Symfony PHP framework v3

https://github.com/symfony/symfony

Changelog (https://github.com/symfony/symfony/compare/v3.4.48...v3.4.49)

  • security #cve-2021-21424 [Security\Core] Fix user enumeration via response body on invalid credentials (@chalasr)

[PR] https://github.com/symfony/symfony/pull/41276
[SECURITY] Security release

Changelog (https://github.com/symfony/symfony/compare/v3.4.47...v3.4.48)

  • security #cve-2021-21424 [Security][Guard] Prevent user enumeration (@chalasr)

[PR] https://github.com/symfony/symfony/pull/41193
[SECURITY] Security release

Changelog (https://github.com/symfony/symfony/compare/v3.4.46...v3.4.47)

  • bug #38628 [DoctrineBridge] indexBy could reference to association columns (@juanmiguelbesada)

[PR] https://github.com/symfony/symfony/pull/39193
[EOM] End of maintenance release for branch 3.4

Changelog (https://github.com/symfony/symfony/compare/v3.4.45...v3.4.46)

  • bug #38669 [Serializer] fix decoding float XML attributes starting with 0 (@Marcin Kruk)
  • bug #38595 [TwigBridge] do not translate null placeholders or titles (@xabbuh)
  • bug #38652 [Filesystem] Check if failed unlink was caused by permission denied (@Nyholm)
  • bug #38604 [DoctrineBridge] indexBy does not refer to attributes, but to column names (@xabbuh)
  • bug #38606 [WebProfilerBundle] Hide debug toolbar in print view (@jt2k)
  • bug #38582 [DI] Fix Reflection file name with eval()'d code (@maxime-aknin)
  • bug #38516 [HttpFoundation] Fix Range Requests (@BattleRattle)
  • bug #38510 [PropertyInfo] Support for the mixed type (@derrabus)
  • bug #38444 [PhpUnitBridge] fix running parallel tests with phpunit 9 (@nicolas-grekas)
  • bug #38442 [VarDumper] fix truncating big arrays (@nicolas-grekas)
  • bug #38380 [Form] propagate validation groups to subforms (@johanderuijter, @xabbuh)
  • bug #38360 [BrowserKit] Cookie expiration at current timestamp (@iquito)

[PR] https://github.com/symfony/symfony/pull/38851

Changelog (https://github.com/symfony/symfony/compare/v3.4.44...v3.4.45)

  • bug #38228 [Yaml Parser] Fix edge cases when parsing multiple documents (@digilist)
  • bug #38229 [Yaml] fix parsing comments not prefixed by a space (@xabbuh)
  • bug #38131 [Validator] allow consumers to mock all methods (@xabbuh)
  • bug #37097 DateTime validator support for trailing data (@stefankleff)
  • bug #38116 [Console] Silence warnings on sapi_windows_cp_set() call (@chalasr)
  • bug #38114 [Console] guard $argv + $token against null, preventing unnecessary exceptions (@bilogic)
  • bug #38099 Prevent parsing invalid octal digits as octal numbers (@julienfalque)
  • bug #38091 [DI] fix ContainerBuilder on PHP8 (@nicolas-grekas)
  • bug #38080 [Console] Make sure $maxAttempts is an int or null (@derrabus)
  • bug #38073 [VarDumper] Fix caster for invalid SplFileInfo objects on php 8 (@derrabus)
  • bug #38071 [PhpUnitBridge] Adjust output parsing of CoverageListenerTrait for PHPUnit 9.3 (@sanmai, @derrabus)
  • bug #38049 [Debug] Parse "x not found" errors correctly on php 8 (@derrabus)
  • bug #38024 [Console] Fix undefined index for inconsistent command name definition (@chalasr)

[PR] https://github.com/symfony/symfony/pull/38311

Changelog (https://github.com/symfony/symfony/compare/v3.4.43...v3.4.44)

  • bug #37949 [Yaml] fix more numeric cases changing in PHP 8 (@xabbuh)
  • bug #37921 [Yaml] account for is_numeric() behavior changes in PHP 8 (@xabbuh)
  • bug #37912 [ExpressionLanguage] fix passing arguments to call_user_func_array() on PHP 8 (@xabbuh)
  • bug #37853 [Validator] ensure that the validator is a mock object for backwards-compatibility (@xabbuh)
  • bug #37845 [Serializer] Fix variadic support when using type hints (@fabpot)
  • bug #37725 [Form] Fix Guess phpdoc return type (@franmomu)
  • bug #37771 Use PHPUnit 9.3 on php 8 (@derrabus)
  • bug #35843 [Validator] Add target guards for Composite nested constraints (@ogizanagi)
  • bug #37744 [Yaml] Fix for #36624; Allow PHP constant as first key in block (@jnye)
  • bug #37767 [Form] fix mapping errors from unmapped forms (@xabbuh)
  • bug #37763 Fix deprecated libxml_disable_entity_loader (@jderusse)
  • bug #37774 [Console] Make sure we pass a numeric array of arguments to call_user_func_array() (@derrabus)
  • bug #37701 [Serializer] Fix that it will never reach DOMNode (@TNAJanssen)
  • bug #37671 [Cache] fix saving no-expiry items with ArrayAdapter (@philipp-kolesnikov)
  • bug #37700 [VarDumper] Improve previous fix on light array coloration (@l-vo)

[PR] https://github.com/symfony/symfony/pull/37997

Changelog (https://github.com/symfony/symfony/compare/v3.4.42...v3.4.43)

  • bug #37635 [Cache] fix catching auth errors (@nicolas-grekas)
  • bug #37572 [FrameworkBundle] set default session.handler alias if handler_id is not provided (@Youssef BENHSSAIEN)
  • bug #37607 Fix checks for phpunit releases on Composer 2 (@colinodell)
  • bug #37562 [Cache] Use the default expiry when saving (not when creating) items (@philipp-kolesnikov)
  • bug #37563 Fix DBAL deprecation (@nicolas-grekas)
  • bug #37521 [Form] Fix ChoiceType translation domain (@VincentLanglet)
  • bug #37520 [Form] silently ignore uninitialized properties when mapping data to forms (@ph-fritsche)
  • bug #37526 [Cache][Config] ensure compatibility with PHP 8 stack traces (@xabbuh)
  • bug #37461 [Process] Fix Permission Denied error when writing sf_proc_00 lock files on Windows (@JasonStephensTAMU)
  • bug #37505 [Form] fix handling null as empty data (@xabbuh)
  • bug #37385 [Console] Fixes question input encoding on Windows (@YaFou)
  • bug #37447 [Validator] fix validating lazy properties that evaluate to null (@xabbuh)
  • bug #37464 [ErrorHandler] fix throwing from __toString() (@nicolas-grekas)
  • bug #37291 [MimeType] Duplicated MimeType due to PHP Bug (@juanmrad)
  • bug #37425 [Form] fix guessing form types for DateTime types (@xabbuh)
  • bug #37392 [Validator] fix handling typed properties as constraint options (@xabbuh)
  • bug #37389 [HttpFondation] Change file extension of "audio/mpeg" from "mpga" to "mp3" (@YaFou)
  • bug #37383 [VarDumper] Support for cURL handler objects (@derrabus)
  • bug #37345 [Form] collect all transformation failures (@xabbuh)
  • bug #37340 Fix support for PHP8 union types (@nicolas-grekas)
  • bug #37275 [DI] tighten detection of local dirs to prevent false positives (@nicolas-grekas)
  • bug #37090 [PhpUnitBridge] Streamline ansi/no-ansi of composer according to phpunit --colors option (@kick-the-bucket)
  • bug #36230 [VarDumper] Fix CliDumper coloration on light arrays (@l-vo)
  • bug #37270 [FrameworkBundle] preserve dots in query-string when redirecting (@nicolas-grekas)
  • bug #37342 [Cache] fix compat with DBAL v3 (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/37647

Changelog (https://github.com/symfony/symfony/compare/v3.4.41...v3.4.42)

  • bug #37103 [Form] switch the context when validating nested forms (@xabbuh)
  • bug #37182 [HttpKernel] Fix regression where Store does not return response body correctly (@mpdude)
  • bug #36913 [FrameworkBundle] fix type annotation on ControllerTrait::addFlash() (@ThomasLandauer)
  • bug #37169 [Cache] fix forward compatibility with Doctrine DBAL 3 (@xabbuh)
  • bug #37085 [Form] properly cascade validation to child forms (@xabbuh)
  • bug #37095 [PhpUnitBridge] Fix undefined index when output of "composer show" cannot be parsed (@nicolas-grekas)
  • bug #37092 [PhpUnitBridge] fix undefined var on version 3.4 (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/37244

Changelog (https://github.com/symfony/symfony/compare/v3.4.40...v3.4.41)

  • bug #36894 [Validator] never directly validate Existence (Required/Optional) constraints (@xabbuh)
  • bug #37007 [Console] Fix QuestionHelper::disableStty() (@chalasr)
  • bug #36865 [Form] validate subforms in all validation groups (@xabbuh)
  • bug #36907 Fixes sprintf(): Too few arguments in form transformer (@pedrocasado)
  • bug #37000 Add meaningful message when using ProcessHelper and Process is not installed (@l-vo)
  • bug #36987 Handle fetch mode deprecation of DBAL 2.11. (@derrabus)
  • bug #36974 [Security] Fixed handling of CSRF logout error (@wouterj)
  • bug #36920 [VarDumper] fix PHP 8 support (@nicolas-grekas)
  • bug #36917 [Cache] Accessing undefined constants raises an Error in php8 (@derrabus)
  • bug #36891 Address deprecation of ReflectionType::getClass() (@derrabus)
  • bug #36899 [VarDumper] ReflectionFunction::isDisabled() is deprecated (@derrabus)
  • bug #36905 [Validator] Catch expected ValueError (@derrabus)
  • bug #36906 [DomCrawler] Catch expected ValueError (@derrabus)
  • bug #36904 [PropertyAccess] Parse php 8 TypeErrors correctly (@derrabus)
  • bug #36896 [Config] Removed implicit cast of ReflectionProperty to string (@derrabus)
  • bug #36882 [PhpUnitBridge] fix installing under PHP >= 8 (@nicolas-grekas)
  • bug #36833 [HttpKernel] Fix that the Store would not save responses with the X-Content-Digest header present (@mpdude)
  • bug #36867 [PhpUnitBridge] fix bad detection of unsilenced deprecations (@nicolas-grekas)
  • bug #36855 [HttpKernel] Fix error logger when stderr is redirected to /dev/null (@fabpot)
  • bug #36592 [BrowserKit] Allow Referer set by history to be overridden (@Slamdunk)
  • bug #36794 [Serializer] fix issue with PHP 8 (@nicolas-grekas)
  • bug #36743 [Yaml] Fix escaped quotes in quoted multi-line string (@ossinkine)
  • bug #36569 [PhpUnitBridge] Mark parent class also covered in CoverageListener (@lyrixx)
  • bug #36690 [Yaml] prevent notice for invalid octal numbers on PHP 7.4 (@xabbuh)
  • bug #36497 [Filesystem] Handle paths on different drives (@crishoj)
  • bug #36678 [WebProfiler] Do not add src-elem CSP directives if they do not exist (@ndench)
  • bug #36501 [DX] Show the ParseException message in all YAML file loaders (@fancyweb)
  • bug #36683 [Yaml] fix parse error when unindented collections contain a comment (@wdiesveld)
  • bug #36672 [Validator] Skip validation when email is an empty object (@acrobat)
  • bug #36673 [PhpUnitBridge] fix PHP 5.3 compat again (@nicolas-grekas)
  • bug #36627 [Validator] fix lazy property usage. (@bendavies)
  • bug #36625 [PhpUnitBridge] fix compat with PHP 5.3 (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/37016

Changelog (https://github.com/symfony/symfony/compare/v3.4.39...v3.4.40)

  • bug #36566 [PhpUnitBridge] Use COMPOSER_BINARY env var if available (@fancyweb)
  • bug #36560 [YAML] escape DEL(\x7f) (@sdkawata)
  • bug #36539 [PhpUnitBridge] fix compatibility with phpunit 9 (@garak)
  • bug #36555 [Cache] skip APCu in chains when the backend is disabled (@nicolas-grekas)
  • bug #36523 [Form] apply automatically step=1 for datetime-local input (@ottaviano)
  • bug #36498 [Security/Core] fix escape for username in LdapBindAuthenticationProvider.php (@stoccc)
  • bug #36506 [FrameworkBundle] Fix session.attribute_bag service definition (@fancyweb)
  • bug #36490 [HttpFoundation] workaround PHP bug in the session module (@nicolas-grekas)
  • bug #36483 [SecurityBundle] fix accepting env vars in remember-me configurations (@zek)
  • bug #36343 [Form] Fixed handling groups sequence validation (@HeahDude)
  • bug #36460 [Cache] Avoid memory leak in TraceableAdapter::reset() (@lyrixx)
  • bug #36411 [Form] RepeatedType should always have inner types mapped (@biozshock)
  • bug #36441 [DI] fix loading defaults when using the PHP-DSL (@nicolas-grekas)
  • bug #36434 [HttpKernel] silence E_NOTICE triggered since PHP 7.4 (@xabbuh)
  • bug #36365 [Validator] Fixed default group for nested composite constraints (@HeahDude)
  • bug #35591 [Validator] do not merge constraints within interfaces (@greedyivan)
  • bug #36375 [Workflow] Use a strict comparison when retrieving raw marking in MarkingStore (@lyrixx)
  • bug #36305 [PropertyInfo][ReflectionExtractor] Check the array mutator prefixes last when the property is singular (@fancyweb)
  • bug #35656 [HttpFoundation] Fixed session migration with custom cookie lifetime (@Guite)
  • bug #36315 [WebProfilerBundle] Support for Content Security Policy style-src-elem and script-src-elem in WebProfiler (@ampaze)
  • bug #36286 [Validator] Allow URL-encoded special characters in basic auth part of URLs (@cweiske)
  • bug #36332 [Serializer] Fix unitialized properties (from PHP 7.4.2) when serializing context for the cache key (@alanpoulain)
  • bug #36239 [HttpKernel][LoggerDataCollector] Prevent keys collisions in the sanitized logs processing (@fancyweb)
  • bug #36245 [Validator] Fixed calling getters before resolving groups (@HeahDude)
  • bug #36252 [Security/Http] Allow setting cookie security settings for delete_cookies (@wouterj)
  • bug #36261 [FrameworkBundle] revert to legacy wiring of the session when circular refs are detected (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/36612

Changelog (https://github.com/symfony/symfony/compare/v3.4.38...v3.4.39)

  • bug #36216 [Validator] Assert Valid with many groups (@phucwan91)
  • bug #36222 [Console] Fix OutputStream for PHP 7.4 (@guillbdx)
  • bug #36175 [Security/Http] Remember me: allow to set the samesite cookie flag (@dunglas)
  • bug #36173 [Http Foundation] Fix clear cookie samesite (@guillbdx)
  • bug #36176 [Security] Check if firewall is stateless before checking for session/previous session (@koenreiniers)
  • bug #36149 [Form] Support customized intl php.ini settings (@jorrit)
  • bug #36172 [Debug] fix for PHP 7.3.16+/7.4.4+ (@nicolas-grekas)
  • bug #36141 Prevent warning in proc_open() (@BenMorel)
  • bug #36121 [VarDumper] fix side-effect by not using mt_rand() (@nicolas-grekas)
  • bug #36073 [PropertyAccess][DX] Improved errors when reading uninitialized properties (@HeahDude)
  • bug #36063 [FrameworkBundle] start session on flashbag injection (@William Arslett)
  • bug #36020 [Form] ignore microseconds submitted by Edge (@xabbuh)
  • bug #36041 fix import from config file using type: glob (@Tobion)
  • bug #35987 [DoctrineBridge][DoctrineExtractor] Fix wrong guessed type for "json" type (@fancyweb)
  • bug #35938 [Form] Handle false as empty value on expanded choices (@fancyweb)
  • bug #36004 [Yaml] fix dumping strings containing CRs (@xabbuh)
  • bug #35982 [DI] Fix XmlFileLoader bad error message (@przemyslaw-bogusz)
  • bug #35937 Revert "bug symfony#28179 [DomCrawler] Skip disabled fields processing in Form" (@dmaicher)
  • bug #35910 [SecurityBundle] Minor fixes in configuration tree builder (@HeahDude)

[PR] https://github.com/symfony/symfony/pull/36260

Changelog (https://github.com/symfony/symfony/compare/v3.4.37...v3.4.38)

  • bug #35781 [Form] NumberToLocalizedStringTransformer return int if scale = 0 (@VincentLanglet)
  • bug #35846 [Serializer] prevent method calls on null values (@xabbuh)
  • bug #35839 [Security] Allow switching to another user when already switched (@chalasr)
  • bug #35817 [DoctrineBridge] Use new Types::* constants and support new json type (@fancyweb)
  • bug #35707 [ExpressionLanguage] Fixed collisions of character operators with object properties (@Andrej-in-ua)
  • bug #35794 [DoctrineBridge][DoctrineExtractor] Fix indexBy with custom and some core types (@fancyweb)
  • bug #35787 [PhpUnitBridge] Use trait instead of extending deprecated class (@marcello-moenkemeyer)
  • bug #35792 [Security] Prevent TypeError in case RememberMetoken has no attached user (@nikophil)
  • bug #35772 [Config] don't throw on missing excluded paths (@nicolas-grekas)
  • bug #35774 [Ldap] force default network timeout (@nicolas-grekas)
  • bug #35702 [VarDumper] fixed DateCaster not displaying additional fields (@Makdessi Alex)
  • bug #35722 [HttpKernel] Set previous exception when rethrown from controller resolver (@danut007ro)
  • bug #35718 [HttpKernel] fix registering DebugHandlersListener regardless of the PHP_SAPI (@nicolas-grekas)
  • bug #35693 [Finder] Fix unix root dir issue (@chr-hertel)
  • bug #35696 [Console] Don't load same-namespace alternatives on exact match (@chalasr)
  • bug #35605 [HttpFoundation][FrameworkBundle] fix support for samesite in session cookies (@fabpot)
  • bug #35609 [DoctrineBridge] Fixed submitting ids with query limit or offset (@HeahDude)
  • bug #34123 [Form] Fix handling of empty_data's \Closure value in Date/Time form types (@yceruto)
  • bug #35546 [Validator] check for __get method existence if property is uninitialized (@alekitto)
  • bug #35332 [Yaml][Inline] Fail properly on empty object tag and empty const tag (@fancyweb)
  • bug #35489 [PhpUnitBridge] Fix running skipped tests expecting only deprecations (@chalasr)
  • bug #35161 [FrameworkBundle] Check non-null type for numeric type (@Arman-Hosseini)
  • bug #34059 [DomCrawler] Skip disabled fields processing in Form (@sbogx)
  • bug #34114 [Console] SymonfyStyle - Check value isset to avoid PHP notice (@leevigraham)
  • bug #35557 [Config] dont catch instances of Error (@nicolas-grekas)
  • bug #35532 [Validator] fix access to uninitialized property when getting value (@greedyivan)
  • bug #35305 [HttpKernel] Fix stale-if-error behavior, add tests (@mpdude)

[PR] https://github.com/symfony/symfony/pull/35904

Changelog (since https://github.com/symfony/symfony/compare/v3.4.36...v3.4.37)

  • bug #35065 [Security] Use supportsClass in addition to UnsupportedUserException (@linaori)
  • bug #35343 [Security] Fix RememberMe with null password (@jderusse)
  • bug #35318 [Yaml] fix PHP const mapping keys using the inline notation (@xabbuh)
  • bug #35304 [HttpKernel] Fix that no-cache MUST revalidate with the origin (@mpdude)
  • bug #35299 Avoid stale-if-error in FrameworkBundle's HttpCache if kernel.debug = true (@mpdude)
  • bug #35151 [DI] deferred exceptions in ResolveParameterPlaceHoldersPass (@Islam93)
  • bug #35254 [PHPUnit-Bridge] Fail-fast in simple-phpunit if one of the passthru() commands fails (@mpdude)
  • bug #34643 [Dotenv] Fixed infinite loop with missing quote followed by quoted value (@naitsirch)
  • bug #35239 [Security\Http] Prevent canceled remember-me cookie from being accepted (@chalasr)
  • bug #35267 [Debug] fix ClassNotFoundFatalErrorHandler (@nicolas-grekas)
  • bug #35193 [TwigBridge] button_widget now has its title attr translated even if its label = null or false (@stephen-lewis)
  • bug #35219 [PhpUnitBridge] When using phpenv + phpenv-composer plugin, composer executable is wrapped into a bash script (@oleg-andreyev)
  • bug #35170 [FrameworkBundle][TranslationUpdateCommand] Do not output positive feedback on stderr (@fancyweb)
  • bug #35134 [PropertyInfo] Fix BC issue in phpDoc Reflection library (@jaapio)
  • bug #35125 [Translator] fix performance issue in MessageCatalogue and catalogue operations (@ArtemBrovko)
  • bug #35103 [Translation] Use locale_parse for computing fallback locales (@alanpoulain)
  • bug #35094 [Console] Fix filtering out identical alternatives when there is a command loader (@fancyweb)
  • bug #35039 [DI] skip looking for config class when the extension class is anonymous (@nicolas-grekas)
  • bug #35049 [ProxyManager] fix generating proxies for root-namespaced classes (@nicolas-grekas)
  • bug #35022 [Dotenv] FIX missing getenv (@mccullagh)
  • bug #35010 [VarDumper] ignore failing __debugInfo() (@nicolas-grekas)
  • bug #35000 [Console][SymfonyQuestionHelper] Handle multibytes question choices keys and custom prompt (@fancyweb)
  • bug #29839 [Validator] fix comparisons with null values at property paths (@xabbuh)
  • bug #34900 [DoctrineBridge] Fixed submitting invalid ids when using queries with limit (@HeahDude)
  • bug #34791 [Serializer] Skip uninitialized (PHP 7.4) properties in PropertyNormalizer and ObjectNormalizer (@vudaltsov)
  • bug #34915 [FrameworkBundle] Fix invalid Windows path normalization in TemplateNameParser (@mvorisek)
  • bug #34981 stop using deprecated Doctrine persistence classes (@xabbuh)
  • bug #34904 [Validator][ConstraintValidator] Safe fail on invalid timezones (@fancyweb)
  • bug #34918 [Translation] fix memoryleak in PhpFileLoader (@nicolas-grekas)
  • bug #34438 [HttpFoundation] Use Cache-Control: must-revalidate only if explicit lifetime has been given (@mpdude)
  • bug #34449 [Yaml] Implement multiline string as scalar block for tagged values (@natepage)
  • bug #34601 [MonologBridge] Fix debug processor datetime type (@mRoca)
  • bug #34842 [ExpressionLanguage] Process division by zero (@tigr1991)
  • bug #34902 [PropertyAccess] forward caught exception (@xabbuh)
  • bug #34888 [TwigBundle] add tags before processing them (@xabbuh)
  • bug #34762 [Config] never try loading failed classes twice with ClassExistenceResource (@nicolas-grekas)
  • bug #34839 [Cache] fix memory leak when using PhpArrayAdapter (@nicolas-grekas)
  • bug #34812 [Yaml] fix parsing negative octal numbers (@xabbuh)
  • bug #34788 [SecurityBundle] Properly escape regex in AddSessionDomainConstraintPass (@fancyweb)
  • bug #34755 [FrameworkBundle] resolve service locators in debug:* commands (@nicolas-grekas)
  • bug #34832 [Validator] Allow underscore character "_" in URL username and password (@romainneutron)
  • bug #34738 [SecurityBundle] Passwords are not encoded when algorithm set to "true" (@nieuwenhuisen)
  • bug #34779 [Security] do not validate passwords when the hash is null (@xabbuh)
  • bug #34757 [DI] Fix making the container path-independent when the app is in /app (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/35411

Changelog (since https://github.com/symfony/symfony/compare/v3.4.35...v3.4.36)

  • bug #34649 more robust initialization from request (@dbu)
  • bug #34671 [Security] Fix clearing remember-me cookie after deauthentication (@chalasr)
  • bug #34711 Fix the translation commands when a template contains a syntax error (@fabpot)
  • bug #34560 [Config][ReflectionClassResource] Handle parameters with undefined constant as their default values (@fancyweb)
  • bug #34695 [Config] don't break on virtual stack frames in ClassExistenceResource (@nicolas-grekas)
  • bug #34716 [DependencyInjection] fix dumping number-like string parameters (@xabbuh)
  • bug #34558 [Console] Fix autocomplete multibyte input support (@fancyweb)
  • bug #34130 [Console] Fix commands description with numeric namespaces (@fancyweb)
  • bug #34632 [Console] Fix trying to access array offset on value of type int (@Tavafi)
  • bug #34668 [Cache] Make sure we get the correct number of values from redis::mget() (@thePanz)
  • bug #34533 [Monolog Bridge] Fixed accessing static property as non static. (@Sander-Toonen)
  • bug #34385 Avoid empty "If-Modified-Since" header in validation request (@mpdude)
  • bug #34458 [Validator] ConstraintValidatorTestCase: add missing return value to mocked validate method calls (@ogizanagi)
  • bug #34366 [HttpFoundation] Allow redirecting to URLs that contain a semicolon (@JayBizzle)
  • bug #34410 [HttpFoundation] Fix MySQL column type definition. (@jbroutier)
  • bug #34396 [Finder] Allow ssh2 stream wrapper for sftp (@damienalexandre)
  • bug #34381 [WebProfilerBundle] Require symfony/twig-bundle (@fancyweb)

[PR] https://github.com/symfony/symfony/pull/34740

Changelog (since https://github.com/symfony/symfony/compare/v3.4.34...v3.4.35)

  • bug #34344 [Console] Constant STDOUT might be undefined (@nicolas-grekas)
  • security #cve-2019-18889 [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances (@nicolas-grekas)
  • security #cve-2019-18888 [HttpFoundation] fix guessing mime-types of files with leading dash (@nicolas-grekas)
  • security #cve-2019-18887 [HttpKernel] Use constant time comparison in UriSigner (@stof)

[PR] https://github.com/symfony/symfony/pull/34350
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v3.4.33...v3.4.34)

  • bug #34297 [DI] fix locators with numeric keys (@nicolas-grekas)
  • bug #34282 [DI] Dont cache classes with missing parents (@nicolas-grekas)
  • bug #34181 [Stopwatch] Fixed bug in getDuration when counting multiple ongoing periods (@TimoBakx)
  • bug #34179 [Stopwatch] Fixed a bug in StopwatchEvent::getStartTime (@TimoBakx)
  • bug #34203 [FrameworkBundle] [HttpKernel] fixed correct EOL and EOM month (@erics86)

[PR] https://github.com/symfony/symfony/pull/34322

Changelog (since https://github.com/symfony/symfony/compare/v3.4.32...v3.4.33)

  • bug #33998 [Config] Disable default alphabet sorting in glob function due of unstable sort (@hurricane-voronin)
  • bug #34144 [Serializer] Improve messages for unexpected resources values (@fancyweb)
  • bug #34080 [SecurityBundle] correct types for default arguments for firewall configs (@shieldo)
  • bug #33999 [Form] Make sure to collect child forms created on *_SET_DATA events (@yceruto)
  • bug #34021 [TwigBridge] do not render errors for checkboxes twice (@xabbuh)
  • bug #34041 [HttpKernel] fix wrong removal of the just generated container dir (@nicolas-grekas)
  • bug #34023 [Dotenv] allow LF in single-quoted strings (@nicolas-grekas)
  • bug #33818 [Yaml] Throw exception for tagged invalid inline elements (@gharlan)
  • bug #33948 [PropertyInfo] Respect property name case when guessing from public method name (@antograssiot)
  • bug #33962 [Cache] fixed TagAwareAdapter returning invalid cache (@v-m-i)
  • bug #33965 [HttpFoundation] Add plus character + to legal mime subtype (@ilzrv)
  • bug #32943 [Dotenv] search variable values in ENV first then env file (@soufianZantar)
  • bug #33943 [VarDumper] fix resetting the "bold" state in CliDumper (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/34208

Changelog (since https://github.com/symfony/symfony/compare/v3.4.31...v3.4.32)

