Symfony PHP framework v4

https://github.com/symfony/symfony

Changelog (https://github.com/symfony/symfony/compare/v4.4.49...v4.4.50)

  • security #cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (@nicolas-grekas)
  • security #cve-2022-24894 [HttpKernel] Remove private headers before storing responses with HttpCache (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/49178

Changelog (https://github.com/symfony/symfony/compare/v4.4.48...v4.4.49)

  • bug #48273 [HttpKernel] Fix message for unresovable arguments of invokable controllers (@fancyweb)
  • bug #48224 [DependencyInjection] Process bindings in ServiceLocatorTagPass (@MatTheCat)
  • bug #48198 [Messenger] Fix time-limit check exception (@alamirault)
  • bug #48122 [PhpUnitBridge] Fix language deprecations incorrectly marked as direct (@wouterj)
  • bug #48085 [Messenger] Tell about messenger:consume invalid limit options (@MatTheCat)
  • bug #48120 [Messenger] Do not throw 'no handlers' exception when skipping handlers due to duplicate handling (@wouterj)
  • bug #48112 [HttpFoundation] Compare cookie with null value as empty string in ResponseCookieValueSame (@fancyweb)
  • bug #48119 [FrameworkBundle][Lock] Allow to disable lock without defining a resource (@MatTheCat)
  • bug #48093 [DependencyInjection] don't move locator tag for service subscriber (@RobertMe)
  • bug #48075 [Mailer] Stream timeout not detected fgets returns false (@Sezil)
  • bug #48092 Fix the notification email theme for asynchronously dispatched emails (@krisbuist)
  • bug #48103 [HttpClient] Do not set http_version instead of setting it to null (@Tetragramat)
  • bug #48050 [HttpFoundation] Check IPv6 is valid before comparing it (@PhilETaylor)

[PR] https://github.com/symfony/symfony/pull/48367
[EOL] End of life release for branch 4.4

Changelog (https://github.com/symfony/symfony/compare/v4.4.47...v4.4.48)

  • bug #47907 [Console] Update Application.php (@aleksandr-shevchenko)
  • bug #47932 Throw LogicException instead of Error when trying to generate logout-… (@addiks)
  • bug #47857 [HttpKernel] Fix empty request stack when terminating with exception (@krzyc)
  • bug #47878 [HttpKernel] Remove EOL when using error_log() in HttpKernel Logger (@cyve)
  • bug #47883 [Console] Fix error output on windows cli (@Maximilian.Beckers)
  • bug #47884 [Cache] Reserve numeric keys when doing memory leak prevention (@simoheinonen)
  • bug #47822 [Mailer] fix: use message object from event (@rogamoore)
  • bug #47858 [DoctrineBridge] Implement EventManager::getAllListeners() (@derrabus)

[PR] https://github.com/symfony/symfony/pull/48028

Changelog (https://github.com/symfony/symfony/compare/v4.4.46...v4.4.47)

  • bug #47621 [Serializer] Allow getting discriminated type by class name (@TamasSzigeti)
  • bug #47808 [HttpClient] Fix seeking in not-yet-initialized requests (@nicolas-grekas)
  • bug #47702 [Messenger] Fix default serializer not handling DateTime objects properly (@barton-webwings)
  • bug #47779 [Console] Fix Helper::removeDecoration hyperlink bug (@greew)
  • bug #47763 [PropertyInfo] a readonly property must not be reported as being writable (@xabbuh)
  • bug #47731 [WebProfiler] Fix overflow issue in Forms panel (@zolikonta)
  • bug #47746 [HttpFoundation] Fix BinaryFileResponse content type detection logic (@X-Coder264)

[PR] https://github.com/symfony/symfony/pull/47839

Changelog (https://github.com/symfony/symfony/compare/v4.4.45...v4.4.46)

  • bug #47547 [Ldap] Do not run ldap_set_option on failed connection (@tatankat)
  • bug #47578 [Security] Fix AbstractFormLoginAuthenticator return types (@AndrolGenhald)
  • bug #47614 [FrameworkBundle] Fix a phpdoc in mailer assertions (@HeahDude)
  • bug #47516 [HttpFoundation] Prevent BinaryFileResponse::prepare from adding content type if no content is sent (@naitsirch)
  • bug #47533 [Messenger] decode URL-encoded characters in DSN's usernames/passwords (@xabbuh)
  • bug #47530 [HttpFoundation] Always return strings from accept headers (@ausi)
  • bug #47497 [Bridge] Fix mkdir() race condition in ProxyCacheWarmer (@andrey-tech)
  • bug #47415 [HttpClient] Psr18Client ignore invalid HTTP headers (@nuryagdym)
  • bug #47435 [HttpKernel] lock when writting profiles (@nicolas-grekas)
  • bug #47437 [Mime] Fix email rendering when having inlined parts that are not related to the content (@fabpot)
  • bug #47434 [HttpFoundation] move flushing outside of Response::closeOutputBuffers (@nicolas-grekas)
  • bug #47351 [FrameworkBundle] Do not throw when describing a factory definition (@MatTheCat)
  • bug #47403 [Mailer] Fix edge cases in STMP transports (@fabpot)

[PR] https://github.com/symfony/symfony/pull/47737

Changelog (https://github.com/symfony/symfony/compare/v4.4.44...v4.4.45)

  • bug #47358 Fix broken request stack state if throwable is thrown. (@Warxcell)
  • bug #47304 [Serializer] Fix caching context-aware encoders/decoders in ChainEncoder/ChainDecoder (@Guite)
  • bug #47329 Email image parts: regex for single closing quote (@rr-it)
  • bug #47200 [Form] ignore missing keys when mapping DateTime objects to uninitialized arrays (@xabbuh)
  • bug #47189 [Validator] Add additional hint when egulias/email-validator needs to be installed (@mpdude)
  • bug #47195 [FrameworkBundle] fix writes to static $kernel property (@xabbuh)
  • bug #47175 [DowCrawler] Fix locale-sensitivity of whitespace normalization (@nicolas-grekas)
  • bug #47171 [TwigBridge] suggest to install the Twig bundle when the required component is already installed (@xabbuh)
  • bug #47161 [Mailer] Fix logic (@fabpot)
  • bug #47157 [Messenger] Fix Doctrine transport on MySQL (@nicolas-grekas)
  • bug #46190 [Translation] Fix translator overlapse (@Xavier RENAUDIN)
  • bug #47142 [Mailer] Fix error message in case of an STMP error (@fabpot)
  • bug #47145 [HttpClient] Fix shared connections not being freed on PHP < 8 (@nicolas-grekas)
  • bug #47143 [HttpClient] Fix memory leak when using StreamWrapper (@nicolas-grekas)
  • bug #47130 [HttpFoundation] Fix invalid ID not regenerated with native PHP file sessions (@BrokenSourceCode)

[PR] https://github.com/symfony/symfony/pull/47397

Changelog (https://github.com/symfony/symfony/compare/v4.4.43...v4.4.44)

  • bug #47069 [Security] Allow redirect after login to absolute URLs (@Tim Ward)
  • bug #47073 [HttpKernel] Fix non-scalar check in surrogate fragment renderer (@aschempp)
  • bug #43329 [Serializer] Respect default context in DateTimeNormalizer::denormalize (@hultberg)
  • bug #47086 Workaround disabled "var_dump" (@nicolas-grekas)
  • bug #40828 [BrowserKit] Merge fields and files recursively if they are multidimensional array (@januszmk)
  • bug #47048 [Serializer] Fix XmlEncoder encoding attribute false (@alamirault)
  • bug #47000 [ErrorHandler] Fix return type patching for list and class-string pseudo types (@derrabus)
  • bug #43998 [HttpKernel] [HttpCache] Don't throw on 304 Not Modified (@aleho)
  • bug #46981 [Mime]  quote address names if they contain parentheses (@xabbuh)
  • bug #46960 [FrameworkBundle] Fail gracefully when forms use disabled CSRF (@HeahDude)
  • bug #46973 [DependencyInjection] Fail gracefully when attempting to autowire composite types (@derrabus)
  • bug #46963 [Mime] Fix inline parts when added via attachPart() (@fabpot)
  • bug #46968 [PropertyInfo] Make sure nested composite types do not crash ReflectionExtractor (@derrabus)
  • bug #46931 Flush backend output buffer after closing. (@bradjones1)
  • bug #46905 [BrowserKit] fix sending request to paths containing multiple slashes (@xabbuh)
  • bug #42033 [HttpFoundation] Fix deleteFileAfterSend on client abortion (@nerg4l)
  • bug #46941 [Messenger] Fix calls to deprecated DBAL methods (@derrabus)
  • bug #46863 [Mime] Fix invalid DKIM signature with multiple parts (@BrokenSourceCode)
  • bug #46808 [HttpFoundation] Fix TypeError on null $_SESSION in NativeSessionStorage::save() (@chalasr)
  • bug #46790 [HttpFoundation] Prevent PHP Warning: Session ID is too long or contains illegal characters (@BrokenSourceCode)
  • bug #46800 Spaces in system temp folder path cause deprecation errors in php 8 (@demeritcowboy)
  • bug #46797 [Messenger] Ceil waiting time when multiplier is a float on retry (@WissameMekhilef)

[PR] https://github.com/symfony/symfony/pull/47114

Changelog (https://github.com/symfony/symfony/compare/v4.4.42...v4.4.43)

  • bug #46765 [Serializer] Fix denormalization union types with constructor (@Gwemox)
  • bug #46769 [HttpKernel] Fix a PHP 8.1 deprecation notice in HttpCache (@mpdude)
  • bug #46747 Fix global state pollution between tests run with ApplicationTester (@Seldaek)
  • bug #46730 [Intl] Fix the IntlDateFormatter::formatObject signature (@damienalexandre)
  • bug #46668 [FrameworkBundle] Lower JsonSerializableNormalizer priority (@aprat84)
  • bug #46678 [HttpFoundation] Update "[Session] Overwrite invalid session id" to only validate when files session storage is used (@alexpott)
  • bug #45861 [Serializer] Try all possible denormalization route with union types when ALLOW_EXTRA_ATTRIBUTES=false (@T-bond)
  • bug #46676 [DoctrineBridge] Extend type guessing on enum fields (@Gigino Chianese)
  • bug #46699 [Cache] Respect $save option in all adapters (@jrjohnson)
  • bug #46697 [HttpKernel] Disable session tracking while collecting profiler data (@nicolas-grekas)
  • bug #46684 [MonologBridge] Fixed support of elasticsearch 7.+ in ElasticsearchLogstashHandler (@lyrixx)
  • bug #46368 [Mailer] Fix for missing sender name in case with usage of the EnvelopeListener (@bobahvas)
  • bug #46548 [Mime] Allow url as a path in the DataPart::fromPath (@wkania)
  • bug #46594 [FrameworkBundle] Fix XML cache config (@HeahDude)
  • bug #46595 [Console] Escape in command name & description from getDefaultName() (@ogizanagi)
  • bug #46565 [WebProfilerBundle] Fix dark theme selected line highlight color & reuse css vars (@ogizanagi)
  • bug #46535 [Mime] Check that the path is a file in the DataPart::fromPath (@wkania)
  • bug #46543 [Cache] do not pass null to strlen() (@xabbuh)
  • bug #46478 [Contracts] remove static cache from ServiceSubscriberTrait (@kbond)

