6.0.0-rc.3

[lcharette]

What's Changed

Fixed

• [Core] Markdown::getFilePath() now performs a case-insensitive fallback lookup when the exact-match locator call returns nothing, fixing 404s on case-sensitive filesystems when URL casing differs from the filename (e.g. tos → Tos.md).
• [Framework] DotenvEditor::save() now preserves existing file permissions and defaults to 0644 for new files, preventing the web server from being locked out of a .env file created via php bakery setup:env.
• [Core] debug:version now warns when .env exists but cannot be read, helping diagnose deployment permission issues.
• [Docker] Fix docker/mysql/Dockerfile not applying mysql.conf — innodb_use_native_aio=0 was silently ignored because the file was never copied into the image.
• [Docker] Fix duplicate memory_limit directive in docker/app/php/custom.ini (64M was immediately overridden by 512M).
• [Skeleton][Docker] Fix .env.docker SMTP_PORT from 2025 to 1025 (Mailpit's actual SMTP port).
• [Skeleton][Docker] Remove unused DB_ROOT_PASSWORD and ROOT_PASSWORD variables from .env.docker.
• [Skeleton][Docker] Set UF_MODE=debug (was empty) in .env.docker.

Changed

• [Core] FilePermissionMiddleware now caches a successful permission check for a configurable TTL (cache.file_permission.ttl), skipping redundant is_writable() calls on subsequent requests.
• [Core] NODE_VERSION and NPM_VERSION container entries in VersionsService are now lazily evaluated, avoiding exec() calls on every web request.
• [Core] Bump Composer dependency userfrosting/vite-php-twig from ^1.0.2 to ^1.2.0.

Added

• [Core] New config keys cache.file_permission.key and cache.file_permission.ttl to control permission-check caching. Production default is 3600 s.
• [Core/Skeleton] Add vite_css_preload() Twig function via userfrosting/vite-php-twig 1.2.0, emitting <link rel="preload" as="style"> hints for CSS files. stylesheets_site.html.twig now calls it before vite_css().
• [Skeleton + Monorepo][Docker] Upgrade Node.js from 22 to 24 in all Docker configurations.

Full Changelog: userfrosting/monorepo@6.0.0-rc.2...6.0.0-rc.3

---

Upgrading from 6.0.0-rc.2 to 6.0.0-rc.3

1. Update Composer dependencies

composer update

This pulls in userfrosting/vite-php-twig ^1.2.0 (bumped from ^1.0.2), which adds the new vite_css_preload() Twig function used below.

---

2. Add CSS preload hint to your Twig template

In app/templates/content/stylesheets_site.html.twig, add vite_css_preload() before vite_css():

 {% block stylesheets_site %}
+    {{ vite_css_preload('main.ts') }}
     {{ vite_css('main.ts') }}
     {{ vite_preload('main.ts') }}
 {% endblock %}

This emits <link rel="preload" as="style"> hints, improving perceived load performance.

---

3. Docker users only

Fix .env.docker:

-UF_MODE=
+UF_MODE=debug

-SMTP_PORT=2025
+SMTP_PORT=1025

-DB_ROOT_PASSWORD=secret
-ROOT_PASSWORD=secret

Upgrade Node.js 22 → 24 in docker/app/Dockerfile:

-RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
+RUN curl -fsSL https://deb.nodesource.com/setup_24.x | bash - \

Upgrade Node.js image in docker/vue/Dockerfile:

-FROM node:22-bullseye
+FROM node:24-bookworm

---

What you get for free (no action needed)

• File permission check caching — FilePermissionMiddleware now caches is_writable() results (3600 s in production, disabled in dev). New config keys cache.file_permission.key / cache.file_permission.ttl are available if you want to customize the behaviour.
• NODE_VERSION/NPM_VERSION lazy evaluation — these are no longer eagerly computed on every request.
• debug:version warning — now warns if .env exists but is unreadable.
• Markdown case-insensitive file lookup — fixes 404s on case-sensitive filesystems.
• DotenvEditor permission fix — setup:env no longer creates .env with wrong permissions.