5.11.0

What's Changed

Other Changes

• PHPLARA-266 Port skill improvements by @paulinevos in #3576
• PHPLARA-262 Support serializable classes allowlist in MongoStore cache by @paulinevos in #3573
• PHPLARA-260 Force literal equality when a 3-arg where('=') has an operator array by @GromNaN in #3581 CVE-2026-88022
• PHPLARA-261 Wrap the cache lock owner in a literal expression by @GromNaN in #3579
• PHPLARA-265 Reject a MongoDB operator as a scalar id or relation key by @GromNaN in #3580 CVE-2026-88028 / CVE-2026-88027

Full Changelog: 5.10.0...5.11.0