.zst) | 3197e4eded5c4a7e1d1aa2090ab588b1384a8033890e8e18055041d3d1f90f32 |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

[!IMPORTANT]
Don't update directly from a version lower than 4.4 it is important that you first update to 4.4 and then update to 5.x

| Update from a previous version | SHA-256 Checksums |
|--------------------------------|-------------------|
| ZIP Archive (.zip) | 788c911c1a24c1846cc86065b0bec8f7055882a752f4852873d0d2cab794639e |
| GNU Zip Archive (.tar.gz) | 1ca406009ce5ca4818c0c435225d76a6f138a1e1d7208f9cc1c2b4685b717ca5 |
| Zstandard Archive (.tar.zst) | ce2e3fb9802b6e59a068e7ca4327c1462b21489804a1b73da7aa563ff995ab2f |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

🧹 What has been changed

  • [5.4] Fix regex pattern in ShowOnRule for custom fields by @LadySolveig in https://github.com/joomla/joomla-cms/pull/47474
  • [5.4] Update version in allowEdit method documentation by @brianteeman in https://github.com/joomla/joomla-cms/pull/47520
  • [5.4] Use the full path for $this in association template file by @laoneo in https://github.com/joomla/joomla-cms/pull/47523
  • [5.4] Fix double timezone conversion in Media Manager file dates by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/47433
  • [5.4] use logical top corner radius for RTL/LTR consistency by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/47448
  • [5.4] Fix rotate angle input resetting to 0 in media manager by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/47462
  • [5.4] onContentPrepare in mod_articles by @chmst in https://github.com/joomla/joomla-cms/pull/47467
  • [5.4] TinyMCE: Load non minified custom CSS when no minified version … by @adarshdubey03 in https://github.com/joomla/joomla-cms/pull/47478
  • [5.4] Fix required modal category field highlighting on validation error by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/47505
  • [5.4] Composer update phpseclib/phpseclib to 3.0.50 to fix one high severity security vulnerability by @richard67 in https://github.com/joomla/joomla-cms/pull/47529
  • [5.4] NPM update indirect dependencies to fix 8 security vulnerabilities by @richard67 in https://github.com/joomla/joomla-cms/pull/47530
  • [5.4] warn when duplicate subform fields are removed on save by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/47511
  • [5.4] Correct possessive apostrophe 'user's' to 'users'' by @tecpromotion in https://github.com/joomla/joomla-cms/pull/47540
  • [5.4] Prevent recursions in loadposition/loadmodule plugin by @Hackwar in https://github.com/joomla/joomla-cms/pull/47208
  • [5.4] NPM update indirect development dependency lodash to 4.18.1 by @richard67 in https://github.com/joomla/joomla-cms/pull/47534

Full Changelog: https://github.com/joomla/joomla-cms/compare/5.4.4...5.4.5

:technologist: Test contributions

Thank you to all the testers who help us maintain high quality standards and deliver a robust product.

@adarshdubey03 (3), @brianteeman (7), @chmst (1), @ChristineWk (1), @exlemor (7), @krishnagandhicode (3), @LadySolveig (1), @muhme (1), @ramalama (1), @SRV-KILLER09 (1), @tecpromotion (1), @ThomasFinnern (2)

6.0.4 Security relevant
Security fixes
  • NPM development dependencies updated to fix nine security vulnerabilities.
Full changelog

👀 Release information

🚀 Download information

[!NOTE]
User-facing information about this Joomla! release can be found on the release page

🔥 Installation Packages

| New Joomla! Installations | SHA-256 Checksums |
|---------------------------|-------------------|
| ZIP Archive (.zip) | 3f5d8ef731fa068c5f08518892c5751432c48d1ff307f01c746db7fd8bc25b8a |
| GNU Zip Archive (.tar.gz) | 90b233ab1de8cfaaa223008ca7d109da843e12333610714366db67efe390d4ba |
| Zstandard Archive (.tar.zst) | 82e370bdcb2dc964f2a52107396e7c006886158d710b2f90e8cc6a7c14a30371 |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

[!IMPORTANT]
Don't update directly from a version lower than 5.4 it is important that you first update to 5.4 and then update to 6.x

| Update from a previous version | SHA-256 Checksums |
|--------------------------------|-------------------|
| ZIP Archive (.zip) | 4bad4bc3a923796bf83e56a6ab4d01d793a996b0ae65ccbf911201026a241482 |
| GNU Zip Archive (.tar.gz) | 5f279b288f973a8cf46cc790edcf9ddc934d3283739f1be03ccfa05e573167ca |
| Zstandard Archive (.tar.zst) | 3c048eef997042e5db7b12ba8705071dcfda5ef7f23fc9491f99ab904667c8df |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

