Joomla! 5.3.0

👀 Release information

• 💁 33+ contributors
• 🧰 273+ Pull Requests has been merged
• ⬆️ New migration guide
• 📖 New developer documentation
• 🌎 Release page
• 👀 Full Changelog

🚀 Download information

Note

Userfacing information about this Joomla! release can be found on the release page

🔥 Installation Packages

New Joomla! Installations	SHA-256 Checksums
ZIP Archive (.zip)	3e3999f16bc1a64719e79931a10251711ac37040aa3cbfab9dcc91ffc852ceaa
GNU Zip Archive (.tar.gz)	5ba27fdd151e867e1deb25703935e8c2d6083d8c3f06e00dcb669b882722f987
Zstandard Archive (.tar.zst)	fd53ee9b83cc86934766014f44c188a99af8a69fe1b54ad0b3ecda516ed0862c

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

Important

Don't update directly from a version lower than 4.4 it is important that you first update to 4.4 and then update to 5.x

Update from a previous version	SHA-256 Checksums
ZIP Archive (.zip)	cac8d859996b6cc918fa17408d341468921ff961cbe6093434ca34e22a96929d
GNU Zip Archive (.tar.gz)	b20774aa694ccc1cc3c6ac0659f63d0a1f01440109c2e4a3380365e87cd9093a
Zstandard Archive (.tar.zst)	008f9781986f9a20be804175a0e750c3199c49c959255f60928f3a4e483c11be

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

💆 New Contributors

• @reem-atalah made their first contribution in #45080
• @Hemang360 made their first contribution in #45188