  • bug #33834 [Validator] Fix ValidValidator group cascading usage (@fancyweb)
  • bug #33841 [VarDumper] fix dumping uninitialized SplFileInfo (@nicolas-grekas)
  • bug #33799 [Security]: Don't let falsy usernames slip through impersonation (@j4nr6n)
  • bug #33814 [HttpFoundation] Check if data passed to SessionBagProxy::initialize is an array (@mynameisbogdan)
  • bug #33805 [FrameworkBundle] Fix wrong returned status code in ConfigDebugCommand (@jschaedl)
  • bug #33781 [AnnotationCacheWarmer] add RedirectController to annotation cache (@jenschude)
  • bug #33777 Fix the :only-of-type pseudo class selector (@jakzal)
  • bug #32051 [Serializer] Add CsvEncoder tests for PHP 7.4 (@ro0NL)
  • feature #33776 Copy phpunit.xsd to a predictable path (@julienfalque)
  • bug #33759 [Security/Http] fix parsing X509 emailAddress (@nicolas-grekas)
  • bug #33733 [Serializer] fix denormalization of string-arrays with only one element (@mkrauser)
  • bug #33754 [Cache] fix known tag versions ttl check (@SwenVanZanten)
  • bug #33646 [HttpFoundation] allow additinal characters in not raw cookies (@marie)
  • bug #33748 [Console] Do not include hidden commands in suggested alternatives (@m-vo)
  • bug #33625 [DependencyInjection] Fix wrong exception when service is synthetic (@k0d3r1s)
  • bug #32522 [Validator] Accept underscores in the URL validator, as the URL will load (@battye)
  • bug #32437 Fix toolbar load when GET params are present in "_wdt" route (@Molkobain)
  • bug #32925 [Translation] Collect original locale in case of fallback translation (@digilist)
  • bug #31198 [FrameworkBundle] Fix framework bundle lock configuration not working as expected (@HypeMC)
  • bug #33719 [Cache] dont override native Memcached options (@nicolas-grekas)
  • bug #33675 [PhpUnit] Fix usleep mock return value (@fabpot)
  • bug #33618 fix tests depending on other components' tests (@xabbuh)
  • bug #33626 [PropertyInfo] ensure compatibility with type resolver 0.5 (@xabbuh)
  • bug #33620 [Twig] Fix Twig config extra keys (@fabpot)
  • bug #33571 [Inflector] add support 'see' to 'ee' for singularize 'fees' to 'fee' (@maxhelias)
  • bug #32763 [Console] Get dimensions from stty on windows if possible (@rtek)
  • bug #33518 [Yaml] don't dump a scalar tag value on its own line (@xabbuh)
  • bug #32818 [HttpKernel] Fix getFileLinkFormat() to avoid returning the wrong URL in Profiler (@Arman-Hosseini)
  • bug #33487 [HttpKernel] Fix Apache mod_expires Session Cache-Control issue (@pbowyer)
  • bug #33439 [Validator] Sync string to date behavior and throw a better exception (@fancyweb)
  • bug #32903 [PHPUnit Bridge] Avoid registering listener twice (@alexpott)
  • bug #33402 [Finder] Prevent unintentional file locks in Windows (@jspringe)
  • bug #33396 Fix #33395 PHP 5.3 compatibility (@kylekatarnls)
  • bug #33385 [Console] allow Command::getName() to return null (@nicolas-grekas)
  • bug #33353 Return null as Expire header if it was set to null (@danrot)
  • bug #33382 [ProxyManager] remove ProxiedMethodReturnExpression polyfill (@nicolas-grekas)
  • bug #33377 [Yaml] fix dumping not inlined scalar tag values (@xabbuh)

[PR] https://github.com/symfony/symfony/pull/

Changelog (since https://github.com/symfony/symfony/compare/v3.4.30...v3.4.31)

  • bug #33335 [DependencyInjection] Fixed the getServiceIds implementation to always return aliases (@pdommelen)
  • bug #33244 [Router] Fix TraceableUrlMatcher behaviour with trailing slash (@Xavier Leune)
  • bug #33172 [Console] fixed a PHP notice when there is no function in the stack trace of an Exception (@fabpot)
  • bug #33157 Fix getMaxFilesize() returning zero (@ausi)
  • bug #33139 [Intl] Cleanup unused language aliases entry (@ro0NL)
  • bug #33066 [Serializer] Fix negative DateInterval (@jderusse)
  • bug #33033 [Lock] consistently throw NotSupportException (@xabbuh)
  • bug #32516 [FrameworkBundle][Config] Ignore exceptions thrown during reflection classes autoload (@fancyweb)
  • bug #32981 Fix tests/code for php 7.4 (@jderusse)
  • bug #32992 [ProxyManagerBridge] Polyfill for unmaintained version (@jderusse)
  • bug #32933 [PhpUnitBridge] fixed PHPUnit 8.3 compatibility: method handleError was renamed to __invoke (@karser)
  • bug #32947 [Intl] Support DateTimeInterface in IntlDateFormatter::format (@pierredup)
  • bug #32838 [FrameworkBundle] Detect indirect env vars in routing (@ro0NL)
  • bug #32918 [Intl] Order alpha2 to alpha3 mapping (@ro0NL)
  • bug #32902 [PhpUnitBridge] Allow sutFqcnResolver to return array (@VincentLanglet)
  • bug #32682 [HttpFoundation] Revert getClientIp @return docblock (@ossinkine)
  • bug #32910 [Yaml] PHP-8: Uncaught TypeError: abs() expects parameter 1 to be int or float, string given (@Aleksandr Dankovtsev)
  • bug #32870 #32853 Check if $this->parameters is array. (@ABGEO07)
  • bug #32868 [PhpUnitBridge] Allow symfony/phpunit-bridge > 4.2 to be installed with phpunit 4.8 (@jderusse)
  • bug #32767 [Yaml] fix comment in multi line value (@soufianZantar)
  • bug #32790 [HttpFoundation] Fix getMaxFilesize (@bennyborn)
  • bug #32796 [Cache] fix warning on PHP 7.4 (@jpauli)
  • bug #32806 [Console] fix warning on PHP 7.4 (@rez1dent3)
  • bug #32809 Don't add object-value of static properties in the signature of container metadata-cache (@arjenm)
  • bug #30096 [DI] Fix dumping Doctrine-like service graphs (bis) (@weaverryan, @nicolas-grekas)
  • bug #32799 [HttpKernel] do not stopwatch sections when profiler is disabled (@Tobion)

[PR] https://github.com/symfony/symfony/pull/33344

Changelog (since https://github.com/symfony/symfony/compare/v3.4.29...v3.4.30)

  • bug #32503 Fix multiSelect ChoiceQuestion when answers have spaces (@IceMaD)
  • bug #32688 [Yaml] fix inline handling when dumping tagged values (@xabbuh)
  • bug #32644 [WebProfileBundle] Avoid getting right to left style (@Arman-Hosseini)
  • bug #32679 [Intl] relax some date parser patterns (@xabbuh)
  • bug #31303 [VarDumper] Use \ReflectionReference for determining if a key is a reference (php >= 7.4) (@dorumd, @nicolas-grekas)
  • bug #32485 [Validator] Added support for validation of giga values (@kernig)
  • bug #32572 Bump minimum version of symfony/phpunit-bridge (@fancyweb)
  • bug #32438 [Serializer] XmlEncoder: don't cast padded strings (@ogizanagi)
  • bug #32579 [Config] Do not use absolute path when computing the vendor freshness (@lyrixx)
  • bug #32563 Container*::getServiceIds() should return strings (@mathroc)
  • bug #32466 [Config] Fix for signatures of typed properties (@tvandervorm)
  • bug #32500 [Debug][DebugClassLoader] Include found files instead of requiring them (@fancyweb)
  • bug #32464 [WebProfilerBundle] Fix Twig 1.x compatibility (@yceruto)
  • bug #31620 [FrameworkBundle] Inform the user when save_path will be ignored (@gnat42)
  • bug #32096 Don't assume port 0 for X-Forwarded-Port (@alexbowers, @xabbuh)
  • bug #31267 [Translator] Load plurals from mo files properly (@Stadly)
  • bug #31266 [Translator] Load plurals from po files properly (@Stadly)
  • bug #32421 [EventDispatcher] Add tag kernel.rest on 'debug.event_dispatcher' service (@lyrixx)
  • bug #32379 [SecurityBundle] conditionally register services (@xabbuh)
  • bug #32363 [FrameworkBundle] reset cache pools between requests (@nicolas-grekas)
  • bug #32365 [DI] fix processing of regular parameter bags by MergeExtensionConfigurationPass (@nicolas-grekas)
  • bug #32187 [PHPUnit] Fixed composer error on Windows (@misterx)
  • bug #32206 Catch JsonException and rethrow in JsonEncode (@phil-davis)
  • bug #32200 [Security/Core] work around sodium_compat issue (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/32784

Changelog (since https://github.com/symfony/symfony/compare/v3.4.28...v3.4.29)

  • bug #32137 [HttpFoundation] fix accessing session bags (@xabbuh)
  • bug #32164 [EventDispatcher] collect called listeners information only once (@xabbuh)
  • bug #32173 [FrameworkBundle] Fix calling Client::getProfile() before sending a request (@dunglas)
  • bug #32163 [DoctrineBridge] Fix type error (@norkunas)
  • bug #32170 [Security/Core] Don't use ParagonIE_Sodium_Compat (@nicolas-grekas)
  • bug #32123 [Form] fix translation domain (@xabbuh)
  • bug #32116 [FrameworkBundle] tag the FileType service as a form type (@xabbuh)
  • bug #32090 [Debug] workaround BC break in PHP 7.3 (@nicolas-grekas)
  • bug #32071 Fix expired lock not cleaned (@jderusse)
  • bug #32057 [HttpFoundation] Fix SA/phpdoc JsonResponse (@ro0NL)
  • bug #32025 SimpleCacheAdapter fails to cache any item if a namespace is used (@moufmouf)
  • bug #32037 [Form] validate composite constraints in all groups (@xabbuh)
  • bug #32007 [Serializer] Handle true and false appropriately in CSV encoder (@battye)
  • bug #32000 [Routing] fix absolute url generation when scheme is not known (@Tobion)
  • bug #32024 [VarDumper] fix dumping objects that implement __debugInfo() (@nicolas-grekas)
  • bug #31962 Fix reporting unsilenced deprecations from insulated tests (@nicolas-grekas)
  • bug #31865 [Form] Fix wrong DateTime on outdated ICU library (@aweelex)
  • bug #31863 [HttpFoundation] Fixed case-sensitive handling of cache-control header in RedirectResponse constructor (@Ivo)
  • bug #31869 Fix json-encoding when JSON_THROW_ON_ERROR is used (@nicolas-grekas)
  • bug #31860 [HttpFoundation] work around PHP 7.3 bug related to json_encode() (@nicolas-grekas)
  • bug #31407 [Security] added support for updated "distinguished name" format in x509 authentication (@Robert Kopera)
  • bug #31654 [HttpFoundation] Do not set X-Accel-Redirect for paths outside of X-Accel-Mapping (@vilius-g)

[PR] https://github.com/symfony/symfony/pull/32190

Changelog (since https://github.com/symfony/symfony/compare/v3.4.27...v3.4.28)

  • bug #31584 [Workflow] Do not trigger extra guards (@lyrixx)
  • bug #31349 [WebProfilerBundle] Use absolute URL for profiler links (@Alumbrados)
  • bug #31541 [DI] fix using bindings with locators of service subscribers (@nicolas-grekas)
  • bug #31568 [Process] Fix infinite waiting for stopped process (@mshavliuk)
  • bug #31551 [ProxyManager] isProxyCandidate() does not take into account interfaces (@andrerom)
  • bug #31335 [Doctrine] Respect parent class contract in ContainerAwareEventManager (@Koc)
  • bug #31421 [Routing][AnnotationClassLoader] fix utf-8 encoding in default route name (@przemyslaw-bogusz)
  • bug #31510 Use the current working dir as default first arg in 'link' binary (@lyrixx)
  • bug #31535 [Debug] Wrap call to require_once in a try/catch (@lyrixx)
  • bug #31438 [Serializer] Fix denormalization of object with variadic constructor typed argument (@ajgarlag)
  • bug #31475 [HttpFoundation] Allow set 'None' on samesite cookie flag (@markitosgv)
  • bug #31261 [Console] Commands with an alias should not be recognized as ambiguous when using register (@Simperfit)
  • bug #31371 [DI] Removes number of elements information in debug mode (@jschaedl)
  • bug #31418 [FrameworkBundle] clarify the possible class/interface of the cache (@xabbuh)
  • bug #31411 [Intl] Fix root fallback locale (@ro0NL)
  • bug #31377 [Console] Fix auto-complete for ChoiceQuestion (multi-select answers) (@battye)
  • bug #31380 [WebProfilerBundle] Don't filter submitted IP values (@javiereguiluz)

[PR] https://github.com/symfony/symfony/pull/31646

Changelog (since https://github.com/symfony/symfony/compare/v3.4.26...v3.4.27)

  • bug #31338 Revert "bug #30620 [FrameworkBundle][HttpFoundation] make session service resettable (dmaicher)" (@nicolas-grekas)
  • bug #31326 fix ConsoleFormatter - call to a member function format() on string (@keksa)
  • bug #31331 [Workflow] Fixed dumping when many transition with same name exist (@lyrixx)
  • bug #31302 [FramworkBundle] mark any env vars found in the ide setting as used (@nicolas-grekas)
  • bug #31290 [TwigBundle] Use the apply tag instead of the filter tag (@greg0ire)
  • bug #31275 [Translator] Preserve default domain when extracting strings from php files (@Stadly)
  • bug #31213 [WebProfilerBundle] Intercept redirections only for HTML format (@javiereguiluz)

[PR] https://github.com/symfony/symfony/pull/31345

Changelog (since https://github.com/symfony/symfony/compare/v3.4.25...v3.4.26)

  • bug #31084 [HttpFoundation] Make MimeTypeExtensionGuesser case insensitive (@vermeirentony)
  • bug #31142 Revert "bug #30423 [Security] Rework firewall's access denied rule (dimabory)" (@chalasr)
  • security #cve-2019-10910 [DI] Check service IDs are valid (@nicolas-grekas)
  • security #cve-2019-10909 [FrameworkBundle][Form] Fix XSS issues in the form theme of the PHP templating engine (@stof)
  • security #cve-2019-10912 [Cache][PHPUnit Bridge] Prevent destructors with side-effects from being unserialized (@nicolas-grekas)
  • security #cve-2019-10911 [Security] Add a separator in the remember me cookie hash (@pborreli)
  • security #cve-2019-10913 [HttpFoundation] reject invalid method override (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/31146
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v3.4.24...v3.4.25)

  • bug #29944 [DI] Overriding services autowired by name under _defaults bind not working (@przemyslaw-bogusz, @renanbr)
  • bug #31076 [HttpKernel] Fixed LoggerDataCollector crashing on empty file (@althaus)
  • bug #31071 property normalizer should also pass format and context to isAllowedAttribute (@dbu)
  • bug #31059 Show more accurate message in profiler when missing stopwatch (@linaori)
  • bug #30423 [Security] Rework firewall's access denied rule (@dimabory)
  • bug #31012 [Process] Fix missing $extraDirs when open_basedir returns (@arsonik)
  • bug #30907 [Serializer] Respect ignored attributes in cache key of normalizer (@dbu)
  • bug #30085 Fix TestRunner compatibility to PhpUnit 8 (@alexander-schranz)
  • bug #30977 [serializer] prevent mixup in normalizer of the object to populate (@dbu)
  • bug #30976 [Debug] Fixed error handling when an error is already handled when another error is already handled (5) (@lyrixx)
  • bug #30979 Fix the configurability of CoreExtension deps in standalone usage (@stof)
  • bug #30918 [Cache] fix using ProxyAdapter inside TagAwareAdapter (@dmaicher)
  • bug #30961 [Form] fix translating file validation error message (@xabbuh)
  • bug #30951 Handle case where no translations were found (@greg0ire)
  • bug #29800 [Validator] Only traverse arrays that are cascaded into (@corphi)
  • bug #30921 [Translator] Warm up the translations cache in dev (@tgalopin)
  • bug #30922 [TwigBridge] fix horizontal spacing of inlined Bootstrap forms (@xabbuh)
  • bug #30895 [Form] turn failed file uploads into form errors (@xabbuh)
  • bug #30919 [Translator] Fix wrong dump for PO files (@deguif)
  • bug #30889 [DependencyInjection] Fix a wrong error when using a factory (@Simperfit)
  • bug #30879 [Form] Php doc fixes and cs + optimizations (@Jules Pietri)
  • bug #30883 [Console] Fix stty not reset when aborting in QuestionHelper::autocomplete() (@Simperfit)
  • bug #30878 [Console] Fix inconsistent result for choice questions in non-interactive mode (@chalasr)

[PR] https://github.com/symfony/symfony/pull/31123

Changelog (since https://github.com/symfony/symfony/compare/v3.4.23...v3.4.24)

  • bug #30660 [Bridge][Twig] DebugCommand - fix escaping and filter (@SpacePossum)
  • bug #30720 Fix getSetMethodNormalizer to correctly ignore the attributes specified in "ignored_attributes" (@Emmanuel BORGES)
  • bug #30749 [Serializer] Added check of constuctor modifiers to AbstractNormalizer (@NekaKawaii)
  • bug #30776 [Routing] Fix routes annotation loading with glob pattern (@snoob)
  • bug #30773 [DependencyInjection] Fix hardcoded hotPathTagName (@jderusse)
  • bug #30737 [Validator] Improve constraint default option check (@vudaltsov)
  • bug #30736 [Validator] Fix annotation default for @Count and @Length (@vudaltsov)
  • bug #30620 [FrameworkBundle][HttpFoundation] make session service resettable (@dmaicher)
  • bug #30640 [Phpunit] fixed support for PHP 5.3 (@fabpot)
  • bug #30595 Do not validate child constraints if form has no validation groups (@maryo)
  • bug #30479 Check if Client exists when test.client does not exist, to provide clearer exception message (@SerkanYildiz)
  • feature #30584 [Intl] Add compile binary (@ro0NL)
  • bug #30487 Fix Cache error while using anonymous class (@Emmanuel BORGES)
  • bug #30548 Correct language code for ukrainian language (@stanleyk)
  • bug #30518 [Cache] Fix perf when using RedisCluster by reducing roundtrips to the servers (@nicolas-grekas)
  • bug #30515 [Cache] Only delete one key at a time when on Predis + Cluster (@andrerom)
  • bug #30507 [Routing] Fixed XML options resolution (@Jules Pietri)
  • bug #30506 [TwigBridge] remove deprecation triggered when using Twig 2.7 (@nicolas-grekas)
  • bug #30496 [PHPUnit-Bridge] override some Composer environment variables (@nicoweb)
  • bug #30505 [TwigBridge] Remove usages of the spaceless tag (@nicolas-grekas)
  • bug #30474 compatibility with phpunit8 (@garak)
  • bug #30497 [HttpKernel] Change default log level for output streams (@yceruto)
  • bug #30498 [translation] Update defaut format from yml to yaml (@GaryPEGEOT)
  • bug #30437 [Debug] detect annotations before blank docblock lines (@xabbuh)
  • bug #30392 [PropertyAccess] Fixed PropertyPathBuilder remove that fails to reset internal indexes (@GregOriol)

[PR] https://github.com/symfony/symfony/pull/30837

Changelog (since https://github.com/symfony/symfony/compare/v3.4.22...v3.4.23)

  • bug #26532 [HttpKernel] Correctly merging cache directives in HttpCache/ResponseCacheStrategy (@aschempp)
  • bug #30363 Fixed the DebugClassLoader compatibility with eval()'d code on Darwin (@skalpa)
  • bug #30329 [Form] IntegerType: reject submitted non-integer numbers (@xabbuh)
  • bug #30347 [Security] Change FormAuthenticator if condition (@PReimers)
  • bug #30354 [Console] handles multi-byte characters in autocomplete (@jls-esokia)
  • bug #30351 Fix getItems() performance issue with RedisCluster (php-redis) (@andrerom)
  • bug #30350 [VarDumper] Keep a ref to objects to ensure their handle cannot be reused while cloning (@nicolas-grekas)
  • bug #30327 [HttpKernel] Fix possible infinite loop of exceptions (@enumag)
  • bug #27601 [Routing] fix URL generation with look-around requirements (@nasimnabavi)
  • bug #30277 [Console] Prevent ArgvInput::getFirstArgument() from returning an option value (@chalasr)
  • bug #29981 [Security] Complain about an empty decision strategy (@corphi)
  • bug #29822 [EventDispatcher] Fix unknown priority (@ro0NL)
  • bug #30324 [Validator] Fixed duplicate UUID (@ralfkuehnel)
  • bug #30265 [Form] do not validate non-submitted form fields in PATCH requests (@xabbuh)
  • bug #30313 Avoid mutating the Finder when building the iterator (@stof)
  • bug #30271 [Console] Fix command testing with missing user inputs (@chalasr)
  • bug #30278 Remove unnecessary ProgressBar stdout writes (fixes flickering) (@ostrolucky)
  • bug #30274 [VarDumper] fix serializing Stub instances (@nicolas-grekas)
  • bug #30247 Don't resolve the Deprecation error handler mode until a deprecation is triggered (@ossinkine)
  • bug #30264 [Debug][ErrorHandler] Preserve next error handler (@fancyweb)
  • bug #30090 [FrameworkBundle] add constraint validators before optimizations (@xabbuh)
  • feature #30126 [Form] forward valid numeric values to transform() (@xabbuh)
  • bug #30122 [Security] fix switch user without having current token (@Antoine Lamirault)
  • bug #30136 use PropertyAccessorInterface instead of PropertyAccessor (@nick-zh)
  • bug #30124 Fix KernelTestCase compatibility for PhpUnit 8 (bis) (@nicolas-grekas)
  • bug #30061 [Form] render integer types with grouping as text input (@xabbuh)
  • bug #30063 [Form] don't lose int precision with not needed type casts (@xabbuh)
  • bug #30076 [Form] ignore _method forms in NativeRequestHandler (@xabbuh)
  • bug #30084 Fix KernelTestCase compatibility for PhpUnit 8 (@alexander-schranz)
  • bug #29884 [Form] CsrfValidationListener marks the token as invalid if it is not a string (@umpirsky)
  • bug #30062 [Form] do not overwrite the constraint being evaluated (@xabbuh)
  • bug #30087 [PhpUnitBridge] fix PHP 5.3 compat (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/30430

Changelog (since https://github.com/symfony/symfony/compare/v3.4.21...v3.4.22)

  • bug #30046 [DI] Fix dumping Doctrine-like service graphs (@nicolas-grekas)
  • bug #30028 [Form] fix some docblocks and type checks (@xabbuh)
  • bug #30037 Disable Twig in the profiler menu when Twig is not used (@javiereguiluz)
  • bug #30026 [VarDumper] dont implement Serializable in Stub (@nicolas-grekas)
  • bug #30034 [Config] ensure moving away from Serializable wont break cache:clear (@nicolas-grekas)
  • bug #30006 [Security] don't do nested calls to serialize() (@nicolas-grekas, @Renan)
  • bug #30007 [FrameworkBundle] Support use of hyphen in asset package name (@damaya, @XuruDragon)
  • bug #29764 [HttpFoundation] Check file exists before unlink (@adam-mospan)
  • bug #29783 [HttpFoundation] MemcachedSessionHandler::close() must close connection (@grachevko)
  • bug #29844 [Console] Fixed #29835: ConfirmationQuestion with default true for answer '0' (@mrthehud)
  • bug #29869 [Debug][ErrorHandler] Preserve our error handler when a logger sets another one (@fancyweb)
  • bug #29926 [Form] Changed UrlType input type to text when default_protocol is not null (@MatTheCat)
  • bug #29961 [Translation] Concatenated translation messages (@Stadly)
  • bug #29920 [Debug][DebugClassLoader] Match more cases for final, deprecated and internal classes / methods extends (@fancyweb)
  • bug #29863 [Security] Do not mix password_*() API with libsodium one (@chalasr)
  • bug #29894 [DependencyInjection] the string "0" is a valid service identifier (@xabbuh)
  • bug #29885 Update MimeType extensions (@fabpot)
  • bug #29875 [TwigBridge] fix compatibility with Twig >= 2.6.1 (@xabbuh)
  • bug #29873 [Debug] remove return type hint for PHP 5 compatibility (@xabbuh)
  • bug #29837 Fix SwiftMailerHandler to support Monolog's latest reset functionality (@Seldaek)
  • bug #29853 Revert "bug #29597 [DI] fix reporting bindings on overriden services as unused" (@mmarynich)
  • bug #29833 [DebugClassLoader] expose proxyfied findFile() method (@fancyweb)

[PR] https://github.com/symfony/symfony/pull/30067

Changelog (since https://github.com/symfony/symfony/compare/v3.4.20...v3.4.21)

  • bug #29494 [HttpFoundation] Fix request uri when it starts with double slashes (@alquerci)
  • bug #29679 [HttpKernel] Correctly Render Signed URIs Containing Fragments (@zanbaldwin)
  • bug #29754 Ensure final input of CommandTester works with default (@Firehed)
  • bug #29695 [Form] Do not ignore the choice groups for caching (@vudaltsov)
  • bug #29738 [Intl] handle null date and time types (@xabbuh)
  • bug #29704 [FrameworkBundle] improve errors in tests missing the BrowserKit component (@xabbuh)
  • bug #29617 [Console] Add specific replacement for help text in single command applications (@codedmonkey)
  • bug #29714 [Event Dispatcher] fixed 29703: TraceableEventDispatcher reset() callStack to null (@mlievertz)
  • bug #29597 [DI] fix reporting bindings on overriden services as unused (@nicolas-grekas)
  • bug #29639 [Yaml] detect circular references (@xabbuh)
  • bug #29411 [EventDispatcher] Revers event tracing order (@ro0NL)
  • bug #29533 Fixed public directory when configured in composer.json (@alexander-schranz)
  • bug #29619 [Console] OutputFormatter: move strtolower to createStyleFromString (@ogizanagi)
  • bug #29621 [Security] Prefer clone() over unserialize(serialize()) for user refreshment (@chalasr)
  • bug #29587 [Debug] ignore underscore vs backslash namespaces in DebugClassLoader (@nicolas-grekas)
  • bug #29584 [FrameworkBundle] fix describing routes with no controllers (@nicolas-grekas)
  • bug #29582 [DI] move RegisterServiceSubscribersPass before DecoratorServicePass (@kbond)
  • bug #29527 [TwigBridge][Form] Prevent multiple rendering of form collection prototypes (@Shoplifter)
  • bug #29571 [Yaml] ensures that the mb_internal_encoding is reset to its initial value (@Jörn Lang)
  • bug #29513 [Hackday][Serializer] Deserialization ignores argument type hint from phpdoc for array in constructor argument (@karser)
  • bug #29323 [Security] defer log message in guard authenticator (@eschultz-magix)
  • bug #29531 [Validator] Added IBAN format for Vatican City State (@raulfraile)
  • bug #29307 [Form] Filter arrays out of scalar form types (@nicolas-grekas)
  • bug #29500 [Form] filter out invalid Intl values (@xabbuh)
  • bug #29499 [Validator] Fixed grouped composite constraints (@HeahDude)

[PR] https://github.com/symfony/symfony/pull/29801

Changelog (since https://github.com/symfony/symfony/compare/v3.4.19...v3.4.20)

  • security #cve-2018-19790 [Security\Http] detect bad redirect targets using backslashes (@xabbuh)
  • security #cve-2018-19789 [Form] Filter file uploads out of regular form types (@nicolas-grekas)
  • bug #29436 [Cache] Fixed Memcached adapter doClear()to call flush() (@raitocz)
  • bug #29441 [Routing] ignore trailing slash for non-GET requests (@nicolas-grekas)
  • bug #29432 [DI] dont inline when lazy edges are found (@nicolas-grekas)
  • bug #29413 [Serializer] fixed DateTimeNormalizer to maintain microseconds when a different timezone required (@rvitaliy)
  • bug #29424 [Routing] fix taking verb into account when redirecting (@nicolas-grekas)
  • bug #29414 [DI] Fix dumping expressions accessing single-use private services (@chalasr)
  • bug #29375 [Validator] Allow ConstraintViolation::__toString() to expose codes that are not null or emtpy strings (@phansys)
  • bug #29376 [EventDispatcher] Fix eventListener wrapper loop in TraceableEventDispatcher (@jderusse)
  • bug #29343 [Form] Handle all case variants of "nan" when parsing a number (@mwhudson, @xabbuh)
  • bug #29355 [PropertyAccess] calculate cache keys for property setters depending on the value (@xabbuh)
  • bug #29369 [DI] fix combinatorial explosion when analyzing the service graph (@nicolas-grekas)
  • bug #29349 [Debug] workaround opcache bug mutating "$this" !?! (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/29488
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v3.4.18...v3.4.19)

  • bug #29318 [Console] Move back root exception to stack trace in verbose mode (@chalasr)
  • bug #29332 [PropertyAccess] make cache keys encoding bijective (@nicolas-grekas)
  • bug #29297 [Routing] fix trailing slash redirection when using RedirectableUrlMatcher (@nicolas-grekas)
  • bug #29313 [PropertyAccessor] fix encoding of cache keys (@nicolas-grekas)
  • bug #28917 [DoctrineBridge] catch errors while converting to db values in data collector (@alekitto)
  • bug #29317 [WebProfiler] Detect non-file paths in file viewer (@ro0NL)
  • bug #29305 [EventDispatcher] Unwrap wrapped listeners internally (@ro0NL)
  • bug #27314 [DoctrineBridge] fix case sensitivity issue in RememberMe\DoctrineTokenProvider (@PF4Public)
  • bug #29308 [Translation] Use XLIFF source rather than resname when there's no target (@thewilkybarkid)
  • bug #26244 [BrowserKit] fixed BC Break for HTTP_HOST header (@brizzz)
  • bug #28147 [DomCrawler] exclude fields inside "template" tags (@Gorjunov)
  • bug #29222 [Dotenv] properly parse backslashes in unquoted env vars (@xabbuh)
  • bug #29256 [HttpFoundation] Fixed absolute Request URI with default port (@thomasbisignani)
  • bug #29274 [Routing] Remove duplicate schemes and methods for invokable controllers (@claudusd)
  • bug #29271 [HttpFoundation] Fix trailing space for mime-type with parameters (@Sascha Dens)
  • bug #29243 [Cache] fix optimizing Psr6Cache for AdapterInterface pools (@nicolas-grekas)
  • bug #29247 [DI] fix taking lazy services into account when dumping the container (@nicolas-grekas)
  • bug #29249 [Form] Fixed empty data for compound date interval (@HeahDude)
  • bug #29265 [Bridge/PhpUnit] Use composer to download phpunit (@nicolas-grekas)
  • bug #28769 [FrameworkBundle] deal with explicitly enabled workflow nodes (@xabbuh)
  • bug #29223 [Validator] Added the missing constraints instance checks (@thomasbisignani)
  • bug #28966 [PropertyAccessor] Fix unable to write to singular property using setter while plural adder/remover exist (@karser)
  • bug #29182 [Form] Fixed empty data for compound date types (@HeahDude)
  • bug #29185 [Form] Fixed keeping hash of equal \DateTimeInterface on submit (@HeahDude)
  • bug #29137 [Workflow][FrameworkBundle] fixed guard event names for transitions (@destillat, @lyrixx)
  • bug #28731 [Form] invalidate forms on transformation failures (@xabbuh)
  • bug #29152 [Config] Unset key during normalization (@ro0NL)
  • bug #29165 [DI] align IniFileLoader to PHP bugfix #76965 (@nicolas-grekas)
  • bug #29115 Change button_widget class to btn-primary (@neFAST)
  • bug #29131 [Dotenv] dont use getenv() to read SYMFONY_DOTENV_VARS (@nicolas-grekas)
  • bug #29057 [HttpFoundation] replace any preexisting Content-Type headers (@nicolas-grekas)
  • bug #29104 [DI] fix dumping inlined services (@nicolas-grekas)
  • bug #29054 [VarDumper] fix dump of closures created from callables (@nicolas-grekas)
  • bug #29102 [DI] fix GraphvizDumper ignoring inline definitions (@nicolas-grekas)
  • bug #29107 [DI] dont track classes/interfaces used to compute autowiring error messages (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/29334