[PR] https://github.com/symfony/symfony/pull/46780

Changelog (https://github.com/symfony/symfony/compare/v4.4.41...v4.4.42)

  • bug #46448 [DependencyInjection] Fix "proxy" tag: resolve its parameters and pass it to child definitions (@nicolas-grekas)
  • bug #46442 [FrameworkBundle] Revert "bug #46125 Always add CacheCollectorPass (fancyweb)" (@chalasr)
  • bug #46443 [DoctrineBridge] Don't reinit managers when they are proxied as ghost objects (@nicolas-grekas)
  • bug #46427 [FrameworkBundle] fix wiring of annotations.cached_reader (@nicolas-grekas)
  • bug #46434 [FrameworkBundle] Fix BC break in abstract config commands (@yceruto)
  • bug #46424 [Form] do not accept array input when a form is not multiple (@xabbuh)
  • bug #46367 [Mime] Throw exception when body in Email attach method is not ok (@alamirault)
  • bug #46421 [VarDumper][VarExporter] Deal with DatePeriod->include_end_date on PHP 8.2 (@nicolas-grekas)
  • bug #46401 [Cache] Throw when "redis_sentinel" is used with a non-Predis "class" option (@buffcode)
  • bug #46414 Bootstrap 4 fieldset for row errors (@konradkozaczenko)
  • bug #46412 [FrameworkBundle] Fix dumping extension config without bundle (@yceruto)
  • bug #46407 [Filesystem] Safeguard (sym)link calls (@derrabus)
  • bug #46098 [Form] Fix same choice loader with different choice values (@HeahDude)
  • bug #46380 [HttpClient] Add missing HttpOptions::setMaxDuration() (@nicolas-grekas)
  • bug #46249 [HttpFoundation] [Session] Regenerate invalid session id (@peter17)
  • bug #46366 [Mime] Add null check for EmailHeaderSame (@magikid)
  • bug #46364 [Config] Fix looking for single files in phars with GlobResource (@nicolas-grekas)
  • bug #46365 [HttpKernel] Revert "bug #46327 Allow ErrorHandler ^5.0 to be used" (@nicolas-grekas)
  • bug #46114 Fixes "Incorrectly nested style tag found" error when using multi-line header content (@Perturbatio)
  • bug #46325 [Ldap] Fix LDAP connection options (@buffcode)
  • bug #46317 [Security/Http] Ignore invalid URLs found in failure/success paths (@nicolas-grekas)
  • bug #46327 [HttpKernel] Allow ErrorHandler ^5.0 to be used in HttpKernel 4.4 (@mpdude)
  • bug #46297 [Serializer] Fix JsonSerializableNormalizer ignores circular reference handler in $context (@BreyndotEchse)
  • bug #45981 [Serializer][PropertyInfo] Fix support for "false" built-in type on PHP 8.2 (@alexandre-daubois)
  • bug #46277 [HttpKernel] Fix SessionListener without session in request (@edditor)
  • bug #46282 [DoctrineBridge] Treat firstResult === 0 like null (@derrabus)
  • bug #46278 [Workflow] Fix deprecated syntax for interpolated strings (@nicolas-grekas)
  • bug #46264 [Console] Better required argument check in InputArgument (@jnoordsij)
  • bug #46262 [EventDispatcher] Fix removing listeners when using first-class callable syntax (@javer)
  • bug #46216 [Form] fix populating single widget time view data with different timezones (@xabbuh)
  • bug #46221 [DomCrawler][VarDumper] Fix html-encoding emojis (@nicolas-grekas)
  • bug #46167 [VarExporter] Fix exporting DateTime objects on PHP 8.2 (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/46466

Changelog (https://github.com/symfony/symfony/compare/v4.4.40...v4.4.41)

  • bug #46154 [Mailer] Restore X-Transport after failure (@zenas1210)
  • bug #46171 [VarDumper] Fix dumping floats on PHP8 (@nicolas-grekas)
  • bug #46170 Fix dumping enums on PHP 8.2 (@nicolas-grekas)
  • bug #46143 [Cache] Prevent fatal errors on php 8 when running concurrently with TagAwareAdapter v6.1 (@sbelyshkin)
  • bug #46149 Modify processing of uploaded files to be compatible with PHP 8.1 (@p-golovin)
  • bug #46125 [FrameworkBundle] Always add CacheCollectorPass (@fancyweb)
  • bug #46121 Fix "Notice: Undefined index: headers" in messenger with Oracle (@rjd22)
  • bug #45980 [Finder] Add support of no-capture regex modifier in MultiplePcreFilterIterator (available from PHP 8.2) (@alexandre-daubois)
  • bug #46008 [Workflow] Catch error when trying to get an uninitialized marking (@lyrixx)
  • bug #40998 [Form] Use reference date in reverse transform (@KDederichs)
  • bug #46012 [HttpKernel] Fix Symfony not working on SMB share (@qinshuze)
  • bug #45992 [Mailer] Return-Path has higher priority for envelope address than From address (@tpetry)
  • bug #45998 [HttpClient] Fix sending content-length when streaming the body (@nicolas-grekas)
  • bug #45565 Fix table header seperator wrapping (@alamirault)
  • bug #45968 [Intl] Update the ICU data to 71.1 - 4.4 (@jderusse)
  • bug #45947 [FrameworkBundle] [Command] Fix debug:router --no-interaction error … (@WilliamBoulle)
  • bug #45931 [Process] Fix Process::getEnv() when setEnv() hasn't been called before (@asika32764)
  • bug #45928 [ExpressionLanguage] Fix matching null against a regular expression (@ausi)

[PR] https://github.com/symfony/symfony/pull/46192

Changelog (https://github.com/symfony/symfony/compare/v4.4.39...v4.4.40)

  • bug #45910 [Messenger] reset connection on worker shutdown (@SanderHagen)
  • bug #45909 [Form][TwigBundle] reset Twig form theme resources between requests (@xabbuh)
  • bug #45906 [HttpClient] on redirections don't send content related request headers (@xabbuh)
  • bug #45714 [Messenger] Fix cannot select FOR UPDATE from view on Oracle (@rjd22)
  • bug #45888 [Messenger] Add mysql indexes back and work around deadlocks using soft-delete (@nicolas-grekas)
  • bug #45891 [HttpClient] Fix exporting objects with readonly properties (@nicolas-grekas)
  • bug #45875 [ExpressionLanguage] Fix matches when the regexp is not valid (@fabpot)
  • bug #45870 [Validator] Fix File constraint invalid max size exception message (@fancyweb)
  • bug #45851 [Console] Fix exit status on uncaught exception with negative code (@acoulton)
  • bug #45838 [Serializer] Fix denormalizing union types (@T-bond)
  • bug #45816 [Mailer] Preserve case of headers (@nicolas-grekas)
  • bug #45814 [HttpClient] Let curl handle Content-Length headers (@nicolas-grekas)
  • bug #45813 [HttpClient] Move Content-Type after Content-Length (@nicolas-grekas)
  • bug #45737 [Lock] SemaphoreStore catching exception from sem_get (@Triplkrypl)
  • bug #45690 [Mailer] Use recipients in sendmail transport (@HypeMC)
  • bug #45720 [PropertyInfo] strip only leading \ when unknown docType (@EmilMassey)
  • bug #44915 [Console] Fix compact table style to avoid outputting a leading space (@Seldaek)
  • bug #45676 [Process] Don't return executable directories in PhpExecutableFinder (@fancyweb)
  • bug #45702 [Form] Fix the usage of the Valid constraints in array-based forms (@stof)
  • bug #45677 [DependencyInjection] fix ServiceSubscriberTrait bug where parent has __call() (@kbond)
  • bug #45678 [HttpClient] Fix reading proxy settings from dotenv when curl is used (@nicolas-grekas)
  • bug #45671 [FrameworkBundle] Ensure container is reset between tests (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/45914

Changelog (https://github.com/symfony/symfony/compare/v4.4.38...v4.4.39)

  • bug #45631 [HttpFoundation] Fix PHP 8.1 deprecation in Response::isNotModified (@HypeMC)
  • bug #45610 [HttpKernel] Guard against bad profile data (@nicolas-grekas)
  • bug #45532 Fix deprecations on PHP 8.2 (@nicolas-grekas)
  • bug #45595 [FrameworkBundle] Fix resetting container between tests (@nicolas-grekas)
  • bug #45585 [HttpClient] fix checking for unset property on PHP <= 7.1.4 (@nicolas-grekas)
  • bug #45583 [WebProfilerBundle] Fixes HTML syntax regression introduced by #44570 (@xavismeh)

[PR] https://github.com/symfony/symfony/pull/45653

Changelog (https://github.com/symfony/symfony/compare/v4.4.37...v4.4.38)

  • bug #44570 [WebProfilerBundle] add nonces to profiler (@garak)
  • bug #44839 MailerInterface: failed exception contract when enabling messenger (@Giorgio Premi)
  • bug #45529 [DependencyInjection] Don't reset env placeholders during compilation (@nicolas-grekas)
  • bug #45527 [HttpClient] Fix overriding default options with null (@nicolas-grekas)
  • bug #45531 [Serializer] Fix passing null to str_contains() (@Erwin Dirks)
  • bug #42458 [Validator][Tests] Fix AssertingContextualValidator not throwing on remaining expectations (@fancyweb)
  • bug #45496 [VarDumper] Fix dumping mysqli_driver instances (@nicolas-grekas)
  • bug #45495 [HttpFoundation] Fix missing ReturnTypeWillChange attributes (@luxemate)
  • bug #45482 [Cache] Add missing log when saving namespace (@developer-av)
  • bug #45479 [HttpKernel] Reset services between requests performed by KernelBrowser (@nicolas-grekas)
  • bug #44650 [Serializer] Make document type nodes ignorable (@boenner)
  • bug #45469 [SecurityBundle] fix autoconfiguring Monolog's ProcessorInterface (@nicolas-grekas)
  • bug #45414 [FrameworkBundle] KernelTestCase resets internal state on tearDown (@core23)
  • bug #45460 [Intl] fix wrong offset timezone PHP 8.1 (@Lenny4)
  • bug #45462 [HttpKernel] Fix extracting controller name from closures (@nicolas-grekas)
  • bug #45424 [DependencyInjection] Fix type binding (@sveneld)
  • bug #44259 [Security] AccountStatusException::$user should be nullable (@Cantepie)
  • bug #45323 [Serializer] Fix ignored callbacks in denormalization (@benjaminmal)
  • bug #45399 [FrameworkBundle] Fix sorting bug in sorting of tagged services by priority (@Ahummeling)
  • bug #45338 [Mailer] Fix string-cast of exceptions thrown by authenticator in EsmtpTransport (@wikando-ck)
  • bug #45339 [Cache] fix error handling when using Redis (@nicolas-grekas)
  • bug #45281 [Cache] Fix connecting to Redis via a socket file (@alebedev80)
  • bug #45289 [FrameworkBundle] Fix log channel of TagAwareAdapter (@fancyweb)
  • bug #45306 [PropertyAccessor] Add missing TypeError catch (@b1rdex)
  • bug #44868 [DependencyInjection][FrameworkBundle] Fix using PHP 8.1 enum as parameters (@ogizanagi)
  • bug #45261 [HttpClient] Fix Content-Length header when possible (@nicolas-grekas)
  • bug #45258 [DependencyInjection] Don't dump polyfilled classes in preload script (@nicolas-grekas)
  • bug #38534 [Serializer] make XmlEncoder stateless thus reentrant (@connorhu)
  • bug #42253 [Form] Do not fix URL protocol for relative URLs (@bogkonstantin)
  • bug #45256 [DomCrawler] ignore bad charsets (@nicolas-grekas)
  • bug #45255 [PropertyAccess] Fix handling of uninitialized property of parent class (@filiplikavcan)
  • bug #45204 [Validator] Fix minRatio and maxRatio when getting rounded (@alexander-schranz)
  • bug #45240 [Console] Revert StringInput bc break from #45088 (@bobthecow)