🧹 What has been changed

What's Changed

• [5.3] Upmerge by @HLeithner in #44009
• [5.3] Bumping version to 5.3.0-alpha1-dev by @Hackwar in #44010
• [5.3] Drone: Fix version in nightly build messages by @Hackwar in #44014
• [5.3] Upmerge 2024-09-14 by @richard67 in #44076
• [5.3] Calendar Strings by @brianteeman in #44099
• [5.3] Refactoring views to directly call models (com_actionlogs to com_finder) by @Hackwar in #44149
• [5.3] Refactoring views to directly call models (com_plugins to com_workflow) by @Hackwar in #44167
• [5.3] Upmerge 2024-10-03 by @richard67 in #44187
• [5.3] Removing LegacyPropertyManagementTrait::setProperties() usage in Core by @Hackwar in #44008
• [5.3] Removing calls to legacy ->set() by @Hackwar in #44011
• [5.3] Deprecate AbstractView::get() by @Hackwar in #44162
• [5.3] Refactoring from CMS Folder to framework Folder class by @Hackwar in #43958
• [5.3] Refactor all instances of File::makesafe() to use framework by @Hackwar in #43359
• [5.3] Upmerge 2024-10-06 by @richard67 in #44196
• [5.3] Upmerge 2024-10-08 by @richard67 in #44207
• [5.3] Refactoring views to directly call models (com_guidedtours to com_newsfeeds) by @Hackwar in #44164
• [5.3] Refactoring views to directly call models (frontend) by @Hackwar in #44170
• [5.3] Refactoring views to directly call models (installation & API) by @Hackwar in #44169
• [5.3] PHPStan: Fixing return statements and types by @Hackwar in #44030
• [5.3] Customfields: Also look at context when checking uniqueness by @Hackwar in #44161
• [5.3] Send test mail to the logged-in user. by @tecpromotion in #44002
• [5.3] Remove the not needed getPathway in the SiteApplication class by @rdeutz in #43385
• [5.3] [Events] Use event classes for custom fields plugins by @Fedik in #43611
• [5.3] Email cloak comments by @brianteeman in #44102
• [5.2] Debug plugin Remove unused code by @brianteeman in #44226
• [5.3] Change type of field "fieldparams" in table #_fields from text to mediumtext by @alikon in #44238
• [5.3] Drone: Fixing nightly build version by @Hackwar in #44245
• [5.3] Fix for: Can't select menu item type by @rdeutz in #44251
• [5.3] Fix constant by @Quy in #44259
• [5.3] Cypress add test for 'can create menu item' -> administrator by @LadySolveig in #44256
• [5.3] Spelling Update TemplateModel.php by @brianteeman in #44268
• [5.3] Add option for show/hide title in readmore by @rdeutz in #43457
• [5.3] Form control fields, new API by @Fedik in #43857
• [5.3] Deprecate unused language strings mod_stats_admin by @brianteeman in #44271
• [5.3] Ajax component support of Stringable results by @Fedik in #43530
• [5.3] Loadmodule plugin remove unused options by @brianteeman in #44273
• [5.3] handle check by @brianteeman in #44275
• [5.3] Delete Action Logs description by @brianteeman in #44288
• [5.3] Remove autostart temp code by @brianteeman in #44287
• [5.3] Move to ESM redo of #43779 by @dgrammatiko in #44296
• [5.3] Remove TODO joomla-alert.scss by @brianteeman in #44274
• [5.3] Upmerge changes from 5.2-dev 2024-10-23 by @richard67 in #44348
• [5.3] Upmerge changes from 5.2-dev 2024-10-29 by @richard67 in #44367
• [5.3] SEF: Fix URLs when preprocessing by @Hackwar in #43992
• [5.3] Add missing MVCFactoryInterface into model constructors by @Denitz in #44295
• [5.3] Update README to J5.3 by @heelc29 in #44444
• Deprecate methods for batch remove tag handling by @beni71 in #44383
• [5.3] Upmerge changes from 5.2-dev 2024-11-11 by @richard67 in #44434
• [5.3] Upmerges 2024-11-13 by @LadySolveig in #44448
• [5.3] Add Files folder to Media component and to "FileSystem local" adapter by @Fedik in #43532
• [5.3] Revert #44161 by @bembelimen in #44462
• [5.3] Fix deprecation message in installation by @bembelimen in #44461
• [5.3] Form control fields removable token by @Fedik in #44359
• [5.3] Upmerge from 5.2-dev 2024-11-14 plus temporary fix for com_contact router tests by @richard67 in #44463
• [5.3] Replace deprecated createRestorationFile with createUpdateFile by @bembelimen in #44466
• [5.3] Update deleted files in script.php for the upcoming 5.3.0-alpha1 by @richard67 in #44450