Changelog (since https://github.com/symfony/symfony/compare/v3.4.17...v3.4.18)

  • bug #28820 [DependencyInjection] Fix tags on multiple decorated service (@Soner Sayakci)
  • bug #29020 Fix ini_get() for boolean values (@deguif)
  • feature #28893 [TwigBundle] Fix usage of TwigBundle without FrameworkBundle (@tgalopin)
  • bug #28861 [DependencyInjection] Skip empty proxy code (@olvlvl)
  • bug #28801 Convert InsufficientAuthenticationException to HttpException with 401 status code (@vincentchalamon)
  • bug #28840 add missing double-quotes to extra_fields output message (@danielkay)
  • bug #28712 [Form] reverse transform RFC 3339 formatted dates (@xabbuh)
  • bug #28813 Fix for race condition in console output stream write (@rudolfratusinski)
  • bug #27772 [Console] Fixes multiselect choice question defaults in non-interactive mode (@veewee)
  • bug #28835 [FrameworkBundle] Setting missing default paths under BC layer (@yceruto)
  • bug #28760 [DI] fix dumping inline services again (@nicolas-grekas)
  • bug #28689 [Process] fix locking of pipe files on Windows (@nicolas-grekas)
  • bug #28704 [Form] fix multi-digit seconds fraction handling (@xabbuh)
  • bug #28793 [SecurityBundle] do not override custom access decision configs (@xabbuh)
  • bug #28783 [FrameworkBundle] add missing cache prefix seed attribute to XSD (@xabbuh)
  • bug #28072 [Security] Do not deauthenticate user when the first refreshed user has changed (@gpekz)
  • bug #28735 [FWBundle] Automatically enable PropertyInfo when using Flex (@dunglas)

[PR] https://github.com/symfony/symfony/pull/29070

Changelog (since https://github.com/symfony/symfony/compare/v3.4.16...v3.4.17)

  • bug #28604 [Finder] fixed root directory access for ftp/sftp wrapper (@DerDu)
  • bug #28688 [FWBundle] Throw if PropertyInfo is enabled, but the component isn't installed (@dunglas)
  • bug #28648 [PHPUnitBridge] Fix ClockMock microtime() format (@acasademont)
  • bug #28678 [DI] fix dumping setters before their inlined instances (@nicolas-grekas)
  • bug #28672 [DI] fix error in dumped container (@nicolas-grekas)
  • bug #28664 [Console] Don't return early as this bypasses the auto exit feature (@duncan3dc)

[PR] https://github.com/symfony/symfony/pull/28705

Changelog (since https://github.com/symfony/symfony/compare/v3.4.15...v3.4.16)

  • bug #28376 [TwigBundle] Fixed caching of templates in src/Resources//views on cache warmup (@yceruto)
  • bug #28565 [HttpFoundation][Security] forward locale and format to subrequests (@nicolas-grekas)
  • bug #28561 [Cache] prevent getting older entries when the version key is evicted (@nicolas-grekas)
  • bug #28562 [HttpFoundation] fix hidding warnings from session handlers (@nicolas-grekas)
  • bug #28545 [Console] Send the right exit code to console.terminate listeners (@mpdude)
  • bug #28553 [Debug] Fix false-positive "MicroKernelTrait::loadRoutes()" method is considered internal" (@nicolas-grekas)
  • bug #28466 [Form] fail reverse transforming invalid RFC 3339 dates (@xabbuh)
  • bug #28540 [Intl] parse numbers terminated with decimal separator (@xabbuh)
  • bug #28548 [Console] Fixed boxed table style with colspan (@ro0NL)
  • bug #28433 [HttpFoundation] Allow reuse of Session between requests if ID did not change (@tgalopin)
  • bug #28508 [Form] forward false label option to nested types (@xabbuh)
  • bug #28471 [MonologBridge] Re-add option option to ignore empty context and extra data (@mpdude)
  • bug #28464 [Form] forward the invalid_message option in date types (@xabbuh)
  • bug #28524 [PhpUnitBridge] fix disabling DeprecationErrorHandler using phpunit.xml file (@soerenbernstein)
  • bug #28512 [DI] fix infinite loop involving self-references in decorated services (@nicolas-grekas)
  • bug #28507 [DI] fix dumping lazy services (@nicolas-grekas)
  • bug #28495 [PhpUnitBridge] Implement startTest rather than startTestSuite (@greg0ire)
  • bug #28480 [DI] Detect circular references with ChildDefinition parent (@Seb33300)
  • bug #28497 [VarDumper] Fix global dump function return value for PHP7 (@patrickcarlohickman)
  • bug #28499 [Ldap] Use shut up operator on connection errors at ldap_start_tls (@Andras Debreczeni)
  • bug #28372 [Form] Fix DateTimeType html5 input format (@franzwilding, @mcfedr)
  • bug #28396 [Intl] Blacklist Eurozone and United Nations in Region Data Generator (@gregurco)
  • bug #28393 [Console] fixed corrupt error output for unknown multibyte short option (@downace)
  • bug #28411 [Debug] fix detecting overriden final/internal methods implemented using traits (@nicolas-grekas)
  • bug #28404 [Controller][ServiceValueResolver] Making method access case insensitive (@nicoweb)
  • bug #28401 [Console] Fix SymfonyQuestionHelper::askQuestion() with choice value as default (@chalasr)
  • bug #28388 [DI] configure inlined services before injecting them when dumping the container (@nicolas-grekas)
  • bug #28377 fix fopen flags (@SpacePossum)
  • bug #27764 [TwigBundle] Fixed caching of templates in default path on cache warmup (@yceruto)
  • bug #28366 [DI] Fix dumping some complex service graphs (@nicolas-grekas)
  • bug #27970 [FileValidator] Format file size in validation message according to binaryFormat option (@jfredon)
  • bug #28029 [TwigBundle] remove cache warmers when Twig cache is disabled (@xabbuh)
  • bug #28344 [HttpKernel][FrameworkBundle] Fix escaping of serialized payloads passed to test clients (@nicolas-grekas)
  • bug #28183 [WebProfilerBundle] fix wrong url when base path is the index (@ismail1432)

[PR] https://github.com/symfony/symfony/pull/28641

Changelog (since https://github.com/symfony/symfony/compare/v3.4.14...v3.4.15)

  • bug #28278 [HttpFoundation] Fix unprepared BinaryFileResponse sends empty file (@wackymole)
  • bug #28284 [PhpUnitBridge] keep compat with composer 1.0 (@nicolas-grekas)
  • bug #28241 [HttpKernel] fix forwarding trusted headers as server parameters (@nicolas-grekas)
  • bug #28220 [PropertyAccess] fix type error handling when writing values (@xabbuh)
  • bug #28249 [Cache] enable Memcached::OPT_TCP_NODELAY to fix perf of misses (@nicolas-grekas)
  • bug #28252 [DoctrineBridge] support __toString as documented for UniqueEntityValidator (@dmaicher)
  • bug #28100 [Security] Call AccessListener after LogoutListener (@chalasr)
  • bug #28060 [DI] Fix false-positive circular ref leading to wrong exceptions or infinite loops at runtime (@nicolas-grekas)
  • bug #28144 [HttpFoundation] fix false-positive ConflictingHeadersException (@nicolas-grekas)
  • bug #28012 [PropertyInfo] Allow nested collections (@jderusse)
  • bug #28055 [PropertyInfo] Allow nested collections (@jderusse)
  • bug #28083 Remove the Expires header when calling Response::expire() (@javiereguiluz)

[PR] https://github.com/symfony/symfony/pull/28290

Changelog (since https://github.com/symfony/symfony/compare/v3.4.13...v3.4.14)

  • security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (@nicolas-grekas)
  • security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (@nicolas-grekas)
  • bug #28003 [HttpKernel] Fixes invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet (@netiul)
  • bug #28007 [FrameworkBundle] fixed guard event names for transitions (@destillat)
  • bug #28045 [HttpFoundation] Fix Cookie::isCleared (@ro0NL)
  • bug #28080 [HttpFoundation] fixed using _method parameter with invalid type (@Phobetor)
  • bug #28052 [HttpKernel] Fix merging bindings for controllers' locators (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/28102
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v3.3.17...v3.3.18)

  • security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (@nicolas-grekas)
  • security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/28099
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v3.4.12...v3.4.13)

  • bug #28005 [HttpKernel] Fixed templateExists on parse error of the template name (@yceruto)
  • bug #27997 Serbo-Croatian has Serbian plural rule (@kylekatarnls)
  • bug #26193 Fix false-positive deprecation notices for TranslationLoader and WriteCheckSessionHandler (@iquito)
  • bug #27941 [WebProfilerBundle] Fixed icon alignment issue using Bootstrap 4.1.2 (@jmsche)
  • bug #27937 [HttpFoundation] reset callback on StreamedResponse when setNotModified() is called (@rubencm)
  • bug #27927 [HttpFoundation] Suppress side effects in 'get' and 'has' methods of NamespacedAttributeBag (@webnet-fr)
  • bug #27923 [Form/Profiler] Massively reducing memory footprint of form profiling pages... (@VincentChalnot)
  • bug #27918 [Console] correctly return parameter's default value on "--" (@seschwar)
  • bug #27904 [Filesystem] fix lock file permissions (@fritzmg)
  • bug #27903 [Lock] fix lock file permissions (@fritzmg)
  • bug #27889 [Form] Replace .initialism with .text-uppercase. (@vudaltsov)
  • bug #27902 Fix the detection of the Process new argument (@stof)
  • bug #27885 [HttpFoundation] don't encode cookie name for BC (@nicolas-grekas)
  • bug #27782 [DI] Fix dumping ignore-on-uninitialized references to synthetic services (@nicolas-grekas)
  • bug #27435 [OptionResolver] resolve arrays (@Doctrs)
  • bug #27728 [TwigBridge] Fix missing path and separators in loader paths list on debug:twig output (@yceruto)
  • bug #27837 [PropertyInfo] Fix dock block lookup fallback loop (@DerManoMann)
  • bug #27758 [WebProfilerBundle] Prevent toolbar links color override by css (@alcalyn)
  • bug #27834 [DI] Don't show internal service id on binding errors (@nicolas-grekas)
  • bug #27831 Check for Hyper terminal on all operating systems. (@azjezz)
  • bug #27794 Add color support for Hyper terminal . (@azjezz)
  • bug #27809 [HttpFoundation] Fix tests: new message for status 425 (@dunglas)
  • bug #27618 [PropertyInfo] added handling of nullable types in PhpDoc (@oxan)
  • bug #27659 [HttpKernel] Make AbstractTestSessionListener compatible with CookieClearingLogoutHandler (@thewilkybarkid)
  • bug #27752 [Cache] provider does not respect option maxIdLength with versioning enabled (@Constantine Shtompel)
  • bug #27776 [ProxyManagerBridge] Fix support of private services (bis) (@nicolas-grekas)
  • bug #27714 [HttpFoundation] fix session tracking counter (@nicolas-grekas, @dmaicher)
  • bug #27747 [HttpFoundation] fix registration of session proxies (@nicolas-grekas)
  • bug #27722 Redesign the Debug error page in prod (@javiereguiluz)
  • bug #27716 [DI] fix dumping deprecated service in yaml (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/28039

Changelog (since https://github.com/symfony/symfony/compare/v3.4.11...v3.4.12)

  • bug #27626 [TwigBundle][DX] Only add the Twig WebLinkExtension if the WebLink component is enabled (@thewilkybarkid)
  • bug #27701 [SecurityBundle] Dont throw if "security.http_utils" is not found (@nicolas-grekas)
  • bug #27690 [DI] Resolve env placeholder in logs (@ro0NL)
  • bug #26534 allow_extra_attributes does not throw an exception as documented (@deviantintegral)
  • bug #27668 [Lock] use 'r+' for fopen (fixes issue on Solaris) (@fritzmg)
  • bug #27669 [Filesystem] fix file lock on SunOS (@fritzmg)
  • bug #27662 [HttpKernel] fix handling of nested Error instances (@xabbuh)
  • bug #26845 [Config] Fixing GlobResource when inside phar archive (@vworldat)
  • bug #27382 [Form] Fix error when rendering a DateIntervalType form with exactly 0 weeks (@krixon)
  • bug #27309 Fix surrogate not using original request (@Toflar)
  • bug #27467 [HttpKernel] fix session tracking in surrogate master requests (@nicolas-grekas)
  • bug #27630 [Validator][Form] Remove BOM in some xlf files (@gautierderuette)
  • bug #27596 [Framework][Workflow] Added support for interfaces (@vudaltsov)
  • bug #27593 [ProxyManagerBridge] Fixed support of private services (@nicolas-grekas)
  • bug #27591 [VarDumper] Fix dumping ArrayObject and ArrayIterator instances (@nicolas-grekas)
  • bug #27581 Fix bad method call with guard authentication + session migration (@weaverryan)
  • bug #27576 [Cache] Fix expiry comparisons in array-based pools (@nicolas-grekas)
  • bug #27556 Avoiding session migration for stateless firewall UsernamePasswordJsonAuthenticationListener (@weaverryan)
  • bug #27452 Avoid migration on stateless firewalls (@weaverryan)
  • bug #27568 [DI] Deduplicate generated proxy classes (@nicolas-grekas)
  • bug #27326 [Serializer] deserialize from xml: Fix a collection that contains the only one element (@webnet-fr)
  • bug #27567 [PhpUnitBridge] Fix error on some Windows OS (@Nsbx)
  • bug #27357 [Lock] Remove released semaphore (@jderusse)
  • bug #27416 TagAwareAdapter over non-binary memcached connections corrupts memcache (@Aleksey Prilipko)
  • bug #27514 [Debug] Pass previous exception to FatalErrorException (@pmontoya)
  • bug #27516 Revert "bug #26138 [HttpKernel] Catch HttpExceptions when templating is not installed (cilefen)" (@nicolas-grekas)
  • bug #27318 [Cache] memcache connect should not add duplicate entries on sequential calls (@Aleksey Prilipko)
  • bug #27389 [Serializer] Fix serializer tries to denormalize null values on nullable properties (@ogizanagi)
  • bug #27272 [FrameworkBundle] Change priority of AddConsoleCommandPass to TYPE_BEFORE_REMOVING (@upyx)
  • bug #27396 [HttpKernel] fix registering IDE links (@nicolas-grekas)
  • bug #26973 [HttpKernel] Set first trusted proxy as REMOTE_ADDR in InlineFragmentRenderer. (@kmadejski)
  • bug #27303 [Process] Consider "executable" suffixes first on Windows (@sanmai)
  • bug #27297 Triggering RememberMe's loginFail() when token cannot be created (@weaverryan)
  • bug #27344 [HttpKernel] reset kernel start time on reboot (@kiler129)
  • bug #27365 [Serializer] Check the value of enable_max_depth if defined (@dunglas)
  • bug #27358 [PhpUnitBridge] silence some stderr outputs (@ostrolucky)
  • bug #27366 [DI] never inline lazy services (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/27704

Changelog (since https://github.com/symfony/symfony/compare/v3.4.10...v3.4.11)

  • bug #27364 [DI] Fix bad exception on uninitialized references to non-shared services (@nicolas-grekas)
  • bug #27359 [HttpFoundation] Fix perf issue during MimeTypeGuesser intialization (@nicolas-grekas)
  • security #cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be configured
  • security #cve-2018-11406 clear CSRF tokens when the user is logged out
  • security #cve-2018-11385 migrating session for UsernamePasswordJsonAuthenticationListener
  • security #cve-2018-11385 Adding session authentication strategy to Guard to avoid session fixation
  • security #cve-2018-11385 Adding session strategy to ALL listeners to avoid any possible fixation
  • security #cve-2018-11386 [HttpFoundation] Break infinite loop in PdoSessionHandler when MySQL is in loose mode
  • bug #27341 [WebProfilerBundle] Fixed validator/dump trace CSS (@yceruto)
  • bug #27337 [FrameworkBundle] fix typo in CacheClearCommand (@emilielorenzo)

[PR] https://github.com/symfony/symfony/pull/27380
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v3.3.16...v3.3.17)

  • security #cve-2018-11407 [Ldap] cast to string when checking empty passwords
  • security #cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be configured
  • security #cve-2018-11406 clear CSRF tokens when the user is logged out
  • security #cve-2018-11385 migrating session for UsernamePasswordJsonAuthenticationListener
  • security #cve-2018-11386 [HttpFoundation] Break infinite loop in PdoSessionHandler when MySQL is in loose mode

[PR] https://github.com/symfony/symfony/pull/27377
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v3.4.9...v3.4.10)

  • bug #27264 [Validator] Use strict type in URL validator (@mimol91)
  • bug #27267 [DependencyInjection] resolve array env vars (@jamesthomasonjr)
  • bug #26781 [Form] Fix precision of MoneyToLocalizedStringTransformer's divisions on transform() (@syastrebov)
  • bug #27286 [Translation] Add Occitan plural rule (@kylekatarnls)
  • bug #27271 [DI] Allow defining bindings on ChildDefinition (@nicolas-grekas)
  • bug #27246 Disallow invalid characters in session.name (@ostrolucky)
  • bug #27287 [PropertyInfo] fix resolving parent|self type hints (@nicolas-grekas)
  • bug #27281 [HttpKernel] Fix dealing with self/parent in ArgumentMetadataFactory (@fabpot)
  • bug #24805 [Security] Fix logout (@MatTheCat)
  • bug #27265 [DI] Shared services should not be inlined in non-shared ones (@nicolas-grekas)
  • bug #27141 [Process] Suppress warnings when open_basedir is non-empty (@cbj4074)
  • bug #27250 [Session] limiting :key for GET_LOCK to 64 chars (@oleg-andreyev)
  • bug #27237 [Debug] Fix populating error_get_last() for handled silent errors (@nicolas-grekas)
  • bug #27232 [Cache][Lock] Fix usages of error_get_last() (@nicolas-grekas)
  • bug #27236 [Filesystem] Fix usages of error_get_last() (@nicolas-grekas)
  • bug #27191 [DI] Display previous error messages when throwing unused bindings (@nicolas-grekas)
  • bug #27231 [FrameworkBundle] Fix cache:clear on vagrant (@nicolas-grekas)
  • bug #27222 [WebProfilerBundle][Cache] Fix misses calculation when calling getItems (@fsevestre)
  • bug #27227 [HttpKernel] Handle NoConfigurationException "onKernelException()" (@nicolas-grekas)
  • bug #27152 [HttpFoundation] use brace-style regex delimiters (@xabbuh)
  • bug #27158 [Cache] fix logic for fetching tag versions on TagAwareAdapter (@dmaicher)
  • bug #27143 [Console] By default hide the short exception trace line from exception messages in Symfony's commands (@yceruto)
  • bug #27133 [Doctrine Bridge] fix priority for doctrine event listeners (@dmaicher)
  • bug #27135 [FrameworkBundle] Use the correct service id for CachePoolPruneCommand in its compiler pass (@DemonTPx)

[PR] https://github.com/symfony/symfony/pull/27329

Changelog (since https://github.com/symfony/symfony/compare/v3.4.8...v3.4.9)

  • feature #24896 Add CODE_OF_CONDUCT.md (@egircys)
  • bug #27074 [Debug][WebProfilerBundle] Fix setting file link format (@lyrixx, @nicolas-grekas)
  • bug #27088 ResolveBindingsPass: Don't throw error for unused service, missing parent class (@weaverryan)
  • bug #27086 [PHPUnitBridge] Add an implementation just for php 7.0 (@greg0ire)
  • bug #26138 [HttpKernel] Catch HttpExceptions when templating is not installed (@cilefen)
  • bug #27007 [Cache] TagAwareAdapterInterface::invalidateTags() should commit deferred items (@nicolas-grekas)
  • bug #27067 [HttpFoundation] Fix setting session-related ini settings (@e-moe)
  • bug #27061 [HttpKernel] Don't clean legacy containers that are still loaded (@nicolas-grekas)
  • bug #27064 [VarDumper] Fix HtmlDumper classes match (@ogizanagi)
  • bug #27016 [Security][Guard] GuardAuthenticationProvider::authenticate cannot return null (@biomedia-thomas)
  • bug #26831 [Bridge/Doctrine] count(): Parameter must be an array or an object that implements Countable (@gpenverne)
  • bug #27044 [Security] Skip user checks if not implementing UserInterface (@chalasr)
  • bug #27025 [DI] Add check of internal type to ContainerBuilder::getReflectionClass (@upyx)
  • bug #26994 [PhpUnitBridge] Add type hints (@greg0ire)
  • bug #26014 [Security] Fixed being logged out on failed attempt in guard (@iltar)
  • bug #25348 [HttpFoundation] Send cookies using header() to fix "SameSite" ones (@nicolas-grekas, @cvilleger)
  • bug #26910 Use new PHP7.2 functions in hasColorSupport (@johnstevenson)
  • bug #26999 [VarDumper] Fix dumping of SplObjectStorage (@corphi)
  • bug #25841 [DoctrineBridge] Fix bug when indexBy is meta key in PropertyInfo\DoctrineExtractor (@insekticid)
  • bug #26983 [TwigBridge] [Bootstrap 4] Fix PercentType error rendering. (@alexismarquis)
  • bug #26980 [TwigBundle] fix formatting arguments in plaintext format (@xabbuh)
  • bug #26886 Don't assume that file binary exists on *nix OS (@teohhanhui)
  • bug #26959 [Console] Fix PSR exception context key (@scaytrase)
  • bug #26899 [Routing] Fix loading multiple class annotations for invokable classes (@1ed)
  • bug #26643 Fix that ESI/SSI processing can turn a "private" response "public" (@mpdude)
  • bug #26932 [Form] Fixed trimming choice values (@HeahDude)
  • bug #26922 [TwigBundle] fix rendering exception stack traces (@xabbuh)
  • bug #26773 [HttpKernel] Make ServiceValueResolver work if controller namespace starts with a backslash in routing (@mathieutu)
  • bug #26870 Add d-block to bootstrap 4 alerts (@Normunds)
  • bug #26857 [HttpKernel] Dont create mock cookie for new sessions in tests (@nicolas-grekas)
  • bug #26875 [Console] Don't go past exact matches when autocompleting (@nicolas-grekas)
  • bug #26823 [Validator] Fix LazyLoadingMetadataFactory with PSR6Cache for non classname if tested values isn't existing class (@Pascal Montoya, @pmontoya)
  • bug #26834 [Yaml] Throw parse error on unfinished inline map (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/27102

Changelog (since https://github.com/symfony/symfony/compare/v3.4.7...v3.4.8)

  • bug #26802 [Security] register custom providers on ExpressionLanguage directly (@dmaicher)
  • bug #26794 [PhpUnitBridge] Catch deprecation error handler (@cvilleger)
  • bug #26788 [Security] Load the user before pre/post auth checks when needed (@chalasr)
  • bug #26792 [Routing] Fix throwing NoConfigurationException instead of 405 (@nicolas-grekas)
  • bug #26774 [SecurityBundle] Add missing argument to security.authentication.provider.simple (@i3or1s, @chalasr)
  • bug #26763 [Finder] Remove duplicate slashes in filenames (@helhum)
  • bug #26758 [WebProfilerBundle][HttpKernel] Make FileLinkFormatter URL format generation lazy (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/26844

Changelog (since https://github.com/symfony/symfony/compare/v3.4.6...v3.4.7)

  • bug #26387 [Yaml] Fix regression when trying to parse multiline (@antograssiot)
  • bug #26749 Add PHPDbg support to HTTP components (@hkdobrev)
  • bug #26609 [Console] Fix check of color support on Windows (@mlocati)
  • bug #26727 [HttpCache] Unlink tmp file on error (@Chansig)
  • bug #26675 [HttpKernel] DumpDataCollector: do not flush when a dumper is provided (@ogizanagi)
  • bug #26663 [TwigBridge] Fix rendering of currency by MoneyType (@ro0NL)
  • bug #26595 [DI] Do not suggest writing an implementation when multiple exist (@chalasr)
  • bug #26662 [DI] Fix hardcoded cache dir for warmups (@nicolas-grekas)
  • bug #26677 Support phpdbg SAPI in Debug::enable() (@hkdobrev)
  • bug #26600 [Routing] Fixed the importing of files using glob patterns that match multiple resources (@skalpa)
  • bug #26589 [Ldap] cast to string when checking empty passwords (@ismail1432)
  • bug #26626 [WebProfilerBundle] use the router to resolve file links (@nicolas-grekas)
  • bug #26635 [DI] Dont tell about autoregistration in strict autowiring mode (@nicolas-grekas)
  • bug #26621 [Form] no type errors with invalid submitted data types (@xabbuh)
  • bug #26612 [PHPunit] suite variable should be used (@prisis)
  • bug #26337 [Finder] Fixed leading/trailing / in filename (@lyrixx)
  • bug #26584 [TwigBridge] allow html5 compatible rendering of forms with null names (@systemist)
  • bug #24401 [Form] Change datetime to datetime-local for HTML5 datetime input (@pierredup)
  • bug #26513 [FrameworkBundle] Respect debug mode when warm up annotations (@Strate)
  • bug #26370 [Security] added userChecker to SimpleAuthenticationProvider (@i3or1s)
  • bug #26569 [BrowserKit] Fix cookie path handling when $domain is null (@dunglas)
  • bug #26273 [Security][Profiler] Display the original expression in 'Access decision log' (@lyrixx)
  • bug #26427 [DependencyInjection] fix regression when extending the Container class without a constructor (@lsmith77)
  • bug #26562 [Bridge\PhpUnit] Cannot autoload class "\Symfony\Bridge\PhpUnit\SymfonyTestsListener" (@Jake Bishop)
  • bug #26598 Fixes #26563 (open_basedir restriction in effect) (@temperatur)
  • bug #26568 [Debug] Reset previous exception handler earlier to prevent infinite loop (@nicolas-grekas)
  • bug #26590 Make sure form errors is valid HTML (@Nyholm)
  • bug #26567 [DoctrineBridge] Don't rely on ClassMetadataInfo->hasField in DoctrineOrmTypeGuesser anymore (@fancyweb)
  • feature #26408 Readd 'form_label_errors' block to disable errors on form labels (@birkof)
  • bug #26591 [TwigBridge] Make sure we always render errors. Eventhough labels are disabled (@Nyholm)
  • bug #26356 [FrameworkBundle] HttpCache is not longer abstract (@lyrixx)
  • bug #26548 [DomCrawler] Change bad wording in ChoiceFormField::untick (@dunglas)
  • bug #26482 [PhpUnitBridge] Ability to use different composer.json file (@amcastror)
  • bug #26443 [Fix][HttpFoundation] Fix the updating of timestamp in the MemcachedSessionHandler (@Alessandro Loffredo)
  • bug #26400 [Config] ReflectionClassResource check abstract class (@andrey1s)
  • bug #26433 [DomCrawler] extract(): fix a bug when the attribute list is empty (@dunglas)
  • bug #26041 Display the Welcome Page when there is no homepage defined (@javiereguiluz)
  • bug #26452 [Intl] Load locale aliases to support alias fallbacks (@jakzal)
  • bug #26450 [CssSelector] Fix CSS identifiers parsing - they can start with dash (@jakubkulhan)

[PR] https://github.com/symfony/symfony/pull/26751

Changelog (since https://github.com/symfony/symfony/compare/v3.4.5...v3.4.6)

  • bug #26393 [DI] Skip resource tracking if disabled (@chalasr)
  • bug #26355 [DI] Fix missing "id" normalization when dumping the container (@nicolas-grekas)
  • bug #26368 [WebProfilerBundle] Fix Debug toolbar breaks app (@xkobal)
  • bug #26369 Use fill instead of style for svg colors (@rpkamp)
  • bug #26358 [FrameworkBundle] Silence "Failed to remove directory" on cache:clear (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/26416

Changelog (since https://github.com/symfony/symfony/compare/v3.4.4...v3.4.5)

