[CI4MS] v0.31.6.0 - Release Notes

This release introduces a major modernization of the update system, full internationalization for the Settings module, and a more robust installation-to-developer-gate integration.

Added:
- One-Click Automatic Update system with GitHub API comparison.
- Automated backup and migration trigger before/after system updates.
- Full i18n support for Settings module across 11 languages.
- Modular DevGate credential propagation during installation.

Changed:
- Refactored DevGate config update logic using robust regex.
- Upgraded Update UI with interactive SweetAlert2 workflow.
- Updated README, CHANGELOG and version definitions to v0.31.6.0.

Author: bertugfahriozer

CHANGELOG.md

@@ -4,6 +4,20 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html) conventions adapted to the existing four-component version numbers.
 
+## [0.31.6.0] - 2026-04-15
+
+### Added
+
+- **Automatic Update:** Introduced a new "One-Click Update" (Auto-Update) system in the Settings module. Features include automated GitHub version discovery, secure file-by-file patching, and automatic database migration.
+- **Backup Support:** Updates now automatically trigger a full backup of modified files before applying patches.
+- **Refactored DevGate:** Improved the integration of developer access credentials during the setup process with a more robust and modular logic.
+
+### Changed
+
+- **Internationalization (i18n):** Completed full translation support for the Settings module across all 11 supported languages (Arabic, German, English, Spanish, French, Hindi, Japanese, Portuguese, Russian, Turkish, Chinese).
+- **Update UI:** Modernized the version check and update workflow with an interactive SweetAlert2-based interface.
+- **Setup Flow:** Enhanced the security and reliability of credential propagation from the web installer to the DevGate configuration.
+
 ## [0.31.5.0] - 2026-04-14
 
 ### Security
@@ -254,6 +268,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 
 - Expanded database migrations and introduced new supporting libraries.
 
+[0.31.6.0]: https://github.com/ci4-cms-erp/ci4ms/releases/tag/0.31.6.0
 [0.31.5.0]: https://github.com/ci4-cms-erp/ci4ms/releases/tag/0.31.5.0
 [0.31.4.0]: https://github.com/ci4-cms-erp/ci4ms/releases/tag/0.31.4.0
 [0.31.3.0]: https://github.com/ci4-cms-erp/ci4ms/releases/tag/0.31.3.0

README.md

@@ -11,6 +11,7 @@ CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, mo
 - **Modular backend:** Each feature ships as an independent module (Blog, Pages, Menu, Media, Users, Settings, Theme, etc.) under `modules/*`.
 - **Flexible content management:** Page and blog entries include SEO metadata, categories, tags, and full comment workflows.
 - **Media & files:** Includes elFinder-powered media management, a built-in file editor, and an in-panel log viewer.
+- **Automatic Updates:** New "One-Click Update" system allows seamless system upgrades with automatic backups and migration support.
 - **Theme system:** The `public/templates/*` structure and the `Modules\Theme` module enable installing or upgrading themes from ZIP packages.
 - **Setup & automation:** Offers a web-based installer (`/install`) plus a single CLI command (`php spark ci4ms:setup`) for automated installation, default data seeding, and route generation. Module scaffolding is available via `php spark make:module`.
 - **Docker support:** Ships with a production-ready `Dockerfile`, `docker-compose.yml`, and a GitHub Actions CI workflow out of the box.
@@ -131,7 +132,7 @@ Key files:
 | Menu             | Menu builder               | Drag-and-drop ordering, slug helpers                  |
 | Media            | Media manager              | elFinder integration, optional WebP conversion        |
 | Fileeditor       | Project file editor        | Safe read/write/rename/move/delete                    |
-| Settings         | System configuration       | Company/social/mail settings, encrypted SMTP password |
+| Settings         | System configuration       | One-click updates, company/social/mail settings, i18n support |
 | Users            | User & role management     | Shield groups, reset tracking                         |
 | Methods          | Route → permission mapping | Module toggling, router scan                          |
 | Logs             | Log viewer                 | Browses CodeIgniter log files inside the backend      |

modules/Install/Controllers/Install.php

@@ -66,7 +66,7 @@ public function index()
                 'app.supportedLocales' => '["ar","de","en","es","fr","hi","ja","pt","ru","tr","zh"]',
                 'app.negotiateLocale' => 'true',
                 'app.appTimezone' => '\'Europe/Istanbul\'',
-                'app.version' => '0.31.5.0'
+                'app.version' => '0.31.6.0'
             ];
             if ($this->copyEnvFile() && $this->updateEnvSettings($updates)) $this->generateEncryptionKey();
 
