Never miss a release that matters
AI-powered summaries of every GitHub release.
AI Summaries
Changelogs condensed into clear, actionable insights.
Always Free
Track up to 5 packages at no cost, forever.
Weekly Digest
A curated summary of every release, delivered weekly.
TL;DR
This release updates core dependencies, improving stability and security for AdonisJS applications.
Fixes Worth Knowing
- Updated underlying packages to address potential security vulnerabilities.
- Dependency updates resolve reported issues with compatibility and performance.
TL;DR
Adonis now supports AES-SIV encryption (symmetric encryption) for enhanced data security, and form helpers are more flexible.
New
- AES-SIV Encryption: Adds a new encryption algorithm for secure data handling.
- Flexible Form Helpers: The
formAttributeshelper now works without requiring a specified form method.
Fixes Worth Knowing
None.
Before You Upgrade
No specific action is needed for this upgrade.
TL;DR
Adonis applications must be updated to address critical security vulnerabilities (CVE-2026-25754 & CVE-2026-25762) that could allow for remote code execution.
Breaking
- No breaking changes.
New
- i18n (Internationalization): A new command simplifies publishing localization (translation) templates for multi-language support.
Fixes Worth Knowing
- No fixes worth knowing.
Before You Upgrade
- Immediately upgrade to this version to mitigate the identified security risks.
TL;DR
AdonisJS now includes importAll (REPL helper) and isCuid (CUID validation) for improved development workflows.
Breaking
installPackagesandlistPackagesToInstallmethods have moved fromConfigureCommandtoCodemods(package configuration).- The
container:resolvedevent has been renamed tocontainer_binding:resolved(event naming).
New
importAll(REPL tool) allows importing all TypeScript files from a directory.isCuid(validation function) checks if a string is a valid CUID.
Fixes Worth Knowing
- Import paths in generated files now use Unix-style slashes, resolving potential issues on Windows.
make:middlewarenow correctly registers nested middleware.
Before You Upgrade
- Update any packages that directly use
installPackagesorlistPackagesToInstallfromConfigureCommand. - Update event listeners using the old
container:resolvedevent name tocontainer_binding:resolved.
TL;DR
Adonis now supports Vite (a build tool) as an asset manager driver, offering a faster and more modern approach to front-end compilation.
New
- Vite Support: Integrate Vite for improved asset bundling and development experience.
Fixes Worth Knowing
None.
Before You Upgrade
No action needed. The Vite driver is functional but still under development.
TL;DR
Adonis now exports the Exception class as a standalone module, simplifying error handling and allowing for more flexible integrations with external tools.
Breaking
Exceptionclass is now exported from a standalone module (requires updating import statements).
New
- Static file serving now correctly flushes headers (improves web server compatibility).
Fixes Worth Knowing
- Correctly handles cancelled prompts (prevents unexpected behavior in CLI tools).
Before You Upgrade
- Update your import statements to reflect the new standalone
Exceptionmodule.
TL;DR
AdonisJS applications must now use the updated validator package, as the request.validate method has been corrected to align with its changes.
Breaking
request.validate(input validation) – Requires updating the validator package to function correctly.
Fixes Worth Knowing
- Input validation using
request.validatenow functions as expected with the latest validator package.
Before You Upgrade
- Update your project’s
validatorpackage to the latest version before upgrading AdonisJS.
TL;DR
Adonis now includes built-in health checks (system status monitoring) and a command to generate application keys, improving application observability and security.
Breaking
dontReportrenamed toignoreCodes(configuration property change).
New
- Health Checks: New base checkers provide a starting point for monitoring application health.
- Key Generation: The
generate:keycommand simplifies creating a secure application key.
Fixes Worth Knowing
- Improved error messages when using the assembler (build tool) without installation.
- Content negotiation in HTTP exception handling is more robust.
Before You Upgrade
- Update any configuration files using the old
dontReportproperty to useignoreCodesinstead.