  • bug #26327 [Form][WCAG] Errors sign for people that do not see colors (@Nyholm)
  • bug #26326 [Form][WCAG] Added role="presentation" on tables & removed bootstrap4 table (@Nyholm)
  • bug #26325 [Form][WCAG] Add hidden labels on date and time fields (@Nyholm)
  • bug #26338 [Debug] Keep previous errors of Error instances (@Philipp91)
  • bug #26328 [Form][WCAG] Fixed HTML errors (@Nyholm)
  • bug #26290 [FrameworkBundle] [Console][DX] add a warning when command is not found (@Simperfit)
  • bug #26318 [Routing] Fix GC control of PHP-DSL (@nicolas-grekas)
  • bug #26312 [Routing] Don't throw 405 when scheme requirement doesn't match (@nicolas-grekas)
  • bug #26275 Set controller without __invoke method from invokable class (@Tobion)
  • bug #26298 Fix ArrayInput::toString() for InputArgument::IS_ARRAY args (@maximium)
  • bug #26177 Update excluded_ajax_paths for sf4 (@jenaye)
  • bug #26286 [Security] Add missing use for RoleInterface (@tony-tran)
  • bug #26265 [PropertyInfo] throw exception if docblock factory does not exist (@xabbuh)
  • bug #26247 [Translation] Process multiple segments within a single unit. (@timewasted)
  • bug #26254 fix custom radios/inputs for checkbox/radio type (@mssimi)
  • bug #26234 [FrameworkBundle] Add missing XML config for circular_reference_handler (@dunglas)
  • bug #26236 [PropertyInfo] ReflectionExtractor: give a chance to other extractors if no properties (@dunglas)
  • bug #26227 Add support for URL-like DSNs for the PdoSessionHandler (@stof)
  • bug #25557 [WebProfilerBundle] add a way to limit ajax request (@Simperfit)
  • bug #26088 [FrameworkBundle] Fix using annotation_reader in compiler pass to inject configured cache provider (@Laizerox)
  • bug #26157 [HttpKernel] Send new session cookie from AbstractTestSessionListener after session invalidation (@rpkamp)
  • bug #26230 [WebProfilerBundle] Fix anchor CSS (@ro0NL)
  • bug #26228 [HttpFoundation] Fix missing "throw" in JsonResponse (@nicolas-grekas)
  • bug #26211 [Console] Suppress warning from sapi_windows_vt100_support (@adawolfa)
  • bug #26176 Retro-fit proxy code to make it deterministic for older proxy manager implementations (@lstrojny)
  • bug #25787 Yaml parser regression with comments and non-strings (@alexpott)
  • bug #26156 Fixes #26136: Avoid emitting warning in hasParameterOption() (@greg-1-anderson)
  • bug #26183 [DI] Add null check for removeChild (@changmin.keum)
  • bug #26167 [TwigBridge] Apply some changes to support Bootstrap4-stable (@mpiot, @Nyholm)
  • bug #26173 [Security] fix accessing request values (@xabbuh)
  • bug #26089 [PhpUnitBridge] Added support for PHPUnit 7 in Coverage Listener (@lyrixx)
  • bug #26170 [PHPUnit bridge] Avoid running the remove command without any packages (@stof)
  • bug #26159 created validator.tl.xlf for Form/Translations (@ergiegonzaga)
  • bug #26100 [Routing] Throw 405 instead of 404 when redirect is not possible (@nicolas-grekas)
  • bug #26119 [TwigBundle][WebProfilerBundle] Fix JS collision (@ro0NL)
  • bug #26040 [Process] Check PHP_BINDIR before $PATH in PhpExecutableFinder (@nicolas-grekas)
  • bug #26067 [YAML] Issue #26065: leading spaces in YAML multi-line string literals (@tamc)
  • bug #26012 Exit as late as possible (@greg0ire)
  • bug #26082 [Cache][WebProfiler] fix collecting cache stats with sub-requests + allow clearing calls (@dmaicher)
  • bug #26024 [PhpBridge] add PHPUnit 7 support to SymfonyTestsListener (@shieldo)
  • bug #26020 [Lock] Log already-locked errors as "notice" instead of "warning" (@Simperfit)
  • bug #26043 [Serialized] add context to serialize and deserialize (@andrey1s)
  • bug #26127 Deterministic time in cache items for reproducible builds (@lstrojny)
  • bug #26128 Make kernel build time optionally deterministic (@lstrojny)
  • bug #26112 Env var maps to undefined constant. (@dsmink)
  • bug #26111 [Security] fix merge of 2.7 into 2.8 + add test case (@dmaicher)
  • bug #25893 [Console] Fix hasParameterOption / getParameterOption when used with multiple flags (@greg-1-anderson)
  • bug #25756 [TwigBundle] Register TwigBridge extensions first (@fancyweb)
  • bug #26051 [WebProfilerBundle] Fix sub request link (@ro0NL)
  • bug #25947 PhpDocExtractor::getTypes() throws fatal error when type omitted (@Jared Farrish)
  • bug #25940 [Form] keep the context when validating forms (@xabbuh)
  • bug #26057 [SecurityBundle] use libsodium to run Argon2i related tests (@xabbuh)
  • bug #25373 Use the PCRE_DOLLAR_ENDONLY modifier in route regexes (@mpdude)
  • bug #24435 [Form] Make sure errors are a part of the label on bootstrap 4 - this is a requirement for WCAG2 (@Nyholm)
  • bug #25762 [DependencyInjection] always call the parent class' constructor (@xabbuh)
  • bug #25976 [Config] Handle Service/EventSubscriberInterface in ReflectionClassResource (@nicolas-grekas)
  • bug #25989 [DI][Routing] Fix tracking of globbed resources (@nicolas-grekas, @sroze)
  • bug #26009 [SecurityBundle] Allow remember-me factory creation when multiple user providers are configured. (@iisisrael)
  • bug #26010 [CssSelector] For AND operator, the left operand should have parentheses, not only right operand (@Arnaud CHASSEUX)
  • bug #26000 Fixed issue #25985 (@KevinFrantz)
  • bug #25996 Don't show wanna-be-private services as public in debug:container (@chalasr)
  • bug #25914 [HttpKernel] collect extension information as late as possible (@xabbuh)
  • bug #25981 [DI] Fix tracking of source class changes for lazy-proxies (@nicolas-grekas)
  • bug #25971 [Debug] Fix bad registration of exception handler, leading to mem leak (@nicolas-grekas)
  • bug #25962 [Routing] Fix trailing slash redirection for non-safe verbs (@nicolas-grekas)
  • bug #25948 [Form] Fixed empty data on expanded ChoiceType and FileType (@HeahDude)
  • bug #25978 Deterministic proxy names (@lstrojny)
  • bug #25972 support sapi_windows_vt100_support for php 7.2+ (@jhdxr)
  • bug #25744 [TwigBridge] Allow label translation to be safe (@MatTheCat)

[PR] https://github.com/symfony/symfony/pull/26362

Changelog (since https://github.com/symfony/symfony/compare/v3.4.3...v3.4.4)

  • bug #25932 Don't stop PSR-4 service discovery if a parent class is missing (@derrabus)
  • bug #25922 [HttpFoundation] Use the correct syntax for session gc based on Pdo driver (@tanasecosminromeo)
  • bug #25933 Disable CSP header on exception pages only in debug (@ostrolucky)
  • bug #25926 [Form] Fixed Button::setParent() when already submitted (@HeahDude)
  • bug #25927 [Form] Fixed submitting disabled buttons (@HeahDude)
  • bug #25397 [Console] Provide a DX where an array could be passed (@Simperfit)
  • bug #25858 [DI] Fix initialization of legacy containers by delaying include_once (@nicolas-grekas)
  • bug #25891 [DependencyInjection] allow null values for root nodes in YAML configs (@xabbuh)
  • bug #24864 Have weak_vendors ignore deprecations from outside (@greg0ire)
  • bug #25848 [Validator] add missing parent isset and add test (@Simperfit)
  • bug #25869 [Process] Skip environment variables with false value in Process (@francoispluchino)
  • bug #25864 [Yaml] don't split lines on carriage returns when dumping (@xabbuh)
  • bug #25861 do not conflict with egulias/email-validator 2.0+ (@xabbuh)
  • bug #25851 [Validator] Conflict with egulias/email-validator 2.0 (@emodric)
  • bug #25837 [SecurityBundle] Don't register in memory users as services (@chalasr)
  • bug #25835 [HttpKernel] DebugHandlersListener should always replace the existing exception handler (@nicolas-grekas)
  • bug #25829 [Debug] Always decorate existing exception handlers to deal with fatal errors (@nicolas-grekas)
  • bug #25823 [Security] Notify that symfony/expression-language is not installed if ExpressionLanguage is used (@giovannialbero1992)
  • bug #25824 Fixing a bug where the dump() function depended on bundle ordering (@weaverryan)
  • bug #25763 [OptionsResolver] Fix options resolver with array allowed types (@mcg-web)
  • bug #25789 Enableable ArrayNodeDefinition is disabled for empty configuration (@kejwmen)
  • bug #25822 [Cache] Fix handling of apcu_fetch() edgy behavior (@nicolas-grekas)
  • bug #25816 Problem in phar see mergerequest #25579 (@betzholz)
  • bug #25781 [Form] Disallow transform dates beyond the year 9999 (@curry684)
  • bug #25287 [Serializer] DateTimeNormalizer handling of null and empty values (returning it instead of new object) (@Simperfit)
  • bug #25249 [Form] Avoid button label translation when it's set to false (@TeLiXj)
  • bug #25127 [TwigBridge] Pass the form-check-inline in parent (@Simperfit)
  • bug #25812 Copied NO language files to the new NB locale (@derrabus)
  • bug #25753 [Console] Fix restoring exception handler (@nicolas-grekas, @fancyweb)
  • bug #25801 [Router] Skip anonymous classes when loading annotated routes (@pierredup)
  • bug #25508 [FrameworkBundle] Auto-enable CSRF if the component + session are loaded (@nicolas-grekas)
  • bug #25657 [Security] Fix fatal error on non string username (@chalasr)
  • bug #25791 [Routing] Make sure we only build routes once (@sroze)
  • bug #25799 Fixed Request::__toString ignoring cookies (@Toflar)
  • bug #25755 [Debug] prevent infinite loop with faulty exception handlers (@nicolas-grekas)
  • bug #25771 [Validator] 19 digits VISA card numbers are valid (@xabbuh)
  • bug #25751 [FrameworkBundle] Add the missing enabled session attribute (@sroze)
  • bug #25750 [HttpKernel] Turn bad hosts into 400 instead of 500 (@nicolas-grekas)
  • bug #25699 [HttpKernel] Fix session handling: decouple "save" from setting response "private" (@nicolas-grekas)
  • bug #25490 [Serializer] Fixed throwing exception with option JSON_PARTIAL_OUTPUT_ON_ERROR (@diversantvlz)
  • bug #25737 [TwigBridge] swap filter/function and package names (@xabbuh)
  • bug #25731 [HttpFoundation] Always call proxied handler::destroy() in StrictSessionHandler (@nicolas-grekas)
  • bug #25733 [HttpKernel] Fix compile error when a legacy container is fresh again (@nicolas-grekas)
  • bug #25709 Tweaked some styles in the profiler tables (@javiereguiluz)
  • bug #25719 [HttpKernel] Uses cookies to track the requests redirection (@sroze)
  • bug #25696 [FrameworkBundle] Fix using "annotations.cached_reader" in after-removing passes (@nicolas-grekas)
  • feature #25669 [Security] Fail gracefully if the security token cannot be unserialized from the session (@thewilkybarkid)
  • bug #25700 Run simple-phpunit with --no-suggest option (@ro0NL)

[PR] https://github.com/symfony/symfony/pull/25956

Changelog (since https://github.com/symfony/symfony/compare/v3.3.15...v3.3.16)

  • bug #25922 [HttpFoundation] Use the correct syntax for session gc based on Pdo driver (@tanasecosminromeo)
  • bug #25933 Disable CSP header on exception pages only in debug (@ostrolucky)
  • bug #25926 [Form] Fixed Button::setParent() when already submitted (@HeahDude)
  • bug #25927 [Form] Fixed submitting disabled buttons (@HeahDude)
  • bug #25891 [DependencyInjection] allow null values for root nodes in YAML configs (@xabbuh)
  • bug #24864 Have weak_vendors ignore deprecations from outside (@greg0ire)
  • bug #25848 [Validator] add missing parent isset and add test (@Simperfit)
  • bug #25869 [Process] Skip environment variables with false value in Process (@francoispluchino)
  • bug #25864 [Yaml] don't split lines on carriage returns when dumping (@xabbuh)
  • bug #25861 do not conflict with egulias/email-validator 2.0+ (@xabbuh)
  • bug #25851 [Validator] Conflict with egulias/email-validator 2.0 (@emodric)
  • bug #25837 [SecurityBundle] Don't register in memory users as services (@chalasr)
  • bug #25835 [HttpKernel] DebugHandlersListener should always replace the existing exception handler (@nicolas-grekas)
  • bug #25829 [Debug] Always decorate existing exception handlers to deal with fatal errors (@nicolas-grekas)
  • bug #25824 Fixing a bug where the dump() function depended on bundle ordering (@weaverryan)
  • bug #25789 Enableable ArrayNodeDefinition is disabled for empty configuration (@kejwmen)
  • bug #25822 [Cache] Fix handling of apcu_fetch() edgy behavior (@nicolas-grekas)
  • bug #25816 Problem in phar see mergerequest #25579 (@betzholz)
  • bug #25781 [Form] Disallow transform dates beyond the year 9999 (@curry684)
  • bug #25287 [Serializer] DateTimeNormalizer handling of null and empty values (returning it instead of new object) (@Simperfit)
  • bug #25812 Copied NO language files to the new NB locale (@derrabus)
  • bug #25801 [Router] Skip anonymous classes when loading annotated routes (@pierredup)
  • bug #25657 [Security] Fix fatal error on non string username (@chalasr)
  • bug #25791 [Routing] Make sure we only build routes once (@sroze)
  • bug #25799 Fixed Request::__toString ignoring cookies (@Toflar)
  • bug #25755 [Debug] prevent infinite loop with faulty exception handlers (@nicolas-grekas)
  • bug #25771 [Validator] 19 digits VISA card numbers are valid (@xabbuh)
  • bug #25751 [FrameworkBundle] Add the missing enabled session attribute (@sroze)
  • bug #25750 [HttpKernel] Turn bad hosts into 400 instead of 500 (@nicolas-grekas)
  • bug #25490 [Serializer] Fixed throwing exception with option JSON_PARTIAL_OUTPUT_ON_ERROR (@diversantvlz)
  • bug #25709 Tweaked some styles in the profiler tables (@javiereguiluz)
  • bug #25696 [FrameworkBundle] Fix using "annotations.cached_reader" in after-removing passes (@nicolas-grekas)
  • feature #25669 [Security] Fail gracefully if the security token cannot be unserialized from the session (@thewilkybarkid)
  • bug #25700 Run simple-phpunit with --no-suggest option (@ro0NL)

[PR] https://github.com/symfony/symfony/pull/25955
[EOM] End of maintenance release for branch 3.3

Changelog (since https://github.com/symfony/symfony/compare/v3.4.2...v3.4.3)

  • bug #25685 Use triggering file to determine weak vendors if when the test is run in a separate process (@alexpott)
  • bug #25671 Remove randomness from dumped containers (@nicolas-grekas)
  • bug #25532 [HttpKernel] Disable CSP header on exception pages (@ostrolucky)
  • bug #25678 [WebProfilerBundle] set the var in the right scope (@Jochen Mandl)
  • bug #25491 [Routing] Use the default host even if context is empty (@sroze)
  • bug #25672 [WebServerBundle] use interface_exists instead of class_exists (@kbond)
  • bug #25662 Dumper shouldn't use html format for phpdbg / cli-server (@jhoff)
  • bug #25529 [Validator] Fix access to root object when using composite constraint (@ostrolucky)
  • bug #25404 [Form] Remove group options without data on debug:form command (@yceruto)
  • bug #25430 Fixes for Oracle in PdoSessionHandler (@elislenio)
  • bug #25117 [FrameworkBundle] Make cache:clear "atomic" and consistent with cache:warmup (@hkdobrev)
  • bug #25583 [HttpKernel] Call Response->setPrivate() instead of sending raw header() when session is started (@Toflar)
  • bug #25601 [TwigBundle/Brige] catch missing requirements to throw meaningful exceptions (@nicolas-grekas)
  • bug #25547 [DX][DependencyInjection] Suggest to write an implementation if the interface cannot be autowired (@sroze)
  • bug #25599 Add application/ld+json format associated to json (@vincentchalamon)
  • bug #25623 [HttpFoundation] Fix false-positive ConflictingHeadersException (@nicolas-grekas)
  • bug #25624 [WebServerBundle] Fix escaping of php binary with arguments (@nicolas-grekas)
  • bug #25604 Add check for SecurityBundle in createAccessDeniedException (@FGM)
  • bug #25591 [HttpKernel] fix cleaning legacy containers (@nicolas-grekas)
  • bug #25526 [WebProfilerBundle] Fix panel break when stopwatch component is not installed. (@umulmrum, @javiereguiluz)
  • bug #25606 Updating message to inform the user how to install the component (@weaverryan)
  • bug #25571 [SecurityBundle] allow auto_wire for SessionAuthenticationStrategy class (@xavren)
  • bug #25567 [Process] Fix setting empty env vars (@nicolas-grekas)
  • bug #25407 [Console] Commands with an alias should not be recognized as ambiguous (@Simperfit)
  • bug #25523 [WebServerBundle] fix a bug where require would not require the good file because of env (@Simperfit)
  • bug #25559 [Process] Dont use getenv(), it returns arrays and can introduce subtle breaks accros PHP versions (@nicolas-grekas)
  • bug #25552 [WebProfilerBundle] Let fetch() cast URL to string (@ro0NL)
  • bug #25521 [Console] fix a bug when you are passing a default value and passing -n would output the index (@Simperfit)

[PR] https://github.com/symfony/symfony/pull/25691

Changelog (since https://github.com/symfony/symfony/compare/v3.3.14...v3.3.15)

  • bug #25532 [HttpKernel] Disable CSP header on exception pages (@ostrolucky)
  • bug #25491 [Routing] Use the default host even if context is empty (@sroze)
  • bug #25672 [WebServerBundle] use interface_exists instead of class_exists (@kbond)
  • bug #25662 Dumper shouldn't use html format for phpdbg / cli-server (@jhoff)
  • bug #25529 [Validator] Fix access to root object when using composite constraint (@ostrolucky)
  • bug #25430 Fixes for Oracle in PdoSessionHandler (@elislenio)
  • bug #25599 Add application/ld+json format associated to json (@vincentchalamon)
  • bug #25623 [HttpFoundation] Fix false-positive ConflictingHeadersException (@nicolas-grekas)
  • bug #25624 [WebServerBundle] Fix escaping of php binary with arguments (@nicolas-grekas)
  • bug #25567 [Process] Fix setting empty env vars (@nicolas-grekas)
  • bug #25407 [Console] Commands with an alias should not be recognized as ambiguous (@Simperfit)
  • bug #25523 [WebServerBundle] fix a bug where require would not require the good file because of env (@Simperfit)
  • bug #25559 [Process] Dont use getenv(), it returns arrays and can introduce subtle breaks accros PHP versions (@nicolas-grekas)
  • bug #25552 [WebProfilerBundle] Let fetch() cast URL to string (@ro0NL)
  • bug #25521 [Console] fix a bug when you are passing a default value and passing -n would output the index (@Simperfit)
  • bug #25489 [FrameworkBundle] remove esi/ssi renderers if inactive (@dmaicher)
  • bug #25427 Preserve percent-encoding in URLs when performing redirects in the UrlMatcher (@mpdude)
  • bug #25480 [FrameworkBundle] add missing validation options to XSD file (@xabbuh)
  • bug #25487 [Console] Fix a bug when passing a letter that could be an alias (@Simperfit)
  • bug #25425 When available use AnnotationRegistry::registerUniqueLoader (@jrjohnson)
  • bug #24594 [Translation] Fix InvalidArgumentException when using untranslated plural forms from .po files (@BjornTwachtmann)
  • bug #25233 [TwigBridge][Form] Fix hidden currency element with Bootstrap 3 theme (@julienfalque)
  • bug #25413 [HttpKernel] detect deprecations thrown by container initialization during tests (@nicolas-grekas)
  • bug #25408 [Debug] Fix catching fatal errors in case of nested error handlers (@nicolas-grekas)
  • bug #25330 [HttpFoundation] Support 0 bit netmask in IPv6 (::/0) (@stephank)
  • bug #25378 [VarDumper] Fixed file links leave blank pages when ide is configured (@antalaron)
  • bug #25410 [HttpKernel] Fix logging of post-terminate errors/exceptions (@nicolas-grekas)
  • bug #25417 [Process] Dont rely on putenv(), it fails on ZTS PHP (@nicolas-grekas)
  • bug #25333 [DI] Impossible to set an environment variable and then an array as container parameter (@Phantas0s)
  • bug #25438 [Yaml] empty lines don't count for indent detection (@xabbuh)
  • bug #25389 [Yaml] fix some edge cases with indented blocks (@xabbuh)
  • bug #25340 [Serializer] Unset attributes when creating child context (@dunglas)
  • bug #25323 [ExpressionLanguage] throw an SyntaxError instead of an undefined index notice (@Simperfit)
  • bug #25364 [DependencyInjection] Prevent a loop in aliases within the findDefinition method (@sroze)

[PR] https://github.com/symfony/symfony/pull/25690

Changelog (since https://github.com/symfony/symfony/compare/v3.4.1...v3.4.2)

  • bug #25489 [FrameworkBundle] remove esi/ssi renderers if inactive (@dmaicher)
  • bug #25502 Fixing wrong class_exists on interface (@weaverryan)
  • bug #25427 Preserve percent-encoding in URLs when performing redirects in the UrlMatcher (@mpdude)
  • bug #25480 [FrameworkBundle] add missing validation options to XSD file (@xabbuh)
  • bug #25487 [Console] Fix a bug when passing a letter that could be an alias (@Simperfit)
  • bug #25425 When available use AnnotationRegistry::registerUniqueLoader (@jrjohnson)
  • bug #25474 [DI] Optimize Container::get() for perf (@nicolas-grekas)
  • bug #24594 [Translation] Fix InvalidArgumentException when using untranslated plural forms from .po files (@BjornTwachtmann)
  • bug #25233 [TwigBridge][Form] Fix hidden currency element with Bootstrap 3 theme (@julienfalque)
  • bug #25413 [HttpKernel] detect deprecations thrown by container initialization during tests (@nicolas-grekas)
  • bug #25408 [Debug] Fix catching fatal errors in case of nested error handlers (@nicolas-grekas)
  • bug #25330 [HttpFoundation] Support 0 bit netmask in IPv6 (::/0) (@stephank)
  • bug #25378 [VarDumper] Fixed file links leave blank pages when ide is configured (@antalaron)
  • bug #25410 [HttpKernel] Fix logging of post-terminate errors/exceptions (@nicolas-grekas)
  • bug #25417 [Process] Dont rely on putenv(), it fails on ZTS PHP (@nicolas-grekas)
  • bug #25333 [DI] Impossible to set an environment variable and then an array as container parameter (@Phantas0s)
  • bug #25447 [Process] remove false-positive BC breaking exception on Windows (@nicolas-grekas)
  • bug #25381 [DI] Add context to service-not-found exceptions thrown by service locators (@nicolas-grekas)
  • bug #25438 [Yaml] empty lines don't count for indent detection (@xabbuh)
  • bug #25412 Extend Argon2i support check to account for sodium_compat (@mbabker)
  • bug #25389 [Yaml] fix some edge cases with indented blocks (@xabbuh)
  • bug #25396 [Form] Fix debug:form command definition (@yceruto)
  • bug #25398 [HttpFoundation] don't prefix cookies with "Set-Cookie:" (@pableu)
  • bug #25354 [DI] Fix non-string class handling in PhpDumper (@nicolas-grekas, @sroze)
  • bug #25340 [Serializer] Unset attributes when creating child context (@dunglas)
  • bug #25325 [Yaml] do not evaluate PHP constant names (@xabbuh)
  • bug #25380 [FrameworkBundle][Cache] register system cache clearer only if it's used (@xabbuh)
  • bug #25323 [ExpressionLanguage] throw an SyntaxError instead of an undefined index notice (@Simperfit)
  • bug #25363 [HttpKernel] Disable inlining on PHP 5 (@nicolas-grekas)
  • bug #25364 [DependencyInjection] Prevent a loop in aliases within the findDefinition method (@sroze)
  • bug #25337 Remove Exclusive Lock That Breaks NFS Caching (@brianfreytag)

[PR] https://github.com/symfony/symfony/pull/

Changelog (since https://github.com/symfony/symfony/compare/v3.4.0...v3.4.1)

  • bug #25304 [Bridge/PhpUnit] Prefer $_SERVER['argv'] over $argv (@ricknox)
  • bug #25272 [SecurityBundle] fix setLogoutOnUserChange calls for context listeners (@dmaicher)
  • bug #25282 [DI] Register singly-implemented interfaces when doing PSR-4 discovery (@nicolas-grekas)
  • bug #25274 [Security] Adding a GuardAuthenticatorHandler alias (@weaverryan)
  • bug #25308 [FrameworkBundle] Fix a bug where a color tag will be shown when passing an antislash (@Simperfit)
  • bug #25278 Fix for missing whitespace control modifier in form layout (@kubawerlos)
  • bug #25306 [Form][TwigBridge] Fix collision between view properties and form fields (@yceruto)
  • bug #25305 [Form][TwigBridge] Fix collision between view properties and form fields (@yceruto)
  • bug #25236 [Form][TwigBridge] Fix collision between view properties and form fields (@yceruto)
  • bug #25312 [DI] Fix deep-inlining of non-shared refs (@nicolas-grekas)
  • bug #25309 [Yaml] parse newlines in quoted multiline strings (@xabbuh)
  • bug #25313 [DI] Fix missing unset leading to false-positive circular ref (@nicolas-grekas)
  • bug #25285 [DI] Throw an exception if Expression Language is not installed (@sroze)
  • bug #25241 [Yaml] do not eagerly filter comment lines (@xabbuh)
  • bug #25297 [Validator] Fixed the @Valid(groups={"group"}) against null exception case (@vudaltsov)
  • bug #25255 [Console][DI] Fail gracefully (@nicolas-grekas)
  • bug #25264 [DI] Trigger deprecation when setting a to-be-private synthetic service (@nicolas-grekas)
  • bug #25258 [link] Prevent warnings when running link with 2.7 (@dunglas)
  • bug #25244 [DI] Add missing deprecation when fetching private services from ContainerBuilder (@nicolas-grekas)
  • bug #24750 [Validator] ExpressionValidator should use OBJECT_TO_STRING (@Simperfit)
  • bug #25247 [DI] Fix false-positive circular exception (@nicolas-grekas)
  • bug #25226 [HttpKernel] Fix issue when resetting DumpDataCollector (@Pierstoval)
  • bug #25230 Use a more specific file for detecting the bridge (@greg0ire)
  • bug #25232 [WebProfilerBundle] [TwigBundle] Fix Profiler breaking XHTML pages (@tistre)

[PR] https://github.com/symfony/symfony/pull/25321

Changelog (since https://github.com/symfony/symfony/compare/v3.3.13...v3.3.14)

  • bug #25304 [Bridge/PhpUnit] Prefer $_SERVER['argv'] over $argv (@ricknox)
  • bug #25308 [FrameworkBundle] Fix a bug where a color tag will be shown when passing an antislash (@Simperfit)
  • bug #25278 Fix for missing whitespace control modifier in form layout (@kubawerlos)
  • bug #25305 [Form][TwigBridge] Fix collision between view properties and form fields (@yceruto)
  • bug #25236 [Form][TwigBridge] Fix collision between view properties and form fields (@yceruto)
  • bug #25312 [DI] Fix deep-inlining of non-shared refs (@nicolas-grekas)
  • bug #25309 [Yaml] parse newlines in quoted multiline strings (@xabbuh)
  • bug #25241 [Yaml] do not eagerly filter comment lines (@xabbuh)
  • bug #25258 [link] Prevent warnings when running link with 2.7 (@dunglas)
  • bug #24750 [Validator] ExpressionValidator should use OBJECT_TO_STRING (@Simperfit)
  • bug #25232 [WebProfilerBundle] [TwigBundle] Fix Profiler breaking XHTML pages (@tistre)
  • bug #25209 [VarDumper] Dont use empty(), it chokes on eg GMP objects (@nicolas-grekas)
  • bug #25200 [HttpKernel] Arrays with scalar values passed to ESI fragment renderer throw deprecation notice (@Simperfit)
  • bug #25217 [Dotenv] Changed preg_match flags from null to 0 (@deekthesqueak)
  • bug #25203 [DI] Fix infinite loop in InlineServiceDefinitionsPass (@nicolas-grekas)
  • bug #25185 [Serializer] Do not cache attributes if attributes in context (@sroze)
  • bug #25182 [HttpFoundation] AutExpireFlashBag should not clear new flashes (@Simperfit, @sroze)
  • bug #25179 [FrameworkBundle][Serializer] Remove YamlEncoder definition if Yaml component isn't installed (@ogizanagi)
  • bug #25163 [DI] Fix tracking of env vars in exceptions (@nicolas-grekas)
  • bug #25152 [Form] Don't rely on Symfony\Component\HttpFoundation\File\File if http-foundation isn't in FileType (@issei-m)
  • bug #24987 [Console] Fix global console flag when used in chain (@Simperfit)
  • bug #25146 [DI] Dont resolve envs in service ids (@nicolas-grekas)
  • bug #25113 [Routing] Fix "config-file-relative" annotation loader resources (@nicolas-grekas, @sroze)
  • bug #25109 Make debug:container search command case-insensitive (@jzawadzki)
  • bug #25043 [Yaml] added ability for substitute aliases when mapping is on single line (@Michał Strzelecki, @xabbuh)
  • bug #25102 [Form] Fixed ContextErrorException in FileType (@chihiro-adachi)
  • bug #25130 [DI] Fix handling of inlined definitions by ContainerBuilder (@nicolas-grekas)
  • bug #25094 [FrameworkBundle][DX] Display a nice error message if an enabled component is missing (@derrabus)
  • bug #25097 [Bridge\PhpUnit] Turn "preserveGlobalState" to false by default, revert "Blacklist" removal (@nicolas-grekas)
  • bug #25072 [Bridge/PhpUnit] Remove trailing "\n" from ClockMock::microtime(false) (@joky)
  • bug #25032 [Bridge\PhpUnit] Disable broken auto-require mechanism of phpunit (@nicolas-grekas)
  • bug #24956 Fix ambiguous pattern (@weltling)

