CakePHP 3.5 will add new large features and deprecations to the 3.x release series. It will be backwards compatible with the rest of 3.x

Building on the introduction of PSR7 messages in 3.4, 3.5 will:

• ✅ Explore and implement unstable APIs for Middleware Pipelines. #10308
• ✅ Add new methods for interacting with cookies on the Request? #9193
• ✅ Add cookie encryption PSR7 Middleware, deprecating the encryption features of CookieComponent.
• ✅ Add middleware version of CsrfComponent
• ✅ Make it easier to work with uncaught exceptions in IntegrationTestCase. Add a mode to allow errors to bubble up. See #10157.

• ✅ Extract DependentDelete trait into a helper class, and use it by composition.

Add the low-effort changes discussed in #10643:

• ✅ Add new HTTP method sugar methods.
• ✅ Add fluent setters for the currently supported options.

The Application class has been working well for web requests. For consistency sake it would be ideal if the same Application class was used in Console environments as well. This would let us leverage the Application for bootstrap & configuration steps. It would provide a good place to introduce a 'console app' concept which would let us move the CakePHP console library in a direction that would enable standalone CLI applications similar to Symfony\Console #10716.