[PR] https://github.com/symfony/symfony/pull/45576

Changelog (https://github.com/symfony/symfony/compare/v4.4.36...v4.4.37)

  • bug #44939 [Form] UrlType should not add protocol to emails (@GromNaN)
  • bug #43149 Silence warnings during tty detection (@neclimdul)
  • bug #45181 [Console] Fix PHP 8.1 deprecation in ChoiceQuestion (@BrokenSourceCode)
  • bug #45140 [Yaml] Making the parser stateless (@mamazu)
  • bug #45103 [Process] Avoid calling fclose on an already closed resource (@Seldaek)
  • bug #45088 [Console] fix parsing escaped chars in StringInput (@nicolas-grekas)
  • bug #45096 [Cache] Throw exception if incompatible version of psr/simple-cache is used (@colinodell)
  • bug #45063 [DependencyInjection] remove arbitratry limitation to exclude inline services from bindings (@nicolas-grekas)
  • bug #44986 [DependencyInjection] copy synthetic status when resolving child definitions (@kbond)
  • bug #45073 [HttpClient] Fix Failed to open stream: Too many open files (@adrienfr)
  • bug #45053 [Console] use STDOUT/ERR in ConsoleOutput to save opening too many file descriptors (@nicolas-grekas)
  • bug #45029 [Cache] Set mtime of cache files 1 year into future if they do not expire (@Blacksmoke16)
  • bug #45012 [DoctrineBridge] Fix invalid guess with enumType (@jderusse)
  • bug #45015 [HttpClient] fix resetting DNS/etc when calling CurlHttpClient::reset() (@nicolas-grekas)
  • bug #44890 [HttpClient] Remove deprecated usage of GuzzleHttp\Promise\queue (@GrahamCampbell)
  • bug #45002 [PropertyAccess] Fix handling of uninitialized property of anonymous class (@filiplikavcan)
  • bug #44979 [DependencyInjection] Add iterable to possible binding type (@vladimir.panivko)
  • bug #44976 [FrameworkBundle] Avoid calling rtrim(null, '/') in AssetsInstallCommand (@pavol-tk, @GromNaN)
  • bug #44879 [DependencyInjection] Ignore argument type check in CheckTypeDeclarationsPass if it's a Definition with a factory (@fancyweb)
  • bug #44931 Allow a zero time-limit for messenger:consume (@fritzmg)
  • bug #44932 [DependencyInjection] Fix nested env var with resolve processor (@Laurent Moreau)
  • bug #44912 [Console] Allow OutputFormatter::escape() to be used for escaping URLs used in (@Seldaek)
  • bug #44878 [HttpClient] Turn negative timeout to a very long timeout (@fancyweb)
  • bug #44854 [Validator] throw when Constraint::_construct() has not been called (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/45215

Changelog (https://github.com/symfony/symfony/compare/v4.4.35...v4.4.36)

  • bug #44838 [DependencyInjection][HttpKernel] Fix enum typed bindings (@ogizanagi)
  • bug #44826 [HttpKernel] Do not attempt to register enum arguments in controller service locator (@ogizanagi)
  • bug #44820 [Cache] Don't lock when doing nested computations (@nicolas-grekas)
  • bug #44807 [Messenger] fix Redis support on 32b arch (@nicolas-grekas)
  • bug #44759 [HttpFoundation] Fix notice when HTTP_PHP_AUTH_USER passed without pass (@Vitali Tsyrkin)
  • bug #44799 [Cache] fix compat with apcu < 5.1.10 (@nicolas-grekas)
  • bug #44732 [Mime] Relaxing in-reply-to header validation (@ThomasLandauer)
  • bug #44728 [Mime] Fix encoding filenames in multipart/form-data (@nicolas-grekas)
  • bug #44710 [DependencyInjection] fix linting callable classes (@nicolas-grekas)
  • bug #44639 [DependencyInjection] Cast tag attribute value to string (@ruudk)
  • bug #44473 [Validator] Restore default locale in ConstraintValidatorTestCase (@rodnaph)
  • bug #44577 [Cache] Fix proxy no expiration to the Redis (@Sergey Belyshkin)
  • bug #44669 [Cache] disable lock on CLI (@nicolas-grekas)
  • bug #44537 [Config] In XmlUtils, avoid converting from octal every string starting with a 0 (@alexandre-daubois)
  • bug #44625 [HttpClient] fix monitoring responses issued before reset() (@nicolas-grekas)
  • bug #44623 [HttpClient] Fix dealing with "HTTP/1.1 000 " responses (@nicolas-grekas)
  • bug #44601 [HttpClient] Fix closing curl-multi handle too early on destruct (@nicolas-grekas)
  • bug #44571 [HttpClient] Don't reset timeout counter when initializing requests (@nicolas-grekas)
  • bug #44479 [HttpClient] Double check if handle is complete (@Nyholm)
  • bug #44418 [DependencyInjection] Resolve ChildDefinition in AbstractRecursivePass (@fancyweb)
  • bug #43164 [FrameworkBundle] Fix cache pool configuration with one adapter and one provider (@fancyweb)
  • bug #44538 [Process] fixed uppercase ARGC and ARGV should also be skipped (@rbaarsma)
  • bug #44438 [HttpClient] Fix handling thrown \Exception in \Generator in MockResponse (@fancyweb)
  • bug #44502 [HttpFoundation] do not call preg_match() on null (@xabbuh)
  • bug #44467 [Console] Fix parameter types for ProcessHelper::mustRun() (@derrabus)
  • bug #44399 Prevent infinite nesting of lazy ObjectManager instances when ObjectManager is reset (@Ocramius)
  • bug #44375 [DoctrineBridge] fix calling get_class on non-object (@kbond)
  • bug #44361 [HttpClient] Fix handling error info in MockResponse (@fancyweb)
  • bug #43876 [Validator] Fix validation for single level domains (@HypeMC)
  • bug #44327 [Debug][ErrorHandler] Increased the reserved memory from 10k to 32k (@sakalys)
  • bug #44261 [Process] intersect with getenv() in case-insensitive manner to get default envs (@stable-staple)
  • bug #44295 [Serializer] fix support for lazy/unset properties (@nicolas-grekas)
  • bug #44269 [DoctrineBridge] Revert " add support for the JSON type" (@dunglas)

[PR] https://github.com/symfony/symfony/pull/44841

Changelog (https://github.com/symfony/symfony/compare/v4.4.34...v4.4.35)

  • security #cve-2021-41270 [Serializer] Use single quote to escape formulas (@jderusse)
  • bug #44232 [Cache] fix connecting to local Redis sockets (@nicolas-grekas)
  • bug #44204 [HttpClient] fix closing curl multi handle when destructing client (@nicolas-grekas)
  • bug #44208 [Process] exclude argv/argc from possible default env vars (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/44242
[SECURITY] Security release

Changelog (https://github.com/symfony/symfony/compare/v4.4.33...v4.4.34)

  • bug #44188 [VarExporter] fix exporting declared but unset properties when __sleep() is implemented (@nicolas-grekas)
  • bug #44119 [HttpClient][Mime] Add correct IDN flags for IDNA2008 compliance (@j-bernard)
  • bug #44131 [Yaml] properly parse quoted strings tagged with !!str (@xabbuh)
  • bug #42323 [TwigBridge] do not merge label classes into expanded choice labels (@xabbuh)
  • bug #44121 [Serializer] fix support for lazy properties (@nicolas-grekas)
  • bug #44111 [Serializer] fix support for unset properties on PHP < 7.4 (@nicolas-grekas)
  • bug #44070 [Process] intersect with getenv() to populate default envs (@nicolas-grekas)
  • bug #44043 [Cache] fix dbindex Redis (@a1812)
  • bug #44042 Fix DateIntervalToStringTransformer::transform() doc (@BenMorel)
  • bug #44034 [Yaml] don't try to replace references in quoted strings (@xabbuh)
  • bug #44028 [ErrorHandler] Fix FlattenException::setPrevious argument typing (@welcoMattic)
  • bug #44012 [DependencyInjection] fix inlining when non-shared services are involved (@nicolas-grekas)
  • bug #44002 [Cache] Fix Memory leak (@a1812)
  • bug #43981 [FrameworkBundle] fix registering late resettable services (@nicolas-grekas)
  • bug #43988 [DoctrineBridge] add support for the JSON type (@dunglas)
  • bug #43987 [PhpUnitBridge] Fix Uncaught ValueError (@dunglas)
  • bug #43961 [HttpClient] Curl http client has to reinit curl multi handle on reset (@rmikalkenas)
  • bug #43922 [DependencyInjection] only allow ReflectionNamedType for ServiceSubscriberTrait (@kbond)
  • bug #43901 [SecurityBundle] Default access_decision_manager.strategy option with merge (@biozshock)
  • bug #43909 [VarExporter] escape unicode chars involved in directionality (@nicolas-grekas)
  • bug #43867 [VarDumper] Make dumping DateInterval instances timezone-independent (@derrabus)
  • bug #43096 [Messenger] Use TransportMessageIdStamp in InMemoryTransport allows retrying (@alexndlm)
  • bug #43501 [HttpKernel] fix ErrorException in CacheWarmerAggregate (@Ahummeling)
  • bug #42361 [Translation] correctly handle intl domains with TargetOperation (@acran)
  • bug #43834 [Inflector] Fix inflector for "zombies" (@acodispo)
  • bug #43267 [Config] Fix signature generation with nested attributes on PHP 8.1 (@agustingomes)

[PR] https://github.com/symfony/symfony/pull/44193

Changelog (https://github.com/symfony/symfony/compare/v4.4.32...v4.4.33)