[PR] https://github.com/symfony/symfony/pull/25319

Changelog (since https://github.com/symfony/symfony/compare/v3.4.0-RC2...v3.4.0)

  • bug #25220 [HttpFoundation] Add Session::isEmpty(), fix MockFileSessionStorage to behave like the native one (@nicolas-grekas)
  • bug #25209 [VarDumper] Dont use empty(), it chokes on eg GMP objects (@nicolas-grekas)
  • bug #25200 [HttpKernel] Arrays with scalar values passed to ESI fragment renderer throw deprecation notice (@Simperfit)
  • bug #25201 [HttpKernel] Add a better error messages when passing a private or non-tagged controller (@Simperfit)
  • bug #25217 [Dotenv] Changed preg_match flags from null to 0 (@deekthesqueak)
  • bug #25180 [DI] Fix circular reference when using setters (@nicolas-grekas)
  • bug #25204 [DI] Clear service reference graph (@nicolas-grekas)
  • bug #25203 [DI] Fix infinite loop in InlineServiceDefinitionsPass (@nicolas-grekas)
  • bug #25185 [Serializer] Do not cache attributes if attributes in context (@sroze)
  • bug #25190 [HttpKernel] Keep legacy container files for concurrent requests (@nicolas-grekas)
  • bug #25182 [HttpFoundation] AutExpireFlashBag should not clear new flashes (@Simperfit, @sroze)
  • bug #25174 [Translation] modify definitions only if the do exist (@xabbuh)
  • bug #25179 [FrameworkBundle][Serializer] Remove YamlEncoder definition if Yaml component isn't installed (@ogizanagi)
  • bug #25160 [DI] Prevent a ReflectionException during cache:clear when the parent class doesn't exist (@dunglas)
  • bug #25163 [DI] Fix tracking of env vars in exceptions (@nicolas-grekas)
  • bug #25162 [HttpKernel] Read $_ENV when checking SHELL_VERBOSITY (@nicolas-grekas)
  • bug #25158 [DI] Remove unreachable code (@GawainLynch)
  • bug #25152 [Form] Don't rely on Symfony\Component\HttpFoundation\File\File if http-foundation isn't in FileType (@issei-m)
  • bug #24987 [Console] Fix global console flag when used in chain (@Simperfit)
  • bug #25137 Adding checks for the expression language (@weaverryan)
  • bug #25151 [FrameworkBundle] Automatically enable the CSRF protection if CSRF manager exists (@sroze)
  • bug #25043 [Yaml] added ability for substitute aliases when mapping is on single line (@Michał Strzelecki, @xabbuh)

[PR] https://github.com/symfony/symfony/pull/25223

Changelog (since https://github.com/symfony/symfony/compare/v3.4.0-RC1...v3.4.0-RC2)

  • bug #25146 [DI] Dont resolve envs in service ids (@nicolas-grekas)
  • bug #25113 [Routing] Fix "config-file-relative" annotation loader resources (@nicolas-grekas, @sroze)
  • bug #25065 [FrameworkBundle] Update translation commands to work with default paths (@yceruto)
  • bug #25109 Make debug:container search command case-insensitive (@jzawadzki)
  • bug #25121 [FrameworkBundle] Fix AssetsInstallCommand (@nicolas-grekas)
  • bug #25102 [Form] Fixed ContextErrorException in FileType (@chihiro-adachi)
  • bug #25130 [DI] Fix handling of inlined definitions by ContainerBuilder (@nicolas-grekas)
  • bug #25119 [DI] Fix infinite loop when analyzing references (@nicolas-grekas)
  • bug #25094 [FrameworkBundle][DX] Display a nice error message if an enabled component is missing (@derrabus)
  • bug #25100 [SecurityBundle] providerIds is undefined error when firewall provider is not specified (@karser)
  • bug #25100 [SecurityBundle] providerIds is undefined error when firewall provider is not specified (@karser)
  • bug #25100 [SecurityBundle] providerIds is undefined error when firewall provider is not specified (@karser)
  • bug #25097 [Bridge\PhpUnit] Turn "preserveGlobalState" to false by default, revert "Blacklist" removal (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/25147

Changelog (since https://github.com/symfony/symfony/compare/v3.4.0-BETA4...v3.4.0-RC1)

  • bug #25077 [Bridge/Twig] Let getFlashes starts the session (@MatTheCat)
  • bug #25082 [HttpKernel] Disable container inlining when legacy inlining has been used (@nicolas-grekas)
  • bug #25072 [Bridge/PhpUnit] Remove trailing "\n" from ClockMock::microtime(false) (@joky)
  • bug #25069 [Debug] Fix undefined variable $lightTrace (@nicolas-grekas)
  • bug #25053 [Serializer] Fixing PropertyNormalizer supports parent properties (@Christopher Hertel)
  • bug #25055 [DI] Analyze setter-circular deps more precisely (@nicolas-grekas)
  • feature #25056 [Bridge/PhpUnit] Sync the bridge version installed in vendor/ and in phpunit clone (@nicolas-grekas)
  • bug #25045 [SecurityBundle] Don't trigger auto-picking notice if provider is set per listener (@chalasr)
  • bug #25033 [FrameworkBundle] Dont create empty bundles directory by default (@ro0NL)
  • bug #25037 [DI] Skip hot_path tag for deprecated services as their class might also be (@nicolas-grekas)
  • bug #25038 [Cache] Memcached options should ignore "lazy" (@nicolas-grekas)
  • bug #25014 Move deprecation under use statements (@greg0ire)
  • bug #25030 [Console] Fix ability to disable lazy commands (@chalasr)
  • bug #25032 [Bridge\PhpUnit] Disable broken auto-require mechanism of phpunit (@nicolas-grekas)
  • bug #25027 [FrameworkBundle] Hide server:log command based on deps (@sroze)
  • bug #24991 [DependencyInjection] Single typed argument can be applied on multiple parameters (@nicolas-grekas, @sroze)
  • bug #24983 [Validator] enter the context in which to validate (@xabbuh)
  • bug #24956 Fix ambiguous pattern (@weltling)
  • bug #24732 [DependencyInjection] Prevent service:method factory notation in PHP config (@vudaltsov)
  • bug #24979 [HttpKernel] remove services resetter even when it's an alias (@xabbuh)
  • bug #24972 [HttpKernel] Fix service arg resolver for controllers as array callables (@sroze, @nicolas-grekas)
  • bug #24971 [FrameworkBundle] Empty event dispatcher earlier in CacheClearCommand (@nicolas-grekas)
  • security #24995 Validate redirect targets using the session cookie domain (@nicolas-grekas)
  • security #24994 Prevent bundle readers from breaking out of paths (@xabbuh)
  • security #24993 Ensure that submitted data are uploaded files (@xabbuh)
  • security #24992 Namespace generated CSRF tokens depending of the current scheme (@dunglas)
  • bug #24954 [DI] Fix dumping with custom base class (@nicolas-grekas)
  • bug #24952 [HttpFoundation] Fix session-related BC break (@nicolas-grekas, @sroze)
  • bug #24943 [FrameworkBundle] Wire the translation.reader service instead of deprecated translation.loader in commands (@ogizanagi)

[PR] https://github.com/symfony/symfony/pull/25086

Changelog (since https://github.com/symfony/symfony/compare/v3.3.12...v3.3.13)

  • security #24995 Validate redirect targets using the session cookie domain (@nicolas-grekas)
  • security #24994 Prevent bundle readers from breaking out of paths (@xabbuh)
  • security #24993 Ensure that submitted data are uploaded files (@xabbuh)
  • security #24992 Namespace generated CSRF tokens depending of the current scheme (@dunglas)

[PR] https://github.com/symfony/symfony/pull/25002
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v3.3.11...v3.3.12)

  • bug #24954 [DI] Fix dumping with custom base class (@nicolas-grekas)
  • bug #24952 [HttpFoundation] Fix session-related BC break (@nicolas-grekas, @sroze)
  • bug #24929 [Console] Fix traversable autocomplete values (@ro0NL)

[PR] https://github.com/symfony/symfony/pull/24958

Changelog (since https://github.com/symfony/symfony/compare/v3.4.0-BETA3...v3.4.0-BETA4)

  • bug #24874 [TwigBridge] Fixed the .form-check-input class in the bs4 templates (@vudaltsov)
  • bug #24929 [Console] Fix traversable autocomplete values (@ro0NL)
  • feature #24860 [FrameworkBundle] Add default translations path option and convention (@yceruto)
  • bug #24921 [Debug] Remove false-positive deprecation from DebugClassLoader (@nicolas-grekas)
  • bug #24856 [FrameworkBundle] Add default mapping path for validator component in bundle-less app (@yceruto)
  • bug #24833 [FrameworkBundle] Add default mapping path for serializer component in bundle-less app (@yceruto)
  • bug #24908 [WebServerBundle] Prevent console.terminate from being fired when server:start finishes (@kbond)
  • bug #24888 [FrameworkBundle] Specifically inject the debug dispatcher in the collector (@ogizanagi)
  • bug #24909 [Intl] Update ICU data to 60.1 (@jakzal)
  • bug #24870 [YAML] Allow to parse custom tags when linting yaml files (@pierredup)
  • bug #24910 [HttpKernel][Debug] Remove noise from stack frames of deprecations (@nicolas-grekas)
  • bug #24906 [Bridge/ProxyManager] Remove direct reference to value holder property (@nicolas-grekas)
  • feature #24887 [Cache][Lock] Add RedisProxy for lazy Redis connections (@nicolas-grekas)
  • bug #24633 [Config] Fix cannotBeEmpty() (@ro0NL)
  • bug #24900 [Validator] Fix Costa Rica IBAN format (@Bozhidar Hristov)
  • bug #24904 [Validator] Add Belarus IBAN format (@Bozhidar Hristov)
  • bug #24837 [TwigBridge] [Bootstrap 4] Fix validation error design for expanded choiceType (@ostrolucky)
  • bug #24878 [HttpFoundation] Prevent PHP from sending Last-Modified on session start (@nicolas-grekas)
  • bug #24881 [WebserverBundle] fixed the bug that caused that the webserver would … (@Serkan Yildiz)
  • bug #24850 [DI] Fix cannot bind env var (@ogizanagi)
  • bug #24851 [TwigBridge] Fix BC break due required twig environment (@ro0NL)

[PR] https://github.com/symfony/symfony/pull/24932

Changelog (since https://github.com/symfony/symfony/compare/v3.3.10...v3.3.11)

  • bug #24888 [FrameworkBundle] Specifically inject the debug dispatcher in the collector (@ogizanagi)
  • bug #24909 [Intl] Update ICU data to 60.1 (@jakzal)
  • bug #24870 [YAML] Allow to parse custom tags when linting yaml files (@pierredup)
  • bug #24910 [HttpKernel][Debug] Remove noise from stack frames of deprecations (@nicolas-grekas)
  • bug #24906 [Bridge/ProxyManager] Remove direct reference to value holder property (@nicolas-grekas)
  • bug #24900 [Validator] Fix Costa Rica IBAN format (@Bozhidar Hristov)
  • bug #24904 [Validator] Add Belarus IBAN format (@Bozhidar Hristov)
  • bug #24881 [WebserverBundle] fixed the bug that caused that the webserver would … (@Serkan Yildiz)
  • bug #24531 [HttpFoundation] Fix forward-compat of NativeSessionStorage with PHP 7.2 (@sroze)
  • bug #24665 Fix dump panel hidden when closing a dump (@julienfalque)
  • bug #24816 [Serializer] Fix extra attributes when no group specified (@ogizanagi)
  • bug #24814 [Intl] Make intl-data tests pass and save language aliases again (@jakzal)
  • bug #24810 [Serializer] readd default argument value (@xabbuh)
  • bug #24735 [VarDumper] fix trailling comma when dumping an exception (@Simperfit)
  • bug #24764 [HttpFoundation] add Early Hints to Reponse to fix test (@Simperfit)
  • bug #24759 Removes \n or space when $context/$extra are empty (@kirkmadera)
  • bug #24758 Throwing exception if redis and predis unavailable (@aequasi)
  • bug #24744 debug:container --types: Fix bug with non-existent classes (@weaverryan)
  • bug #24605 [FrameworkBundle] Do not load property_access.xml if the component isn't installed (@ogizanagi)
  • bug #24706 [DependencyInjection] Add the possibility to disable assets via xml (@renatomefi)
  • bug #24696 Ensure DeprecationErrorHandler::collectDeprecations() is triggered (@alexpott)
  • bug #24686 Fix $_ENV/$_SERVER precedence in test framework (@fabpot)
  • bug #24606 [HttpFoundation] Fix FileBag issue with associative arrays (@enumag)
  • bug #24673 [DI] Throw when a service name or an alias contains dynamic values (prevent an infinite loop) (@dunglas)
  • bug #24681 Fix isolated error handling (@alexpott)
  • bug #24575 Ensure that PHPUnit's error handler is still working in isolated tests (@alexpott)
  • bug #24597 [PhpUnitBridge] fix deprecation triggering test detection (@xabbuh)
  • bug #24660 Escape trailing \ in QuestionHelper autocompletion (@kamazee)
  • bug #24598 Prefer line formatter on missing cli dumper (@greg0ire)
  • bug #24644 [Security] Fixed auth provider authenticate() cannot return void (@glye)
  • bug #24642 [Routing] Fix resource miss (@dunglas)
  • bug #24608 Adding the Form default theme files to be warmed up in Twig's cache (@weaverryan)
  • bug #24626 streamed response should return $this (@DQNEO)
  • bug #24589 Username and password in basic auth are allowed to contain '.' (@Richard Quadling)
  • bug #24566 Fixed unsetting from loosely equal keys OrderedHashMap (@maryo)
  • bug #24570 [Debug] Fix same vendor detection in class loader (@Jean-Beru)
  • bug #24573 Fixed pathinfo calculation for requests starting with a question mark. (@syzygymsu)
  • bug #24565 [Serializer] YamlEncoder: throw if the Yaml component isn't installed (@dunglas)
  • bug #24563 [Serializer] ObjectNormalizer: throw if PropertyAccess isn't installed (@dunglas)
  • bug #24571 [PropertyInfo] Add support for the iterable type (@dunglas)
  • bug #24579 pdo session fix (@mxp100)
  • bug #24536 [Security] Reject remember-me token if UserCheckerInterface::checkPostAuth() fails (@kbond)
  • bug #24548 [Bridge\PhpUnit] Handle deprecations triggered in separate processes (@paul-m)
  • bug #24519 [Validator] [Twig] added magic method __isset() to File Constraint class (@loru88)
  • bug #24532 [DI] Fix possible incorrect php-code when dumped strings contains newlines (@Strate)
  • bug #24502 [HttpFoundation] never match invalid IP addresses (@xabbuh)
  • bug #24460 [Form] fix parsing invalid floating point numbers (@xabbuh)
  • bug #24490 [HttpFoundation] Combine Cache-Control headers (@c960657)
  • bug #23711 Fix support for PHP 7.2 (@Simperfit, @nicolas-grekas)
  • bug #24494 [HttpFoundation] Add missing session.lazy_write config option (@nicolas-grekas)
  • bug #24498 [Bridge\PhpUnit] Fix infinite loop when running isolated method (@nicolas-grekas)
  • bug #24434 [Form] Use for=ID on radio/checkbox label. (@Nyholm)
  • bug #24455 [Console] Escape command usage (@sroze)
  • bug #24462 [Yaml] parse references on merge keys with objects (@xabbuh)

[PR] https://github.com/symfony/symfony/pull/24916

Changelog (since https://github.com/symfony/symfony/compare/v3.4.0-BETA2...v3.4.0-BETA3)

  • bug #24531 [HttpFoundation] Fix forward-compat of NativeSessionStorage with PHP 7.2 (@sroze)
  • bug #24828 [DI] Fix the "almost-circular refs" fix (@nicolas-grekas)
  • bug #24665 Fix dump panel hidden when closing a dump (@julienfalque)
  • bug #24802 [TwigBridge] [Bootstrap 4] Fix hidden errors (@ostrolucky)
  • bug #24816 [Serializer] Fix extra attributes when no group specified (@ogizanagi)
  • bug #24822 [DI] Fix "almost-circular" dependencies handling (@nicolas-grekas)
  • bug #24821 symfony/form auto-enables symfony/validator, even when not present (@weaverryan)
  • bug #24824 [FrameworkBundle][Config] fix: do not add resource checkers for no-debug (@dmaicher)
  • bug #24814 [Intl] Make intl-data tests pass and save language aliases again (@jakzal)
  • bug #24810 [Serializer] readd default argument value (@xabbuh)
  • bug #24809 [Config] Fix dump of config references for deprecated nodes (@chalasr)
  • bug #24796 [PhpUnitBridge] Fixed fatal error in CoverageListener when something goes wrong in Test::setUpBeforeClass (@lyrixx)
  • bug #24774 [HttpKernel] Let the storage manage the session starts (@sroze)
  • bug #24735 [VarDumper] fix trailling comma when dumping an exception (@Simperfit)
  • bug #24770 [Validator] Fix TraceableValidator is reset on data collector instantiation (@ogizanagi)
  • bug #24764 [HttpFoundation] add Early Hints to Reponse to fix test (@Simperfit)
  • bug #24759 Removes \n or space when $context/$extra are empty (@kirkmadera)
  • bug #24758 Throwing exception if redis and predis unavailable (@aequasi)

[PR] https://github.com/symfony/symfony/pull/24831

Changelog (since https://github.com/symfony/symfony/compare/v3.4.0-BETA1...v3.4.0-BETA2)

  • bug #24728 [Bridge\Twig] fix bootstrap checkbox_row to render properly & remove spaceless (@arkste)
  • bug #24709 [HttpKernel] Move services reset to Kernel::handle()+boot() (@nicolas-grekas)
  • bug #24703 [TwigBridge] Bootstrap 4 form theme fixes (@vudaltsov)
  • bug #24744 debug:container --types: Fix bug with non-existent classes (@weaverryan)
  • bug #24747 [VarDumper] HtmlDumper: fix collapsing nodes with depth < maxDepth (@ogizanagi)
  • bug #24743 [FrameworkBundle] Do not activate the cache if Doctrine's cache is not present (@sroze)
  • bug #24605 [FrameworkBundle] Do not load property_access.xml if the component isn't installed (@ogizanagi)
  • bug #24710 [TwigBridge] Fix template paths in profiler (@ro0NL)
  • bug #24706 [DependencyInjection] Add the possibility to disable assets via xml (@renatomefi)
  • bug #24696 Ensure DeprecationErrorHandler::collectDeprecations() is triggered (@alexpott)
  • bug #24711 [TwigBridge] Re-add Bootstrap 3 Checkbox Layout (@arkste)
  • bug #24713 [FrameworkBundle] fix CachePoolPrunerPass to use correct command service id (@kbond)
  • bug #24686 Fix $_ENV/$_SERVER precedence in test framework (@fabpot)
  • bug #24691 [HttpFoundation] Fix caching of session-enabled pages (@nicolas-grekas)
  • bug #24606 [HttpFoundation] Fix FileBag issue with associative arrays (@enumag)
  • bug #24673 [DI] Throw when a service name or an alias contains dynamic values (prevent an infinite loop) (@dunglas)
  • bug #24684 [Security] remove invalid deprecation notice on AbstractGuardAuthenticator::supports() (@kbond)
  • bug #24681 Fix isolated error handling (@alexpott)
  • bug #24575 Ensure that PHPUnit's error handler is still working in isolated tests (@alexpott)
  • bug #24597 [PhpUnitBridge] fix deprecation triggering test detection (@xabbuh)
  • feature #24671 [DI] Handle container.autowiring.strict_mode to opt-out from legacy autowiring (@nicolas-grekas)
  • bug #24660 Escape trailing \ in QuestionHelper autocompletion (@kamazee)
  • bug #24624 [Security] Fix missing BC layer for AbstractGuardAuthenticator::getCredentials() (@chalasr)
  • bug #24598 Prefer line formatter on missing cli dumper (@greg0ire)
  • bug #24635 [DI] Register default env var provided types (@ro0NL)
  • bug #24620 [FrameworkBundle][Workflow] Fix deprectation when checking workflow.registry service in dump command (@Jean-Beru)
  • bug #24644 [Security] Fixed auth provider authenticate() cannot return void (@glye)
  • bug #24642 [Routing] Fix resource miss (@dunglas)
  • bug #24608 Adding the Form default theme files to be warmed up in Twig's cache (@weaverryan)
  • bug #24626 streamed response should return $this (@DQNEO)
  • bug #24630 [WebServerBundle] Prevent commands from being registered by convention (@chalasr)
  • bug #24589 Username and password in basic auth are allowed to contain '.' (@Richard Quadling)
  • bug #24566 Fixed unsetting from loosely equal keys OrderedHashMap (@maryo)
  • bug #24570 [Debug] Fix same vendor detection in class loader (@Jean-Beru)
  • bug #24573 Fixed pathinfo calculation for requests starting with a question mark. (@syzygymsu)
  • bug #24565 [Serializer] YamlEncoder: throw if the Yaml component isn't installed (@dunglas)
  • bug #24563 [Serializer] ObjectNormalizer: throw if PropertyAccess isn't installed (@dunglas)
  • bug #24571 [PropertyInfo] Add support for the iterable type (@dunglas)
  • bug #24579 pdo session fix (@mxp100)
  • bug #24536 [Security] Reject remember-me token if UserCheckerInterface::checkPostAuth() fails (@kbond)

[PR] https://github.com/symfony/symfony/pull/24761

Changelog (since https://github.com/symfony/symfony/compare/v3.3.0...v3.4.0-BETA1)