🧹 What has been changed

  • [6.0] Reduce exclusions in phpstan-baseline.neon by @richard67 in https://github.com/joomla/joomla-cms/pull/46858
  • [6.0] Fix sidebar admin flashing icons (alternative to #47268) by @LadySolveig in https://github.com/joomla/joomla-cms/pull/47271
  • [6.0] Update deleted files and folders in script.php for the upcoming 6.0.4 release (if any) by @richard67 in https://github.com/joomla/joomla-cms/pull/47259
  • [6.0] Update browserlist 2026-03-07 by @richard67 in https://github.com/joomla/joomla-cms/pull/47329
  • [6.0] NPM update development dependencies to fix 9 security vulnerabilities by @richard67 in https://github.com/joomla/joomla-cms/pull/47322
  • [6.0] Event Deprecation code comments by @brianteeman in https://github.com/joomla/joomla-cms/pull/47337
  • [6.0] HTMLHelper deprecation message by @brianteeman in https://github.com/joomla/joomla-cms/pull/47345
  • [6.0] Toolbar Deprecations by @brianteeman in https://github.com/joomla/joomla-cms/pull/47346
  • [6.0] route deprecation by @brianteeman in https://github.com/joomla/joomla-cms/pull/47347
  • [6.0] codemirror language deprecations by @brianteeman in https://github.com/joomla/joomla-cms/pull/47398
  • [6.0] Fix PHP warnings when opening Page Break modal by @sathwikre in https://github.com/joomla/joomla-cms/pull/46908
  • [6.0] GET content/articles render the placeholder only by @alikon in https://github.com/joomla/joomla-cms/pull/45357
  • [6.0] partly revert strings in pr #47398 by @tecpromotion in https://github.com/joomla/joomla-cms/pull/47439

Full Changelog: https://github.com/joomla/joomla-cms/compare/6.0.3...6.0.4

:technologist: Test contributions

Thank you to all the testers who help us maintain high quality standards and deliver a robust product.

@basn63, @brianteeman, @ChristineWk, @dautrich, @exlemor, @gioacchino54, @krishnagandhicode, @MacJoom, @mariantanase, @muhme, @OctavianC, @Razzo1987, @richard67, @tecpromotion, @ThomasFinnern

5.4.4 Security relevant
Security fixes
  • NPM update development dependencies fixes 9 security vulnerabilities
  • NPM indirect dependency "flatted" updated to fix a high‑severity security vulnerability
Full changelog

👀 Release information

🚀 Download information

[!NOTE]
Userfacing information about this Joomla! release can be found on the release page

🔥 Installation Packages

| New Joomla! Installations | SHA-256 Checksums |
|---------------------------|-------------------|
| ZIP Archive (.zip) | 7d494b51a8e1b06ac43e504c660144ef652efed451d84c67cc75758077205027 |
| GNU Zip Archive (.tar.gz) | 49face85861388f5b0a2bb51c033d473f0c73657856d0d7ff6c94039d88fa6a6 |
| Zstandard Archive (.tar.zst) | 937b42ef6323bd4e0f2bee4c59ccb9e608931f06f2579b23d68c933e8ae2bd41 |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

[!IMPORTANT]
Don't update directly from a version lower than 4.4 it is important that you first update to 4.4 and then update to 5.x

| Update from a previous version | SHA-256 Checksums |
|--------------------------------|-------------------|
| ZIP Archive (.zip) | 02a28efff01c71961c48a6e77e70a865f238d0f6172924163e29b30058f9cd18 |
| GNU Zip Archive (.tar.gz) | 6f33e2ab118ecfc54077554dbd36f8db657a3e0b9db858c0cc2647d463491136 |
| Zstandard Archive (.tar.zst) | bfe01e7d77f9af23a90b5ee44a39a688d3692f5771c8e013a0f538e65638740d |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

💆 New Contributors

  • @soumya-grandhi made their first contribution in https://github.com/joomla/joomla-cms/pull/47235

