Joomla! 5.4.7 Release Candidate 1

👀 Release information

• 💁 15+ contributors
• 🧰 43+ Pull Requests has been merged
• ⬆️ New migration guide
• 📖 New developer documentation
• 👀 Full Changelog

🚀 Download information

🔥 Installation Packages

New Joomla! Installations	SHA-256 Checksums
ZIP Archive (.zip)	abed899c21670e83d93e313b80577e0993c21fd72e59a5b9fa8bceb99914266e
GNU Zip Archive (.tar.gz)	538b6bb743d750639870b8bbdc4208438ed3cfdb76eb6a196732be82b0462222
Zstandard Archive (.tar.zst)	88e722757d1a8642fde255d0f27ba037c89954d20a88ced20fe34588a7c3d5e0

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

✒️ Upgrade Packages

Important

Don't update directly from a version lower than 4.4 it is important that you first update to 4.4 and then update to 5.x

Update from a previous version	SHA-256 Checksums
ZIP Archive (.zip)	b561af4258cdf198b5b7918638626e6ed3b7a6ef9fed30eb1b65c0e9f55b1411
GNU Zip Archive (.tar.gz)	a66a78ca062fc4dbcd4f9f2e430864c4fb370c6b4482ec776cb50a189266e478
Zstandard Archive (.tar.zst)	29c8da52f55114e284f246f48ab66073800cb5ba75f7637991bdb6981fb23d9b

Additional and a second source of checksums can be found at our official download page. If you need further information on how to validate a release package please visit our documentation.

🧹 What has been changed

• [5.4] Update phpstan-baseline.neon 2026-05-26 by @richard67 in #47836
• [5.4] allow extension update from cli by @alikon in #47203
• [5.4] Load the mail template from the language of the mail template by @laoneo in #47603
• [5.4] Do not go to database setup in installer when password has spaces at beginning/end by @laoneo in #47734
• [5.4] Add system test for media manager search traverse issue by @laoneo in #47837
• [5.4] [webservices] Create a user access level via POST by @alikon in #47748
• [5.4] Fix Author Display Issue Using Article Setting by @CSGoat0 in #47752
• [5.4] npm update by @brianteeman in #47771
• [5.4] Activate filters in frontend only with filter-button by @chmst in #47774
• [5.4] Preserve zero select option text by @janschoenherr in #47800
• [5.4] Update typos GitHub action to v1.46.3 by @richard67 in #47825
• [5.4] Update actions-setup-mysql GitHub action to v1.51.0 by @richard67 in #47827
• [5.4] Regression fix for security fix in 5.4.6 and 6.1.1 by @HLeithner in #47852
• [5.4] Fix Modal Pagination Breaks Navigation by @CSGoat0 in #47855
• [5.4][webservices] PATCH user access level without rules by @alikon in #47751
• [5.4] Composer update symfony/yaml to v6.4.41 to fix 3 security vulnerabilities by @richard67 in #47847
• [5.4] Update github-script GitHub action to v9.0.0 by @richard67 in #47830
• [5.4] Update setup-php GitHub action to v2.37.1 by @richard67 in #47826
• [5.4] Cache fido metadata in build directory and preserve on build by @HLeithner in #47882
• [5.4] Joomla Alert Success by @brianteeman in #47865
• [5.4] Compile the manifest path from extension root by @laoneo in #47637
• [5.4] Add drone fido/composer/npm cache by @Hackwar in #47895
• [5.4] fix CodeMirror editor duplication by @adarshdubey03 in #47548
• [5.4] Fix aria-expanded check by @janschoenherr in #47483
• [5.4] add email sending test for contact form by @alikon in #47869
• [5.4] Reorder and update Text::script() calls for media field labels by @brianteeman in #47896
• [5.4] Reorder and update Text::script() calls for joomlaupdate by @brianteeman in #47917
• [5.4] Fix doc block for input type by @laoneo in #47931
• [5.4] POST com_contact form with webservices and custom reply enabled by @alikon in #47819
• [5.4] Always use a new installer instance on discover install by @laoneo in #47964
• [5.4] Fix potential issue with update multiple extensions by @joomdonation in #47978
• [5.4] Cookie authentication: load language file so log message is translated by @tecpromotion in #47985
• [5.4] Cookie authentication: fix username placeholder in failed-login log message by @tecpromotion in #47986
• [5.4] Use the correct function to get the message from an exception by @laoneo in #47972
• [5.4] [AI] Fix the Indexer Debugger constructor and show error passing no or invalid id by @MacJoom in #47916
• [5.4] contact serializer and newsfeed serializer by @sinahaghparast in #44914
• [5.4] Add integration tests for CLI config:get command by @alikon in #47818
• [5.4] com_users unable to filter by unactivated users state by @alikon in #47993
• [5.4] Add system test for console command scheduler by @alikon in #47763
• [5.4] Use item->locked instead of item->last_execution in "Running Since" tooltip on Scheduled Tasks page by @hiteshm0 in #47951
• [5.4] Composer updates 2026-06-24 by @richard67 in #48018
• [5.4] NPM updates 2026-06-25 by @richard67 in #48024
• [5.4] Adds code style fixes and phpstan update by @laoneo in #47936

Full Changelog: 5.4.6...5.4.7-rc1

🧑‍💻 Test contributions

Thank you to all the testers who help us maintain high quality standards and deliver a robust product.

@adarshdubey03 (2), @alikon (5), @brianteeman (10), @ChristineWk (1), @CSGoat0 (5), @exlemor (5), @joomdonation (2), @krishnagandhicode (3), @laoneo (1), @MacJoom (2), @michaelmaass (1), @muhme (4), @QuyTon (11), @richard67 (2), @roland-d (1), @Sulpher (1), @ThomasFinnern (5)