  • bug #43798 [Dotenv] Duplicate $_SERVER values in $_ENV if they don't exist (@fancyweb)
  • bug #43799 [PhpUnitBridge] fix symlink to bridge in docker by making its path relative (@nicolas-grekas)
  • bug #43781 [Messenger] Fix TraceableMessageBus implementation so it can compute caller even when used within a callback (@Ocramius)
  • bug #43655 [VarDumper] Fix dumping twig templates found in exceptions (@event15)
  • bug #43484 [Messenger] Fix Redis Transport when username is empty (@villfa)
  • bug #43568 [Messenger] fix: TypeError in PhpSerializer::encode() (@dsech)
  • bug #43591 [Config] Fix files sorting in GlobResource (@lyrixx)
  • bug #43569 [HttpClient] fix collecting debug info on destruction of CurlResponse (@nicolas-grekas)
  • bug #43545 [DependencyInjection] fix "url" env var processor (@nicolas-grekas)
  • bug #43413 [VarDumper] Fix error with uninitialized XMLReader (@villfa)
  • bug #43388 [Validator] Fixes URL validation for single-char subdomains (@DfKimera)
  • bug #43333 [HttpClient] fix missing kernel.reset tag on TraceableHttpClient services (@nicolas-grekas)
  • bug #43302 [Cache] Commit items implicitly only when deferred keys are requested (@Sergey Belyshkin)
  • bug #43330 [Cache][Lock] fix SQLSRV throws for method_exists() (@GDmac)
  • bug #43270 [VarDumper] Fix handling of "new" in initializers on PHP 8.1 (@nicolas-grekas)
  • bug #43277 [DependencyInjection] fix support for "new" in initializers on PHP 8.1 (@nicolas-grekas)
  • bug #43243 [HttpClient] accept headers when CURLE_RECV_ERROR is received before the content (@nicolas-grekas)
  • bug #43205 [Serializer] Fix denormalizing XML array with empty body (4.4) (@alexandre-daubois)

[PR] https://github.com/symfony/symfony/pull/43817

Changelog (https://github.com/symfony/symfony/compare/v4.4.30...v4.4.31)

  • bug #43158 [Cache] Fix invalidating tags on Redis <5 (@wouterj)
  • bug #43179 [Ldap] Fix resource type checks & docblocks on PHP 8.1 (@chalasr)
  • bug #43137 [FrameworkBundle] Avoid secrets:decrypt-to-local command to fail (@noniagriconomie)
  • bug #43171 [VarDumper] fix dumping typed references from properties (@nicolas-grekas)
  • bug #43124 [Messenger] [Redis] Allow authentication with user and password (@GaryPEGEOT)
  • bug #39350 [FrameworkBundle] Remove translation data_collector BEFORE adding it to profiler (@l-vo)
  • bug #43115 [DependencyInjection] Fix iterator in ServiceConfigurator (@jderusse)
  • bug #43031 [Form] Do not trim unassigned unicode characters (@simonberger)
  • bug #43058 [WebProfilerBundle] Fix displaying certain configs (@HypeMC)
  • bug #43022 [PhpUnitBridge] Track unsilenced deprecations only for userland (@nicolas-grekas)
  • bug #42976 [Mime] Allow array as input for RawMessage (@derrabus)
  • bug #42098 [PropertyInfo] Support for intersection types (@derrabus)
  • bug #42904 [Cache] Make sure PdoAdapter::prune() always returns a bool (@derrabus)
  • bug #42896 [HttpClient] Fix handling timeouts when responses are destructed (@nicolas-grekas)
  • bug #42835 [Cache] Fix implicit float to int cast (@derrabus)
  • bug #42831 [Mime] Update mime types (@fabpot)
  • bug #42830 [HttpKernel] Fix empty timeline in profiler (@nicodmf)
  • bug #42819 Fix tests failing with DBAL 3 (@derrabus)

[PR] https://github.com/symfony/symfony/pull/43209

Changelog (https://github.com/symfony/symfony/compare/v4.4.29...v4.4.30)

  • bug #42753 Cast ini_get to an integer to match expected type (@natewiebe13)
  • bug #42345 [Messenger] Remove indices in messenger table on MySQL to prevent deadlocks while removing messages when running multiple consumers (@jeroennoten)
  • bug #40744 allow null for framework.translator.default_path (@SimonHeimberg)
  • bug #39856 [DomCrawler] improve failure messages of the CrawlerSelectorTextContains constraint (@xabbuh)
  • bug #40545 [HttpFoundation] Fix isNotModified determination logic (@ol0lll)
  • bug #42368 [FrameworkBundle] Fall back to default configuration in debug:config and consistently resolve parameter values (@herndlm)
  • bug #41684 Fix Url Validator false positives (@sidz)
  • bug #42576 [Translation] Reverse fallback locales (@ro0NL)
  • bug #42628 [PropertyInfo] Support for the never return type (@derrabus)
  • bug #42585 [ExpressionLanguage] [Lexer] Remove PHP 8.0 polyfill (@nigelmann)
  • bug #42621 [Security] Don't produce TypeErrors for non-string CSRF tokens (@derrabus)
  • bug #42365 [Cache] Do not add namespace argument to NullAdapter in CachePoolPass (@olsavmic)
  • bug #42331 [HttpKernel] always close open stopwatch section after handling kernel.request events (@xabbuh)
  • bug #42260 Fix return types for PHP 8.1 (@derrabus)
  • bug #42341 [Validator] Update MIR card scheme (@ossinkine)

[PR] https://github.com/symfony/symfony/pull/42789

Changelog (https://github.com/symfony/symfony/compare/v4.4.28...v4.4.29)

  • bug #42307 [Mailer] Fixed decode exception when sendgrid response is 202 (@rubanooo)
  • bug #42296 [Dotenv][Yaml] Remove PHP 8.0 polyfill (@derrabus)
  • bug #42289 [HttpFoundation] Fixed type mismatch (@Toflar)

[PR] https://github.com/symfony/symfony/pull/42312

Changelog (https://github.com/symfony/symfony/compare/v4.4.27...v4.4.28)

  • bug #42270 [WebProfilerBundle] [WebProfiler] "empty" filter bugfix. Filter with name "empty" is not … (@luzrain)

[PR] https://github.com/symfony/symfony/pull/42276

Changelog (https://github.com/symfony/symfony/compare/v4.4.26...v4.4.27)

  • bug #42212 [Lock] Handle lock with long key (@jderusse)
  • bug #42223 [Debug][ErrorHandler] Do not use the php80 polyfill (@nicolas-grekas)
  • bug #42207 [Console] fix table setHeaderTitle without headers (@a1812)
  • bug #42130 [Translation] fix fallback to Locale::getDefault() (@nicolas-grekas)
  • bug #42184 [Mailer] Make sure Http TransportException is not leaking (@Nyholm)
  • bug #42150 [Form] Fix 'invalid_message' use in multiple ChoiceType (@alexandre-daubois)
  • bug #42174 Indicate compatibility with psr/log 2 and 3 (@derrabus)
  • bug #42112 [HttpFoundation] fix FileBag under PHP 8.1 (@alexpott)
  • bug #42131 [PhpUnitBridge] Fix composer resolution on Windows (@Rainrider)
  • bug #42097 [DependencyInjection] Support for intersection types (@derrabus)
  • bug #42114 [HttpFoundation] Fix return types of SessionHandler::gc() (@derrabus)
  • bug #42099 [VarDumper] Support for intersection types (@derrabus)
  • bug #42011 [Cache] Support decorated Dbal drivers in PdoAdapter (@Jeroeny)
  • bug #42068 Add a Special Case for Translating Choices in en_US_POSIX (@chrisguitarguy)
  • bug #42074 Fix ctype_digit deprecation (@alexpott)
  • bug #42084 [WebProfilerBundle] Fix the values of some CSS properties (@javiereguiluz)
  • bug #42079 [FrameworkBundle] Fixed file operations in Sodium vault seal (@javiereguiluz)
  • bug #42054 [DoctrineBridge] fix setting default mapping type to attribute/annotation on php 8/7 respectively (@nicolas-grekas)
  • bug #42049 [TwigBridge] do not render the same label id attribute twice (@xabbuh)
  • bug #42032 [HttpKernel] recover from failed deserializations (@xabbuh)
  • bug #41990 [Lock] fix derivating semaphore from key (@nicolas-grekas)
  • bug #40529 [Translation] Missing translations from traits (@insekticid)
  • bug #41384 Fix SkippedTestSuite (@jderusse)
  • bug #41966 [Console] Revert "bug #41952 fix handling positional arguments" (@chalasr, @nicolas-grekas)
  • bug #41905 [EventDispatcher] Correct the called event listener method case (@JJsty1e)
  • bug #41952 [Console] fix handling positional arguments (@nicolas-grekas)
  • bug #41887 [PhpUnitBridge] Fix deprecation handler with PHPUnit 10 (@YaFou)

[PR] https://github.com/symfony/symfony/pull/42266

Changelog (https://github.com/symfony/symfony/compare/v4.4.25...v4.4.26)

  • bug #41893 [Filesystem] Workaround cannot dumpFile into "protected" folders on Windows (@arnegroskurth)
  • bug #41665 [HttpKernel] Keep max lifetime also when part of the responses don't set it (@mpdude)
  • bug #41760 [ErrorHandler] fix handling buffered SilencedErrorContext (@nicolas-grekas)
  • bug #41807 [HttpClient] fix Psr18Client when allow_url_fopen=0 (@nicolas-grekas)
  • bug #40857 [DependencyInjection] Add support of PHP enumerations (@alexandre-daubois)
  • bug #41767 [Config] fix tracking default values that reference the parent class (@nicolas-grekas)
  • bug #41768 [DependencyInjection] Fix binding "iterable $foo" when using the PHP-DSL (@nicolas-grekas)
  • bug #41793 [Cache] handle prefixed redis connections when clearing pools (@nicolas-grekas)
  • bug #41804 [Cache] fix eventual consistency when using RedisTagAwareAdapter with a cluster (@nicolas-grekas)
  • bug #41773 [Cache] Disable locking on Windows by default (@nicolas-grekas)
  • bug #41655 [Mailer] fix encoding of addresses using SmtpTransport (@dmaicher)
  • bug #41663 [HttpKernel] [HttpCache] Keep s-maxage=0 from ESI sub-responses (@mpdude)
  • bug #41701 [VarDumper] Fix tests for PHP 8.1 (@alexandre-daubois)
  • bug #41795 [FrameworkBundle] Replace var_export with VarExporter to use array short syntax in secrets list files (@alexandre-daubois)
  • bug #41779 [DependencyInjection] throw proper exception when decorating a synthetic service (@nicolas-grekas)
  • bug #41776 [ErrorHandler] [DebugClassLoader] Do not check Phake mocks classes (@adoy)
  • bug #41780 [PhpUnitBridge] fix handling the COMPOSER_BINARY env var when using simple-phpunit (@Taluu)
  • bug #41670 [HttpFoundation] allow savePath of NativeFileSessionHandler to be null (@simon.chrzanowski)
  • bug #41644 [Config] fix tracking attributes in ReflectionClassResource (@nicolas-grekas)
  • bug #41621 [Process] Fix incorrect parameter type (@bch36)
  • bug #41624 [HttpClient] Revert bindto workaround for unaffected PHP versions (@derrabus)
  • bug #41549 [Security] Fix opcache preload with alias classes (@jderusse)
  • bug #41491 [Serializer] Do not allow to denormalize string with spaces only to valid a DateTime object (@sidz)
  • bug #41386 [Console] Escape synopsis output (@jschaedl)
  • bug #41495 [HttpFoundation] Add ReturnTypeWillChange to SessionHandlers (@nikic)

[PR] https://github.com/symfony/symfony/pull/41913

Changelog (https://github.com/symfony/symfony/compare/v4.4.24...v4.4.25)

