Release 4.0.6 - #3387

Merged

cursor[bot] merged 144 commits into

mainfrom

release/4.0.6-to-main

Aug 21, 2026

Commits on Jun 19, 2026

chore: bump develop snapshot target to 4.0.6 (#3229)

authored
dc49c55
ci: gate yum + apt-arm64 install-smoke (hard-fail) now that 4.0.5 fixes them (#3230)

authored
5ac5e8a
docs(web/blog): announce Wheels 4.0.5 (with 4.0.4 hardening) (#3231)

authored
eb73cb6
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
901e6dd
build(deps): Bump form-data in /tools/docs-validation (#3224)
dependabot[bot]
authored
25d1cd5
build(deps-dev): Bump js-yaml in /tools/docker/testui (#3225)
dependabot[bot]
authored
61c5c99
ci: add index-integrity probe to distribution install smoke (#3218 regression guard) (#3234)

authored
61c594e

Commits on Jun 20, 2026

Commits on Jun 22, 2026

Commits on Jun 23, 2026

docs(web/blog): Real-Time Without WebSockets: Server-Sent Events in Wheels 4.0
Peter Amiri
committed
7e65f61
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
fe5fc42

Commits on Jun 24, 2026

Commits on Jun 25, 2026

docs(web/blog): Writing Your Own Middleware in Wheels 4.0
Peter Amiri
committed
c53d5e8
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
c252a49

Commits on Jun 26, 2026

Commits on Jun 29, 2026

docs(web/blog): Seeding Your Database the Idempotent Way
Peter Amiri
committed
e09f8ac
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
c0a294e

Commits on Jun 30, 2026

docs(web/blog): Routing Deep-Dive: Resources, Nested Callbacks, and Route Model Binding
Peter Amiri
committed
cd6fb56
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
916cd1d

Commits on Jul 1, 2026

docs(web/blog): Validations Beyond Presence: Conditional Rules, Custom Validators, and Enum…
Peter Amiri
committed
a05e0a0
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
e7999cb

Commits on Jul 2, 2026

docs(web/blog): Form Helpers in Wheels 4.0: Object Forms, HTML5 Fields, and Error Rendering
Peter Amiri
committed
9361c81
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
e91e3ed

Commits on Jul 3, 2026

docs(web/blog): Associations Deep-Dive: hasMany, belongsTo, Nested Properties, and Eager Loading
Peter Amiri
committed
b4c5e38
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
8643b70

Commits on Jul 4, 2026

docs(web/guides): rescue orphaned pages, regroup sidebar, and fix 404 links (restructure phase 1) (#3275)

authored
d9d58bf

Commits on Jul 5, 2026

docs(web/guides): repair wrong-API and broken code samples across 20 pages (restructure phase 2) (#3276)

bpamiri
and
Peter Amiri
authored
f289f4c
docs(web/guides): add the no-CLI path and five-journey front door (restructure phase 3) (#3277)

authored
c9255a5
docs(web/guides): give every tooling-gated task page a without-the-CLI path (restructure phase 4) (#3278)

bpamiri
and
Peter Amiri
authored
01f7a10
docs(web/guides): add What's New in 4.0 and URL Rewriting, fix vm-deployment recipe (restructure phase 5) (#3279)

bpamiri
and
Peter Amiri
authored
1a3f22c
docs(web/guides): single-source Kamal content, strip author residue, reconcile contradictions (restructure phase 6) (#3280)

bpamiri
and
Peter Amiri
authored
334a719

Commits on Jul 6, 2026

fix(cli): repoint 15 dead v4-0-0-snapshot and 3.1.0 guide URLs at live v4 pages (#3281)

bpamiri
and
Peter Amiri
authored
1a1241c
chore(web): refresh guides visual baseline for the restructured tutorial index (#3282)

bpamiri
and
Peter Amiri
authored
3545262
build(deps): Bump astro from 6.3.1 to 6.4.6 in /web (#3226)

dependabot[bot]
and
Peter Amiri
authored
f197e1a
fix(web): make lockup logo color-scheme aware so it stays visible in dark mode (#3284)

authored
eb183a8
ci: route refreshed visual baselines through a PR instead of a direct push (#3285)

authored
194a669
docs(web/blog): Caching in Wheels 4.0: Actions, Queries, Partials, and Invalidation
Peter Amiri
committed
2af35e1
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
fdeaedc
feat(auth): PBKDF2 password hashing service (PasswordHasher) (#3288)

authored
d871a97
feat(controller): authorization policy layer — wheels.Policy + authorize()/can()/policyScope() (#3289)

authored
5509082
feat(cli): wheels generate auth — session/token/jwt scaffold on the auth primitives (#3291)

authored
bb6bc41
fix(build): retire dead 3.1.0 guide URL in docker engine settings templates (#3293)

authored
59fb034
fix(test): null-safe optional cfcatch members in test reporter (#3295)

authored
a2e9101
test(view): assert includePartial guard via error message instead of engine cfcatch.type (#3296)

bpamiri
and
Peter Amiri
authored
4d5fe51
feat: probe-based engine capabilities with RustCFML detected before its Lucee impersonation (#3298)

bpamiri
and
Peter Amiri
authored
b767677
perf(channel): bound cleanup candidate query in SQL instead of driver maxrows (#3297)

bpamiri
and
Peter Amiri
authored
e7a7384
ci: add experimental RustCFML soft-fail lane to the compat matrix (#3299)

bpamiri
and
Peter Amiri
authored
b082f4a

Commits on Jul 7, 2026

fix(auth): route PBKDF2 getEncoded() through the SecretKey interface for Adobe 2025 JPMS (#3301)

authored
47fdb0a
docs(web/blog): File Uploads in Wheels 4.0, the Idiomatic Way
Peter Amiri
committed
e6db19f
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
953a11b

