Joomla! 6.0.0 Release Candidate 1

Author: Bodge-IT

administrator/manifests/files/joomla.xml

@@ -6,7 +6,7 @@
 	<authorUrl>www.joomla.org</authorUrl>
 	<copyright>(C) 2019 Open Source Matters, Inc.</copyright>
 	<license>GNU General Public License version 2 or later; see LICENSE.txt</license>
-	<version>6.0.0-beta4-dev</version>
+	<version>6.0.0-rc1</version>
 	<creationDate>2025-09</creationDate>
 	<description>FILES_JOOMLA_XML_DESCRIPTION</description>
 

composer.json

@@ -32,6 +32,10 @@
       "type": "vcs",
       "url": "https://github.com/joomla-backports/php-tuf.git",
       "no-api": true
+    },
+    {
+      "type": "vcs",
+      "url": "https://github.com/joomla-framework/security-filter.git"
     }
   ],
   "autoload": {
@@ -56,7 +60,7 @@
     "joomla/database": "^4.0",
     "joomla/di": "^4.0",
     "joomla/event": "^4.0",
-    "joomla/filter": "^4.0",
+    "joomla/filter": "dev-4.x-tabsinattributes as 4.0.1",
     "joomla/filesystem": "^4.0",
     "joomla/http": "^4.0",
     "joomla/input": "^4.0",

composer.lock

@@ -66,15 +66,15 @@ final class Version
      * @var    string
      * @since  3.8.0
      */
-    public const EXTRA_VERSION = 'beta4-dev';
+    public const EXTRA_VERSION = 'rc1';
 
     /**
      * Development status.
      *
      * @var    string
      * @since  3.5
      */
-    public const DEV_STATUS = 'Development';
+    public const DEV_STATUS = 'Release Candidate';
 
     /**
      * Code name.
@@ -90,7 +90,7 @@ final class Version
      * @var    string
      * @since  3.5
      */
-    public const RELDATE = '16-September-2025';
+    public const RELDATE = '30-September-2025';
 
     /**
      * Release time.
@@ -99,7 +99,7 @@ final class Version
      * @since  3.5
      */
 
-    public const RELTIME = '16:31';
+    public const RELTIME = '16:15';
 
     /**
      * Release timezone.

libraries/src/Version.php

@@ -32,7 +32,7 @@ final class Note extends FieldsPlugin implements SubscriberInterface
      *
      * @return  void
      *
-     * @since   __DEPLOY_VERSION__
+     * @since   6.0.0
      */
     public function prepareForm(PrepareFormEvent $event)
     {

plugins/fields/note/src/Extension/Note.php

@@ -430,10 +430,10 @@ private function getUserEntity(User $user): PublicKeyCredentialUserEntity
         $repository = $this->credentialsRepository;
 
         return new PublicKeyCredentialUserEntity(
-            $user->username,
-            $repository->getHandleFromUserId($user->id),
-            $user->name,
-            $this->getAvatar($user, 64)
+            (string) $user->username,
+            (string) $repository->getHandleFromUserId($user->id),
+            (string) $user->name,
+            $user->username ? $this->getAvatar($user, 64) : ''
         );
     }
 

plugins/system/webauthn/src/Authentication.php

@@ -76,27 +76,11 @@ public function onAjaxWebauthnChallenge(AjaxChallenge $event): void
 
         // Is the username valid?
         try {
-            $userId = UserHelper::getUserId($username);
+            $userId = UserHelper::getUserId($username) ?: 0;
+            $myUser = $userId ? Factory::getContainer()->get(UserFactoryInterface::class)->loadUserById($userId) : new User();
         } catch (\Exception $e) {
-            $userId = 0;
-        }
-
-        if ($userId <= 0) {
-            $event->addResult(false);
-
-            return;
-        }
-
-        try {
-            $myUser = Factory::getContainer()->get(UserFactoryInterface::class)->loadUserById($userId);
-        } catch (\Exception) {
             $myUser = new User();
-        }
-
-        if ($myUser->id != $userId || $myUser->guest) {
-            $event->addResult(false);
-
-            return;
+            $userId = 0;
         }
 
         $publicKeyCredentialRequestOptions = $this->authenticationHelper->getPubkeyRequestOptions($myUser);