2.3.6

Release Notes

Package-shipped resources and their environment-specific config copies change precedence underneath existing code. A project upgrades cleanly and may still behave differently afterwards.

Breaking changes — see system/docs/upgrading/2.3.6.md for the full
detail and the audit steps to run:

• A project's own config/library/model/helper/view/language override now actually wins over the package's copy — previously silently ignored for all six resource types.
• An environment-specific copy of lib_mailing.php, lib_jwt.php, lib_sendgrid.php, lib_amazon_aws.php, or mimes.php now wins over the base file when both exist, matching every other CI3 config consumer — previously the base was checked first and always won, so the environment copy was never read at all.

Architecture & Package Structure

• Move the REST server and seeder resources (Format, Rest_key_model, Seeder) into system/third_party/{RestServer,Tettei}, and move the package's own models (Domain, Attachment, Manager_option, Rest_key_model, Rest_user, Rest_user_group, Theme) into system/models as MGR_-prefixed base classes, laying the groundwork for the override-precedence fix below :: commit · commit

Configuration & Environment

• Package-shipped config, libraries, models, helpers, views and language files now register as a fallback instead of an overlay, so a project's own override at the documented path actually wins — previously silently ignored for all six resource types :: commit
• path_env() now checks a config file's ENVIRONMENT/ copy before its base, matching every other CI3 config consumer; the lib_mailing.php, lib_jwt.php, lib_sendgrid.php, lib_amazon_aws.php, and mimes.php bases move to system/config (with thin fallback copies left in system/package/config), and config.php/database.php split off their framework-owned subset (enable_hooks, subclass_prefix, log_path, modules_locations, and the base connection settings) into system/config, included from a project's own copy :: commit · commit

Controllers & API

• Add REST_ALLOWED_CORS_HEADERS and REST_ALLOWED_CORS_METHODS environment overrides to the REST config :: commit

Core & Libraries

• Drop the apc/apcu cache adapter dead ends and default to file/dummy cache when Redis isn't configured :: commit

Documentation

• Document the package-shipped resource override precedence fix — architecture, decision record, and upgrade notes :: commit
• Document the config-base include shape and the path_env() fix — architecture, decision record, upgrade notes, and repo map :: commit