  • bug #41000 [Form] Use !isset for checks cause this doesn't falsely include 0 (@Kai Dederichs)
  • bug #41407 [DependencyInjection] keep container.service_subscriber tag on the decorated definition (@xabbuh)
  • bug #40866 [Filesystem] fix readlink() for Windows (@a1812)
  • bug #41394 [Form] fix support for years outside of the 32b range on x86 arch (@nicolas-grekas)
  • bug #39847 [Messenger] Fix merging PrototypedArrayNode associative values (@svityashchuk)
  • bug #41346 [WebProfilerBundle] Wrapping exception js in Sfjs check and also loading base_js Sfjs if needed (@weaverryan)

[PR] https://github.com/symfony/symfony/pull/41477

Changelog (https://github.com/symfony/symfony/compare/v4.4.23...v4.4.24)

  • security #cve-2021-21424 [Security\Core] Fix user enumeration via response body on invalid credentials (@chalasr)
  • bug #41230 [FrameworkBundle][Validator] Fix deprecations from Doctrine Annotations+Cache (@derrabus)
  • bug #41240 Fixed deprecation warnings about passing null as parameter (@derrabus)
  • bug #41241 [Finder] Fix gitignore regex build with "**" (@mvorisek)
  • bug #41224 [HttpClient] fix adding query string to relative URLs with scoped clients (@nicolas-grekas)
  • bug #41233 [DependencyInjection][ProxyManagerBridge] Don't call class_exists() on null (@derrabus)
  • bug #41210 [Console] Fix Windows code page support (@orkan)

[PR] https://github.com/symfony/symfony/pull/41278
[SECURITY] Security release

Changelog (https://github.com/symfony/symfony/compare/v4.4.22...v4.4.23)

  • security #cve-2021-21424 [Security][Guard] Prevent user enumeration (@chalasr)
  • bug #41176 [DependencyInjection] fix dumping service-closure-arguments (@nicolas-grekas)
  • bug #41168 WDT: Only load "Sfjs" if it is not present already (@weaverryan)
  • bug #41147 [Inflector][String] wrong plural form of words ending by "pectus" (@makraz)
  • bug #41160 [HttpClient] Don't prepare the request in ScopingHttpClient (@nicolas-grekas)
  • bug #40763 Fix/Rewrite .gitignore regex builder (@mvorisek)
  • bug #40917 [Config][DependencyInjection] Uniformize trailing slash handling (@dunglas)
  • bug #40699 [PropertyInfo] Make ReflectionExtractor correctly extract nullability (@shiftby)
  • bug #40874 [PropertyInfo] fix attribute namespace with recursive traits (@soullivaneuh)
  • bug #41099 [Cache] Check if phpredis version is compatible with stream parameter (@nicolassing)
  • bug #41072 [VarExporter] Add support of PHP enumerations (@alexandre-daubois)
  • bug #41105 [Inflector][String] Fixed singularize edges > edge (@ruudk)
  • bug #41075 [ErrorHandler] Skip "same vendor" @method deprecations for Symfony\* classes unless symfony/symfony is being tested (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/41194
[SECURITY] Security release

Changelog (https://github.com/symfony/symfony/compare/v4.4.21...v4.4.22)

  • bug #40993 [Security] [Security/Core] fix checking for bcrypt (@nicolas-grekas)
  • bug #40923 [Yaml] expose references detected in inline notation structures (@xabbuh)
  • bug #40964 [HttpFoundation] Fixes for PHP 8.1 deprecations (@jrmajor)
  • bug #40514 [Yaml] Allow tabs as separators between tokens (@bertramakers)
  • bug #40882 [Cache] phpredis: Added full TLS support for RedisCluster (@jackthomasatl)
  • bug #40793 [DoctrineBridge] Add support for a driver type "attribute" (@beberlei)
  • bug #40807 RequestMatcher issue when _controller is a closure (@Plopix)
  • bug #40811 [PropertyInfo] Use the right context for methods defined in traits (@colinodell)
  • bug #40330 [SecurityBundle] Empty line starting with dash under "access_control" causes all rules to be skipped (@monteiro)
  • bug #40780 [Cache] Apply NullAdapter as Null Object (@roukmoute)
  • bug #40740 [Cache][FrameworkBundle] Fix logging for TagAwareAdapter (@fancyweb)
  • bug #40755 [Routing] Better inline requirements and defaults parsing (@Foxprodev)
  • bug #40754 [PhpUnitBridge] Fix phpunit symlink on Windows (@johnstevenson)
  • bug #40707 [Yaml] Fixed infinite loop when parser goes through an additional and invalid closing tag (@alexandre-daubois)
  • bug #40679 [Debug][ErrorHandler] Avoid warning with Xdebug 3 with develop mode disabled (@Jean85)
  • bug #40702 [HttpClient] allow CurlHttpClient on Windows (@n0rbyt3)
  • bug #40503 [Yaml] fix parsing some block sequences (@a1812)
  • bug #40610 Fixed bugs found by psalm (@Nyholm)
  • bug #40603 [Config] Fixed support for nodes not extending BaseNode (@Nyholm)
  • bug #40645 [FrameworkBundle] Dont store cache misses on warmup (@Nyholm)
  • bug #40629 [DependencyInjection] Fix "url" env var processor behavior when the url has no path (@fancyweb)
  • bug #40655 [Cache] skip storing failure-to-save as misses in ArrayAdapter (@nicolas-grekas)
  • bug #40522 [Serializer] Allow AbstractNormalizer to use null for non-optional nullable constructor parameters without default value (@Pierre Rineau)
  • bug #40595 add missing queue_name to find(id) in doctrine messenger transport (@monteiro)

[PR] https://github.com/symfony/symfony/pull/41017

Changelog (https://github.com/symfony/symfony/compare/v4.4.20...v4.4.21)

  • bug #40598 [Form] error if the input string couldn't be parsed as a date (@xabbuh)
  • bug #40587 [HttpClient] fix using stream_copy_to_stream() with responses cast to php streams (@nicolas-grekas)
  • bug #40510 [Form] IntegerType: Always use en for IntegerToLocalizedStringTransformer (@Warxcell)
  • bug #40593 Uses the correct assignment action for console options depending if they are short or long (@topikito)
  • bug #40535 [HttpKernel] ConfigDataCollector to return known data without the need of a Kernel (@topikito)
  • bug #40552 [Translation] Fix update existing key with existing +int-icu domain (@Alexis)
  • bug #40537 [Security] Handle properly 'auto' option for remember me cookie security (@fliespl)
  • bug #40506 [Validator] Avoid triggering the autoloader for user-input values (@Seldaek)
  • bug #40538 [HttpClient] remove using $http_response_header (@nicolas-grekas)
  • bug #40508 [PhpUnitBridge] fix reporting deprecations from DebugClassLoader (@nicolas-grekas)
  • bug #40348 [Console] Fix line wrapping for decorated text in block output (@grasmash)
  • bug #40499 [Inflector][String] Fixed pluralize "coupon" (@Nyholm)
  • bug #40494 [PhpUnitBridge] fix compat with symfony/debug (@nicolas-grekas)
  • bug #40453 [VarDumper] Adds support for ReflectionUnionType to VarDumper (@Michael Nelson, @michaeldnelson)
  • bug #40460 Correctly clear lines for multi-line progress bar messages (@grasmash)
  • bug #40450 [Console] ProgressBar clears too many lines on update (@danepowell)
  • bug #40178 [FrameworkBundle] Exclude unreadable files when executing About command (@michaljusiega)
  • bug #40472 [Bridge\Twig] Add 'form-control-range' for range input type (@Oviglo)
  • bug #39866 [Mime] Escape commas in address names (@YaFou)
  • bug #40373 Check if templating engine supports given view (@fritzmg)
  • bug #39992 [Security] Refresh original user in SwitchUserListener (@AndrolGenhald)
  • bug #40446 [TwigBridge] Fix "Serialization of 'Closure'" error when rendering an TemplatedEmail (@jderusse)
  • bug #40425 [DoctrineBridge] Fix eventListener initialization when eventSubscriber constructor dispatch an event (@jderusse)
  • bug #40313 [FrameworkBundle] Fix PropertyAccess definition when not in debug (@PedroTroller)
  • bug #40417 [Form] clear unchecked choice radio boxes even if clear missing is set to false (@xabbuh)
  • bug #40388 [ErrorHandler] Added missing type annotations to FlattenException (@derrabus)
  • bug #40407 [TwigBridge] Allow version 3 of the Twig extra packages (@derrabus)
  • bug #39685 [Mailer][Mime][TwigBridge][Validator] Allow egulias/email-validator 3.x (@derrabus)
  • bug #40398 [FrameworkBundle] : Fix method name compare in ResolveControllerNameSubscriber (@glensc)
  • bug #39733 [TwigBridge] Render email once (@jderusse)
  • bug #40386 [DependencyInjection][Security] Backport psr/container 1.1/2.0 compatibility (@derrabus)

[PR] https://github.com/symfony/symfony/pull/40616

Changelog (https://github.com/symfony/symfony/compare/v4.4.19...v4.4.20)

  • bug #40318 [Translation] deal with indented heredoc/nowdoc tokens (@xabbuh)
  • bug #40350 [DependencyInjection] fix parsing calls of methods named "method" (@xabbuh)
  • bug #40316 [Serializer] zero parts can be omitted in date interval input (@xabbuh)
  • bug #40239 MockResponse total_time should not be simulated when provided (@Pierrick VIGNAND)
  • bug #40299 [Cache] Add server-commands support for Predis Replication Environments (@DemigodCode)
  • bug #40231 [HttpKernel] Configure session.cookie_secure earlier (@tamcy)
  • bug #40283 [Translation] Make name attribute optional in xliff2 (@MarieMinasyan)
  • bug #39599 [Cache] Fix Redis TLS scheme rediss for Redis connection (@misaert)
  • bug #40244 [Routing] fix conflict with param named class in attribute (@nlhommet)
  • bug #40273 [Cache] fix setting items' metadata on commit() (@nicolas-grekas)
  • bug #40258 [Form] Ignoring invalid forms from delete_empty behavior in CollectionType (@yceruto)
  • bug #40162 [Intl] fix Locale::getFallback() throwing exception on long $locale (@AmirHo3ein13)
  • bug #40208 [PropertyInfo] fix resolving self to name of the analyzed class (@xabbuh)
  • bug #40209 [WebLink] Escape double quotes in attributes values (@fancyweb)
  • bug #40192 [Console] fix QuestionHelper::getHiddenResponse() not working with space in project directory name (@Yendric)
  • bug #40175 [PropertyInfo]  use the right context for properties defined in traits (@xabbuh)
  • bug #40172 [Translation] Allow using dashes in locale when linting Xliff files (@localheinz)
  • bug #40187 [Console] Fix PHP 8.1 null error for preg_match flag (@kylekatarnls)
  • bug #39659 [Form] keep valid submitted choices when additional choices are submitted (@xabbuh)
  • bug #40188 [HttpFoundation] Fix PHP 8.1 null values (@kylekatarnls)
  • bug #40167 [DependencyInjection] Definition::removeMethodCall should remove all matching calls (@ruudk)
  • bug #40160 [PropertyInfo] fix extracting mixed type-hinted property types (@xabbuh)
  • bug #40040 [Finder] Use a lazyIterator to close files descriptors when no longer used (@jderusse)
  • bug #40135 [FrameworkBundle] Fix freshness checks with boolean parameters on routes (@HypeMC)
  • bug #40138 [FrameworkBundle] fix registering "annotations.cache" on the "container.hot_path" (@nicolas-grekas)
  • bug #40116 [FrameworkBundle][Translator] scan directories for translations sequentially (@xabbuh)
  • bug #40104 [HttpKernel] [Kernel] Silence failed deprecations logs writes (@fancyweb)
  • bug #40098 [DependencyInjection] fix tracking of changes to vendor/ dirs (@nicolas-grekas)
  • bug #39980 [Mailer][Mime] Update inline part names with newly generated ContentId (@ddegentesh)
  • bug #40043 [HttpFoundation] Setting REQUEST_TIME_FLOAT when constructing a Request object (@ctasada)
  • bug #40050 [FrameworkBundle][Translator] Fixed updating catalogue metadata from Intl domain (@yceruto)
  • bug #40089 [SecurityBundle] role_names variable instead of roles (@wickedOne)
  • bug #40042 [Doctrine] Restore priority for EventSubscribers (@jderusse)
  • bug #40066 [ErrorHandler] fix parsing return types in DebugClassLoader (@nicolas-grekas)
  • bug #40065 [ErrorHandler] fix handling messages with null bytes from anonymous classes (@nicolas-grekas)
  • bug #40067 [PhpUnitBridge] fix reporting deprecations when they come from DebugClassLoader (@nicolas-grekas)
  • bug #40060 fix validator when we have false returned by the current element of the iterator (@FabienSalles)
  • bug #40062 [Mime] Fix case-sensitive handling of header names (@piku235)
  • bug #40023 [Finder]  use proper keys to not override appended files (@xabbuh)
  • bug #40019 [ErrorHandler] Fix strpos error when trying to call a method without a name (@Deuchnord)
  • bug #40004 [Serializer] Prevent access to private properties without getters (@julienfalque)