🧹 What has been changed

  • [5.4] Deploy_version by @brianteeman in https://github.com/joomla/joomla-cms/pull/46866
  • [5.4] Reduce exclusions in phpstan-baseline.neon by @richard67 in https://github.com/joomla/joomla-cms/pull/46857
  • [5.4] Fix highlighting issue in frontend calendar by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/46811
  • [5.4] update script browserlist:update by @tecpromotion in https://github.com/joomla/joomla-cms/pull/46905
  • [5.4] Fix TinyMCE init to work in Firefox Developer edition by @Fedik in https://github.com/joomla/joomla-cms/pull/46889
  • [5.4] Content data-transitions attribute is inherited from the first allowed item by @Denitz in https://github.com/joomla/joomla-cms/pull/46719
  • [5.4] Update PR to link issue automatically by @bembelimen in https://github.com/joomla/joomla-cms/pull/46835
  • [5.4] RTL Calendar fixes by @brianteeman in https://github.com/joomla/joomla-cms/pull/46910
  • [5.4] Enhance PR template with AI policy by @bembelimen in https://github.com/joomla/joomla-cms/pull/46917
  • [5.4] Update browserlist 2026-02-17 by @richard67 in https://github.com/joomla/joomla-cms/pull/46906
  • [5.4] Add publishing checks to banner item retrieval by @nielsnuebel in https://github.com/joomla/joomla-cms/pull/46881
  • [5.4] Expose filename on autoupdate prepare step by @SniperSister in https://github.com/joomla/joomla-cms/pull/46929
  • [5.4] README.md – Remove duplicate empty line by @soumya-grandhi in https://github.com/joomla/joomla-cms/pull/47235
  • [5.4] Choices selected checkmark background by @brianteeman in https://github.com/joomla/joomla-cms/pull/47226
  • [5.4] Add workflow to mark conflicting PRs by @Hackwar in https://github.com/joomla/joomla-cms/pull/47253
  • [5.4] Maintenance Task: Disable blank issue template by @rdeutz in https://github.com/joomla/joomla-cms/pull/47265
  • [5.4] Fix comment typo in merge-conflicts.yml by @tecpromotion in https://github.com/joomla/joomla-cms/pull/47286
  • [5.4] Update deleted files and folders in script.php for the upcoming 5.4.4 release by @richard67 in https://github.com/joomla/joomla-cms/pull/47258
  • [5.4] add new versions in CONTRIBUTING.md by @tecpromotion in https://github.com/joomla/joomla-cms/pull/47293
  • [5.4] Fix sidebar admin flashing icons by @LadySolveig in https://github.com/joomla/joomla-cms/pull/47268
  • [5.4] mod_tags_popular: Fix duplicate article count caused by many-to-many … by @adarshdubey03 in https://github.com/joomla/joomla-cms/pull/47218
  • [5.4] mod_articles conditional readmore by @brianteeman in https://github.com/joomla/joomla-cms/pull/47263
  • [5.4] Choices select padding by @brianteeman in https://github.com/joomla/joomla-cms/pull/47244
  • [5.4] NPM update development dependencies to fix 9 security vulnerabilities by @richard67 in https://github.com/joomla/joomla-cms/pull/47321
  • [5.4] Fix scheduled tasks stopping when one task gets stuck by @joomdonation in https://github.com/joomla/joomla-cms/pull/47217
  • [5.4] Check if schema path exists in manifest by @laoneo in https://github.com/joomla/joomla-cms/pull/47336
  • [5.4] Reset selector filters when clearing SearchTools filters by @adarshdubey03 in https://github.com/joomla/joomla-cms/pull/47352
  • [5.4] fix undefined array key warnings in workflow permissionns by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/46933
  • [5.4] fix missing joomla version in nightly notification by @heelc29 in https://github.com/joomla/joomla-cms/pull/47274
  • [5.4] Use "DRONE_BRANCH" instead of "MINORVERSION" variable for nightly build commands by @richard67 in https://github.com/joomla/joomla-cms/pull/47390
  • [5.4] Another attempt to fix the nightly build notifications - use double backslash to escape double quotes by @richard67 in https://github.com/joomla/joomla-cms/pull/47397
  • [5.4] Another attempt to fix the nightly build notifications - back to single quotes and use string concatenation by @richard67 in https://github.com/joomla/joomla-cms/pull/47399
  • [5.4] Fix MailHelper::isEmailAddress() throwing exception for forbidden characters by @joomdonation in https://github.com/joomla/joomla-cms/pull/47376
  • [5.4] Hide Versions button when com_contenthistory is disabled by @adarshdubey03 in https://github.com/joomla/joomla-cms/pull/47388
  • [5.4] NPM update indirect dependency "flatted" to fix a high severity security vulnerability by @richard67 in https://github.com/joomla/joomla-cms/pull/47406
  • [5.4] Fix relative asset paths on Cassiopeia error page by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/47251
  • [5.4] Maintenance Task: Change feature request issue template by @rdeutz in https://github.com/joomla/joomla-cms/pull/47411
  • [5.4] update GitHub actions (drops node.js 20) by @heelc29 in https://github.com/joomla/joomla-cms/pull/47422
  • [5.4] Disable media edit action when no media action plugins are enabled by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/47427

Full Changelog: https://github.com/joomla/joomla-cms/compare/5.4.3...5.4.4

:technologist: Test Contributions

Thank you to all the testers who help us maintain high quality standards and deliver a robust product.

In this release they were @465645 (1), @adarshdubey03 (1), @aishwarya-kalshetti (1), @alikon (2), @beni71 (1), @Bodge-IT (1), @boldc (1),
@brianteeman (12), @chmst (1), @coolcat-creations (1), @dautrich (4), @exlemor (9), @gioacchino54 (1),
@imrohitkodam (1), @krishnagandhicode (5), @LadySolveig (1), @mortezahonar (1), @muhme (4), @OctavianC (1),
@richard67 (2), @superknutsel (1), @tecpromotion (2), @ThomasFinnern (5) and @TLWebdesign (1).

6.0.3 Breaking risk
⚠ Upgrade required
  • Do not update directly from a version lower than Joomla 5.4; first upgrade to 5.4 then to 6.x.
Full changelog

👀 Release information

🚀 Download information

[!NOTE]
User-facing information about this Joomla! release can be found on the release page

🔥 Installation Packages

| New Joomla! Installations | SHA-256 Checksums |
|---------------------------|-------------------|
| ZIP Archive (.zip) | 30973efde5ccb440a6fea96e30eb069988f69ae687daf636f982867bbd2a789a |
| GNU Zip Archive (.tar.gz) | 21fdc6b9948f61b289a1854bf4a789b8ae84a6c213c3c7cbd8ffd9bcc7f5e4ea |
| Zstandard Archive (.tar.zst) | 70d32fc5e4ac1566cc48a71a252c534c8a47d938e1a9504152e175cce2ddbf59 |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