  • feature #24583 Adding a new debug:autowiring command (@weaverryan)
  • feature #24523 [HttpFoundation] Make sessions secure and lazy (@nicolas-grekas)
  • feature #22610 [Form] [TwigBridge] Added option to disable usage of default themes when rendering a form (@emodric)
  • feature #23112 [OptionsResolver] Support array of types in allowed type (@pierredup)
  • feature #24321 added ability to handle parent classes for PropertyNormalizer (@ivoba)
  • feature #24505 [HttpKernel] implement reset() in DumpDataCollector (@xabbuh)
  • feature #24425 [Console][HttpKernel] Handle new SHELL_VERBOSITY env var, also configures the default logger (@nicolas-grekas)
  • feature #24387 [FORM] Prevent forms from extending itself as a parent (@pierredup)
  • feature #24484 [DI] Throw accurate failures when accessing removed services (@nicolas-grekas)
  • feature #24208 [Form] Display option definition from a given form type (@yceruto, @ogizanagi)
  • feature #23499 [Workflow] add guard is_valid() method support (@alain-flaus, @lyrixx)
  • feature #24388 [Security] Look at headers for switch_user username (@chalasr)
  • feature #23708 Added deprecation to cwd not existing Fixes #18249 (@alexbowers)
  • feature #24443 [Session] deprecate MemcacheSessionHandler (@Tobion)
  • feature #24409 [Bridge\Doctrine][FrameworkBundle] Deprecate some remaining uses of ContainerAwareTrait (@nicolas-grekas)
  • feature #24438 [Session][VarDumper] Deprecate accepting legacy mongo extension (@Tobion)
  • feature #24389 [DoctrineBridge] Deprecate dbal session handler (@Tobion)
  • feature #16835 [Security] Add Guard authenticator method (@Amo, @chalasr)
  • feature #24289 [FrameworkBundle][HttpKernel] Reset profiler (@derrabus)
  • feature #24144 [FrameworkBundle] Expose dotenv in bin/console about (@ro0NL)
  • feature #24403 [FrameworkBundle][Routing] Show welcome message if no routes are configured (@yceruto)
  • feature #22679 [Form] Add tel and color types (@apetitpa)
  • feature #23845 [Validator] Add unique entity violation cause (@Ilya Vertakov)
  • feature #22132 [Lock] Automaticaly release lock when user forget it (@jderusse)
  • feature #21751 Bootstrap4 support for Twig form theme (@hiddewie, @javiereguiluz)
  • feature #24383 [FrameworkBundle] Don't clear app pools on cache:clear (@nicolas-grekas)
  • feature #24148 [Form] Hide label button when its setted to false (@TeLiXj)
  • feature #24378 [SecurityBundle] Deprecate auto picking the first provider (@ogizanagi)
  • feature #24260 [Security] Add impersonation support for stateless authentication (@chalasr)
  • feature #24300 [HttpKernel][FrameworkBundle] Add a minimalist default PSR-3 logger (@dunglas)
  • feature #21604 [Security] Argon2i Password Encoder (@zanbaldwin)
  • feature #24372 [DowCrawler] Default to UTF-8 when possible (@nicolas-grekas)
  • feature #24264 [TwigBundle] Improve the overriding of bundle templates (@yceruto)
  • feature #24197 [Translation] Moved PhpExtractor and PhpStringTokenParser to Translation component (@Nyholm)
  • feature #24362 [HttpKernel] Deprecate some compiler passes in favor of tagged iterator args (@nicolas-grekas)
  • feature #21027 [Asset] Provide default context (@ro0NL)
  • feature #22200 [DI] Reference tagged services in config (@ro0NL)
  • feature #24337 Adding a shortcuts for the main security functionality (@weaverryan, @javiereguiluz)
  • feature #24358 [TwigBundle] register an identity translator as fallback (@xabbuh)
  • feature #24357 [Yaml] include file and line no in deprecation message (@xabbuh)
  • feature #24330 [FrameworkBundle] register class metadata factory alias (@xabbuh)
  • feature #24349 [SecurityBundle] Add missing AclSchemaListener deprecation (@ogizanagi)
  • feature #24202 [Filesystem] deprecate relative paths in makePathRelative() (@xabbuh)
  • feature #21716 [Serializer] Add Support for object_to_populate in CustomNormalizer (@chrisguitarguy)
  • feature #21960 Remove Validator\TypeTestCase and add validator logic to base TypeTestCase (@pierredup)
  • feature #22113 [Lock] Include lock component in framework bundle (@jderusse)
  • feature #24236 [WebProfilerBundle] Render file links for twig templates (@ro0NL)
  • feature #21239 [Serializer] throw more specific exceptions (@xabbuh)
  • feature #24256 CsvEncoder handling variable structures and custom header order (@Oliver Hoff)
  • feature #23471 [Finder] Add a method to check if any results were found (@duncan3dc)
  • feature #23149 [PhpUnitBridge] Added a CoverageListener to enhance the code coverage report (@lyrixx)
  • feature #24318 [SecurityBundle] Deprecate ACL related code (@chalasr)
  • feature #24335 [Security][SecurityBundle] Deprecate the HTTP digest auth (@ogizanagi)
  • feature #21951 [Security][Firewall] Passing the newly generated security token to the event during user switching (@klandaika)
  • feature #23485 [Config] extracted the xml parsing from XmlUtils::loadFile into XmlUtils::parse (@Basster)
  • feature #22890 [HttpKernel] Add ability to configure catching exceptions for Client (@kbond)
  • feature #24239 [HttpFoundation] Deprecate compatibility with PHP <5.4 sessions (@afurculita)
  • feature #23882 [Security] Deprecated not being logged out after user change (@iltar)
  • feature #24200 Added an alias for FlashBagInterface in config (@tifabien)
  • feature #24295 [DI][DX] Throw exception on some ContainerBuilder methods used from extensions (@ogizanagi)
  • feature #24253 [Yaml] support parsing files (@xabbuh)
  • feature #24290 Adding Definition::addError() and a compiler pass to throw errors as exceptions (@weaverryan)
  • feature #24301 [DI] Add AutowireRequiredMethodsPass to fix bindings for @required methods (@nicolas-grekas)
  • feature #24226 [Cache] Add ResettableInterface to allow resetting any pool's local state (@nicolas-grekas)
  • feature #24303 [FrameworkBundle] allow forms without translations and validator (@xabbuh)
  • feature #24291 [SecurityBundle] Reset the authentication token between requests (@derrabus)
  • feature #24280 [VarDumper] Make dump() a little bit more easier to use (@freekmurze)
  • feature #24277 [Serializer] Getter for extra attributes in ExtraAttributesException (@mdeboer)
  • feature #24257 [HttpKernel][DI] Enable Kernel to implement CompilerPassInterface (@nicolas-grekas)
  • feature #23834 [DI] Add "PHP fluent format" for configuring the container (@nicolas-grekas)
  • feature #24180 [Routing] Add PHP fluent DSL for configuring routes (@nicolas-grekas)
  • feature #24232 [Bridge\Doctrine] Add "DoctrineType::reset()" method (@nicolas-grekas)
  • feature #24238 [DI] Turn services and aliases private by default, with BC layer (@nicolas-grekas)
  • feature #23648 [Form] Add input + regions options to TimezoneType (@ro0NL)
  • feature #24185 [Form] Display general forms information on debug:form (@yceruto)
  • feature #23747 [Serializer][FrameworkBundle] Add a DateInterval normalizer (@Lctrs)
  • feature #24193 [FrameworkBundle] Reset stopwatch between requests (@derrabus)
  • feature #24160 [HttpKernel] Deprecate bundle inheritance (@fabpot)
  • feature #24155 [FrameworkBundle][HttpKernel] Add DI tag for resettable services (@derrabus)
  • feature #23625 Feature #23583 Add current and fallback locales in WDT / Profiler (@nemoneph)
  • feature #24179 [TwigBundle] Add default templates directory and option to configure it (@yceruto)
  • feature #24104 Make as many services private as possible (@nicolas-grekas)
  • feature #18314 [Translation] added support for adding custom message formatter (@aitboudad)
  • feature #24158 deprecated profiler.matcher configuration (@fabpot)
  • feature #24131 [Console] Do not display short exception trace for common console exceptions (@yceruto)
  • feature #24080 Deprecated the web_profiler.position option (@javiereguiluz)
  • feature #24114 [SecurityBundle] Throw a meaningful exception when an undefined user provider is used inside a firewall (@chalasr)
  • feature #24122 [DI] rename ResolveDefinitionTemplatesPass to ResolveChildDefinitionsPass (@nicolas-grekas)
  • feature #23901 [DI] Allow processing env vars (@nicolas-grekas)
  • feature #24093 [FrameworkBundle] be able to enable workflow support explicitly (@xabbuh)
  • feature #24064 [TwigBridge] Show Twig's loader paths on debug:twig command (@yceruto)
  • feature #23978 [Cache] Use options from Memcached DSN (@Bukashk0zzz)
  • feature #24075 Implemented PruneableInterface on TagAwareAdapter (@Toflar)
  • feature #21414 [Console] Display file and line on Exception (@arno14)
  • feature #24068 [HttpKernel] Deprecate EnvParametersResource (@ro0NL)
  • feature #22542 [Lock] Check TTL expiration in lock acquisition (@jderusse)
  • feature #24031 [Routing] Add the possibility to define a prefix for all routes of a controller (@fabpot)
  • feature #23967 [VarDumper] add force-collapse/expand + use it for traces (@nicolas-grekas)
  • feature #24033 [DI] Add ContainerInterface::IGNORE_ON_UNINITIALIZED_REFERENCE (@nicolas-grekas)
  • feature #24026 [Security] add impersonator_user to "User was reloaded" log message (@gharlan)
  • feature #23603 [Cache] Add (pdo|chain) cache (adapter|simple) prune method (@robfrawley)
  • feature #23694 [Form] Add debug:form command (@yceruto)
  • feature #24028 [Yaml] mark some classes as final (@xabbuh)
  • feature #22543 [Lock] Expose an expiringDate and isExpired method in Lock (@jderusse)
  • feature #23667 [Translation] Create an TranslationReaderInterface and move TranslationLoader to TranslationComponent (@Nyholm)
  • feature #24024 [config] Add ability to deprecate a node (@sanpii)
  • feature #23668 [VarDumper] Add period caster (@maidmaid)
  • feature #23991 [DI] Improve psr4-based service discovery (alternative implementation) (@kbond)
  • feature #23947 [Translation] Adding the ability do load in xliff2.0 (@Nyholm)
  • feature #23887 [Console] Allow commands to provide a default name for compile time registration (@chalasr, @nicolas-grekas)
  • feature #23874 [DI] Case sensitive parameter names (@ro0NL)
  • feature #23936 Remove some sf2 references (@fabpot)
  • feature #23680 [Webprofiler] Added blocks that allows extension of the profiler page. (@Nyholm)
  • feature #23665 Create an interface for TranslationWriter (@Nyholm)
  • feature #23890 [Translation] Adding the ability do dump in xliff2.0 (@Nyholm)
  • feature #23862 [SecurityBundle] resolve class name parameter inside AddSecurityVotersPass (@pjarmalavicius)
  • feature #23915 [DI] Allow get available services from service locator (@Koc)
  • feature #23792 [HttpKernel][FrameworkBundle] Add RebootableInterface, fix and un-deprecate cache:clear with warmup (@nicolas-grekas)
  • feature #23227 Add support for "controller" keyword for configuring routes controllers (@voronkovich)
  • feature #23869 [Console] Made console command shortcuts case insensitive (@thanosp)
  • feature #23855 [DI] Allow dumping inline services in Yaml (@nicolas-grekas)
  • feature #23836 [FrameworkBundle] Catch Fatal errors in commands registration (@chalasr)
  • feature #23805 [HttpKernel] Deprecated commands auto-registration (@GuilhemN)
  • feature #23816 [Debug] Detect internal and deprecated methods (@GuilhemN)
  • feature #23812 [FrameworkBundle] Allow micro kernel to subscribe events easily (@ogizanagi)
  • feature #22187 [DependencyInjection] Support local binding (@GuilhemN)
  • feature #23741 [DI] Generate one file per service factory (@nicolas-grekas)
  • feature #23807 [Debug] Trigger a deprecation when using an internal class/trait/interface (@GuilhemN)
  • feature #22587 [Workflow] Add transition completed event (@izzyp)
  • feature #23624 [FrameworkBundle] Commands as a service (@ro0NL)
  • feature #21111 [Validator] add groups support to the Valid constraint (@xabbuh)
  • feature #20361 [Config] Enable cannotBeEmpty along with requiresAtLeastOneElement (@ro0NL)
  • feature #23712 [DependencyInjection] Deprecate autowiring service auto-registration (@GuilhemN)
  • feature #23719 Autoconfigure instances of ArgumentValueResolverInterface (@BPScott)
  • feature #23706 [Webprofiler] Improve sql explain table display (@mimol91)
  • feature #23724 [Lock] Deprecate Filesystem/LockHandler (@jderusse)
  • feature #23593 [Workflow] Adding workflow name to the announce event (@Nyholm)
  • feature #20496 [Form] Allow pass filter callback to delete_empty option. (@Koc)
  • feature #23451 [Cache] Add (filesystem|phpfiles) cache (adapter|simple) prune method and prune command (@robfrawley)
  • feature #23519 [TwigBundle] Commands as a service (@ro0NL)
  • feature #23591 [VarDumper] Add time zone caster (@maidmaid)
  • feature #23510 [Console] Add a factory command loader for standalone application with lazy-loading needs (@ogizanagi)
  • feature #23357 [VarDumper] Add interval caster (@maidmaid)
  • feature #23550 [DebugBundle] Added min_depth to Configuration (@james-johnston-thumbtack)
  • feature #23570 [FrameworkBundle] Make RouterCacheWarmer implement ServiceSubscriberInterface (@nicolas-grekas)
  • feature #23437 [TwigBridge] deprecate TwigRenderer (@Tobion)
  • feature #23515 [VarDumper] Added setMinDepth to VarCloner (@james-johnston-thumbtack)
  • feature #23404 [Serializer] AbstractObjectNormalizer: Allow to disable type enforcement (@ogizanagi)
  • feature #21086 [MonologBridge] Add TokenProcessor (@maidmaid)
  • feature #22576 [Validator] Allow to use a property path to get value to compare in comparison constraints (@ogizanagi)
  • feature #22689 [DoctrineBridge] Add support for doctrin/dbal v2.6 types (@jvasseur)
  • feature #22734 [Console] Add support for command lazy-loading (@chalasr)
  • feature #19034 [Security] make it possible to configure a custom access decision manager service (@xabbuh)
  • feature #23037 [TwigBundle] Added a RuntimeExtensionInterface to take advantage of autoconfigure (@lyrixx)
  • feature #22176 [DI] Allow imports in string format for YAML (@ro0NL)
  • feature #23295 [Security] Lazy load user providers (@chalasr)
  • feature #23440 [Routing] Add matched and default parameters to redirect responses (@artursvonda, @Tobion)
  • feature #22832 [Debug] Deprecate support for stacked errors (@mbabker)
  • feature #21469 [HttpFoundation] Find the original request protocol version (@thewilkybarkid)
  • feature #23431 [Validator] Add min/max amount of pixels to Image constraint (@akeeman)
  • feature #23223 Add support for microseconds in Stopwatch (@javiereguiluz)
  • feature #22341 [BrowserKit] Emulate back/forward browser navigation (@e-moe)
  • feature #22619 [FrameworkBundle][Translation] Move translation compiler pass (@lepiaf)
  • feature #22620 [FrameworkBundle][HttpKernel] Move httpkernel pass (@lepiaf)
  • feature #23337 [Component][Serializer][Normalizer] : Deal it with Has Method for the Normalizer/Denormalizer (@jordscream)
  • feature #22588 [VarDumper] Add filter in VarDumperTestTrait (@maidmaid)
  • feature #23288 [Yaml] deprecate the !str tag (@xabbuh)
  • feature #23039 [Validator] Support for parsing PHP constants in yaml loader (@mimol91)
  • feature #22431 [VarDumper] Add date caster (@maidmaid)
  • feature #23285 [Stopwatch] Add a reset method (@jmgq)
  • feature #23320 [WebServer] Allow * to bind all interfaces (as INADDR_ANY) (@jpauli, @fabpot)
  • feature #23272 [FrameworkBundle] disable unusable fragment renderers (@xabbuh)
  • feature #23332 [Yaml] fix the displayed line number (@fabpot, @xabbuh)
  • feature #23026 [SecurityBundle] Add user impersonation info and exit action to the profiler (@yceruto)
  • feature #22932 [HttpFoundation] Adds support for the immutable directive in the cache-control header (@twoleds)
  • feature #22554 [Profiler][Validator] Add a validator panel in profiler (@ogizanagi)
  • feature #22124 Shift responsibility for keeping Date header to ResponseHeaderBag (@mpdude)
  • feature #23122 Xml encoder optional type cast (@ragboyjr)
  • feature #23207 [FrameworkBundle] Allow .yaml file extension everywhere (@ogizanagi)
  • feature #23076 [Validator] Adds support to check specific DNS record type for URL (@iisisrael)
  • feature #22629 [Security] Trigger a deprecation when a voter is missing the VoterInterface (@iltar)
  • feature #22636 [Routing] Expose request in route conditions, if needed and possible (@ro0NL)
  • feature #22909 [Yaml] Deprecate using the non-specific tag (@GuilhemN)
  • feature #23042 Consistent error handling in remember me services (@lstrojny)
  • feature #22444 [Serializer] DateTimeNormalizer: allow to provide timezone (@ogizanagi)
  • feature #23143 [DI] Reference instead of inline for array-params (@nicolas-grekas)
  • feature #23154 [WebProfilerBundle] Sticky ajax window (@ro0NL)
  • feature #23161 [FrameworkBundle] Deprecate useless --no-prefix option (@chalasr)
  • feature #23105 [SecurityBundle][Profiler] Give info about called security listeners in profiler (@chalasr)
  • feature #23148 [FrameworkBundle] drop hard dependency on the Stopwatch component (@xabbuh)
  • feature #23131 [FrameworkBundle] Remove dependency on Doctrine cache (@fabpot)
  • feature #23114 [SecurityBundle] Lazy load security listeners (@chalasr)
  • feature #23111 [Process] Deprecate ProcessBuilder (@nicolas-grekas)
  • feature #22675 [FrameworkBundle] KernelTestCase: deprecate not using KERNEL_CLASS (@ogizanagi)
  • feature #22917 [VarDumper] Cycle prev/next searching in HTML dumps (@ro0NL)
  • feature #23044 Automatically enable the routing annotation loader (@GuilhemN)
  • feature #22696 [PropertyInfo] Made ReflectionExtractor's prefix lists instance variables (@neemzy)
  • feature #23035 Deprecate passing a concrete service in optional cache warmers (@romainneutron)
  • feature #23036 Implement ServiceSubscriberInterface in optional cache warmers (@romainneutron)
  • feature #23022 [Di] Remove closure-proxy arguments (@nicolas-grekas)
  • feature #22903 [DI] Deprecate XML services without ID (@ro0NL)
  • feature #22597 [Lock] Re-add the Lock component in 3.4 (@jderusse)
  • feature #22803 [DI] Deprecate Container::initialized() for privates (@ro0NL)
  • feature #22828 [Finder] Deprecate FilterIterator (@ogizanagi)
  • feature #22826 [Validator] improve strict option value deprecation (@xabbuh)

[PR] https://github.com/symfony/symfony/pull/24609

Changelog (since https://github.com/symfony/symfony/compare/v3.3.9...v3.3.10)

  • bug #23906 Added support for guards when advancing workflow from a command (@GDIBass)
  • bug #24448 [Session] fix MongoDb session handler to gc all expired sessions (@Tobion)
  • bug #24431 [FrameworkBundle] Fix bad interface hint in AbstractController (@nicolas-grekas)
  • bug #24419 [Cache] Fix race condition in TagAwareAdapter (@nicolas-grekas)
  • bug #24417 [Yaml] parse references on merge keys (@xabbuh)
  • bug #24416 [Yaml] treat trailing backslashes in multi-line strings (@xabbuh)
  • bug #24421 [Config] Fix dumped files invalidation by OPCache (@nicolas-grekas)
  • bug #24418 [DI] Allow setting any public non-initialized services (@nicolas-grekas)
  • bug #23980 Tests and fix for issue in array model data in EntityType field with multiple=true (@stoccc)
  • bug #22586 [Form] Fixed PercentToLocalizedStringTransformer to accept both comma and dot as decimal separator, if possible (@aaa2000)
  • bug #24157 [Intl] Fixed support of Locale::getFallback (@lyrixx)
  • bug #24198 [HttpFoundation] Fix file upload multiple with no files (@enumag)
  • bug #24379 [PHPUnitBridge] don't remove when set to empty string (@Simperfit)
  • bug #24036 [Form] Fix precision of MoneyToLocalizedStringTransformer's divisions and multiplications (@Rubinum)
  • bug #24191 [DependencyInjection] include file and line number in deprecation (@xabbuh)
  • bug #24367 PdoSessionHandler: fix advisory lock for pgsql (@Tobion)
  • bug #24189 [Yaml] parse merge keys with PARSE_OBJECT_FOR_MAP flag (@xabbuh)
  • bug #24243 HttpCache does not consider ESI resources in HEAD requests (@mpdude)
  • bug #24237 [WebProfilerBundle] Added missing link to profile token (@vtsykun)
  • bug #24244 TwigBundle exception/deprecation tweaks (@ro0NL)
  • bug #24281 [TwigBundle] Remove profiler related scripting (@ro0NL, @javiereguiluz)
  • bug #24251 [PropertyAccess] Set a NullLogger in ApcuAdapter when Apcu is disabled in CLI (@iamluc)
  • bug #24304 [FrameworkBundle] Fix Routing\DelegatingLoader (@nicolas-grekas)
  • bug #24305 [HttpKernel] Make array vs "::" controller definitions consistent (@nicolas-grekas)
  • bug #24255 [TwigBundle] Break long lines in exceptions (@kevin-verschaeve)
  • bug #24219 [Console] Preserving line breaks between sentences according to the exception message (@yceruto)
  • bug #24192 [PhpUnitBridge] do not require an error context (@xabbuh)
  • bug #23722 [Form] Fixed GroupSequence with "constraints" option (@HeahDude)
  • bug #22321 [Filesystem] Fixed makePathRelative (@ausi)
  • bug #24234 [DI] Fix decorated service merge in ResolveInstanceofConditionalsPass (@dunglas)
  • bug #24203 [Security] Preserve URI fragment in HttpUtils::generateUri() (@chalasr)
  • bug #24199 [DI] Fix non-instantiables auto-discovery (@nicolas-grekas)
  • bug #23473 [Filesystem] mirror - fix copying content with same name as source/target. (@gitlost)
  • bug #24177 [FrameworkBundle] Add support to environment variables APP_ENV/DEBUG in KernelTestCase (@yceruto)
  • bug #24162 [WebProfilerBundle] fixed TemplateManager when using Twig 2 without compat interfaces (@fabpot)

[PR] https://github.com/symfony/symfony/pull/24452

Changelog (since https://github.com/symfony/symfony/compare/v3.3.8...v3.3.9)

  • bug #24141 [DomCrawler] Fix conversion to int on GetPhpFiles (@MaraBlaga)
  • bug #23853 Filtering empty uuids in ORMQueryBuilderLoader. (@mlazovla)
  • bug #24101 [Security] Fix exception when use_referer option is true and referer is not set or empty (@linniksa)
  • bug #24105 [Filesystem] check permissions if dump target dir is missing (@xabbuh)
  • bug #24126 [HttpKernel] "controller.service_arguments" services should be public (@nicolas-grekas)
  • bug #24113 [FrameworkBundle] Get KERNEL_CLASS through $_ENV too for KernelTestCase (@yceruto)
  • bug #24115 [FrameworkBundle] Get KERNEL_DIR through $_ENV too for KernelTestCase (@yceruto)
  • bug #24041 [ExpressionLanguage] throws an exception on calling uncallable method (@fmata)
  • bug #24096 Fix ArrayInput::toString() for VALUE_IS_ARRAY options/args (@chalasr)
  • bug #24082 [DI] Minor fix in dumped code (@nicolas-grekas)
  • bug #23969 [Cache] Use namespace versioning for backends that dont support clearing by keys (@nicolas-grekas)
  • bug #24021 [DI] Don't track merged configs when the extension doesn't expose it (@nicolas-grekas)
  • bug #24011 [Cache] Always require symfony/polyfill-apcu to provide APCuIterator everywhere (@guillaumelecerf)
  • bug #23730 Fixed the escaping of back slashes and << in console output (@javiereguiluz)

[PR] https://github.com/symfony/symfony/pull/24156

Changelog (since https://github.com/symfony/symfony/compare/v3.3.7...v3.3.8)

  • bug #24016 [DI] Fix tracking env var placeholders nested in object graphs (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/24017

Changelog (since https://github.com/symfony/symfony/compare/v3.3.6...v3.3.7)

  • bug #24009 [DI] Fix tracking env vars when merging configs (bis) (@nicolas-grekas)
  • bug #23952 [PhpUnitBridge] install PHPUnit 6 on PHP 7.2 (@xabbuh)
  • bug #23985 [Cache] Workaround zend.detect_unicode + zend.multibyte (@nicolas-grekas)
  • bug #23989 [Debug] Remove false-positive check in DebugClassLoader (@nicolas-grekas)
  • bug #23983 [VarDumper] Strengthen dumped JS (@nicolas-grekas)
  • bug #23982 [VarDumper] Strengthen dumped JS (@nicolas-grekas)
  • bug #23925 [Validator] Fix use of GroupSequenceProvider in child classes (@linniksa)
  • bug #23971 [Cache] Fix lazy Memcached connections (@nicolas-grekas)
  • bug #23970 [Cache] Fix >30 days expirations with Memcached (@nicolas-grekas)
  • bug #23949 [Dotenv] Get env using $_SERVER to work with fastcgi_param and workaround thread safety issues (@nicolas-grekas)
  • bug #23799 [Dotenv][WebServerBundle] Override previously loaded variables (@voronkovich)
  • bug #23676 [WebProfilerBundle] Re add missing link to the controller (@lyrixx)
  • bug #23870 [DI] Use GlobResource for non-tracked directories (@vudaltsov)
  • bug #23945 [Validator] Fix Greek translation (@azhurb)
  • bug #23940 [DI] Fix resolving env vars when compiling a ContainerBuilder (@nicolas-grekas)
  • bug #23903 [DI] Fix merging of env vars in configs (@nicolas-grekas)
  • bug #23825 Revert "feature #21038 [FrameworkBundle] deprecated cache:clear with warmup (fabpot)" (@nicolas-grekas)
  • bug #23899 [DI] Fix reading env vars from fastcgi params (@nicolas-grekas)
  • bug #23909 [Console] Initialize lazily to render exceptions properly (@nicolas-grekas)
  • bug #23878 [VarDumper] play nice with open_basedir when looking for composer.json (@nicolas-grekas)
  • bug #23897 Allow phpdocumentor/reflection-docblock 4 (@derrabus)
  • bug #23865 [Workflow] fixed InvalidDefinitionException message for StateMachineValidator (@fmata)
  • bug #23856 [DI] Fix dumping abstract with YamlDumper (@nicolas-grekas)
  • bug #23848 restrict reflection doc block (@ElectricMaxxx)
  • bug #23854 [DI] Fix YamlDumper not dumping abstract and autoconfigure (@nicolas-grekas)
  • bug #23752 Ignore memcached missing key error on session destroy (@jderusse)
  • bug #23829 Fixed the exception page design in responsive mode (@javiereguiluz)
  • bug #23828 [Console] Log exit codes as debug messages instead of errors (@haroldiedema)
  • bug #23763 [Cache] Hash cache key on save (@lstrojny)
  • bug #23806 [Profiler] Fix request_collector check in main layout (@ogizanagi)
  • bug #23658 [HttpFoundation] Generate safe fallback filename for wrongly encoded filename (@xelaris)
  • bug #23776 [FrameworkBundle] Warmup annotations for bundle-less controllers and entities (@nicolas-grekas)
  • bug #23783 Avoid infinite loops when profiler data is malformed (@javiereguiluz)
  • bug #23638 [FrameworkBundle][Workflow] better errors when security deps are missing (@xabbuh)
  • bug #23729 [Bridge\ProxyManager] Dont call __destruct() on non-instantiated services (@nicolas-grekas)
  • bug #23703 Bump minimal PHP version to ^5.5.9|>=7.0.8 (@nicolas-grekas)
  • bug #23755 [Config] Fix checking class existence freshness (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/24013

Changelog (since https://github.com/symfony/symfony/compare/v3.3.5...v3.3.6)

  • bug #22244 [Console] Fix passing options with defaultCommand (@Jakub Sacha)
  • bug #23705 [Form] Add notice to upgrade to PHP v7.0.8+ (@nicolas-grekas)
  • bug #23683 [VarDumper] Keep and reuse array stubs in memory (@nicolas-grekas)
  • bug #23686 [Console][WebServerBundle] Use "exec" when possible (@nicolas-grekas)
  • bug #23684 [Debug] Missing escape in debug output (@c960657)
  • bug #23644 [VarDumper] Dont use Stub objects for arrays - lower GC pressure (@nicolas-grekas)
  • bug #23615 [Cache] Handle serialization failures for Memcached (@nicolas-grekas)
  • bug #23654 [DI] Fix using private services in expressions (@nicolas-grekas)
  • bug #23662 [VarDumper] Adapt to php 7.2 changes (@nicolas-grekas)
  • bug #23649 [Form][TwigBridge] Don't render _method in form_rest() for a child form (@fmarchalemisys)
  • bug #23588 [WebProfilerBundle] Display trace and context in the logger profiler (@lyrixx)
  • bug #23023 [DoctrineBridge][PropertyInfo] Added support for Doctrine Embeddables (@vudaltsov)
  • bug #23618 [Routing] allow HEAD method to be defined first (@DavidBadura)
  • bug #23619 [Validator] Fix IbanValidator for ukrainian IBANs (@paroe)
  • bug #23605 [DI][Bug] Autowiring thinks optional args on core classes are required (@weaverryan)
  • bug #23586 Fix case sensitive sameSite cookie (@mikefrancis)
  • bug #23584 Fix the design of the profiler exceptions when there is no message (@javiereguiluz)
  • bug #23238 [Security] ensure the 'route' index is set before attempting to use it (@gsdevme)
  • bug #23330 [WebProfilerBundle] Fix full sized dump hovering in toolbar (@ogizanagi)
  • bug #23581 [Config] Minor fix (@nicolas-grekas)
  • bug #23580 Fix login redirect when referer contains a query string (@fabpot)
  • bug #23577 [WebProfilerBundle][TwigBundle] Fix infinite js loop on exception pages (@ogizanagi)
  • bug #23558 [FrameworkBundle] fix ValidatorCacheWarmer: use serializing ArrayAdapter (@dmaicher)
  • bug #23573 [Config] Make ClassExistenceResource throw on invalid parents (@nicolas-grekas)
  • bug #23574 [VarDumper] Move locale sniffing to dump() time (@nicolas-grekas)
  • bug #23575 [VarDumper] Use "C" locale when using "comma" flags (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/23738

Changelog (since https://github.com/symfony/symfony/compare/v3.2.12...v3.2.13)

  • bug #22244 [Console] Fix passing options with defaultCommand (@Jakub Sacha)
  • bug #23684 [Debug] Missing escape in debug output (@c960657)
  • bug #23654 [DI] Fix using private services in expressions (@nicolas-grekas)
  • bug #23662 [VarDumper] Adapt to php 7.2 changes (@nicolas-grekas)
  • bug #23649 [Form][TwigBridge] Don't render _method in form_rest() for a child form (@fmarchalemisys)
  • bug #23023 [DoctrineBridge][PropertyInfo] Added support for Doctrine Embeddables (@vudaltsov)
  • bug #23619 [Validator] Fix IbanValidator for ukrainian IBANs (@paroe)
  • bug #23586 Fix case sensitive sameSite cookie (@mikefrancis)
  • bug #23238 [Security] ensure the 'route' index is set before attempting to use it (@gsdevme)
  • bug #23330 [WebProfilerBundle] Fix full sized dump hovering in toolbar (@ogizanagi)
  • bug #23580 Fix login redirect when referer contains a query string (@fabpot)
  • bug #23558 [FrameworkBundle] fix ValidatorCacheWarmer: use serializing ArrayAdapter (@dmaicher)
  • bug #23574 [VarDumper] Move locale sniffing to dump() time (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/23736
[EOM] End of maintenance release for branch 3.2

Changelog (since https://github.com/symfony/symfony/compare/v3.3.4...v3.3.5)

  • bug #23549 [PropertyInfo] conflict for phpdocumentor/reflection-docblock 3.2 (@xabbuh)
  • bug #23513 [FrameworkBundle] Set default public directory on install assets (@yceruto)
  • security #23507 [Security] validate empty passwords again (@xabbuh)
  • bug #23526 [HttpFoundation] Set meta refresh time to 0 in RedirectResponse content (@jnvsor)
  • bug #23535 Make server:* commands work out of the box with the public/ root dir (@fabpot)
  • bug #23540 Disable inlining deprecated services (@alekitto)
  • bug #23498 [Process] Fixed issue between process builder and exec (@lyrixx)
  • bug #23490 [DependencyInjection] non-conflicting anonymous service ids across files (@xabbuh)
  • bug #23468 [DI] Handle root namespace in service definitions (@ro0NL)
  • bug #23477 [Process] Fix parsing args on Windows (@nicolas-grekas)
  • bug #23256 [Security] Fix authentication.failure event not dispatched on AccountStatusException (@chalasr)
  • bug #23461 Use rawurlencode() to transform the Cookie into a string (@javiereguiluz)
  • bug #23465 [HttpKernel][VarDumper] Truncate profiler data & optim perf (@nicolas-grekas)
  • bug #23457 [FrameworkBundle] check _controller attribute is a string before parsing it (@alekitto)
  • bug #23459 [TwigBundle] allow to configure custom formats in XML configs (@xabbuh)
  • bug #23460 Don't display the Symfony debug toolbar when printing the page (@javiereguiluz)
  • bug #23469 [FrameworkBundle] do not wire namespaces for the ArrayAdapter (@xabbuh)
  • bug #23434 [DotEnv] Fix variable substitution (@brieucthomas)
  • bug #23426 Fixed HttpOnly flag when using Cookie::fromString() (@Toflar)
  • bug #22439 [DX] [TwigBundle] Enhance the new exception page design (@sustmi)
  • bug #23417 [DI][Security] Prevent unwanted deprecation notices when using Expression Languages (@dunglas)
  • bug #23261 Fixed absolute url generation for query strings and hash urls (@alexander-schranz)
  • bug #23398 [Filesystem] Dont copy perms when origin is remote (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/23555
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v3.2.11...v3.2.12)

  • bug #23549 [PropertyInfo] conflict for phpdocumentor/reflection-docblock 3.2 (@xabbuh)
  • security #23507 [Security] validate empty passwords again (@xabbuh)
  • bug #23526 [HttpFoundation] Set meta refresh time to 0 in RedirectResponse content (@jnvsor)
  • bug #23540 Disable inlining deprecated services (@alekitto)
  • bug #23468 [DI] Handle root namespace in service definitions (@ro0NL)
  • bug #23256 [Security] Fix authentication.failure event not dispatched on AccountStatusException (@chalasr)
  • bug #23461 Use rawurlencode() to transform the Cookie into a string (@javiereguiluz)
  • bug #23459 [TwigBundle] allow to configure custom formats in XML configs (@xabbuh)
  • bug #23460 Don't display the Symfony debug toolbar when printing the page (@javiereguiluz)
  • bug #23469 [FrameworkBundle] do not wire namespaces for the ArrayAdapter (@xabbuh)
  • bug #23417 [DI][Security] Prevent unwanted deprecation notices when using Expression Languages (@dunglas)
  • bug #23261 Fixed absolute url generation for query strings and hash urls (@alexander-schranz)
  • bug #23398 [Filesystem] Dont copy perms when origin is remote (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/23554
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v3.3.3...v3.3.4)

  • bug #23413 [VarDumper] Reduce size of serialized Data objects (@nicolas-grekas)
  • bug #23385 [DoctrineBridge] Fix resetting entity managers with case sensitive id (@chalasr)
  • bug #23390 [Cache] Handle APCu failures gracefully (@nicolas-grekas)
  • bug #23371 [FrameworkBundle] 3.3: Don't get() private services from debug:router (@ogizanagi)
  • bug #23378 [FrameworkBundle] Do not remove files from assets dir (@1ed)

[PR] https://github.com/symfony/symfony/pull/23414

Changelog (since https://github.com/symfony/symfony/compare/v3.2.10...v3.2.11)

  • bug #23390 [Cache] Handle APCu failures gracefully (@nicolas-grekas)
  • bug #23378 [FrameworkBundle] Do not remove files from assets dir (@1ed)