• [5.3] fix preprocess rule if contains alias (pgsql) by @heelc29 in #44459
• [5.3] Upmerge changes from 5.2-dev 2024-11-18 by @richard67 in #44471
• [5.3] Upmerge changes from 5.2-dev 2024-11-19 by @richard67 in #44487
• [5.3] Upmerge changes from 5.2-dev 2024-12-01 by @richard67 in #44562
• [5.3] xml manifest corrections by @brianteeman in #44269
• [5.3] Actionlogs User filter by @brianteeman in #44550
• [5.3] Contact icons etc [a11y] by @brianteeman in #44523
• [5.3] Tags: Fix broken aliases in routing by @Hackwar in #44515
• [5.3]Sort order of fields relative to their actual location in the table by @brianteeman in #44486
• [5.3] Smart Search: Improve Indexer::optimize() by @Hackwar in #44485
• [5.3] Router: Discover tainted URLs for core components by @Hackwar in #44477
• [5.3] Routing: Allow to mark parsed URLs as tainted by @Hackwar in #44455
• [5.3] Add debug mode to build script and create nightly debug builds by @HLeithner in #44576
• [5.3] [com_scheduler] task execution history view by @alikon in #42530
• [5.3] [bugfix] Use iife for the scripts core and load validate as module by @dgrammatiko in #43758
• [5.3] Template Override Plugins Compare by @brianteeman in #44588
• [5.3] tuf_metdata by @brianteeman in #44602
• [5.3] Upmerge changes from 5.2-dev 2024-12-14 by @richard67 in #44621
• [5.3] com_users doc comment by @brianteeman in #44616
• [5.3] Fix doctype by @janschoenherr in #44612
• [5.3] Send an event before an update site is downloaded by @laoneo in #44516
• [5.3] Improve inline comment for the "none-ID" behavior within the CRON Scheduler by @zero-24 in #43817
• [5]log edit contact from frontend by @alikon in #44596
• [5.3] Admin: Contact view does not load with a large user base by @brianteeman in #44600
• [5.3] logical css associations sidebyside by @brianteeman in #44613
• [5.3] System template offline RTL by @brianteeman in #44615
• [5.3] Consistent Database Name Validation by @brianteeman in #44623
• [5.3] Installing sample blog data with lang debug on by @brianteeman in #44624
• [5.3] Tagged Items RSS category by @brianteeman in #44628
• [5.3][com_actionlogs] exclude self from mail notification by @alikon in #44640
• [5.3] Apply mail cloaking in finder results by @SniperSister in #44641
• [5.3] Remove Cassiopeia color overrides by @brianteeman in #44661
• [5.3][com_finder] check if finder content plugin is enabled by @alikon in #44632
• [5.3] Move code to log model in new scheduler history view by @laoneo in #44587
• [5.3] plg_system_actionlogs fix deploy version by @heelc29 in #44697
• [5.3][cypress] test console command site:up & site:down by @alikon in #44683
• [5.3] Reverting change from CMS to framework Folder class by @Hackwar in #44700
• [5.3][cypress] test console command user:list & add & delete by @alikon in #44690
• [5.3] Upmerge changes from 5.2-dev 2024-12-21 by @richard67 in #44653
• [5.3] Archive Content - layouts by @brianteeman in #44601
• [5.3] Remove redundant code by @janschoenherr in #44552
• [5.3] Upmerge changes from 5.2-dev 2025-01-10 by @richard67 in #44714
• [5.3] Update deleted files in script.php for the upcoming 5.3.0-alpha3 by @richard67 in #44716
• [5.3] Added an api test for administrator menu items. by @rajputanuj31 in #42711
• [5.3] add com_contenthistory webservices endpoint test by @alikon in #44666
• [5.3][cypress] test console command session:gc & session:metadata:gc by @alikon in #44710
• 5.3][cypress] test console command user:reset-password etc by @alikon in #44722
• [5.3] Upmerge changes from 5.2-dev 2025-01-22 by @richard67 in #44768
• [5.3] Remove extra space by @QuyTon in #44777
• [5.3] Improve error handling for creating autload_psr4.php by @Hackwar in #44763
• [5.3] Updating wamania/php-stemmer to 4.0.0 by @Hackwar in #44657
• [5.3] Removing dealerdirect/phpcodesniffer-composer-installer entirely by @Hackwar in #44757
• [5.3] Updating typo3/phar-stream-wrapper dependency to 4.0.0 by @Hackwar in #44808
• [5.3] Switch voku/portable-utf8 to joomla-backport for php8.4 bc by @HLeithner in #44489
• [5.3] Composer update debug bar to v2.1.0 and adapt to renamed package by @richard67 in #44806