[!IMPORTANT]
Don't update directly from a version lower than 5.4 it is important that you first update to 5.4 and then update to 6.x

| Update from a previous version | SHA-256 Checksums |
|--------------------------------|-------------------|
| ZIP Archive (.zip) | 119c2aaca78ca2025b2601c2fef3e82ee9726bba72a929c60ec334b2da303f64 |
| GNU Zip Archive (.tar.gz) | cf339c1aabfa2ec3580ed4ba7a40b30a035b08cfb0bbf718222c000def8fd40c |
| Zstandard Archive (.tar.zst) | 043749dd4a7cd81c77ec17ffbd609a97b55c2f0fda3c89df5ec92223b69c95c6 |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

🧹 What has been changed

  • [6.0] Update framework HTTP package by @SniperSister in https://github.com/joomla/joomla-cms/pull/46639
  • [6.0] Broken articles table in backend - Add missing quotation mark by @drmenzelit in https://github.com/joomla/joomla-cms/pull/46635
  • [6.0] Composer update paragonie/sodium_compat to v1.24.0 to fix composer audit warnings by @richard67 in https://github.com/joomla/joomla-cms/pull/46660
  • [6.0] NPM audit fix security vulnerabilities in development dependencies 2026-01-10 by @richard67 in https://github.com/joomla/joomla-cms/pull/46663
  • [6.0] fix HTML helper grid.id with custom form selector by @heelc29 in https://github.com/joomla/joomla-cms/pull/46672
  • [6.0] Language cache error handling improvement by @joomdonation in https://github.com/joomla/joomla-cms/pull/46545
  • [6.0] Remove use of deprecated dispatcher from the plugin constructor by @heelc29 in https://github.com/joomla/joomla-cms/pull/46682
  • [6.0] NPM audit fix low severity security vulnerability by updating diff from 8.0.2 to 8.0.3 by @richard67 in https://github.com/joomla/joomla-cms/pull/46713
  • [6.0] Composer update algo26-matthias/idna-convert to v4.2.1 (87bfcab) by @heelc29 in https://github.com/joomla/joomla-cms/pull/46725
  • [6.0] Fix PHP 8.5 null access on array deprecation warning by @HLeithner in https://github.com/joomla/joomla-cms/pull/46733
  • [6.0] Prevent error if ListView does not have filter form by @joomdonation in https://github.com/joomla/joomla-cms/pull/46689
  • [6.0] NPM audit fix one moderate severity security vulnerability by @richard67 in https://github.com/joomla/joomla-cms/pull/46759
  • [6.0] Adapter should have in install routine always the current manifest by @laoneo in https://github.com/joomla/joomla-cms/pull/46760
  • [6.0] Cassiopeia extended font size validation by @brianteeman in https://github.com/joomla/joomla-cms/pull/46781
  • [6.0] Pass default User-Agent header for for http requests by @joomdonation in https://github.com/joomla/joomla-cms/pull/46553
  • [6.0] NPM update indirect development dependencies to fix 19 security vulnerabilities by @richard67 in https://github.com/joomla/joomla-cms/pull/46826
  • [6.0] Multilingual: Fix language passed via lang variable is ignored by @joomdonation in https://github.com/joomla/joomla-cms/pull/46810
  • [6.0] Update deleted files and folders in script.php for the upcoming 6.0.3 release by @richard67 in https://github.com/joomla/joomla-cms/pull/46831
  • [6.0] Composer update 3 development dependencies to fix audit warnings 2026-02-03 by @richard67 in https://github.com/joomla/joomla-cms/pull/46822
  • [6.0] correct URL for non-admin users with the email template: Content: New Article Submitted by @alikon in https://github.com/joomla/joomla-cms/pull/46519

Full Changelog: https://github.com/joomla/joomla-cms/compare/6.0.2...6.0.3

:technologist: Test contributions

Thank you to all the testers who help us maintain high quality standards and deliver a robust product.

@brianteeman, @ceford, @ChrisHoefliger, @ChristineWk, @cyrez, @dautrich, @degobbis, @exlemor, @Fedik, @hamby, @heelc29, @kkbiswal, @Kostelano, @krishnagandhicode, @mariantanase, @muhme, @PranavAgarkar07, @rbuelund, @tecpromotion, @vishalchincholi1

5.4.3 Breaking risk
⚠ Upgrade required
  • Do not update directly from a version lower than 4.4; first upgrade to 4.4 then proceed to 5.x.
Full changelog

👀 Release information

🚀 Download information

[!NOTE]
Userfacing information about this Joomla! release can be found on the release page

🔥 Installation Packages

| New Joomla! Installations | SHA-256 Checksums |
|---------------------------|-------------------|
| ZIP Archive (.zip) | addd9d6142f9127c4c2ad63708e71ef8b2805906a892fe47789c7fd5d33c5cfb |
| GNU Zip Archive (.tar.gz) | c280a6a76700b3adc11af60a19eee40e93374e2d39980899af9aad297cf2c9a5 |
| Zstandard Archive (.tar.zst) | f77197437535a9bd2844901b9ba454dae485cc0c016a805fcc71e945f567b46a |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

[!IMPORTANT]
Don't update directly from a version lower than 4.4 it is important that you first update to 4.4 and then update to 5.x

| Update from a previous version | SHA-256 Checksums |
|--------------------------------|-------------------|
| ZIP Archive (.zip) | b7f69c28d5d37bf09703bcfd50522e360adad5335be86bebf1f86a6dc5d0f9e0 |
| GNU Zip Archive (.tar.gz) | 0b231940685dde15aa2f6fb0d93a03c9144a2ebe1b20fa956e585aeebb60df2b |
| Zstandard Archive (.tar.zst) | 94792a66668a7d27f4d4ef98b217f25bba7c90551d51553bb7a994ac210367be |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