Commits on Jul 8, 2026

docs(web/blog): Sending Email in Wheels 4.0: sendEmail, Templates, and Background Delivery
Peter Amiri
committed
ec23620
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
c505042
ci: bump RustCFML lane pin to v0.429.0 and refresh baseline (#3305)

authored
988d877

Commits on Jul 9, 2026

docs(web/blog): Wheels 4 Without the Tooling: Two Zips, Zero Dependencies
Peter Amiri
committed
04b3476
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
f873452

Commits on Jul 10, 2026

docs(web/blog): One Authenticator, Three Doors: Sessions, Tokens, and JWTs in Wheels 4
Peter Amiri
committed
3275291
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
d40f978

Commits on Jul 14, 2026

docs(web/blog): CORS in Wheels 4: Deny by Default, Open It Correctly
Peter Amiri
committed
f6d4177
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
1b99b30
docs(web/blog): Request IDs, /up, and Logs a Machine Can Read: Observability in Wheels 4
Peter Amiri
committed
76185cc
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
406d274

Commits on Jul 15, 2026

docs(web/blog): How Wheels Actually Reads Your Configuration
Peter Amiri
committed
173e9ea
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
5e0771b

Commits on Jul 16, 2026

docs(web/blog): Running Wheels 4 the CommandBox Way
Peter Amiri
committed
45d313f
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
c013ead

Commits on Jul 17, 2026

docs(web/blog): Processing 400,000 Rows Without Melting the JVM: findEach and findInBatches
Peter Amiri
committed
1db4b52
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
faf0f1d

Commits on Jul 20, 2026

docs(web/blog): Channels: Pub/Sub for Wheels 4, No Extra Infrastructure
Peter Amiri
committed
a4b5143
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
78653fa

Commits on Jul 21, 2026

docs(web/blog): wheels console: The Debugging Move You're Not Using
Peter Amiri
committed
8b57f96
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
5ae2679

Commits on Jul 22, 2026

docs(web/blog): Calculated Properties: SQL-Defined Values Without the N+1 (or the Bloat)
Peter Amiri
committed
7a9cad7
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
cb4b6d7

Commits on Jul 23, 2026

docs(web/blog): The Debug Bar: A Complete Tour of Wheels 4's Development Cockpit
Peter Amiri
committed
f493e65

Commits on Jul 24, 2026

docs(web/blog): Internationalization in an Afternoon: wheels-i18n
Peter Amiri
committed
62b0637
chore(docs): auto-refresh blog visual baseline after content change [skip ci]

wheels-bot[bot]
and
github-actions[bot]
authored
35a1956

Commits on Jul 28, 2026

Commits on Aug 3, 2026

Commits on Aug 4, 2026

Commits on Aug 5, 2026

ci: compat-matrix safe-slice hardening — zero-test guard, neutral soft-fail check, honest summary (#3366)

bpamiri
and
Peter Amiri
authored
c5f4558
docs(web/guides): document wheels-websockets package; correct legacy ForgeBox guidance (#3367)

authored
8bfa351
feat(model): allow select() and friends to start a query-builder chain (#3346) (#3368)

authored
f344e7d
docs(web/guides): performance notes for 2.x upgraders (#3369)

bpamiri
and
Peter Amiri
authored
1da1f20
docs(web/guides): add v4 Overriding Core Methods guide (#3343) (#3372)

authored
c8d24f0
fix(test): serialize web test-runner config swap under a named lock (#3025) (#3373)

bpamiri
and
Peter Amiri
authored
9d28432
fix(events): render debug bar restore button outside the container it un-hides (#3345) (#3370)

bpamiri
and
Peter Amiri
authored
9e8a8b6
fix(events): make debug-bar reload link subpath-aware (#3344) (#3371)

authored
3b7199c
test(model): use non-aggregate terminals in forUpdate chain specs (#3375)

authored
11952f3
fix(compat): burn down compat-matrix engine-leg debt root causes
bpamiri
authored
6bff054
ci: make compat-matrix engine-job failures fail the run (#3376)

authored
a9d2ff4

Commits on Aug 12, 2026

build(deps-dev): Bump js-yaml from 4.3.0 to 4.3.1
dependabot[bot]
authored
17872ef

Commits on Aug 18, 2026

Commits on Aug 20, 2026

test(cli): cover every shipped onApplicationEnd handler in the Adobe scope guard

cursoragent
and
bpamiri
committed
e1f8ba9
test(cli): cover every shipped onApplicationEnd handler for #3379
bpamiri
authored
2d2f9a5
build(deps-dev): Bump js-yaml from 4.3.0 to 4.3.1
bpamiri
authored
adbe815
Merge branch 'develop' into dependabot/npm_and_yarn/tools/docker/testui/ip-address-10.4.0
bpamiri
authored
ec16e93
build(deps-dev): Bump ip-address from 10.2.0 to 10.4.0 in /tools/docker/testui
bpamiri
authored
7bef4ed
fix: advertise wheels packages add (not install) on docs and help

bpamiri
and
cursoragent
authored
ae263f9
fix(test): isolate the web runner in a separate application scope (#3374)

bpamiri
and
cursoragent
authored
cc14b48
refactor(global): decompose Global.cfc into focused includes (#3241)

bpamiri
and
cursoragent
authored
638c0f5
ci: bump LuCLI pin to 0.6.1

bpamiri
and
cursoragent
authored
5a6c61a
chore(release): assemble changelog.d fragments into [4.0.6] (#3386)

bpamiri
and
cursoragent
authored
51c2c53