@@ -157,6 +157,14 @@ public function dbsetup()
             'siteName' => trim(strip_tags($installData['siteName'])),
         ]);
 
+        // -----------------------------------------------------------------
+        // Update DevGate configuration with the installed user credentials
+        // -----------------------------------------------------------------
+        $this->updateDevGateConfig(
+            trim(strip_tags($installData['username'])),
+            $installData['password']
+        );
+
         @unlink(APPPATH . 'Config/Routes.php');
         $file = ROOTPATH . 'modules/Backend/Commands/Views/routes.tpl.php';
         $content = file_get_contents($file);
@@ -175,4 +183,58 @@ public function dbsetup()
         chmod(WRITEPATH . 'install.lock', 0444);
         return redirect()->to($baseURL, 301);
     }
+
+    /**
+     * Updates DevGate configuration with the initial admin credentials.
+     * 
+     * @param string $username
+     * @param string $password
+     * @return bool
+     */
+    private function updateDevGateConfig(string $username, string $password): bool
+    {
+        $configPath = ROOTPATH . 'modules/DevGate/Config/DevGate.php';
+
+        if (!file_exists($configPath) || !is_writable($configPath)) {
+            log_message('info', "DevGate config file skipping: Not found or not writable.");
+            return false;
+        }
+
+        try {
+            $content = file_get_contents($configPath);
+
+            // Robust detection of useHashedPasswords (handles spaces, newlines, and case-insensitivity)
+            $useHashed = false;
+            if (preg_match('/public\s+bool\s+\$useHashedPasswords\s*=\s*(true|1)/i', $content)) {
+                $useHashed = true;
+            }
+
+            // Prepare credentials
+            $finalPass = $useHashed ? password_hash($password, PASSWORD_BCRYPT) : $password;
+            $userKey = var_export($username, true);
+            $passVal = var_export($finalPass, true);
+
+            // Maintain project's '[]' array style with proper indentation
+            $usersArray = "public array \$users = [" . PHP_EOL .
+                "        {$userKey} => {$passVal}," . PHP_EOL .
+                "    ];";
+
+            // Update the users array using a robust multiline regex
+            $newContent = preg_replace(
+                '/public\s+array\s+\$users\s*=\s*\[.*?\];/s',
+                $usersArray,
+                $content
+            );
+
+            if ($newContent === null || $newContent === $content) {
+                return false;
+            }
+
+            return file_put_contents($configPath, $newContent) !== false;
+
+        } catch (\Exception $e) {
+            log_message('error', "Failed to update DevGate config: " . $e->getMessage());
+            return false;
+        }
+    }
 }

modules/Settings/Config/Routes.php

@@ -13,4 +13,6 @@
     $routes->post('testMail', 'Settings::testMail', ['as' => 'testMail','role'=>'read']);
     $routes->post('updateVersion', 'Settings::checkVersion', ['as' => 'updateVersion','role'=>'update']);
     $routes->post('saveLanguageMode', 'Settings::saveLanguageMode', ['as' => 'saveLanguageMode','role'=>'update']);
+    $routes->post('downloadPatch', 'Settings::downloadPatch', ['as' => 'downloadPatch','role'=>'update']);
+    $routes->post('autoUpdate', 'Settings::autoUpdate', ['as' => 'autoUpdate','role'=>'update']);
 });

modules/Settings/Controllers/Settings.php

@@ -290,23 +290,48 @@ public function checkVersion()
 