• [5.3] Updating php-tuf/php-tuf and guzzlehttp/promises by @Hackwar in #44812
• [5.3] Fix smart search sql error by @joomdonation in #44778
• [5.3] Deprecate namespace property of ComponentRecord by @Fedik in #44754
• [5.3] [Events] Use event classes for Content plugins by @Fedik in #43426
• [5.3] onContentPrepareForm should return void instead of boolean by @joomdonation in #44817
• [5.3] [Events] Use event classes for User plugins by @Fedik in #43427
• [5.3] Remove useless return statement by @joomdonation in #44820
• [5.3] [Events] Use event classes for Privacy plugins by @Fedik in #43602
• [5.3] [Events] Use event classes for Sampledata plugins by @Fedik in #43636
• [5.3] Update Jooa11y to Sa11y 4.0.3 by @adamchaboryk in #44813
• [5.3] [Events] Use event classes for System plugins by @Fedik in #43637
• [5.3] Deprecate several methods in UsersHelper by @Hackwar in #44787
• [5.3] Update drone for cypress by @HLeithner in #44824
• [5.3] Update all dependencies by @laoneo in #44814
• [5.3][cypress] com_contenthistory content administrator test by @alikon in #44675
• [5.3] Upmerge changes from 5.2-dev 2025-02-05 by @richard67 in #44822
• [5.3] Fix the selector in login tests when running on https by @brianteeman in #44837
• Fix phpdoc $module parameter type by @janschoenherr in #44592
• [5.3] Awesomplete accessibility fix by @LadySolveig in #44756
• [5.3] Convert mod_privacy_status to service provider by @joomlaweby in #44752
• [5.3] alpha-sorting strings in plg_system_jooa11y.ini by @tecpromotion in #44839
• [5.3] Logical css joomla tabs by @brianteeman in #44607
• [5.3] Improve System - Page Cache plugin code by @joomdonation in #44842
• [5.3] Improve System - Language Filter plugin code by @joomdonation in #44841
• [5.3] Improve System - SEF plugin code by @joomdonation in #44830
• [5.3] Remove useless clone statement by @joomdonation in #44843
• [5.3] Improve System - Debug plugin code by @joomdonation in #44844
• [5.3] Code cleanup by @janschoenherr in #44572
• [5.3] Improve System - Additional Accessibility Features code by @joomdonation in #44840
• [5.3] Deprecate HTMLHelper::script(), HTMLHelper::stylesheet(), extend lifetime for Document style/script methods by @Fedik in #43396
• [5.3] Improve system skipto plugin code by @joomdonation in #44857
• [5.3] Improve System - Keyboard Shortcuts plugin code by @joomdonation in #44855
• [5.3] Convert administrator mod_feed to service provider by @joomlaweby in #44819
• [5.3] Run system tests on https by @laoneo in #44850
• [5.3] Copy the cypress config to not interfere with the cs task by @laoneo in #44873
• [5.3] Change list to array destruct for components code by @joomdonation in #44893
• [5.3] Change Ternary To null coalescing operator for components code by @joomdonation in #44877
• [5.3] Use str_contains function for components by @joomdonation in #44875
• [5.3] Use str_ends_with for components code by @joomdonation in #44874
• [5.3] Use str_starts_with function for components by @joomdonation in #44868
• [5.3] Restrict bootstrap collapse to the header by @brianteeman in #44858
• [5.3] Remove the reference to the super global by @laoneo in #44867
• [5.3] Completely revert PR 44640 - [5.3][com_actionlogs] exclude self from mail notification by @richard67 in #44845
• [5.3] Update deleted files in script.php for the upcoming 5.3.0-beta1 by @richard67 in #44838
• [5.3] Fix code style in vue files and and also exit 1 when warnings by @laoneo in #44852
• [5.3] Use null coalescing assignment operator for libraries code by @joomdonation in #44920
• [5.3] Composer update debugbar to 2.1.1 and fix CSS for dark mode by @richard67 in #44902
• [5.3] Upmerge 2025-02-18 by @richard67 in #44935
• [5.3] Remove unused variable store Exception in try catch block by @joomdonation in #44892
• [5.3] Use str_starts_with function for libraries code by @joomdonation in #44915
• [5.3] Use str_ends_with function for libraries code by @joomdonation in #44916
• [5.3] Changes unneeded null check to ?? operator for libraries by @joomdonation in #44918
• [5.3] Use ternary operator for libraries by @joomdonation in #44921