[PR] https://github.com/symfony/symfony/pull/40363

Changelog (https://github.com/symfony/symfony/compare/v4.4.18...v4.4.19)

  • bug #38900 [Serializer] Exclude non-initialized properties accessed with getters (@BoShurik)
  • bug #39887 [Translator] fix handling plural for floating numbers (@kylekatarnls)
  • bug #39967 [Messenger] fix redis messenger options with dsn (@Kleinast)
  • bug #39970 [Messenger] Fix transporting non-UTF8 payloads by encoding them using base 64 (@nicolas-grekas)
  • bug #39909 [PhpUnitBridge] Allow relative path to composer cache (@jderusse)
  • bug #39944 [HttpKernel] Configure the ErrorHandler even when it is overriden (@nicolas-grekas)
  • bug #39932 [Console] [Command] Fix Closure code binding when it is a static anonymous function (@fancyweb)
  • bug #39880 [DoctrineBridge] Add username to UserNameNotFoundException (@qurben)
  • bug #39633 [HttpFoundation] Drop int return type from parseFilesize() (@LukeTowers)
  • bug #39889 [HttpClient] Add check for constant in Curl client (@pierredup)
  • bug #39886 [HttpFoundation] Revert #38614 and add assert to avoid regressions (@BafS)
  • bug #39858 Fix problem when SYMFONY_PHPUNIT_VERSION is empty string value (@alexander-schranz)
  • bug #39861 [DependencyInjection] Skip deprecated definitions in CheckTypeDeclarationsPass (@chalasr)
  • bug #39862 [Security] Replace message data in JSON security error response (@wouterj)
  • bug #39667 [DoctrineBridge] Take into account that indexBy="person_id" could be a db column name, for a referenced entity (@victormacko)
  • bug #39799 [DoctrineBridge] Fix circular loop with EntityManager (@jderusse)
  • bug #39821 [DependencyInjection] Don't trigger notice for deprecated aliases pointing to deprecated definitions (@chalasr)
  • bug #39816 [HttpFoundation] use atomic writes in MockFileSessionStorage (@nicolas-grekas)
  • bug #39735 [Serializer] Rename normalize param (@VincentLanglet)
  • bug #39797 Dont allow unserializing classes with a destructor (@jderusse)
  • bug #39743 [Mailer] Fix missing BCC recipients in SES bridge (@jderusse)
  • bug #39764 [Config]  fix handling float-like key attribute values (@xabbuh)
  • bug #39787 [Yaml] a colon followed by spaces exclusively separates mapping keys and values (@xabbuh)
  • bug #39788 [Cache] fix possible collision when writing tmp file in filesystem adapter (@nicolas-grekas)
  • bug #39794 Dont allow unserializing classes with a destructor - 4.4 (@jderusse)
  • bug #39747 [DependencyInjection] Support PHP 8 builtin types in CheckTypeDeclarationsPass (@derrabus)
  • bug #39738 [VarDumper] fix mutating $GLOBALS while cloning it (@nicolas-grekas)
  • bug #39746 [DependencyInjection] Fix InvalidParameterTypeException for function parameters (@derrabus)
  • bug #39681 [HttpFoundation] parse cookie values containing the equal sign (@xabbuh)
  • bug #39716 [DependencyInjection] do not break when loading schemas from network paths on Windows (@xabbuh)
  • bug #39703 [Finder] apply the sort callback on the whole search result (@xabbuh)
  • bug #39717 [TwigBridge] Remove full head content in HTML to text converter (@pupaxxo)
  • bug #39708 [WebProfilerBundle] take query and request parameters into account when matching routes (@xabbuh)
  • bug #39683 [Yaml] keep trailing newlines when dumping multi-line strings (@xabbuh)
  • bug #39670 [Form] disable error bubbling by default when inherit_data is configured (@xabbuh)
  • bug #39686 [Lock] Fix config merging in lock (@jderusse)
  • bug #39668 [Yaml] do not dump extra trailing newlines for multiline blocks (@xabbuh)
  • bug #39653 [Form] fix passing null $pattern to IntlDateFormatter (@nicolas-grekas)
  • bug #39598 [Messenger] Fix stopwach usage if it has been reset (@lyrixx)
  • bug #39631 [VarDumper] Fix display of nullable union return types (@derrabus)
  • bug #39629 [VarDumper] fixed displaying "mixed" as "?mixed" (@nicolas-grekas)
  • bug #39597 [Mailer] Handle failure when sending DATA (@jderusse)
  • bug #39610 [ProxyManagerBridge] fix PHP notice, switch to "friendsofphp/proxy-manager-lts" (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/39998

Changelog (https://github.com/symfony/symfony/compare/v4.4.17...v4.4.18)

  • bug #39531 [Mailer] Fix parsing Dsn with empty user/password (@OskarStark)
  • bug #39518 [Ldap] Incorrect determination of RelativeDistinguishedName for the "move" operation (@astepin)
  • bug #39476 [Lock] Prevent store exception break combined store (@dzubchik)
  • bug #39433 [Cache] fix setting "read_timeout" when using Redis (@nicolas-grekas)
  • bug #39420 [Cache] Prevent notice on case matching metadata trick (@bastnic)
  • bug #39203 [DI] Fix not working if only "default_index_method" used (@malteschlueter)
  • bug #39142 [Config] Stop treating multiline resources as globs (@michaelKaefer)
  • bug #39341 [Form] Fixed StringUtil::trim() to trim ZERO WIDTH SPACE (U+200B) and SOFT HYPHEN (U+00AD) (@pmishev)
  • bug #39334 [Config][TwigBundle] Fixed syntax error in config (@Nyholm)
  • bug #39196 [DI] Fix Xdebug 3.0 detection (@vertexvaar)
  • bug #39226 [PhpUnitBridge] Fix disabling DeprecationErrorHandler from PHPUnit configuration file (@fancyweb)
  • bug #39357 [FrameworkBundle] fix preserving some special chars in the query string (@nicolas-grekas)
  • bug #39271 [HttpFoundation] Fix TypeError: Argument 1 passed to JsonResponse::setJson() must be of the type string, object given (@sidz)
  • bug #39251 [DependencyInjection] Fix container linter for union types (@derrabus)
  • bug #39336 [Config] YamlReferenceDumper: No default value required for VariableNode with array example (@Nyholm)
  • bug #39333 [Form] do not apply the Valid constraint on scalar form data (@lchrusciel, @xabbuh)
  • bug #39331 [PhpUnitBridge] Fixed PHPunit 9.5 compatibility (@wouterj)
  • bug #39220 [HttpKernel] Fix bug with whitespace in Kernel::stripComments() (@ausi)
  • bug #39252 [Mime] Leverage PHP 8's detection of CSV files (@derrabus)
  • bug #39313 [FrameworkBundle] TextDescriptor::formatControllerLink checked method… (@fjogeleit)
  • bug #39286 [HttpClient] throw clearer error when no scheme is provided (@BackEndTea)
  • bug #39267 [Yaml] fix lexing backslashes in single quoted strings (@xabbuh)
  • bug #39151 [DependencyInjection] Fixed incorrect report for private services if required service does not exist (@Islam93)
  • bug #39274 [Yaml] fix lexing mapping values with trailing whitespaces (@xabbuh)
  • bug #39270 [Inflector] Fix Notice when argument is empty string (@moldman)
  • bug #39247 [Security] remove return type definition in order to avoid type juggling (@adeptofvoltron)
  • bug #39223 [Console] Re-enable hyperlinks in Konsole/Yakuake (@OndraM)
  • bug #39241 [Yaml] fix lexing inline sequences/mappings with trailing whitespaces (@Nyholm, @xabbuh)
  • bug #39243 [Filesystem] File existence check before calling unlink method (@gechetspr)

[PR] https://github.com/symfony/symfony/pull/39562

Changelog (https://github.com/symfony/symfony/compare/v4.4.16...v4.4.17)