             if (!empty($data) && is_array($data) && isset($data[0]->name)) {
                 $latestTag = $data[0];
-
                 $latestVersion = ltrim($latestTag->name, 'v');
+                $currentVersion = env('app.version');
+
+                if (version_compare($latestVersion, $currentVersion, '>')) {
+                    // Get changed files list using Compare API
+                    $compareResponse = $client->request('GET', "https://api.github.com/repos/ci4-cms-erp/ci4ms/compare/v{$currentVersion}...v{$latestVersion}", [
+                        'headers' => [
+                            'User-Agent' => 'CI4ms-Auto-Updater',
+                            'Accept'     => 'application/vnd.github.v3+json',
+                        ],
+                        'http_errors' => false
+                    ]);
+
+                    $compareData = json_decode($compareResponse->getBody());
+                    $changedFiles = [];
+                    if (isset($compareData->files)) {
+                        foreach ($compareData->files as $file) {
+                            $changedFiles[] = [
+                                'filename' => $file->filename,
+                                'status'   => $file->status,
+                                'raw_url'  => $file->raw_url
+                            ];
+                        }
+                    }
 
-                if (version_compare($latestVersion, env('app.version'), '>')) {
                     return $this->respond([
-                        'result'           => true,
-                        'update_available' => true,
-                        'message'          => lang('Backend.updateAvailable', [$latestVersion]),
-                        'new_version'      => $latestVersion,
-                        'download_url'     => $latestTag->zipball_url ?? ''
+                        'result'            => true,
+                        'update_available'  => true,
+                        'message'           => lang('Backend.updateAvailable', [$latestVersion]),
+                        'new_version'       => $latestVersion,
+                        'current_version'   => $currentVersion,
+                        'download_url'      => $latestTag->zipball_url ?? '',
+                        'changed_count'     => count($changedFiles),
+                        'changed_files'     => $changedFiles,
+                        'compare_url'       => "https://github.com/ci4-cms-erp/ci4ms/compare/v{$currentVersion}...v{$latestVersion}"
                     ]);
                 }
 
                 return $this->respond(['result' => true, 'message' => lang('Settings.alreadyLastVersion')]);
             }
 