• [5.3] Remove unused exception variable in try catch block for libraries by @joomdonation in #44922
• [5.3] Use str_starts_with function for modules and plugins by @joomdonation in #44936
• [5.3] Use str_ends_with function for modules plugins by @joomdonation in #44937
• [5.3] Use str_contains function for libraries code by @joomdonation in #44917
• [5.3] Use str_contains function for modules plugins by @joomdonation in #44938
• [5.3] Display Mail Templates data use current language by @joomdonation in #44953
• [5.3] Use Null Coalescing Assignment Operator For Components by @joomdonation in #44878
• [5.3] Avoid warning when deleting media file/folder by @alikon in #44989
• [5.3] better use str_starts_with by @heelc29 in #44998
• [5.3] Combine multiple unset call into one call by @joomdonation in #44983
• [5.3] Change isset($var) && multiple times to one isset call by @joomdonation in #44982
• [5.3] Simplify code using PHPCS Fixer no_unneeded_control_parentheses rule by @joomdonation in #44981
• [5.3] Improve api app code using rector rules by @joomdonation in #44975
• [5.3] Change list() to array destruct for libraries code by @joomdonation in #44973
• [5.3] Change list() to array destruct for modules and plugins code by @joomdonation in #44970
• [5.3] Changes unneeded null check to ?? operator for modules and plugins by @joomdonation in #44969
• [5.3] Remove unused exception variable in catch for modules and plugins by @joomdonation in #44967
• [5.3] Fix MailsHelper::loadTranslationFiles bug by @joomdonation in #44952
• [5.3] Fix dispatcher ACl checks: ignore any non-display tasks by @SniperSister in #44951
• [5.2] Add legacy message to content modules by @bembelimen in #44366
• [5.3] Handle fields event in EmailCloak plugin by @rdeutz in #44923
• [5.3] Category View: Fix meta tag for author by @Hackwar in #44903
• [5.3] Make mailtemplate information available in mail template layout by @SniperSister in #44896
• [5.3] Replace calls to dirname(__FILE) with DIR by @janschoenherr in #44882
• [5.3] Remove unnecessary array internal pointer resets by @janschoenherr in #44881
• [5.3] Use null coalescing assignment operator for modules and plugins by @joomdonation in #44972
• [5.3] Fix field group permission check by @joomdonation in #44956
• [5.3] Fields batch copy category by @chmst in #44943
• [Cypress] PHP Backend Notice com_media/Files by @muhme in #44976
• [5.3] Remove unsed variable messages from enqueue messages by @chmst in #42948
• [5.3] Upmerge 2025-02-28 by @richard67 in #45034
• [5.3] Mail template outlook background by @webgras in #44985
• [5.3] Remove useless sprintf function call by @joomdonation in #45036
• [5.3] fine grain task notification mail by @alikon in #44604
• [5.3] CMSPlugin: Deprecate use of DispatcherAware and LanguageAware by @Fedik in #43430
• [5.3] Fix code logic in admin controllers by @joomdonation in #45037
• [5.3] Remove un-used imports by @joomdonation in #45042
• [5.3] Fix core update information retrieval after changing the update channel or stability options by @SniperSister in #44954
• [5.3][cypress] add param default for edit field by @alikon in #45055
• [5.3][webservices] Undefined property: stdClass::$modified_by by @alikon in #45043
• [5.3][ cypress] null coalescing operator by @alikon in #45008
• [5.3] Fix wording (#44954) by @tecpromotion in #45058
• [5.3][cypress] do not ignore all uncaught:exception by @heelc29 in #44718
• [5.3][cypress] install extension From Url by @alikon in #45051
• [5.3][cypress] Add tests for shortcut plugin by @heelc29 in #45061
• [53][Cypress] Don't Force SSL by @muhme in #45089
• [5.3][cypress] PHP Warning: Undefined array key "menuordering" on patch com_menus by @alikon in #45092
• [5.3] Template Description by @brianteeman in #45078
• [5.3] Arrange task types alphabetically by @reem-atalah in #45080
• [5.3] Remove JPATH_COMPONENT_ADMINISTRATOR usage in components code by @joomdonation in #45049
• [5.3] Remove un-used variables by @joomdonation in #45045
• [5.3] Clean up com_templates StyleModel by @joomdonation in #45077
• [5.3] Fix warnings on frontend template options editing by @joomdonation in #45053