  • bug #39166 [Messenger] Fix mssql compatibility for doctrine transport. (@bill moll)
  • bug #39211 [HttpClient] fix binding to network interfaces (@nicolas-grekas)
  • bug #39129 [DependencyInjection] Fix circular in DI with lazy + byContruct loop (@jderusse)
  • bug #39068 [DependencyInjection][Translator] Silent deprecation triggered by libxml_disable_entity_loader (@jderusse)
  • bug #39119 [Form] prevent duplicated error message for file upload limits (@xabbuh)
  • bug #39099 [Form] ignore the pattern attribute for textareas (@xabbuh)
  • bug #39154 [Yaml] fix lexing strings containing escaped quotation characters (@xabbuh)
  • bug #38597 [PhpUnitBridge] Fix qualification of deprecations triggered by the debug class loader (@fancyweb)
  • bug #39160 [Console] Use a partial buffer in SymfonyStyle (@jderusse)
  • bug #39168 [Console] Fix console closing tag (@jderusse)
  • bug #39155 [VarDumper] fix casting resources turned into objects on PHP 8 (@nicolas-grekas)
  • bug #39115 [HttpClient] don't fallback to HTTP/1.1 when HTTP/2 streams break (@nicolas-grekas)
  • bug #33763 [Yaml] fix lexing nested sequences/mappings (@xabbuh)
  • bug #39083 [Dotenv] Check if method inheritEnvironmentVariables exists (@Chi-teck)
  • bug #39094 [Ldap] Fix undefined variable $con (@derrabus)
  • bug #39091 [Config] Recheck glob brace support after GlobResource was serialized (@wouterj)
  • bug #39092 Fix critical extension when reseting paged control (@jderusse)
  • bug #38614 [HttpFoundation] Fix for virtualhosts based on URL path (@mvorisek)
  • bug #38387 [Validator] prevent hash collisions caused by reused object hashes (@fancyweb, @xabbuh)
  • bug #38999 [DependencyInjection] autoconfigure behavior describing tags on decorators (@xabbuh)
  • bug #39058 [DependencyInjection] Fix circular detection with multiple paths (@jderusse)
  • bug #39059 [Filesystem] fix cleaning up tmp files when dumpFile() fails (@nicolas-grekas)
  • bug #38628 [DoctrineBridge] indexBy could reference to association columns (@juanmiguelbesada)
  • bug #39021 [DependencyInjection] Optimize circular collection by removing flattening (@jderusse)
  • bug #39031 [Ldap] Fix pagination (@jderusse)
  • bug #39038 [DoctrineBridge] also reset id readers (@xabbuh)
  • bug #39025 [DoctrineBridge] Fix DBAL deprecations in middlewares (@derrabus)
  • bug #38991 [Console] Fix ANSI when stdErr is not a tty (@jderusse)
  • bug #38980 [DependencyInjection] Fix circular reference with Factory + Lazy Iterrator (@jderusse)
  • bug #38971 [PhpUnitBridge] fix replaying skipped tests (@nicolas-grekas)
  • bug #38910 [HttpKernel] Fix session initialized several times (@jderusse)
  • bug #38882 [DependencyInjection] Improve performances in CircualReference detection (@jderusse)
  • bug #38950 [Process] Dont test TTY if there is no TTY support (@Nyholm)
  • bug #38921 [PHPUnitBridge] Fixed crash on Windows with PHP 8 (@villfa)
  • bug #38869 [SecurityBundle] inject only compatible token storage implementations for usage tracking (@xabbuh)
  • bug #38894 [HttpKernel] Remove Symfony 3 compatibility code (@derrabus)
  • bug #38895 [PhpUnitBridge] Fix wrong check for exporter in ConstraintTrait (@alcaeus)
  • bug #38879 [Cache] Fixed expiry could be int in ChainAdapter due to race conditions (@phamviet)
  • bug #38856 [Cache] Add missing use statement (@fabpot)

[PR] https://github.com/symfony/symfony/pull/39215

Changelog (https://github.com/symfony/symfony/compare/v4.4.15...v4.4.16)

  • bug #38713 [DI] Fix Preloader exception when preloading a class with an unknown parent/interface (@rgeraads)
  • bug #38647 [HttpClient] relax auth bearer format requirements (@xabbuh)
  • bug #38699 [DependencyInjection] Preload classes with union types correctly (@derrabus)
  • bug #38669 [Serializer] fix decoding float XML attributes starting with 0 (@Marcin Kruk)
  • bug #38680 [PhpUnitBridge] Support new expect methods in test case polyfill (@alcaeus)
  • bug #38681 [PHPUnitBridge] Support PHPUnit 8 and PHPUnit 9 in constraint compatibility trait (@alcaeus)
  • bug #38679 [PhpUnitBridge] Add missing exporter function for PHPUnit 7 (@alcaeus)
  • bug #38595 [TwigBridge] do not translate null placeholders or titles (@xabbuh)
  • bug #38635 [Cache] Use correct expiry in ChainAdapter (@Nyholm)
  • bug #38652 [Filesystem] Check if failed unlink was caused by permission denied (@Nyholm)
  • bug #38645 [PropertyAccess] forward the caught exception (@xabbuh)
  • bug #38604 [DoctrineBridge] indexBy does not refer to attributes, but to column names (@xabbuh)
  • bug #38606 [WebProfilerBundle] Hide debug toolbar in print view (@jt2k)
  • bug #38582 [DI] Fix Reflection file name with eval()'d code (@maxime-aknin)
  • bug #38516 [HttpFoundation] Fix Range Requests (@BattleRattle)
  • bug #38553 [Lock] Reset Key lifetime time before we acquire it (@Nyholm)
  • bug #38551 Remove content-type check on toArray methods (@jderusse)
  • bug #38544 [DI] fix dumping env vars (@nicolas-grekas)
  • bug #38530 [HttpClient] fix reading the body after a ClientException (@nicolas-grekas)
  • bug #38510 [PropertyInfo] Support for the mixed type (@derrabus)
  • bug #38493 [HttpClient] Fix CurlHttpClient memory leak (@HypeMC)
  • bug #38456 [Cache] skip igbinary < 3.1.6 (@nicolas-grekas)
  • bug #38392 [Ldap] Bypass the use of ldap_control_paged_result on PHP >= 7.3 (@lucasaba)
  • bug #38444 [PhpUnitBridge] fix running parallel tests with phpunit 9 (@nicolas-grekas)
  • bug #38442 [VarDumper] fix truncating big arrays (@nicolas-grekas)
  • bug #38433 [Mime] Fix serialization of RawMessage (@gilbertsoft)

[PR] https://github.com/symfony/symfony/pull/38852

Changelog (https://github.com/symfony/symfony/compare/v4.4.14...v4.4.15)

  • bug #36291 [Lock] Fix StoreFactory to accept same DSN syntax as AbstractAdapter (@Jontsa)
  • bug #38390 [Serializer][Minor] Fix circular reference exception message (bad limit displayed) (@l-vo)
  • bug #38388 [HttpClient] Always "buffer" empty responses (@nicolas-grekas)
  • bug #38380 [Form] propagate validation groups to subforms (@johanderuijter, @xabbuh)
  • bug #38377 Ignore more deprecations for Mockery mocks (@fancyweb)
  • bug #38375 [HttpClient] fix using proxies with NativeHttpClient (@nicolas-grekas)
  • bug #38372 [Routing] fix using !important and defaults/reqs in inline route definitions (@nicolas-grekas)
  • bug #38373 [ErrorHandler][DebugClassLoader] Do not check Mockery mocks classes (@fancyweb)
  • bug #38368 [HttpClient] Fix using https with proxies (@bohanyang)
  • bug #38350 [TwigBundle] Only remove kernel exception listener if twig is used (@dmolineus)
  • bug #38360 [BrowserKit] Cookie expiration at current timestamp (@iquito)
  • bug #38358 [Messenger] Fix redis connection error message (@alexander-schranz)
  • bug #38343 Revert "bug #38063 [FrameworkBundle] generate preload.php in src/ to make opcache.preload predictable" (@nicolas-grekas)
  • bug #38336 [PhpUnitBridge] Fixed class_alias() for PHPUnit\Framework\Error\Error (@stevegrunwell)

[PR] https://github.com/symfony/symfony/pull/38405

Changelog (https://github.com/symfony/symfony/compare/v4.4.13...v4.4.14)

  • bug #38248 [HttpClient] Allow bearer token with colon (@stephanvierkant)
  • bug #37837 [Form] Fix custom formats deprecation with HTML5 widgets (@fancyweb)
  • bug #38285 [Contracts][Translation] Optional Intl dependency (@ro0NL)
  • bug #38283 [Translator] Optional Intl dependency (@ro0NL)
  • bug #38271 [ErrorHandler] Escape JSON encoded log context (@ro0NL)
  • bug #38284 [Cache][Lock][Messenger] fix compatibility with Doctrine DBAL 3 (@xabbuh)
  • bug #38228 [Yaml Parser] Fix edge cases when parsing multiple documents (@digilist)
  • bug #38229 [Yaml] fix parsing comments not prefixed by a space (@xabbuh)
  • bug #38127 [Translator] Make sure a null locale is handled properly (@jschaedl)
  • bug #38221 [Cache] Allow cache tags to be objects implementing __toString() (@lstrojny)
  • bug #38212 [HttpKernel] Do not override max_redirects option in HttpClientKernel (@dmolineus)
  • bug #38215 [HttpClient] Support for CURLOPT_LOCALPORT (@derrabus)
  • bug #38202 [FrameworkBundle] Fix xsd definition which prevent to add more than one workflow metadata (@l-vo)
  • bug #38166 [Console] work around disabled putenv() (@SenTisso)
  • bug #38173 [HttpClient][HttpClientTrait] don't calculate alternatives if option is auth_ntlm (@ybenhssaien)
  • bug #38169 [PhpUnitBridge] Internal classes are not legacy (@derrabus)
  • bug #38156 [Cache] fix ProxyAdapter not persisting items with infinite expiration (@dmaicher)
  • bug #38148 [HttpClient] fail properly when the server replies with HTTP/0.9 (@nicolas-grekas)
  • bug #38131 [Validator] allow consumers to mock all methods (@xabbuh)
  • bug #38139 [DI] dump OS-indepent paths in the compiled container (@nicolas-grekas)
  • bug #38126 [Cache] Limit cache version character range (@lstrojny)
  • bug #38142 [FrameworkBundle] adopt src/.preload.php (@nicolas-grekas)
  • bug #38108 [Cache] Fix key encoding issue in Memcached adapter (@lstrojny)
  • bug #38122 [HttpClient] Fix Array to string conversion notice when parsing JSON error body with non-scalar detail property (@emarref)
  • bug #37097 DateTime validator support for trailing data (@stefankleff)
  • bug #38116 [Console] Silence warnings on sapi_windows_cp_set() call (@chalasr)
  • bug #38114 [Console] guard $argv + $token against null, preventing unnecessary exceptions (@bilogic)
  • bug #38094 [PhpUnitBridge] Skip internal classes in CoverageListenerTrait (@sanmai)
  • bug #38101 [VarExporter] unserialize() might throw an Exception on php 8 (@derrabus)
  • bug #38100 [ErrorHandler] Parse "x not found" errors correctly on php 8 (@derrabus)
  • bug #38099 Prevent parsing invalid octal digits as octal numbers (@julienfalque)
  • bug #38095 [Mailer] Remove unnecessary check for existing request (@jschaedl)
  • bug #38091 [DI] fix ContainerBuilder on PHP8 (@nicolas-grekas)
  • bug #38086 [HttpClient] with "bindto" with NativeHttpClient (@nicolas-grekas)
  • bug #38063 [FrameworkBundle] generate preload.php in src/ to make opcache.preload predictable (@nicolas-grekas)
  • bug #38080 [Console] Make sure $maxAttempts is an int or null (@derrabus)
  • bug #38075 esmtp error not being thrown properly (@Anton Zagorskii)
  • bug #38040 [Yaml Parser] fixed Parser to skip comments when inlining sequences (@korve)
  • bug #38073 [VarDumper] Fix caster for invalid SplFileInfo objects on php 8 (@derrabus)
  • bug #38071 [PhpUnitBridge] Adjust output parsing of CoverageListenerTrait for PHPUnit 9.3 (@sanmai, @derrabus)
  • bug #38062 [DI] fix generating preload file when cache_dir is outside project_dir (@nicolas-grekas)
  • bug #38059 [Cache] Fix CacheCollectorPass with decorated cache pools (@shyim)
  • bug #38054 [PhpUnitBridge] CoverageListenerTrait update for PHPUnit 8.5/9.x (@sanmai)
  • bug #38049 [Debug] Parse "x not found" errors correctly on php 8 (@derrabus)
  • bug #38041 [PropertyInfo] Fix typed collections in PHP 7.4 (@ndench)
  • bug #37959 [PhpunitBridge] Fix deprecation type detection (when several autoload files are used) (@l-vo)