💆 New Contributors

  • @henrikdalgaard made their first contribution in https://github.com/joomla/joomla-cms/pull/46569
  • @Shauryan0207 made their first contribution in https://github.com/joomla/joomla-cms/pull/46608
  • @sathwikre made their first contribution in https://github.com/joomla/joomla-cms/pull/46765
  • @krishnagandhicode made their first contribution in https://github.com/joomla/joomla-cms/pull/46833

🧹 What has been changed

  • [5.4] Comment Typo by @brianteeman in https://github.com/joomla/joomla-cms/pull/46613
  • [5.4] Warning in Tags link without Itemid by @Denitz in https://github.com/joomla/joomla-cms/pull/46588
  • [5.4] Skip anchor references in css versioning build script by @LadySolveig in https://github.com/joomla/joomla-cms/pull/46609
  • [5.4] Fix: mod_breadcrumbs duplicates Home link in multilanguage by @stefanoel in https://github.com/joomla/joomla-cms/pull/46581
  • [5.4] Hide help on admin menu by @brianteeman in https://github.com/joomla/joomla-cms/pull/46620
  • [5.4] Update framework HTTP package by @SniperSister in https://github.com/joomla/joomla-cms/pull/46638
  • [5.4] Accept user input in image class. by @chmst in https://github.com/joomla/joomla-cms/pull/46619
  • [5.4] Fix CLI installation exit code when PHP version requirement not met by @Razzo1987 in https://github.com/joomla/joomla-cms/pull/46625
  • [5.4] Add legacy label to mod_articles_archived by @drmenzelit in https://github.com/joomla/joomla-cms/pull/46626
  • [5.4] Fix 500 error in Smart Search with specific search query by @Denitz in https://github.com/joomla/joomla-cms/pull/46586
  • [5.4] Tightened regex searching for menu items to prevent duplicate edit link icons #46567 by @henrikdalgaard in https://github.com/joomla/joomla-cms/pull/46569
  • [5.4] Update type=UserGroupList in xml to align all lowercase type for usergrouplist by @TLWebdesign in https://github.com/joomla/joomla-cms/pull/46650
  • [5.4] Fix: Parent menu items missing when creating menu item via 'save to menu' by @hiteshm0 in https://github.com/joomla/joomla-cms/pull/46621
  • [5.4] Composer update paragonie/sodium_compat to v1.24.0 to fix composer audit warnings by @richard67 in https://github.com/joomla/joomla-cms/pull/46659
  • [5.4] NPM audit fix security vulnerabilities in development dependencies 2026-01-10 by @richard67 in https://github.com/joomla/joomla-cms/pull/46662
  • [5.4] Comment typo by @heelc29 in https://github.com/joomla/joomla-cms/pull/46673
  • [5.4] Remove 'layouts' folder and add presets by @brianteeman in https://github.com/joomla/joomla-cms/pull/46677
  • [5.4] Fix: Parent menu items missing when creating menu item via 'save to menu' v2 by @heelc29 in https://github.com/joomla/joomla-cms/pull/46681
  • [5.4] Fix OptionsRule validation to support groupedlist fields by @Shauryan0207 in https://github.com/joomla/joomla-cms/pull/46608
  • [5.4] fix case mod_articles manifest by @heelc29 in https://github.com/joomla/joomla-cms/pull/46674
  • [5.4] Revert Mailer improvements by @TLWebdesign in https://github.com/joomla/joomla-cms/pull/46693
  • [5.4] Fix metis-menu-error when clicking outside the dropdown by @chmst in https://github.com/joomla/joomla-cms/pull/46669
  • [5.4] Composer update algo26-matthias/idna-convert to v3.2.1 by @heelc29 in https://github.com/joomla/joomla-cms/pull/46724
  • [5.4] Archive not found error message by @brianteeman in https://github.com/joomla/joomla-cms/pull/46726
  • [5.4] - Prepend root url to schema images by @travisrisner in https://github.com/joomla/joomla-cms/pull/46306
  • [5.4] Extension variable in AssociationExtensionHelper is string by @laoneo in https://github.com/joomla/joomla-cms/pull/46741
  • [5.4] Clean cache for merged PR by @rdeutz in https://github.com/joomla/joomla-cms/pull/46684
  • [5.4][webservices] GET users/levels/id with non-existing ID by @alikon in https://github.com/joomla/joomla-cms/pull/46742
  • [5.4][PHP8.5] Using null as the key parameter for array_key_exists() is deprecated by @heelc29 in https://github.com/joomla/joomla-cms/pull/46736
  • [5.4] Outline selected rows in debug Profile timeline by @Denitz in https://github.com/joomla/joomla-cms/pull/46623
  • [5.4] mod_articles image by @brianteeman in https://github.com/joomla/joomla-cms/pull/46598
  • [5.4] Fix btn in alert messages by @bembelimen in https://github.com/joomla/joomla-cms/pull/46752
  • [5.4] com_templates zip archive by @brianteeman in https://github.com/joomla/joomla-cms/pull/46716
  • [5.4] NPM audit fix one low and one moderate severity security vulnerability by @richard67 in https://github.com/joomla/joomla-cms/pull/46758
  • [5.4] Allow PATCH /api/users/id without the need to specify 'groups' in the payload by @OctavianC in https://github.com/joomla/joomla-cms/pull/46750
  • [5.4] Add integration test for checking extensions updates by @alikon in https://github.com/joomla/joomla-cms/pull/46754
  • [5.4] Fix fonts URL by @dgrammatiko in https://github.com/joomla/joomla-cms/pull/46757
  • [5.4] Fix undefined array key "language" in sef plugin by @richard67 in https://github.com/joomla/joomla-cms/pull/45959
  • [5.4] Fix WebAssetRegistry to work with redefined administrator folder by @Fedik in https://github.com/joomla/joomla-cms/pull/44980
  • [5.4] Mysql installation Error Message by @brianteeman in https://github.com/joomla/joomla-cms/pull/46794
  • [5.4][cli] untranslated text by @alikon in https://github.com/joomla/joomla-cms/pull/46753
  • update PR-PULL_REQUEST_TEMPLATE by @max123kl in https://github.com/joomla/joomla-cms/pull/46803
  • [5.4] Allow PATCH /api/users/{super-user-id} by @OctavianC in https://github.com/joomla/joomla-cms/pull/46768
  • [5.4] Fix missing names quotes and wrong casing of column alias in libraries/src/Table/Nested.php by @richard67 in https://github.com/joomla/joomla-cms/pull/45848
  • [5.4]Joomla.form.field xml code style by @brianteeman in https://github.com/joomla/joomla-cms/pull/46809
  • [5.4] Exclude Symfony HTTP client test folders from release packages by @sathwikre in https://github.com/joomla/joomla-cms/pull/46765
  • [5.4] Composer update 3 development dependencies to fix audit warnings 2026-02-03 by @richard67 in https://github.com/joomla/joomla-cms/pull/46821
  • [5.4] NPM update indirect development dependencies to fix 19 security vulnerabilities by @richard67 in https://github.com/joomla/joomla-cms/pull/46825
  • [5.4] add unit tests for form rules by @heelc29 in https://github.com/joomla/joomla-cms/pull/46723
  • [5.4] Fix removing the installation folder on Windows by @HLeithner in https://github.com/joomla/joomla-cms/pull/46584
  • [5.4] Update deleted files and folders in script.php for the upcoming 5.4.3 release by @richard67 in https://github.com/joomla/joomla-cms/pull/46830
  • [5.4] Checkin with default value in task by @laoneo in https://github.com/joomla/joomla-cms/pull/46694
  • [5.4] Fix duplicate getLayoutData execution in mod_tags_popular by @sathwikre in https://github.com/joomla/joomla-cms/pull/46827
  • [5.4] Fix null user check in ActionLogPlugin to prevent PHP warnings by @Shauryan0207 in https://github.com/joomla/joomla-cms/pull/46599
  • [5.4] Check if page title element exists in table column script by @laoneo in https://github.com/joomla/joomla-cms/pull/46776
  • [5.4] Fix crash in Calendar field with invalid date format by @krishnagandhicode in https://github.com/joomla/joomla-cms/pull/46833
  • [5.4] Revert PR #46080 "[5.4] [webservices] Create a user access level via POST" by @richard67 in https://github.com/joomla/joomla-cms/pull/46846