• [5.3] Remove redundant entry in the npm tools by @dgrammatiko in #45027
• [5.3] Do not use the deprecated get functions in Joomla action log plugin by @laoneo in #45033
• [5.3][cypress] php warning by @alikon in #45030
• [5.3][cypress] PHP Warning Undefined array key "parent_id" on POST com_content by @alikon in #45093
• [5.3][cypress] PHP Warning Undefined array key "parent_id" on POST com_banners by @alikon in #45095
• [5.3] Upmerge 2025-03-11 by @richard67 in #45108
• [5.3] display email address in contact by @brianteeman in #44792
• [5.3] PHP 8.4 compatibility by @laoneo in #45125
• [5.3][cypress] test console command finder:index by @alikon in #45126
• [5.3][cypress]PHP Warning Undefined array key "parent_id" on POST com_contacts by @brianteeman in #45104
• [5.3][cypress] smart search index & purge by @alikon in #45127
• [5.3][cypress] avoid deprecated in api tags by @alikon in #45091
• [5.3] Replace xml_set_object with proper callable parameters by @HLeithner in #44490
• [5.3] [a11y] Dark Mode log in message by @brianteeman in #45117
• [5.3] Clean up CategoryEdit form field by @joomdonation in #45116
• [5.3] System test in media manager to prevent a rename by @laoneo in #45115
• [5.3]allowTourAutoStart in user profile by @brianteeman in #45109
• [5.3] Guided Tours: What's New by @sdwjoomla in #44871
• [5.3] Catch undefined cors options when saving global options by @laoneo in #45103
• [5.3][cypress] user login test - report-only-existing-users by @alikon in #45003
• [5.3] Upmerge 2025-03-14 by @richard67 in #45130
• [5.3] Add missing help link for Articles-Module by @drmenzelit in #45064
• [5.3] Update npm dependency "joomla-ui-custom-elements" from 0.2.0 to 0.4.1 by @richard67 in #44888
• [5.3] Allow email addresses with an underscore by @charvimehradu in #45102
• [5.3][cypress]PHP Warning Undefined array key "parent_id" on POST com_newsfeeds by @alikon in #45131
• [5.3][cypress] api test wrong route by @alikon in #45133
• [5.3] Update dependencies by @laoneo in #45071
• [5.3] Upmerge 2025-03-15 by @richard67 in #45137
• [5.3] Remove non-distributed files by @brianteeman in #45152
• [5.3] system test for multi-factor authentication plugins (totp & email) by @heelc29 in #44733
• [5.3] Major update idna converter by @laoneo in #45140
• [5.3] Major update dev dependencies by @laoneo in #45138
• [5.3] Update http package to version 3.1.0 to fix some deprecation notices by @laoneo in #45148
• Update TUF client to fix PHP 8.4 compat issues by @SniperSister in #45166
• [5.3] php warning in BackupcodesModel by @brianteeman in #45170
• Fix install from web by @dgrammatiko in #45174
• [5.3] Don't use the deprecated CMS Filesystem but the framework package in package installer by @richard67 in #45139
• [5.3] php 8.4 compatibility by @brianteeman in #45169
• [5.3][webservices] not found without Warning by @alikon in #45132
• [5.3] add CORS settings when install from CLI by @alikon in #45129
• [5.3] Composer update tobscure/json-api by @brianteeman in #45180
• [5.3] Fix Light Mode Visibility for Table Headers in User Profile by @Hemang360 in #45188
• [5.3][cypress] add tests for issue 45190 by @heelc29 in #45208
• [5.3] Update deleted files in script.php for the upcoming 5.3.0-rc1 by @richard67 in #45220
• Update the joomla cypress package by @laoneo in #45207
• [5.3] Author column by @brianteeman in #45179
• [5.3] Fix unescaped slashes break markup in script tag by @janschoenherr in #44717
• [5.3] Upmerge 2025-03-28 by @richard67 in #45240
• [5.3] cypress test grammar by @brianteeman in #45241
• [5.3] Translation Update by @joomla-translation-bot in #45246
• Revert idna to version 3 with the PHP 8.4 patch by @laoneo in #45257
• [5.3] Revert update of typo3/phar-stream-wrapper and deprecate it by @Hackwar in #45255
• [5.3] Fix check for JRouter class alias to work with b/c plugin switched off by @richard67 in #44994
• [5.3] Upmerge 2025-04-03 by @richard67 in #45278
• [5.3] Update deleted files in script.php for the upcoming 5.3.0-rc2 by @richard67 in #45280
• [5.3] Upmerge 2025-04-06 by @richard67 in #45290

Full Changelog: 5.2.6...5.3.0