Joomla! 5.4.0 Release Candidate 1

Author: richard67

administrator/manifests/files/joomla.xml

@@ -6,7 +6,7 @@
 	<authorUrl>www.joomla.org</authorUrl>
 	<copyright>(C) 2019 Open Source Matters, Inc.</copyright>
 	<license>GNU General Public License version 2 or later; see LICENSE.txt</license>
-	<version>5.4.0-beta4-dev</version>
+	<version>5.4.0-rc1</version>
 	<creationDate>2025-09</creationDate>
 	<description>FILES_JOOMLA_XML_DESCRIPTION</description>
 

composer.json

@@ -37,6 +37,10 @@
       "type": "vcs",
       "url": "https://github.com/joomla-backports/portable-utf8.git",
       "no-api": true
+    },
+    {
+      "type": "vcs",
+      "url": "https://github.com/joomla-framework/security-filter.git"
     }
   ],
   "autoload": {
@@ -61,7 +65,7 @@
     "joomla/database": "^3.4",
     "joomla/di": "^3.1.1",
     "joomla/event": "^3.0.2",
-    "joomla/filter": "^3.0.4",
+    "joomla/filter": "dev-3.x-tabsinattributes as 3.0.5",
     "joomla/filesystem": "^3.2.0",
     "joomla/http": "^3.1.2",
     "joomla/input": "~3.0",

composer.lock

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <metafile client="site">
 	<name>English (en-GB)</name>
-	<version>5.3.4</version>
+	<version>5.4.0</version>
 	<creationDate>2025-09</creationDate>
 	<author>Joomla! Project</author>
 	<authorEmail>[email protected]</authorEmail>

language/en-GB/langmetadata.xml

@@ -66,15 +66,15 @@ final class Version
      * @var    string
      * @since  3.8.0
      */
-    public const EXTRA_VERSION = 'beta4-dev';
+    public const EXTRA_VERSION = 'rc1';
 
     /**
      * Development status.
      *
      * @var    string
      * @since  3.5
      */
-    public const DEV_STATUS = 'Development';
+    public const DEV_STATUS = 'Release Candidate';
 
     /**
      * Code name.
@@ -90,15 +90,15 @@ final class Version
      * @var    string
      * @since  3.5
      */
-    public const RELDATE = '16-September-2025';
+    public const RELDATE = '30-September-2025';
 
     /**
      * Release time.
      *
      * @var    string
      * @since  3.5
      */
-    public const RELTIME = '18:01';
+    public const RELTIME = '16:15';
 
     /**
      * Release timezone.

libraries/src/Version.php

@@ -430,10 +430,10 @@ private function getUserEntity(User $user): PublicKeyCredentialUserEntity
         $repository = $this->credentialsRepository;
 
         return new PublicKeyCredentialUserEntity(
-            $user->username,
-            $repository->getHandleFromUserId($user->id),
-            $user->name,
-            $this->getAvatar($user, 64)
+            (string) $user->username,
+            (string) $repository->getHandleFromUserId($user->id),
+            (string) $user->name,
+            $user->username ? $this->getAvatar($user, 64) : ''
         );
     }
 

plugins/system/webauthn/src/Authentication.php

@@ -76,27 +76,11 @@ public function onAjaxWebauthnChallenge(AjaxChallenge $event): void
 
         // Is the username valid?
         try {
-            $userId = UserHelper::getUserId($username);
+            $userId = UserHelper::getUserId($username) ?: 0;
+            $myUser = $userId ? Factory::getContainer()->get(UserFactoryInterface::class)->loadUserById($userId) : new User();
         } catch (\Exception $e) {
-            $userId = 0;
-        }
-
-        if ($userId <= 0) {
-            $event->addResult(false);
-
-            return;
-        }
-
-        try {
-            $myUser = Factory::getContainer()->get(UserFactoryInterface::class)->loadUserById($userId);
-        } catch (\Exception) {
             $myUser = new User();
-        }
-
-        if ($myUser->id != $userId || $myUser->guest) {
-            $event->addResult(false);
-
-            return;
+            $userId = 0;
         }
 
         $publicKeyCredentialRequestOptions = $this->authenticationHelper->getPubkeyRequestOptions($myUser);