Full Changelog: https://github.com/joomla/joomla-cms/compare/5.4.2...5.4.3

:technologist: Test contributions

Thank you to all the testers who help us maintain high quality standards and deliver a robust product.

@465645 (4), @aishwarya-kalshetti (1), @alikon (6), @angieradtke (1), @bembelimen (1), @brianteeman (14), @ceford (5), @chmst (2), @ChrisHoefliger (1), @ChristineWk (4), @coolcat-creations (1), @crimle (1), @dautrich (1), @Denitz (1), @drmenzelit (1), @exlemor (18), @Fedik (3), @gioacchino54 (2), @heelc29 (2), @krishnagandhicode (5), @mariantanase (1), @mckillo (1), @Megharaj170804 (1), @mothershedc (1), @muhme (10), @OctavianC (1), @ompatwa000-svg (1), @PixedBo (1), @PranavAgarkar07 (2), @Razzo1987 (2), @rbuelund (2), @richard67 (6), @rutuja123242 (1), @samuelagus (1), @sandewt (1), @tecpromotion (7), @ThomasFinnern (2), @TLWebdesign (1)

6.0.2 Breaking risk
⚠ Upgrade required
  • Do not update directly from versions lower than Joomla 5.4; first upgrade to 5.4 then proceed to 6.x
  • Known issue: Mailer setSender() does not work – see https://manual.joomla.org/migrations/54-60/known-issues/6.0.2/
Security fixes
  • NPM audit fix resolves security vulnerabilities in indirect development dependencies (2025‑11‑26)
  • NPM audit fix resolves security vulnerabilities in indirect development dependencies (2025‑12‑13)
  • NPM audit fix resolves security vulnerabilities in development dependencies (2025‑12‑19)
Notable features
  • Cassiopeia Extended uses hover color for btn‑primary
  • Language keys of Cassiopeia Extended template translated in frontend
Full changelog