[PR] https://github.com/symfony/symfony/pull/23408

Changelog (since https://github.com/symfony/symfony/compare/v3.3.2...v3.3.3)

  • bug #23366 [FrameworkBundle] Don't get() private services from debug:router (@chalasr)
  • bug #23239 [FrameworkBundle] call setContainer() for autowired controllers (@xabbuh)
  • bug #23351 [Dotenv] parse concatenated variable values (@xabbuh)
  • bug #23341 [DoctrineBridge][Security][Validator] do not validate empty values (@xabbuh)
  • bug #23274 Display a better error design when the toolbar cannot be displayed (@yceruto)
  • bug #23342 [Dotenv] parse escaped quotes in unquoted env var values (@xabbuh)
  • bug #23291 [Security] Fix Firewall ExceptionListener priority (@chalasr)
  • bug #23296 [WebProfilerBundle] Fix css trick used for offsetting html anchor from fixed header (@ogizanagi)
  • bug #23333 [PropertyAccess] Fix TypeError discard (@dunglas)
  • bug #23326 [Cache] fix cleanup of expired items for PdoAdapter (@dmaicher)
  • bug #23345 [Console] fix description of INF default values (@xabbuh)
  • bug #23328 [FrameworkBundle] Display a proper warning on cache:clear without the --no-warmup option (@ogizanagi)
  • bug #23299 [Workflow] Added more events to the announce function (@Nyholm)
  • bug #23279 Don't call count on non countable object (@pierredup)
  • bug #23283 [TwigBundle] add back exception check (@xabbuh)
  • bug #23268 Show exception is checked twice in ExceptionController of twig (@gmponos)
  • bug #23266 Display a better error message when the toolbar cannot be displayed (@javiereguiluz)
  • bug #23271 [FrameworkBundle] allow SSI fragments configuration in XML files (@xabbuh)
  • bug #23254 [Form][TwigBridge] render hidden _method field in form_rest() (@xabbuh)
  • bug #23250 [Translation] return fallback locales whenever possible (@xabbuh)
  • bug #23237 [Cache] Fix Predis client cluster with pipeline (@flolivaud)
  • bug #23240 [Console] Fix catching exception type in QuestionHelper (@voronkovich)
  • bug #23218 [DI] Dedup tags when using instanceof/autoconfigure (@ogizanagi)
  • bug #23231 Improved the exception page when there is no message (@javiereguiluz)
  • bug #23229 [WebProfilerBundle] Eliminate line wrap on count column (routing) (@e-moe)
  • bug #22732 [Security] fix switch user _exit without having current token (@dmaicher)
  • bug #23226 [Validator] replace hardcoded service id (@xabbuh)
  • bug #22730 [FrameworkBundle] Sessions: configurable "use_strict_mode" option for NativeSessionStorage (@MacDada)
  • bug #23195 [FrameworkBundle] [Command] Clean bundle directory, fixes #23177 (@NicolasPion)
  • bug #23213 Fixed composer resources between web/cli (@iltar)
  • bug #23160 [WebProfilerBundle] Fix the icon for the Cache panel (@javiereguiluz)
  • bug #23052 [TwigBundle] Add Content-Type header for exception response (@rchoquet)
  • bug #23173 [WebServerBundle] Fix router script option BC (@1ed)
  • bug #23199 Reset redirectCount when throwing exception (@hvanoch)
  • bug #23180 [FrameworkBundle] Expose the AbstractController's container to its subclasses (@BPScott)
  • bug #23186 [TwigBundle] Move template.xml loading to a compiler pass (@ogizanagi)
  • bug #23130 Keep s-maxage when expiry and validation are used in combination (@mpdude)
  • bug #23129 Fix two edge cases in ResponseCacheStrategy (@mpdude)
  • feature #22636 [Routing] Expose request in route conditions, if needed and possible (@ro0NL)
  • bug #22636 [Routing] Expose request in route conditions, if needed and possible (@ro0NL)
  • bug #22943 [SecurityBundle] Move cache of the firewall context into the request parameters (@GromNaN)
  • bug #23088 [FrameworkBundle] Dont set pre-defined esi/ssi services (@ro0NL)
  • bug #23057 [Translation][FrameworkBundle] Fix resource loading order inconsistency reported in #23034 (@mpdude)
  • bug #23092 [Filesystem] added workaround in Filesystem::rename for PHP bug (@VolCh)
  • bug #23074 [HttpFoundation] add back support for legacy constant values (@xabbuh)
  • bug #23128 [HttpFoundation] fix for Support for new 7.1 session options (@vincentaubert)
  • bug #23176 [VarDumper] fixes (@nicolas-grekas)
  • bug #23100 [PropertyAccess] Do not silence TypeErrors from client code. (@tsufeki)
  • bug #23156 [PropertyAccess] Fix Usage with anonymous classes (@mablae)
  • bug #23168 [Config] Fix ** GlobResource on Windows (@nicolas-grekas)
  • bug #23171 [Yaml] Fix linting yaml with constants as keys (@chalasr)
  • bug #23121 [Routing] Revert the change in [#b42018] with respect to Routing/Route.php (@Dan Wilga)
  • bug #23141 [DI] Fix keys resolution in ResolveParameterPlaceHoldersPass (@nicolas-grekas)
  • bug #23145 Fix the conditional definition of the SymfonyTestsListener (@stof)
  • bug #23091 [Cache] ApcuAdapter::isSupported() should return true when apc.enable_cli=Off (@nicolas-grekas)
  • bug #22953 #22839 - changed debug toolbar dump section to relative and use full window width (@mkurzeja)
  • bug #23086 [FrameworkBundle] Fix perf issue in CacheClearCommand::warmup() (@nicolas-grekas)
  • bug #23090 [SecurityBundle] Made 2 service aliases private (@nicolas-grekas)
  • bug #23108 [Yaml] Remove line number in deprecation notices (@nicolas-grekas)
  • bug #23098 Cache ipCheck (2.7) (@gonzalovilaseca)
  • bug #23082 [MonologBridge] Do not silence errors in ServerLogHandler::formatRecord (@lyrixx)
  • bug #23007 [HttpKernel][Debug] Fix missing trace on deprecations collected during bootstrapping & silenced errors (@ogizanagi)
  • bug #23069 [SecurityBundle] Show unique Inherited roles in profile panel (@yceruto)

[PR] https://github.com/symfony/symfony/pull/23369

Changelog (since https://github.com/symfony/symfony/compare/v3.2.9...v3.2.10)

  • bug #23366 [FrameworkBundle] Don't get() private services from debug:router (@chalasr)
  • bug #23341 [DoctrineBridge][Security][Validator] do not validate empty values (@xabbuh)
  • bug #23274 Display a better error design when the toolbar cannot be displayed (@yceruto)
  • bug #23296 [WebProfilerBundle] Fix css trick used for offsetting html anchor from fixed header (@ogizanagi)
  • bug #23333 [PropertyAccess] Fix TypeError discard (@dunglas)
  • bug #23326 [Cache] fix cleanup of expired items for PdoAdapter (@dmaicher)
  • bug #23345 [Console] fix description of INF default values (@xabbuh)
  • bug #23299 [Workflow] Added more events to the announce function (@Nyholm)
  • bug #23279 Don't call count on non countable object (@pierredup)
  • bug #23283 [TwigBundle] add back exception check (@xabbuh)
  • bug #23268 Show exception is checked twice in ExceptionController of twig (@gmponos)
  • bug #23266 Display a better error message when the toolbar cannot be displayed (@javiereguiluz)
  • bug #23271 [FrameworkBundle] allow SSI fragments configuration in XML files (@xabbuh)
  • bug #23254 [Form][TwigBridge] render hidden _method field in form_rest() (@xabbuh)
  • bug #23250 [Translation] return fallback locales whenever possible (@xabbuh)
  • bug #23240 [Console] Fix catching exception type in QuestionHelper (@voronkovich)
  • bug #23229 [WebProfilerBundle] Eliminate line wrap on count column (routing) (@e-moe)
  • bug #22732 [Security] fix switch user _exit without having current token (@dmaicher)
  • bug #22730 [FrameworkBundle] Sessions: configurable "use_strict_mode" option for NativeSessionStorage (@MacDada)
  • bug #23195 [FrameworkBundle] [Command] Clean bundle directory, fixes #23177 (@NicolasPion)
  • bug #23052 [TwigBundle] Add Content-Type header for exception response (@rchoquet)
  • bug #23199 Reset redirectCount when throwing exception (@hvanoch)
  • bug #23186 [TwigBundle] Move template.xml loading to a compiler pass (@ogizanagi)
  • bug #23130 Keep s-maxage when expiry and validation are used in combination (@mpdude)
  • bug #23129 Fix two edge cases in ResponseCacheStrategy (@mpdude)
  • feature #22636 [Routing] Expose request in route conditions, if needed and possible (@ro0NL)
  • bug #22636 [Routing] Expose request in route conditions, if needed and possible (@ro0NL)
  • bug #22943 [SecurityBundle] Move cache of the firewall context into the request parameters (@GromNaN)
  • bug #23057 [Translation][FrameworkBundle] Fix resource loading order inconsistency reported in #23034 (@mpdude)
  • bug #23092 [Filesystem] added workaround in Filesystem::rename for PHP bug (@VolCh)
  • bug #23128 [HttpFoundation] fix for Support for new 7.1 session options (@vincentaubert)
  • bug #23176 [VarDumper] fixes (@nicolas-grekas)
  • bug #23100 [PropertyAccess] Do not silence TypeErrors from client code. (@tsufeki)
  • bug #23156 [PropertyAccess] Fix Usage with anonymous classes (@mablae)
  • bug #23091 [Cache] ApcuAdapter::isSupported() should return true when apc.enable_cli=Off (@nicolas-grekas)
  • bug #22953 #22839 - changed debug toolbar dump section to relative and use full window width (@mkurzeja)
  • bug #23086 [FrameworkBundle] Fix perf issue in CacheClearCommand::warmup() (@nicolas-grekas)
  • bug #23098 Cache ipCheck (2.7) (@gonzalovilaseca)
  • bug #23069 [SecurityBundle] Show unique Inherited roles in profile panel (@yceruto)
  • bug #23073 [TwigBridge] Fix namespaced classes (@ogizanagi)
  • bug #23063 [Cache] Fix extensibility of TagAwareAdapter::TAGS_PREFIX (@wucdbm)
  • bug #22936 [Form] Mix attr option between guessed options and user options (@yceruto)
  • bug #22976 [DependencyInjection] Use more clear message when unused environment variables detected (@voronkovich)
  • bug #23045 [Cache] fix Redis scheme detection (@xabbuh)
  • bug #22988 [PropertyInfo][DoctrineBridge] The bigint Doctrine's type must be converted to string (@dunglas)
  • bug #23014 Fix optional cache warmers are always instantiated whereas they should be lazy-loaded (@romainneutron)
  • bug #23024 [EventDispatcher] Fix ContainerAwareEventDispatcher::hasListeners(null) (@nicolas-grekas)
  • bug #22996 [Form] Fix \IntlDateFormatter timezone parameter usage to bypass PHP bug #66323 (@romainneutron)
  • bug #22994 Harden the debugging of Twig filters and functions (@stof)

[PR] https://github.com/symfony/symfony/pull/23368

Changelog (since https://github.com/symfony/symfony/compare/v3.3.1...v3.3.2)

  • bug #23073 [TwigBridge] Fix namespaced classes (@ogizanagi)
  • bug #23063 [Cache] Fix extensibility of TagAwareAdapter::TAGS_PREFIX (@wucdbm)
  • bug #22936 [Form] Mix attr option between guessed options and user options (@yceruto)
  • bug #22976 [DependencyInjection] Use more clear message when unused environment variables detected (@voronkovich)

[PR] https://github.com/symfony/symfony/pull/23078

Changelog (since https://github.com/symfony/symfony/compare/v3.3.0...v3.3.1)

  • bug #23067 [HttpFoundation][FrameworkBundle] Revert "trusted proxies" BC break (@nicolas-grekas)
  • bug #23065 [Cache] Fallback to positional when keyed results are broken (@nicolas-grekas)
  • bug #22981 [DependencyInjection] Fix named args support in ChildDefinition (@dunglas)
  • bug #23050 [Form][Profiler] Fixes form collector triggering deprecations (@ogizanagi)
  • bug #22971 [Profiler] Fix code excerpt wrapping (@ogizanagi)
  • bug #23049 [FrameworkBundle] mitigate BC break with empty trusted_proxies (@xabbuh)
  • bug #23045 [Cache] fix Redis scheme detection (@xabbuh)
  • bug #23013 Parse the _controller format in sub-requests (@weaverryan)
  • bug #23015 [PhpUnitBridge] Fix detection of PHPUnit 5 (@enumag)
  • bug #23041 [Config] Always protected ClassExistenceResource against bad parents (@nicolas-grekas)
  • bug #22988 [PropertyInfo][DoctrineBridge] The bigint Doctrine's type must be converted to string (@dunglas)
  • bug #23014 Fix optional cache warmers are always instantiated whereas they should be lazy-loaded (@romainneutron)
  • feature #23022 [Di] Remove closure-proxy arguments (@nicolas-grekas)
  • bug #23024 [EventDispatcher] Fix ContainerAwareEventDispatcher::hasListeners(null) (@nicolas-grekas)
  • bug #23008 [EventDispatcher] Handle laziness internally instead of relying on ClosureProxyArgument (@nicolas-grekas)
  • bug #23018 [FrameworkBundle] Fix CacheCollectorPass priority (@chalasr)
  • bug #23009 [Routing] Allow GET requests to be redirected. Fixes #23004 (@frankdejonge)
  • bug #22996 [Form] Fix \IntlDateFormatter timezone parameter usage to bypass PHP bug #66323 (@romainneutron)
  • bug #22965 [Cache] Ignore missing annotations.php (@ro0NL)
  • bug #22993 [DI] Autowiring exception thrown when inlined service is removed (@weaverryan)
  • bug #22999 Better DI type deprecation message (@weaverryan)
  • bug #22985 [Config] Allow empty globs (@nicolas-grekas)
  • bug #22961 [HttpKernel] Support unknown format in LoggerDataCollector (@iltar)
  • bug #22991 [DI] Don't throw Autowire exception for removed service with private __construct (@weaverryan)
  • bug #22968 [Profiler] Fix text selection & click on file links on exception pages (@ogizanagi)
  • bug #22994 Harden the debugging of Twig filters and functions (@stof)
  • bug #22960 [Cache] Fix decoration of TagAware adapters in dev (@chalasr)

[PR] https://github.com/symfony/symfony/pull/23068

Changelog (since https://github.com/symfony/symfony/compare/v3.3.0-RC1...v3.3.0)

  • bug #22940 [Config] Fallback to regular import when glob fails (@nicolas-grekas)
  • bug #22847 [Console] ChoiceQuestion must have choices (@ro0NL)
  • bug #22900 [FrameworkBundle][Console] Fix the override of a command registered by the kernel (@aaa2000)
  • bug #22930 Revert "bug #22925 [PhpUnitBridge] Adjust PHPUnit class_alias check (@nicolas-grekas)
  • bug #22910 [Filesystem] improve error handling in lock() (@xabbuh)
  • bug #22924 [Cache] Dont use pipelining with RedisCluster (@nicolas-grekas)
  • bug #22928 [WebProfilerBundle] Fixed options stub values display in form profiler (@HeahDude)
  • feature #22838 Make the simple exception pages match the new style (@javiereguiluz)
  • bug #22925 [PhpUnitBridge] Adjust PHPUnit class_alias check to also check for namespaced class (@GawainLynch)
  • bug #22718 [Console] Fixed different behaviour of key and value user inputs in multiple choice question (@borNfreee)
  • bug #22921 [FrameworkBundle] Only override getProjectDir if it exists in the kernel (@aschempp)
  • feature #22905 [FrameworkBundle][Validator] Move the PSR-11 factory to the component (@ogizanagi)
  • bug #22728 [HttpKernel] Fix kernel.project_dir extensibility (@chalasr)
  • bug #22829 [Yaml] fix colon without space deprecation (@xabbuh)
  • bug #22901 Fix missing abstract key in XmlDumper (@weaverryan)
  • bug #22912 [DI] Avoid private call to Container::has() (@ro0NL)
  • feature #22904 [HttpFoundation] Add Request::HEADER_X_FORWARDED_AWS_ELB const (@nicolas-grekas)
  • bug #22878 [Yaml] parse PHP constants in mapping keys (@xabbuh)
  • bug #22873 [HttpKernel] don't call getTrustedHeaderName() if possible (@xabbuh)
  • feature #22892 [ProxyManager] Add FC layer (@nicolas-grekas)
  • bug #22866 [DI] Check for privates before shared services (@ro0NL)
  • feature #22884 [DI] Add missing deprecation on Extension::getClassesToCompile (@nicolas-grekas)
  • bug #22874 [WebProfilerBundle] Fix sub-requests display in time profiler panel (@nicolas-grekas)
  • bug #22853 [Yaml] fix multiline block handling (@xabbuh)
  • bug #22872 [FrameworkBundle] Handle project dir in cache:clear command (@nicolas-grekas)
  • feature #22808 [FrameworkBundle][Validator] Deprecate passing validator instances/aliases over using the service locator (@ogizanagi)
  • bug #22857 [DI] Fix autowire error for inlined services (@weaverryan)
  • bug #22858 [SecurityBundle] Prevent auto-registration of UserPasswordEncoderCommand (@chalasr)
  • bug #22859 [Profiler][VarDumper] Fix searchbar css when in toolbar (@ogizanagi)
  • bug #22614 [Process] Fixed escaping arguments on Windows when inheritEnvironmentVariables is set to false (@maryo)
  • bug #22817 [PhpUnitBridge] optional error handler arguments (@xabbuh)
  • bug #22781 [DI][Serializer] Fix missing de(normalizer|coder) autoconfig (@ogizanagi)
  • bug #22790 [DependencyInjection] Fix dumping of RewindableGenerator with empty IteratorArgument (@meyerbaptiste)
  • bug #22787 [MonologBridge] Fix the Monlog ServerLogHandler from Hanging on Windows (@ChadSikorra)
  • bug #22768 Use 0.0.0.0 as the server log command host default. (@ChadSikorra)
  • bug #22752 Improved how profiler errors are displayed on small screens (@javiereguiluz)

[PR] https://github.com/symfony/symfony/pull/22949

Changelog (since https://github.com/symfony/symfony/compare/v3.2.8...v3.2.9)

  • bug #22847 [Console] ChoiceQuestion must have choices (@ro0NL)
  • bug #22900 [FrameworkBundle][Console] Fix the override of a command registered by the kernel (@aaa2000)
  • bug #22910 [Filesystem] improve error handling in lock() (@xabbuh)
  • bug #22924 [Cache] Dont use pipelining with RedisCluster (@nicolas-grekas)
  • bug #22718 [Console] Fixed different behaviour of key and value user inputs in multiple choice question (@borNfreee)
  • bug #22829 [Yaml] fix colon without space deprecation (@xabbuh)
  • bug #22901 Fix missing abstract key in XmlDumper (@weaverryan)
  • bug #22912 [DI] Avoid private call to Container::has() (@ro0NL)
  • bug #22866 [DI] Check for privates before shared services (@ro0NL)
  • bug #22874 [WebProfilerBundle] Fix sub-requests display in time profiler panel (@nicolas-grekas)
  • bug #22817 [PhpUnitBridge] optional error handler arguments (@xabbuh)
  • bug #22752 Improved how profiler errors are displayed on small screens (@javiereguiluz)
  • bug #22715 [FrameworkBundle] remove Security deps from the require section (@xabbuh)
  • bug #22647 [VarDumper] Fix dumping of non-nested stubs (@nicolas-grekas)
  • bug #22409 [Yaml] respect inline level when dumping objects as maps (@goetas, @xabbuh)
  • bug #22584 [Security] Avoid unnecessary route lookup for empty logout path (@ro0NL)
  • bug #22690 [Console] Fix errors not rethrown even if not handled by console.error listeners (@chalasr)
  • bug #22669 [FrameworkBundle] AbstractConfigCommand: do not try registering bundles twice (@ogizanagi)
  • bug #22676 [FrameworkBundle] Adding the extension XML (@flug)
  • bug #22652 [Workflow] Move twig extension registration to twig bundle (@ogizanagi)

[PR] https://github.com/symfony/symfony/pull/22947

Changelog (since https://github.com/symfony/symfony/compare/v3.3.0-BETA1...v3.3.0-RC1)

  • bug #22715 [FrameworkBundle] remove Security deps from the require section (@xabbuh)
  • bug #22613 [Process] Fix incorrectly calling PHP process when path contains space (@maryo)
  • feature #22680 [DI] Fixing missing "exclude" functionality from PSR4 loader (@weaverryan)
  • bug #22699 [TwigBundle] service workflow.twig_extension should stay public (@ogizanagi)
  • feature #22708 Adding autowire alias for AuthenticationUtils (@weaverryan)
  • bug #22695 [WebServerBundle] fix dependencies (@xabbuh)
  • bug #22647 [VarDumper] Fix dumping of non-nested stubs (@nicolas-grekas)
  • bug #22409 [Yaml] respect inline level when dumping objects as maps (@goetas, @xabbuh)
  • bug #22584 [Security] Avoid unnecessary route lookup for empty logout path (@ro0NL)
  • bug #22642 [DX] Making the RegisterControllerArgumentLocatorsPass throw exception on bad types (@weaverryan)
  • bug #22664 [Security] Fix TraceableAccessDecisionManager / DebugAccessDecisionManager BC layer (@ogizanagi)
  • bug #22690 [Console] Fix errors not rethrown even if not handled by console.error listeners (@chalasr)
  • bug #22681 Fixing a bug where abstract classes were wired with the prototype loader (@weaverryan)
  • feature #22665 [DI] Do not throw autowiring exceptions for a service that will be removed (@weaverryan)
  • bug #22669 [FrameworkBundle] AbstractConfigCommand: do not try registering bundles twice (@ogizanagi)
  • bug #22676 [FrameworkBundle] Adding the extension XML (@flug)
  • bug #22611 [FrameworkBundle] Fix "Locale class not found" in AboutCommand (@rubenrua)
  • bug #22677 [DI] Fixed index args bug with ResolveNamedArgumentsPass (@weaverryan)
  • bug #22652 [Workflow] Move twig extension registration to twig bundle (@ogizanagi)
  • feature #22668 [FrameworkBundle] KernelTestCase: allow to provide the kernel class with a var (@ogizanagi)
  • bug #22639 [WebLink][TwigBundle] Fix registration of the twig extension (@ogizanagi)
  • bug #22658 Make the exception pages work when the WebProfilerBundle is not installed (@javiereguiluz)
  • bug #22657 [DI] Fix Cannot declare class ...\DefinitionDecorator, because the name is already in use (@ogizanagi)
  • feature #22624 debug:container --types (classes/interfaces) (@weaverryan)
  • bug #22626 Fix missing parenthesis (@yceruto)
  • bug #22621 [Config] Fix resource tracking with new GlobResource (@nicolas-grekas)
  • feature #22385 [DX][FrameworkBundle] Show private aliases in debug:container (@chalasr)
  • bug #22615 [DI] Defaults to public=false in all service config files (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/22731

Changelog (since https://github.com/symfony/symfony/compare/v3.2.0...v3.3.0-BETA1)