-            return $this->respond(['result' => false, 'message' => 'No tags found'], 404);
+            return $this->respond(['result' => false, 'message' => lang('Settings.noTagsFound')], 404);
         } catch (\Exception $e) {
             return $this->respond(['result' => false, 'error' => $e->getMessage()], 500);
         }
@@ -351,4 +376,152 @@ public function saveLanguageMode()
             ], 500);
         }
     }
+
+    /**
+     * Downloads only the changed files between current and latest version as a zip.
+     */
+    public function downloadPatch()
+    {
+        $currentVersion = env('app.version');
+        $latestVersion = $this->request->getPost('latest');
+        
+        if (empty($latestVersion)) return $this->fail(lang('Settings.newVersionRequired'));
+
+        $client = service('curlrequest');
+        $zip = new \ZipArchive();
+        $zipName = "patch-v{$currentVersion}-to-v{$latestVersion}.zip";
+        $zipPath = WRITEPATH . 'uploads/' . $zipName;
+
+        if ($zip->open($zipPath, \ZipArchive::CREATE | \ZipArchive::OVERWRITE) !== TRUE) {
+            return $this->response->setStatusCode(500)->setBody(lang('Settings.errorCreatingZip'));
+        }
+
+        try {
+            $response = $client->request('GET', "https://api.github.com/repos/ci4-cms-erp/ci4ms/compare/v{$currentVersion}...v{$latestVersion}", [
+                'headers' => [
+                    'User-Agent' => 'CI4ms-Auto-Updater',
+                    'Accept'     => 'application/vnd.github.v3+json',
+                ],
+            ]);
+
+            $data = json_decode($response->getBody());
+            
+            if (!isset($data->files) || empty($data->files)) {
+                return $this->response->setStatusCode(404)->setBody(lang('Settings.noChangesFound'));
+            }
+
+            foreach ($data->files as $file) {
+                if ($file->status === 'removed') continue;
+                
+                // Fetch the raw content of the file
+                $fileResponse = $client->request('GET', $file->raw_url, [
+                    'headers' => ['User-Agent' => 'CI4ms-Auto-Updater']
+                ]);
+                
+                // Add to zip preserving directory structure
+                $zip->addFromString($file->filename, $fileResponse->getBody());
+            }
+
+            $zip->close();
+
+            if (file_exists($zipPath)) {
+                return $this->response->download($zipPath, null)->setFileName($zipName);
+            }
+
+            return $this->response->setStatusCode(404)->setBody(lang('Settings.zipNotFound'));
+
+        } catch (\Exception $e) {
+            return $this->response->setStatusCode(500)->setBody($e->getMessage());
+        }
+    }
+
+    /**
+     * Automatic Patch Update (One-Click)
+     */
+    public function autoUpdate()
+    {
+        if (!$this->request->isAJAX()) return $this->failForbidden();
+
+        $currentVersion = env('app.version');
+        $latestVersion = $this->request->getPost('latest');
+        
+        if (empty($latestVersion)) return $this->fail(lang('Settings.newVersionRequired'));
+
+        // Check if ROOTPATH is writable
+        if (!is_writable(ROOTPATH)) {
+            return $this->respond(['result' => false, 'message' => lang('Settings.permissionsError')], 500);
+        }
+
+        $client = service('curlrequest');
+        $backupDir = WRITEPATH . 'backups/' . "v{$currentVersion}_" . date('Ymd_His') . '/';
+        if (!is_dir($backupDir)) mkdir($backupDir, 0777, true);
+
+        try {
+            // Get files list
+            $response = $client->request('GET', "https://api.github.com/repos/ci4-cms-erp/ci4ms/compare/v{$currentVersion}...v{$latestVersion}", [
+                'headers' => [
+                    'User-Agent' => 'CI4ms-Auto-Updater',
+                    'Accept'     => 'application/vnd.github.v3+json',
+                ],
+            ]);
+
+            $data = json_decode($response->getBody());
+            if (!isset($data->files) || empty($data->files)) {
+                return $this->respond(['result' => false, 'message' => lang('Settings.noChangesFound')], 404);
+            }
+
+            $updatedFiles = [];
+            foreach ($data->files as $file) {
+                $targetFile = ROOTPATH . $file->filename;
+                $targetDir = dirname($targetFile);
+
+                // Skip removals for safety (requires manual check usually)
+                if ($file->status === 'removed') continue;
+
+                // Backup existing file
+                if (file_exists($targetFile)) {
+                    $relDir = dirname($file->filename);
+                    if ($relDir !== '.' && !is_dir($backupDir . $relDir)) mkdir($backupDir . $relDir, 0777, true);
+                    copy($targetFile, $backupDir . $file->filename);
+                }
+
+                // Create target directory if not exists
+                if (!is_dir($targetDir)) mkdir($targetDir, 0777, true);
+
+                // Fetch raw content
+                $fileResponse = $client->request('GET', $file->raw_url, [
+                    'headers' => ['User-Agent' => 'CI4ms-Auto-Updater']
+                ]);
+
+                // Write to target
+                file_put_contents($targetFile, $fileResponse->getBody());
+                $updatedFiles[] = $file->filename;
+            }
+
+            // Update .env version
+            $envPath = ROOTPATH . '.env';
+            if (is_writable($envPath)) {
+                $envContent = file_get_contents($envPath);
+                $envContent = preg_replace('/^app.version\s*=\s*.*/m', "app.version='{$latestVersion}'", $envContent);
+                file_put_contents($envPath, $envContent);
+            }
+
+            // Run Migrations
+            $migrate = \Config\Services::migrations();
+            $migrate->setNamespace('App');
+            $migrate->latest();
+
+            // Clear Cache
+            cache()->clean();
+
+            return $this->respond([
+                'result'  => true,
+                'message' => lang('Settings.updateSuccess', [$latestVersion]),
+                'files'   => $updatedFiles
+            ]);
+
+        } catch (\Exception $e) {
+            return $this->respond(['result' => false, 'message' => lang('Settings.updateFail', [$e->getMessage()])], 500);
+        }
+    }
 }