👀 Release information

🚀 Download information

[!NOTE]
User-facing information about this Joomla! release can be found on the release page

🔥 Installation Packages

| New Joomla! Installations | SHA-256 Checksums |
|---------------------------|-------------------|
| ZIP Archive (.zip) | 1ed141236a86302f4c979cd68833b5f09890dcb16a6ae09f15091905e2b8cb8a |
| GNU Zip Archive (.tar.gz) | bf0de78195611f515d31989b3c41e79784ed74d09b05abec46462cd691cc7874 |
| Zstandard Archive (.tar.zst) | a2147e1279c0ee724d7a5f825f5af3c9a4f36300abaccd3e90019fec61398d8d |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

[!IMPORTANT]
Don't update directly from a version lower than 5.4 it is important that you first update to 5.4 and then update to 6.x

| Update from a previous version | SHA-256 Checksums |
|--------------------------------|-------------------|
| ZIP Archive (.zip) | 9e434658d588253a911428dfa4695d7505f4ce04a9de5444d1a5ec18438b1ea0 |
| GNU Zip Archive (.tar.gz) | e9bb21099a249e22669fa25c341d020ba430ebf92435918d3d2eab6af2bb3323 |
| Zstandard Archive (.tar.zst) | 522d024dac8e874f60dbc43e55351b4eb6fae7a6fdaa5404d59fcf7eb305a8df |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

🧹 What has been changed

  • [6.0] NPM audit fix security vulnerabilities in indirect development dependencies 2025-11-26 by @richard67 in https://github.com/joomla/joomla-cms/pull/46503
  • [6.0] Fix menu toggle startlevel handling by @LadySolveig in https://github.com/joomla/joomla-cms/pull/46484
  • [6.0] Fix deprecated message in messages - my settings by @chmst in https://github.com/joomla/joomla-cms/pull/46475
  • [6.0] Fix emailToPunycode() throws "Prohibited input U+0000005C" by @janschoenherr in https://github.com/joomla/joomla-cms/pull/46450
  • [6.0] Cassiopeia Extended - Use hover color for btn-primary by @drmenzelit in https://github.com/joomla/joomla-cms/pull/46279
  • [6.0] language keys of Cassiopeia Extended template (in frontend) translated by @alikon in https://github.com/joomla/joomla-cms/pull/46518
  • [6.0] Prevent error when cache of language file broken by @joomdonation in https://github.com/joomla/joomla-cms/pull/46541
  • [6.0] Fix tinyMCE dark mode by @dgrammatiko in https://github.com/joomla/joomla-cms/pull/46543
  • [6.0] NPM audit fix security vulnerabilities in indirect development dependencies 2025-12-13 by @richard67 in https://github.com/joomla/joomla-cms/pull/46572
  • [6.0] Fix deep submenu display by @bembelimen in https://github.com/joomla/joomla-cms/pull/46550
  • [6.0] NPM audit fix security vulnerabilities in development dependencies 2025-12-19 by @richard67 in https://github.com/joomla/joomla-cms/pull/46591

:technologist: Test contributions

Thank you to all the testers who help us maintain high quality standards and deliver a robust product:

@ahotzler, @alikon, @bembelimen, @brianteeman, @chmst, @ChristineWk, @CMS-Manufaktur, @dautrich, @exlemor, @Kostelano, @michaelmaass, @muhme, @tecpromotion, @woluweb

Full Changelog: https://github.com/joomla/joomla-cms/compare/6.0.1...6.0.2

⚠️ Known Issues

Update (16 January 2026): Known issue “Mailer setSender() does not work”. For details and a workaround, see: https://manual.joomla.org/migrations/54-60/known-issues/6.0.2/

5.4.2 Security relevant
⚠ Upgrade required
  • Do not update directly from a version lower than 4.4; first upgrade to 4.4 then to 5.x.
Security fixes
  • NPM audit fix security vulnerabilities in indirect development dependencies (2025-11-26)
  • NPM audit fix security vulnerabilities in indirect development dependencies (2025-12-13)
  • NPM audit fix security vulnerabilities in development dependencies (2025-12-19)
Full changelog

👀 Release information

🚀 Download information

[!NOTE]
Userfacing information about this Joomla! release can be found on the release page

🔥 Installation Packages

| New Joomla! Installations | SHA-256 Checksums |
|---------------------------|-------------------|
| ZIP Archive (.zip) | ded3e337649f5bc922e27c458521caa95844a2188cb961662868126d289a6108 |
| GNU Zip Archive (.tar.gz) | d1d2973ae7e3548dd81636f8db2ffd77874a2a3aeaca7514094fbb29db246868 |
| Zstandard Archive (.tar.zst) | 03acc9d704011d5d4b89a3926f6dc6f1532b6ffd532df909cba54edc80eb36f0 |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

[!IMPORTANT]
Don't update directly from a version lower than 4.4 it is important that you first update to 4.4 and then update to 5.x

| Update from a previous version | SHA-256 Checksums |
|--------------------------------|-------------------|
| ZIP Archive (.zip) | dcd6fe91361220cb3dbcbf2c3af23c57c3b88c5a80695427fe7afb831307dffb |
| GNU Zip Archive (.tar.gz) | bcd68bfe306e00fc87a470cc61f98650ce1795443ae93105cf2cf7e370f18a83 |
| Zstandard Archive (.tar.zst) | 89c55feef4c705726f23313197c55f1198667bd2a72293e0ea924de4c3df74c2 |