  • feature #22530 Making tags under _defaults always apply (@weaverryan)
  • feature #22590 [Lock] remove the component from 3.3 (@fabpot)
  • feature #22527 [DI] Throw useful exception on bad XML argument tags (@nicolas-grekas)
  • feature #22537 [Serializer] Allow to pass csv encoder options in context (@ogizanagi)
  • feature #22563 Not allowing autoconfigure, instanceofConditionals or defaults for ChildDefinition (@weaverryan)
  • feature #22441 [Console] Review console.ERROR related behavior (@nicolas-grekas)
  • feature #22234 [DI] Introducing autoconfigure: automatic _instanceof configuration (@weaverryan)
  • feature #21502 Persist app bootstrapping logs for logger datacollector (@ScullWM, @nicolas-grekas)
  • feature #22459 [HttpKernel] Fix deprecation of Extension::addClassesToCompile() / AddClassesToCachePass (@nicolas-grekas)
  • feature #22416 [FrameworkBundle][Workflow] Deprecate the default type of a workflow (@lyrixx)
  • feature #22313 [Workflow] Move ValidateWorkflowsPass to the Workflow component (@chalasr)
  • feature #22420 [DI] Make tagged abstract services throw earlier (@nicolas-grekas)
  • feature #22384 [DI] Replace autowiring BC break by regular deprecation (@nicolas-grekas)
  • feature #22383 added a more specialized exception for a better error message (@fabpot)
  • feature #22356 [DI] Rework config hierarchy: defaults > instanceof > service config (@weaverryan, @nicolas-grekas)
  • feature #22362 [DI] Populate class of ChildDefinition when its id matches an existing FQCN (@nicolas-grekas)
  • feature #22239 [Finder] Glob wildcard while using double-star without ending slash (@sroze)
  • feature #22273 Add a new Link component (@dunglas)
  • feature #22315 Add Kernel::getProjectDir() (@fabpot)
  • feature #22314 [HttpKernel][FrameworkBundle] Dump container logs in Kernel, to have them also on errors (@nicolas-grekas)
  • feature #22316 [WebServerBundle] added a way to dump current status host/port/address when getting the status (@fabpot)
  • feature #22323 [DI] Report cascades of autowiring error messages (@nicolas-grekas)
  • feature #22306 [DI] Restrict autowired registration to "same-vendor" namespaces (@nicolas-grekas)
  • feature #22295 [BC BREAK][DI] Always autowire "by id" instead of using reflection against all existing services (@nicolas-grekas)
  • feature #20951 Redesigned the exception pages (@javiereguiluz)
  • feature #21919 [Form] Deprecated usage of "choices" option in sub types (@HeahDude)
  • feature #22274 [Yaml] report deprecations when linting YAML files (@xabbuh)
  • feature #22286 [DI/Yaml] Remove @experimental flag from "instanceof" and "prototype" (@nicolas-grekas)
  • feature #22181 [Console] Allow to catch CommandNotFoundException (@chalasr)
  • feature #22296 Bump monolog to 1.19 and use the agent regex const from parent (@redthor)
  • feature #21437 [Security] Use IteratorArgument for voters (@jvasseur)
  • feature #22277 [DI] Add "factory" support to named args and autowiring (@nicolas-grekas)
  • feature #22276 [FrameworkBundle] Returns the kernel instance in KernelTestCase::bootKernel (@lyrixx)
  • feature #22256 [DI] Reduce complexity of autowiring (@nicolas-grekas)
  • feature #22238 [BC BREAK][HttpFoundation] Request::setTrustedProxies() takes a new required $trustedHeaderSet argument (@nicolas-grekas)
  • feature #22175 [DI] add ServiceLocatorTagPass::register() to share service locators (@nicolas-grekas)
  • feature #22180 [Workflow] Added 'workflow_marked_places' twig function (@lyrixx)
  • feature #22185 [DI] Enhance DX by throwing instead of triggering a deprecation notice (@nicolas-grekas)
  • feature #22060 [DI] Add "by-id" autowiring: a side-effect free variant of it based on the class<>id convention (@nicolas-grekas)
  • feature #22158 Revert "feature #20973 [DI] Add getter injection (nicolas-grekas)" (@nicolas-grekas)
  • feature #22157 [FrameworkBundle] Introduce AbstractController, replacing ControllerTrait (@nicolas-grekas)
  • feature #22046 [Asset] Adding a new version strategy that reads from a manifest JSON file (@weaverryan)
  • feature #22129 [WebProfilerBundle] Improve cache panel (@ro0NL)
  • feature #21819 [Twig Bridge] A simpler way to retrieve flash messages (@javiereguiluz)
  • feature #19026 [Security] Strengthen comparison of target_url vs login_path (@mrzard)
  • feature #19496 [DX][Form][Validator] Add ability check if cocrete constraint fails. (@Koc)
  • feature #18140 [Console] Add console.ERROR event and deprecate console.EXCEPTION (@wouterj)
  • feature #22120 [FrameworkBundle] Multiple services on one Command class (@SenseException)
  • feature #21771 [FrameworkBundle] Add new "controller.service_arguments" tag to inject services into actions (@nicolas-grekas)
  • feature #22114 [lock] Rename Quorum into Strategy (@jderusse)
  • feature #20516 [Security][SecurityBundle] Enhance automatic logout url generation (@ogizanagi)
  • feature #22081 [FrameworkBundle][Validator] Move Validator passes to the component (@chalasr)
  • feature #20567 [WebProfilerBundle] Improved cookie traffic (@ro0NL)
  • feature #19887 Sort alternatives alphabetically when a command is not found (@javiereguiluz)
  • feature #20851 [Cache] Add CacheItem::getPreviousTags() (@nicolas-grekas)
  • feature #21830 [HttpFoundation] Add $trustedHeaderSet arg to Request::setTrustedProxies() - deprecate not setting it (@nicolas-grekas)
  • feature #21924 [FrameworkBundle] Allow to configure Serializer mapping paths (@chalasr)
  • feature #19278 [FrameworkBundle] Added about command (@ro0NL)
  • feature #21708 [DI] Add and wire ServiceSubscriberInterface - aka explicit service locators (@nicolas-grekas)
  • feature #22011 [FrameworkBundle][Serializer] Add option to register a circular_reference_handler (@lyrixx)
  • feature #19673 [DI] Deprecate Container::isFrozen and introduce isCompiled (@ro0NL)
  • feature #19954 [Console] Exclude empty namespaces in text descriptor (@ro0NL)
  • feature #21093 [Lock] Create a lock component (@jderusse)
  • feature #21007 [WebProfilerBundle] Improve AJAX toolbar panel (@ro0NL)
  • feature #20642 [FrameworkBundle] Add project directory default for installing assets (@Noah Heck)
  • feature #20365 [TwigBridge] Handle form label attributes like others (@ro0NL)
  • feature #22010 [FrameworkBundle][Translator] Make the Translator works with any PSR-11 container (@chalasr)
  • feature #21038 [FrameworkBundle] deprecated cache:clear with warmup (@fabpot)
  • feature #22098 [*Bundle] Add autowiring aliases for common services (@nicolas-grekas)
  • feature #22095 [DI] Add logging and better failure recovery to AutowirePass (@nicolas-grekas)
  • feature #21889 Deprecate the special SYMFONY__ environment variables (@javiereguiluz)
  • feature #22059 [Yaml] deprecate "? " starting unquoted strings (@xabbuh)
  • feature #22030 [DI] Remove skipping magic for autowired methods (@nicolas-grekas)
  • feature #22024 [DI] Introduce "container.service_locator" tag, replaces ServiceLocatorArgument (@nicolas-grekas)
  • feature #21837 [FrameworkBundle] Lazy configuration of annotations' loader and @required (@nicolas-grekas)
  • feature #21970 [DependencyInjection] Support anonymous services in Yaml (@GuilhemN)
  • feature #21979 [FrameworkBundle][TwigBundle] Require PSR-11 container instead of Symfony container (@enumag)
  • feature #21935 [FrameworkBundle][Workflow] Add a way to register a guard expression in the configuration (@lyrixx)
  • feature #21080 [FrameworkBundle][Monolog] Added a new way to follow logs (@lyrixx)
  • feature #21978 [DoctrineBridge][Routing] Require PSR-11 container instead of Symfony container (@enumag)
  • feature #21950 [Workflow] Added fluent interface to the DefinitionBuilder (@lyrixx)
  • feature #21933 [FrameworkBundle][Workflow] Add a way to enable the AuditTrail Logger (@lyrixx)
  • feature #21925 [Workflow] Added the workflow name to all events dispatched (@lyrixx)
  • feature #21774 [Yaml] deprecate implicit string casting of mapping keys (@xabbuh)
  • feature #21780 [DX] [Form] Add helper method to register form extensions during unit testing (@pierredup)
  • feature #21842 [HttpKernel] Allow signing URIs with a custom query string parameter (@thewilkybarkid)
  • feature #21705 [Bridge/Monolog] Enhance the Console Handler (@lyrixx)
  • feature #21893 Added a castToArray() config helper (@javiereguiluz)
  • feature #21421 Use proper error message when session write fails #20807 (@digilist)
  • feature #21770 [DI] Allow extensions to create ServiceLocator as services (@nicolas-grekas)
  • feature #21767 [DI][Router][DX] Invalidate routing cache when container parameters changed (@ogizanagi)
  • feature #21835 [FrameworkBundle][Routing] Move RoutingResolverPass to the Routing component (@chalasr)
  • feature #21815 [FrameworkBundle][HttpKernel] Move ControllerArgumentValueResolverPass to the HttpKernel component (@chalasr)
  • feature #21824 Add deprecation note on routing class parameters (@lepiaf)
  • feature #21854 [Router] Follow symlinks and skip dots in the annotation directory loader (@jakzal)
  • feature #18193 [FrameworkBundle] Introduce autowirable ControllerTrait (@dunglas)
  • feature #20680 DoctrineDataCollector: taught sanitizeParam to support classes with __toString implemented. (@FractalizeR)
  • feature #21828 [PhpUnitBridge] include expected deprecations in assertion counter (@xabbuh)
  • feature #21763 [DI] Replace wildcard-based methods autowiring by @required annotation (@nicolas-grekas)
  • feature #21730 [DependencyInjection] Use a service locator in AddConstraintValidatorsPass (@GuilhemN)
  • feature #21118 [Yaml] parse omitted inlined mapping values as null (@xabbuh)
  • feature #21806 [FrameworkBundle][PropertyInfo] Move PropertyInfoPass to the PropertyInfo component (@chalasr)
  • feature #19822 [HttpKernel] Deprecate X-Status-Code for better alternative (@jameshalsall)
  • feature #21228 [Console] Explicitly passed options without value (or empty) should remain empty (@chalasr)
  • feature #21723 [Routing][DX] Add full route definition for invokable controller/class (@yceruto)
  • feature #21768 [HttpKernel] Add a ContainerControllerResolver (psr-11) (@ogizanagi)
  • feature #21690 [Form] allow form types + form type extensions + form type guessers to be private services (@hhamon)
  • feature #21755 [Routing] Optimised dumped router matcher, prevent unneeded function calls. (@frankdejonge)
  • feature #21375 [FrameworkBundle][Config] Move ConfigCachePass from FrameworkBundle to Config (@Deamon)
  • feature #21786 [PhpUnitBridge] testing for deprecations is not risky (@xabbuh)
  • feature #21792 [Security] deprecate multiple providers in context listener (@xabbuh)
  • feature #21625 Remove some container injections in favor of service locators (@nicolas-grekas, @chalasr)
  • feature #21539 Introduce weak vendors mode (@greg0ire)
  • feature #21638 [VarDumper] Allow seamless use of Data clones (@nicolas-grekas)
  • feature #21164 [HttpKernel] Added the SessionValueResolver (@iltar)
  • feature #21718 [SecurityBundle] Don't normalize username of in-memory users (@chalasr)
  • feature #20107 Added a build method to the kernel to replace Bundle::build() (@iltar)
  • feature #21694 [Bridge/PhpUnit] Add PHPUnit 6 support (@nicolas-grekas)
  • feature #21122 [ExpressionLanguage] Create an ExpressionFunction from a PHP function name (@maidmaid)
  • feature #21653 [VarDumper] Added a way to print or not comma separator and/or trailing comma (@lyrixx)
  • feature #21471 [Yaml] Allow dumping empty array as YAML sequence (@c960657)
  • feature #21478 [Asset] Add support for preloading with links and HTTP/2 push (@dunglas)
  • feature #20632 [FrameworkBundle] Make use of stderr for non reliable output (@chalasr, @ogizanagi)
  • feature #21664 [Console] simplify the implementation of SymfonyStyle::comment() (@fabpot)
  • feature #21578 [Translation] Added a lint:xliff command for XLIFF files (@javiereguiluz)
  • feature #21635 added support for glob loaders in Config (@fabpot)
  • feature #21654 [PropertyInfo] Use iterators for PropertyInfoExtractor (@GuilhemN)
  • feature #21655 [PropertyInfo] Make classes final (@GuilhemN)
  • feature #21530 [DependencyInjection] Add "instanceof" section for local interface-defined configs (@nicolas-grekas, @dunglas)
  • feature #21643 [Yaml] deprecate parsing mappings without keys (@xabbuh)
  • feature #20677 [DX][SecurityBundle] UserPasswordEncoderCommand: ask user class choice question (@ogizanagi)
  • feature #21283 [Form][FrameworkBundle] Move FormPass to the Form component (@chalasr)
  • feature #21293 [FrameworkBundle][Serializer] Move SerializerPass to the Serializer (@chalasr)
  • feature #21450 [Security] Lazy load guard authenticators and authentication providers (@chalasr)
  • feature #21484 [DI] Deprecate underscore-services in YamlFileLoader (@nicolas-grekas)
  • feature #21270 [DependencyInjection] Use glob pattern to load config files (@pierredup)
  • feature #19815 [WebProfilerBundle] Make the IP address in the profiler header clickable (@jameshalsall)
  • feature #21383 [DependencyInjection] Add support for named arguments (@dunglas, @nicolas-grekas)
  • feature #19371 [Serializer] Give access to the context to support* methods (@dunglas)
  • feature #21553 [DI] Replace container injection by explicit service locators (@chalasr)
  • feature #18834 [Serializer] Add the possibility to filter attributes (@dunglas)
  • feature #20787 [Workflow] Added an entered event (@Padam87)
  • feature #21289 [DI] Add prototype services for PSR4-based discovery and registration (@nicolas-grekas)
  • feature #21465 [Debug] Support @final on methods (@GuilhemN)
  • feature #21505 [Config][DI] Add ComposerResource to track the runtime engine + deps (@nicolas-grekas)
  • feature #21533 [DI] Deprecate (un)setting pre-defined services (@ro0NL)
  • feature #21194 [Yaml] Add tags support (@GuilhemN)
  • feature #21460 [DI] ContainerBuilder::compile() can optionally resolve env vars in parameter bag (@nicolas-grekas)
  • feature #21572 [Finder] Add double-star matching to Glob::toRegex() (@nicolas-grekas)
  • feature #21265 [DI] Implement PSR-11 (@greg0ire)
  • feature #21474 [Process] Accept command line arrays and per-run env vars, fixing signaling and escaping (@nicolas-grekas)
  • feature #21517 [FrameworkBundle] Add missing autowiring aliases for common interfaces (@chalasr)
  • feature #21516 [HttpKernel][FrameworkBundle] Lazy load argument value resolvers (@chalasr)
  • feature #21031 [DI] Getter autowiring (@dunglas)
  • feature #21419 [DI][Config] Add & use ReflectionClassResource (@nicolas-grekas)
  • feature #21455 [DI] Allow to count on lazy collection arguments (@ogizanagi)
  • feature #21408 [DI] Add ContainerBuilder::fileExists() for checking/tracking resource existence (@chalasr)
  • feature #21470 [Process] Deprecate not inheriting env vars + compat related settings (@nicolas-grekas)
  • feature #21494 [DI] Deprecate autowiring-types in favor of aliases (@nicolas-grekas)
  • feature #21451 [SecurityBundle] Lazy load request matchers in FirewallMap (@chalasr)
  • feature #20973 [DI] Add getter injection (@nicolas-grekas)
  • feature #21396 [DI] Enhance logging in compiler passes (@nicolas-grekas)
  • feature #21402 [Security] make LdapBindAuthenticationProvider capable of searching for the DN (@lsmith77, @nietonfir)
  • feature #21404 [DI] Generalize constructor autowiring to partial method calls (@nicolas-grekas)
  • feature #21388 [Debug] Deprecate ContextErrorException (@nicolas-grekas)
  • feature #20943 [DependencyInjection] Use current class as default class for factory declarations (@ogizanagi)
  • feature #21003 [Console][FrameworkBundle] Log console exceptions (@jameshalsall, @chalasr)
  • feature #21313 [DI] Add Yaml syntax for short services definition (@ogizanagi)
  • feature #20694 [Cache] Implement PSR-16 SimpleCache v1.0 (@nicolas-grekas)
  • feature #21327 [DI] Factorize compiler passes around new AbstractRecursivePass (@nicolas-grekas)
  • feature #19086 [FrameworkBundle] add "mapping" configuration key at validation secti… (@davewwww)
  • feature #21350 [Yaml] Remove internal arguments from the api (@GuilhemN)
  • feature #21353 [ClassLoader] Deprecated the component (@nicolas-grekas)
  • feature #21334 [Workflow] Introduce concept of SupportStrategyInterface (@andesk, @lyrixx)
  • feature #20390 [Ldap] added Ldap entry rename for ExtLdap adapter (@fruitwasp)
  • feature #21065 Added cache data collector and profiler page (@Nyholm)
  • feature #21306 [DependencyInjection] Always autowire the constructor (@dunglas)
  • feature #20493 [Debug] Trigger deprecation on @final annotation in DebugClassLoader - prepare making some classes final (@GuilhemN)
  • feature #21244 [DI] Remove synthetic services from methodMap + generated methods (@nicolas-grekas)
  • feature #21238 [VarDumper] Add search keyboard shortcuts (@ogizanagi)
  • feature #21290 [FrameworkBundle] Fix debug:container --show-arguments missing cases (@chalasr)
  • feature #21263 [DI] Mark generated containers as final (@nicolas-grekas)
  • feature #21253 [TwigBridge][Worklow] Added a new workflow_has_place function (@Padam87, @lyrixx)
  • feature #21234 Add a new Dotenv component (@fabpot)
  • feature #20861 Add a --show-arguments flag to the debug:container command (@Cydonia7)
  • feature #21223 [DI] Deprecate case insentivity of service identifiers (@nicolas-grekas)
  • feature #20887 [Form] DateIntervalType: Allow to configure labels & enhance form theme (@ogizanagi)
  • feature #19443 [Console] Move AddConsoleCommandPass from FrameworkBundle to Console. (@bcremer)
  • feature #21231 [FrameworkBundle] allow to reference files directly from kernel.root_dir (@fabpot)
  • feature #20611 [DI] FileLoaders: Allow to explicit type to load (@ogizanagi)
  • feature #20689 [Config][FrameworkBundle] Allow to dump extension config reference sub-path (@ogizanagi)
  • feature #21188 [HttpFoundation] Add File\Stream for size-unknown BinaryFileResponse (@nicolas-grekas)
  • feature #21214 [DI] Allow ~ instead of {} for services in Yaml (@wouterj)
  • feature #20612 [Filesystem] Add appendToFile() (@chalasr)
  • feature #20612 [Filesystem] Add appendToFile() (@chalasr)
  • feature #21114 [Yaml] parse multi-line strings (@xabbuh)
  • feature #21196 [FrameworkBundle] changed some default configs from canBeEnabled to canBeDisabled (@fabpot)
  • feature #20937 [EventDispatcher] Deprecate ContainerAwareEventDispatcher (@nicolas-grekas)
  • feature #21190 [WebServerBundle] Decouple server commands from the container (@chalasr)
  • feature #21071 [DI] Add "inherit-tags" with configurable defaults + same for "public", "tags" & "autowire" (@nicolas-grekas, @ogizanagi)
  • feature #21133 [DI] Optional class for named services (@hason, @nicolas-grekas)
  • feature #20953 [DI][EventDispatcher] Add & wire closure-proxy argument type (@nicolas-grekas)
  • feature #20586 [Console] Ease writing to stderr using SymfonyStyle (@chalasr)
  • feature #20547 [FrameworkBundle] Allowed symlinks when searching for translation, searialization and validation files (@tifabien)
  • feature #20735 Deprecate ClassCollectionLoader and Kernel::loadClassCache (@dbrumann)
  • feature #21140 [PhpUnitBridge] deprecate the testLegacy test name prefix (@xabbuh)
  • feature #21109 [Profiler][VarDumper] Add a search feature to the HtmlDumper (@ogizanagi)
  • feature #21039 Web server bundle (@fabpot)
  • feature #20907 [DependencyInjection] Implement lazy collection type using generators (@tgalopin, @nicolas-grekas)
  • feature #21075 [Console] Show hidden commands in json & xml descriptors (@ogizanagi)
  • feature #21129 [FrameworkBundle] Display original definition for aliases in debug:container (@chalasr)
  • feature #21108 [Cache] Add DSN, createClient & better error reporting to MemcachedAdapter (@nicolas-grekas, @robfrawley)
  • feature #21147 [PhpUnitBridger] Bump simple-phpunit to PHPUnit 5.7 by default (@nicolas-grekas)
  • feature #21112 [PhpUnitBridge] run PHPUnit in the same process (@xabbuh)
  • feature #21106 [Validator] support DateTimeInterface instances for times (@xabbuh)
  • feature #20809 [FrameworkBundle] Display the controller class name in 'debug:router' (@lyrixx)
  • feature #21082 [Cache] TraceableAdapter (@Nyholm)
  • feature #20938 [DI] Prepare dropping "strict" handling in loaders (@nicolas-grekas)
  • feature #20971 [WebProfilerBundle] Split PHP version if needed (@ro0NL)
  • feature #20634 [DI] Deprecate dumping an uncompiled container (@ro0NL)
  • feature #20923 #20921 [Config] Provide shorthand methods for ArrayNodeDefinition::pr… (@skafandri)
  • feature #20569 [HttpFoundation] Create cookie from string + synchronize response cookies (@ro0NL)
  • feature #20618 [DI] Make ContainerBuilder::resolveEnvPlaceholders() able to inline the values of referenced env vars. (@nicolas-grekas)
  • feature #20962 Request exceptions (@thewilkybarkid, @fabpot)
  • feature #20928 [FrameworkBundle] don't load translator services if not required (@xabbuh)
  • feature #20644 [HttpFoundation] Compute cookie max-age attribute (@ro0NL)
  • feature #20167 [DependencyInjection] Make method (setter) autowiring configurable (@dunglas)
  • feature #20663 [DependencyInjection] replace DefinitionDecorator by ChildDefinition (@xabbuh)
  • feature #20197 [WebProfilerBundle] Improve Ajax Profiling Performance (javascript) (@patrick-mcdougle)
  • feature #20487 [Console] Disallow inheritance from ProgressBar (@a-ast)
  • feature #20651 [DependencyInjection] Added Yaml syntax shortcut for name-only tags (@wouterj)
  • feature #20648 [DependencyInjection] Added a shortcut method for autowired definitions (@wouterj)
  • feature #20697 Updated the "PHP config" panel in the profiler (@javiereguiluz)
  • feature #20773 [FrameworkBundle] Added GlobalVariables::getToken() (@HeahDude)
  • feature #20866 [Console] Improve markdown format (@ro0NL)
  • feature #20867 [Console] Include application name/version in JSON descriptions (@ro0NL)
  • feature #20869 [Console] Improve UX on not found namespace/command (@Seldaek)
  • feature #20858 [Cache] Simple Memcached Adapter (@robfrawley)
  • feature #20881 [VarDumper] Add SymfonyCaster::castRequest() (@nicolas-grekas)
  • feature #20810 [FrameworkBundle] Allow clearing private cache pools in cache:pool:clear (@chalasr)
  • feature #20417 [SecurityBundle] Rename FirewallContext#getContext() (@chalasr)
  • feature #20801 [Security] deprecate the RoleInterface (@xabbuh)
  • feature #20260 [DependencyInjection] Support autowiring for EventDispatcher/EventDispatcherInterface (@chalasr)
  • feature #20777 [ClassLoader] Deprecate Apc/WinCache/Xcache class loaders (@nicolas-grekas)
  • feature #20524 [Serializer][XmlEncoder] Allow removing empty tags in generated XML (@amoiraud)
  • feature #19958 [Serializer] Throw exception when extra attributes are used during an object denor… (@juliendidier)
  • feature #20310 [Ldap] Allow search scoping (@xunto)
  • feature #18952 [Security] Add a JSON authentication listener (@dunglas)
  • feature #20161 add toolbar & profiler SVG style classes (@havvg)
  • feature #20467 [DomCrawler] Add support for formaction and formmethod attributes (@stof)
  • feature #20509 [Serializer] Allow to specify a single value in @Groups (@dunglas)
  • feature #20722 Updated the "Symfony Config" panel in the profiler (@javiereguiluz)

[PR] https://github.com/symfony/symfony/pull/22603

Changelog (since https://github.com/symfony/symfony/compare/v3.2.7...v3.2.8)

  • bug #22550 Allow Upper Case property names in ObjectNormalizer (@insekticid)
  • bug #22528 [Asset] Starting slash should indicate no basePath wanted (@weaverryan)
  • bug #22568 [EventDispatcher] fix getting priorities of listeners during dispatch (@dmaicher)
  • bug #22541 [EventDispatcher] fix: unwrap listeners for correct info (@dmaicher)
  • bug #22526 [Asset] Preventing the base path or absolute URL from being prefixed incorrectly (@weaverryan)
  • bug #22523 [WebProfilerBundle] Fixed the flickering when loading complex profiler panels (@javiereguiluz)
  • bug #21958 [Console] Fix bar width with multilines ProgressBar's format (@maidmaid)
  • bug #22435 [Console] Fix dispatching throwables from ConsoleEvents::COMMAND (@nicolas-grekas)
  • bug #22478 [Serializer] XmlEncoder: fix negative int and large numbers handling (@dunglas)
  • bug #22424 [Debug] Set exit status to 255 on error (@nicolas-grekas)
  • bug #22426 [PropertyInfo] Prevent returning int values in some cases (@dunglas)
  • bug #22401 Prevent double registrations related to tag priorities (@nicolas-grekas)
  • bug #22399 Prevent double registrations related to tag priorities (@nicolas-grekas)
  • bug #22396 Prevent double registrations related to tag priorities (@nicolas-grekas)
  • bug #22374 [Cache] Remove exception false-positive from FilesystemAdapterTrait (@nicolas-grekas)
  • bug #22377 [Console] Allow terminal dimensions to be set to 0 (unbounded) (@duncan3dc)
  • bug #22352 [HttpFoundation] Add use_strict_mode in validOptions for session (@sstok)
  • bug #22351 [Yaml] don't keep internal state between parser runs (@xabbuh)
  • bug #22304 Moved $this->setDate() before the deprecation handling. (@mpdonadio)
  • bug #22307 [Debug] Fix php notice (@enumag)
  • bug #22311 [DI] Fix second auto-registration (@nicolas-grekas)
  • bug #22109 [Validator] check for empty host when calling checkdnsrr() (@apetitpa)
  • bug #22280 [DI] Fix the xml schema (@GuilhemN)
  • bug #22282 [DI] Prevent AutowirePass from triggering irrelevant deprecations (@chalasr)
  • bug #22255 [Translation] avoid creating cache files for fallback locales. (@aitboudad)
  • bug #22292 Fixes #22264 - add support for Chrome headless (@redthor)

[PR] https://github.com/symfony/symfony/pull/22601

Changelog (since https://github.com/symfony/symfony/compare/v3.2.6...v3.2.7)

  • bug #22285 [HttpKernel] Fix forward compat with Request::setTrustedProxies() (@nicolas-grekas)
  • bug #22265 Allow Upper Case property names (@insekticid)
  • bug #22258 [DI] Autowiring and factories are incompatible with each others (@nicolas-grekas)
  • bug #22254 [DI] Don't use auto-registered services to populate type-candidates (@nicolas-grekas)
  • bug #22229 [ExpressionLanguage] Provide the expression in syntax errors (@k0pernikus, @stof)
  • bug #22251 [PropertyInfo] Support nullable array or collection (@4rthem)
  • bug #22240 [DI] Fix fatal error at ContainerBuilder::compile() if config is not installed (@chalasr)
  • bug #22140 [Form] Improve the exceptions when trying to get the data in a PRE_SET_DATA listener and the data has not already been set (@fancyweb)
  • bug #22217 [Console] Fix table cell styling (@ro0NL)
  • bug #22194 [Console] CommandTester: disable color support detection (@julienfalque)
  • bug #22188 [Console] Revised exception rendering (@ro0NL)
  • bug #22154 [WebProfilerBundle] Normalize whitespace in exceptions passed in headers (@curry684)
  • bug #22183 [Process] Fix bug which wiped or mangled env vars (@pjcdawkins)
  • bug #22142 [Console] Escape exception messages in renderException (@chalasr)
  • bug #22172 Fix port usage in server:status command (@alcaeus)
  • bug #22164 [Bridge\Doctrine] Fix change breaking doctrine-bundle test suite (@nicolas-grekas)
  • bug #22159 [FrameworkBundle] Cache pool clear command requires at least 1 pool (@ro0NL)
  • bug #22133 [Filesystem] normalize paths before making them relative (@xabbuh)
  • bug #22138 [HttpFoundation][bugfix] $bags should always be initialized (@MacDada)
  • bug #21810 #21809 [SecurityBundle] bugfix: if security provider's name contains upper cases then container didn't compile (@Antanas Arvasevicius)
  • bug #22123 [WebProfilerBundle] Fix for CSS attribute at Profiler Translation Page (@e-moe)
  • bug #19778 [Security] Fixed roles serialization on token from user object (@eko)
  • bug #22036 Set Date header in Response constructor already (@mpdude)
  • bug #22022 [Validator] fix URL validator to detect non supported chars according to RFC 3986 (@e-moe)
  • bug #21849 [HttpFoundation] Fix missing handling of for/host/proto info from "Forwarded" header (@nicolas-grekas)
  • bug #21968 Fixed pathinfo calculation for requests starting with a question mark. (@syzygymsu)
  • bug #22027 Revert "bug #21841 [Console] Do not squash input changes made from console.command event (chalasr)" (@chalasr)
  • bug #21846 [HttpFoundation] Fix Request::getHost() when having several hosts in X_FORWARDED_HOST (@nicolas-grekas)
  • bug #21208 [Validator] Add object handling of invalid constraints in Composite (@SenseException)
  • bug #22044 [Serializer] [XML] Ignore Process Instruction (@jordscream)
  • bug #22090 [WebProfilerBundle] Fix Content-Security-Policy compatibility in case of a style-src 'self' policy (@romainneutron)
  • bug #22079 [HttpKernel] Fixed bug with purging of HTTPS URLs (@ausi)
  • bug #22045 [WebProfilerBundle] Handle Content-Security-Policy-Report-Only header correctly (@romainneutron)
  • bug #21523 #20411 fix Yaml parsing for very long quoted strings (@RichardBradley)
  • bug #22001 [Doctrine Bridge] fix priority for doctrine event listeners (@dmaicher)
  • bug #22040 [FrameworkBundle] improve message when workflows are missing (@xabbuh)
  • bug #22032 [FrameworkBundle] Fix translation dep constraint (@chalasr)
  • bug #21996 [Cache] Enhance error reporting for FilesystemAdapter (@nicolas-grekas)
  • bug #21981 [Console] Use proper line endings in BufferedOutput (@julienfalque)
  • bug #21976 [VarDumper] Add missing isset() checks in some casters (@nicolas-grekas)
  • bug #21973 [VarDumper] Add missing isset() checks in some casters (@nicolas-grekas)
  • bug #21957 [Form] Choice type int values (BC Fix) (@mcfedr)

[PR] https://github.com/symfony/symfony/pull/22293

Changelog (since https://github.com/symfony/symfony/compare/v3.2.5...v3.2.6)

  • bug #21930 [Cache] Cached files rely on umask (@4rthem)
  • bug #21946 Use PHPUnit 5.4 instead of 5.3 (@j0k3r)
  • bug #21936 [PropertyAccess] Use ArrayAdapter in debug mode (@chalasr)

[PR] https://github.com/symfony/symfony/pull/21966

Changelog (since https://github.com/symfony/symfony/compare/v3.2.4...v3.2.5)

  • bug #21923 [travis] Test with hhvm 3.18 (@nicolas-grekas)
  • bug #21793 [Workflow] Fixed marking state on leave and enter events (@HeahDude)
  • bug #21912 [Yaml] dump escape sequences when possible (@xabbuh)
  • bug #21908 [Cache] Fix Redis pipelining/multi-ops (@nicolas-grekas)
  • bug #21823 dumpFile(), preserve existing file permissions (@chs2)
  • bug #21880 [Form] Fixed overridden choices option in extended choice types (@HeahDude)
  • bug #21896 [PHPunitBridge] Count @expectedDeprecation as an assertion (@wouterj)
  • bug #21865 [Security] context listener: hardening user provider handling (@xabbuh)
  • bug #21883 [HttpKernel] fix Kernel name when stored in a directory starting with a number (@fabpot)
  • bug #21841 [Console] Do not squash input changes made from console.command event (@chalasr)
  • bug #21481 [Form] Fixed empty conversion of Intl types (@HeahDude)
  • bug #21671 [Serializer] Xml encoder throws exception for valid data (@gr1ev0us)
  • bug #21805 Provide less state in getRequestFormat (@dawehner)
  • bug #21851 Adding use statement for InvalidArgumentException (@Nyholm)
  • bug #21832 [Routing] Ignore hidden directories when loading routes from annotations (@jakzal)
  • bug #21769 [Form] Improve rounding precision (@foaly-nr1)
  • bug #21825 [PhpUnitBridge] disable global test listener when not registered (@xabbuh)
  • bug #21267 [Form] Fix ChoiceType to ensure submitted data is not nested unnecessarily (@issei-m)
  • bug #21813 Update phpstorm helper to the official format (@pierredup)
  • bug #21731 Fix emacs link (@rubenrua)
  • bug #21802 Fix issues reported by static analyse (@romainneutron)
  • bug #21800 Fix issues reported by static analyze (@romainneutron)
  • bug #21782 [DependencyInjection] add missing dumped private services list in a container frozen constructor. (@hhamon)
  • bug #21798 Revert "bug #21791 [SecurityBundle] only pass relevant user provider (xabbuh)" (@xabbuh)
  • bug #21791 [SecurityBundle] only pass relevant user provider (@xabbuh)
  • bug #21776 [Process] Fix ignoring of bad env var names (@nicolas-grekas)
  • bug #21787 [PhpUnitBridge] do not register the test listener twice (@xabbuh)
  • bug #21756 [Yaml] Stop replacing NULLs when merging (@gadelat)
  • bug #21689 [WebServerBundle] fixed html attribute escape (@Seb33300)
  • bug #21722 [ExpressionLanguage] Registering functions after calling evaluate(), compile() or parse() is not supported (@maidmaid)
  • bug #21679 [SecurityBundle] fix priority ordering of security voters (@xabbuh)
  • bug #21656 [DoctrineBridge] Fixed validating custom doctrine type columns (@dmaicher)
  • bug #21115 [Validator] do not guess getter method names (@xabbuh)
  • bug #21670 [DependencyInjection] Fix autowiring types when there are more than 2 services colliding (@GuilhemN)
  • bug #21665 [DependencyInjection] Fix autowiring collisions detection (@nicolas-grekas, @GuilhemN)
  • bug #21661 Fix Composer constraints (@fabpot)
  • bug #21582 [HttpCache] purge both http and https from http cache (@dbu)
  • bug #21637 [FrameworkBundle] remove translation data collector when not usable (@xabbuh)
  • bug #21647 [Yaml] consistently parse omitted keys as the colon (@xabbuh)

[PR] https://github.com/symfony/symfony/pull/21939