Security hardening. This version concludes our full audit of the code, addressing the remaining issues, and hardening the extension's security posture.
Tighter permission checks. Several views now require a Super User or an explicitly set Admin Tools-specific permission to work. If you were relying on Administrators or lower-privileged operators to handle some Admin Tools tasks you may want to review the permissions and grant them additional privileges (using a new user group!) according to their needs.
Enforced version compatibility checks. The package now checks your Joomla and PHP version when you try to install it. If it detects an incompatible Joomla and/or PHP version it will refuse to install / uninstall / update and tell you. The extension itself will warn you about the incompatibility and refuse to run. This is an additional protection against accidentally breaking your site by installing an incompatible version of our software or your site, or updating / downgrading Joomla or PHP outside the supported range after installing the extension.
Removed legacy error handler. The legacy error handler would show very detailed site and server information whenever an error occurred in the backend of the site. Joomla 4 and later have their own error handler showing the same level of detail when you enable Site Debug. We removed our handler in favor of the core-provided solution.
Clarified that the Security ACL permission grants Super User-equivalent access. This was strongly implied but never explicitly stated. This privilege allows users other than Super Users to manage security settings on your site. This can be conceivably used by a malicious operator to execute arbitrary code, perform redirections, execute server side request forgeries, etc. Therefore, the trust level that comes with this privilege is the same as that for granting Super User access. This privilege exists as a separate item because it doesn't automatically grant Super User equivalence in core Joomla and other third party extensions, i.e. someone cannot break the site by misclicking on one of those extensions – you can say that the backend UI is made a bit safer that way.
Raised the supported version ranges to PHP 8.6 and Joomla! 6.2. We have done our prep work for the upcoming Joomla 6.2 (coming October 2026) and PHP 8.6 (coming December 2026) versions. As always, we consider this preliminary work since neither of these two pieces of software is stable yet. Please do test them yourselves and let us know if you find any issues related to these two versions. We have a full suite of unit and integration (end-to-end – E2E) tests, but we can only test for issues we know about or have thought about. We cannot test for what we neither know nor can think of.
Bug fixes. We improved our unit and E2E tests with many more test cases, uncovering a number of low priority issues. These are now fixed.