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

💆 New Contributors

  • @ThomasFinnern made their first contribution in https://github.com/joomla/joomla-cms/pull/46462
  • @filipores made their first contribution in https://github.com/joomla/joomla-cms/pull/44437
  • @Technicalleigh made their first contribution in https://github.com/joomla/joomla-cms/pull/45592
  • @aniket190705 made their first contribution in https://github.com/joomla/joomla-cms/pull/46529

🧹 What has been changed

  • [5.4] Docs: Add a PR targeting section to the README by @LadySolveig in https://github.com/joomla/joomla-cms/pull/46471
  • [5.4] Fix static getTemplate call in mail template by @bembelimen in https://github.com/joomla/joomla-cms/pull/46448
  • [5.4] php 8.4 fputcsv by @brianteeman in https://github.com/joomla/joomla-cms/pull/46423
  • [5.4] php 8.5 version check by @brianteeman in https://github.com/joomla/joomla-cms/pull/46480
  • [5.4]remove last uses of jtext by @brianteeman in https://github.com/joomla/joomla-cms/pull/46473
  • [5.4] [webservices] Fix API config component route: Component with numbers in name … 404 by @ThomasFinnern in https://github.com/joomla/joomla-cms/pull/46462
  • [5.4] Fix for envelope-from & return path alignment with From in MailTemplateFactory by @TLWebdesign in https://github.com/joomla/joomla-cms/pull/46431
  • [5.4] Fix condition to check request format in MenusHelper - deprecation warning by @MacJoom in https://github.com/joomla/joomla-cms/pull/46341
  • [5.4] success / message type not mapped to SymfonyStyle in ConsoleApplication by @brbrbr in https://github.com/joomla/joomla-cms/pull/43739
  • [5.4] autum dark-mode - remove border from sidebar wrapper and add box-shadow by @LadySolveig in https://github.com/joomla/joomla-cms/pull/43202
  • [5.4] NPM audit fix security vulnerabilities in indirect development dependencies 2025-11-26 by @richard67 in https://github.com/joomla/joomla-cms/pull/46502
  • [5.4] Smart Search: Fix taxonomy filter overwriting when titles are identical - fix issue #43528 by @filipores in https://github.com/joomla/joomla-cms/pull/44437
  • [5.4] Do not load articles in blog layout if configured by @joomdonation in https://github.com/joomla/joomla-cms/pull/46542
  • [5.4] Add php 8.5 to unit and integration tests by @HLeithner in https://github.com/joomla/joomla-cms/pull/46223
  • [5.4] Fix regex in DocumentRenderer.php by @Technicalleigh in https://github.com/joomla/joomla-cms/pull/45592
  • [5.4] Load extension language for Action Logs - Latest module by @joomdonation in https://github.com/joomla/joomla-cms/pull/46540
  • [5.4] fix plg_quickicon_eos snooze function by @heelc29 in https://github.com/joomla/joomla-cms/pull/46573
  • [5.4] Fix MySql 8 error "Illegal argument to a regular expression." in banners model by @beni71 in https://github.com/joomla/joomla-cms/pull/46547
  • [5.4] NPM audit fix security vulnerabilities in indirect development dependencies 2025-12-13 by @richard67 in https://github.com/joomla/joomla-cms/pull/46571
  • [5.4] fix task notification for updated Joomla versions (prior 5.3) by @heelc29 in https://github.com/joomla/joomla-cms/pull/45497
  • [5.4] Expose finalization errors in autoupdate API response by @SniperSister in https://github.com/joomla/joomla-cms/pull/46493
  • [5.4] Remove unnecessary $this->setError('') by @Hackwar in https://github.com/joomla/joomla-cms/pull/46527
  • [5.4] NPM audit fix security vulnerabilities in development dependencies 2025-12-19 by @richard67 in https://github.com/joomla/joomla-cms/pull/46590
  • [5.4] Remove the link to skin creator in TinyMCE by @chmst in https://github.com/joomla/joomla-cms/pull/46583
  • [5.4] Fix subform field dropdown showing current field (Fixes #46214) by @aniket190705 in https://github.com/joomla/joomla-cms/pull/46529

:technologist: Test contributions

Thank you to all the testers who help us maintain high quality standards and deliver a robust product.
In this release they were @alikon (4), @AndySDH (1), @Bodge-IT (1), @brianteeman (4), @ceford (1), @chmst (3), @dautrich (2), @degobbis (1), @dmb0058 (1), @exlemor (7), @hans2103 (1), @hendrikbehncke (1), @KasperHeuer (1), @laoneo (1), @MacJoom (1), @michaelmaass (1), @muhme (9), @richard67 (3), @RickR2H (2), @ThomasFinnern (3) and @TLWebdesign (2).

Full Changelog: https://github.com/joomla/joomla-cms/compare/5.4.1...5.4.2

:warning: Known Issues

Update (16 January 2026): Known issue “Mailer setSender() does not work”. For details and a workaround, see: https://manual.joomla.org/migrations/53-54/known-issues/5.4.2/

Beta — feedback welcome: [email protected]