[PR] https://github.com/symfony/symfony/pull/38312

Changelog (https://github.com/symfony/symfony/compare/v4.4.12...v4.4.13)

  • security #cve-2020-15094 Remove headers with internal meaning from HttpClient responses (@mpdude)
  • bug #38024 [Console] Fix undefined index for inconsistent command name definition (@chalasr)
  • bug #38023 [DI] fix inlining of non-shared services (@nicolas-grekas)
  • bug #38020 [PhpUnitBridge] swallow deprecations (@xabbuh)
  • bug #38010 [Cache] Psr16Cache does not handle Proxy cache items (@alex-dev)
  • bug #37937 [Serializer] fixed fix encoding of cache keys with anonymous classes (@michaelzangerle)

[PR] https://github.com/symfony/symfony/pull/38028
[SECURITY] Security release

Changelog (https://github.com/symfony/symfony/compare/v4.4.11...v4.4.12)

  • bug #37966 [HttpClient][MockHttpClient][DX] Throw when the response factory callable does not return a valid response (@fancyweb)
  • bug #37971 [PropertyInfo] Backport support for typed properties (PHP 7.4) (@dunglas)
  • bug #37970 [PhpUnitBridge] Polyfill new phpunit 9.1 assertions (@phpfour)
  • bug #37960 [PhpUnit] Add polyfill for assertMatchesRegularExpression() (@dunglas)
  • bug #37949 [Yaml] fix more numeric cases changing in PHP 8 (@xabbuh)
  • bug #37921 [Yaml] account for is_numeric() behavior changes in PHP 8 (@xabbuh)
  • bug #37912 [ExpressionLanguage] fix passing arguments to call_user_func_array() on PHP 8 (@xabbuh)
  • bug #37907 [Messenger] stop using the deprecated schema synchronizer API (@xabbuh)
  • bug #37900 [Mailer] Fixed mandrill api header structure (@wulff)
  • bug #37888 [Mailer] Reorder headers used to determine Sender (@cvmiert)
  • bug #37872 [Sendgrid-Mailer] Fixed envelope recipients on sendgridApiTransport (@arendjantetteroo)
  • bug #37860 [Serializer][ClassDiscriminatorMapping] Fix getMappedObjectType() when a discriminator child extends another one (@fancyweb)
  • bug #37853 [Validator] ensure that the validator is a mock object for backwards-compatibility (@xabbuh)
  • bug #36340 [Serializer] Fix configuration of the cache key (@dunglas)
  • bug #36810 [Messenger] Do not stack retry stamp (@jderusse)
  • bug #37849 [FrameworkBundle] Add missing mailer transports in xsd (@l-vo)
  • bug #37586 [ErrorHandler][DebugClassLoader] Add mixed and static return types support (@fancyweb)
  • bug #37845 [Serializer] Fix variadic support when using type hints (@fabpot)
  • bug #37841 [VarDumper] Backport handler lock when using VAR_DUMPER_FORMAT (@ogizanagi)
  • bug #37725 [Form] Fix Guess phpdoc return type (@franmomu)
  • bug #37771 Use PHPUnit 9.3 on php 8 (@derrabus)
  • bug #36140 [Validator] Add BC layer for notInRangeMessage when min and max are set (@l-vo)
  • bug #35843 [Validator] Add target guards for Composite nested constraints (@ogizanagi)
  • bug #37803 Fix for issue #37681 (@Rav)
  • bug #37744 [Yaml] Fix for #36624; Allow PHP constant as first key in block (@jnye)
  • bug #37767 [Form] fix mapping errors from unmapped forms (@xabbuh)
  • bug #37731 [Console] Table: support cells with newlines after a cell with colspan >= 2 (@GMTA)
  • bug #37791 Fix redis connect with empty password (@alexander-schranz)
  • bug #37790 Fix deprecated libxml_disable_entity_loader (@fabpot)
  • bug #37763 Fix deprecated libxml_disable_entity_loader (@jderusse)
  • bug #37774 [Console] Make sure we pass a numeric array of arguments to call_user_func_array() (@derrabus)
  • bug #37729 [FrameworkBundle] fail properly when the required service is not defined (@xabbuh)
  • bug #37701 [Serializer] Fix that it will never reach DOMNode (@TNAJanssen)
  • bug #37671 [Cache] fix saving no-expiry items with ArrayAdapter (@philipp-kolesnikov)
  • bug #37102 [WebProfilerBundle] Fix error with custom function and web profiler routing tab (@JakeFr)
  • bug #37560 [Finder] Fix GitIgnore parser when dealing with (sub)directories and take order of lines into account (@Jeroeny)
  • bug #37700 [VarDumper] Improve previous fix on light array coloration (@l-vo)
  • bug #37705 [Mailer] Added the missing reset tag to mailer.logger_message_listener (@vudaltsov)
  • bug #37697 [Messenger] reduce column length for MySQL 5.6 compatibility (@xabbuh)

[PR] https://github.com/symfony/symfony/pull/37998

Changelog (https://github.com/symfony/symfony/compare/v4.4.10...v4.4.11)

  • bug #37590 Allows RedisClusterProxy instance in Lock RedisStore (@jderusse)
  • bug #37583 [Mime] Fix EmailHeaderSame to make use of decoded value (@evertharmeling)
  • bug #37569 [Messenger] Allow same middleware to be used multiple times with different arguments (@HypeMC)
  • bug #37624 [Cache] Connect to RedisCluster with password auth (@mforbak)
  • bug #37635 [Cache] fix catching auth errors (@nicolas-grekas)
  • bug #37628 [Serializer] Support multiple levels of discriminator mapping (@jeroennoten)
  • bug #37572 [FrameworkBundle] set default session.handler alias if handler_id is not provided (@Youssef BENHSSAIEN)
  • bug #37607 Fix checks for phpunit releases on Composer 2 (@colinodell)
  • bug #37594 Use hexadecimal numerals instead of hexadecimals in strings to repres… (@arekzb)
  • bug #37576 [WebProfilerBundle] modified url generation to use absolute urls (@smatyas)
  • bug #36888 [Mailer] Fix mandrill raw http request setting from email/name (@JohJohan)
  • bug #37527 [Mailer] Fix reply-to functionality in the SendgridApiTransport (@jt2k)
  • bug #37581 [Mime] Fix compat with HTTP requests (@fabpot)
  • bug #37580 [Mime] Keep Sender full address when used by non-SMTP transports (@fabpot)
  • bug #37511 [DependencyInjection][Config] Use several placeholder unique prefixes for dynamic placeholder values (@fancyweb)
  • bug #37562 [Cache] Use the default expiry when saving (not when creating) items (@philipp-kolesnikov)
  • bug #37563 Fix DBAL deprecation (@nicolas-grekas)
  • bug #37521 [Form] Fix ChoiceType translation domain (@VincentLanglet)
  • bug #37550 [OptionsResolver] Fix force prepend normalizer (@hason)
  • bug #37520 [Form] silently ignore uninitialized properties when mapping data to forms (@ph-fritsche)
  • bug #37526 [Cache][Config] ensure compatibility with PHP 8 stack traces (@xabbuh)
  • bug #37513 [PhpUnitBridge] ExcludeList usage for PHPUnit 9.4 (@gennadigennadigennadi)
  • bug #37461 [Process] Fix Permission Denied error when writing sf_proc_00 lock files on Windows (@JasonStephensTAMU)
  • bug #37505 [Form] fix handling null as empty data (@xabbuh)
  • bug #37385 [Console] Fixes question input encoding on Windows (@YaFou)
  • bug #37491 [HttpClient] Fix promise behavior in HttplugClient (@brentybh)
  • bug #37469 [Console] always use stty when possible to ask hidden questions (@nicolas-grekas)
  • bug #37486 [HttpClient] fix parsing response headers in CurlResponse (@nicolas-grekas)
  • bug #37484 [HttpClient][CurlHttpClient] Fix http_version option usage (@fancyweb)
  • bug #37447 [Validator] fix validating lazy properties that evaluate to null (@xabbuh)
  • bug #37464 [ErrorHandler] fix throwing from __toString() (@nicolas-grekas)
  • bug #37449 [Translation] Fix caching of parent locales file in translator (@jvasseur)
  • bug #37418 [PhpUnitBridge] Fix compatibility with phpunit 9.3 (@Gennadi Janzen)
  • bug #37441 [DoctrineBridge] work around Connection::ping() deprecation (@nicolas-grekas)
  • bug #37291 [MimeType] Duplicated MimeType due to PHP Bug (@juanmrad)
  • bug #37429 [DI] fix parsing of argument type=binary in xml (@Tobion)
  • bug #37425 [Form] fix guessing form types for DateTime types (@xabbuh)
  • bug #37392 [Validator] fix handling typed properties as constraint options (@xabbuh)
  • bug #37358 Directly use the driverConnection executeUpdate method (@TristanPouliquen)
  • bug #37389 [HttpFondation] Change file extension of "audio/mpeg" from "mpga" to "mp3" (@YaFou)
  • bug #37379 [HttpClient] Support for cURL handler objects (@derrabus)
  • bug #37383 [VarDumper] Support for cURL handler objects (@derrabus)
  • bug #37395 add .body wrapper element (@Nemo64)
  • bug #37400 [HttpClient] unset activity list when creating CurlResponse (@nicolas-grekas)
  • bug #36304 Check whether path is file in DataPart::fromPath() (@freiondrej)
  • bug #37345 [Form] collect all transformation failures (@xabbuh)
  • bug #37362 [SecurityBundle] Drop cache.security_expression_language service if invalid (@chalasr)
  • bug #37353 [DI] disable preload.php on the CLI (@nicolas-grekas)
  • bug #37268 [Messenger] Fix precedence of DSN options for 4.4 (@jderusse)
  • bug #37341 Fix support for PHP8 union types (@nicolas-grekas)
  • bug #37271 [FrameworkBundle] preserve dots in query-string when redirecting (@nicolas-grekas)
  • bug #37340 Fix support for PHP8 union types (@nicolas-grekas)
  • bug #37275 [DI] tighten detection of local dirs to prevent false positives (@nicolas-grekas)
  • bug #37090 [PhpUnitBridge] Streamline ansi/no-ansi of composer according to phpunit --colors option (@kick-the-bucket)
  • bug #36230 [VarDumper] Fix CliDumper coloration on light arrays (@l-vo)
  • bug #37270 [FrameworkBundle] preserve dots in query-string when redirecting (@nicolas-grekas)
  • bug #37319 [HttpClient] Convert CurlHttpClient::handlePush() to instance method (@mpesari)
  • bug #37342 [Cache] fix compat with DBAL v3 (@nicolas-grekas)
  • bug #37286 [Console] Reset question validator attempts only for actual stdin (bis) (@nicolas-grekas)
  • bug #37160 Reset question validator attempts only for actual stdin (@ostrolucky)
  • bug #36975 [PropertyInfo] Make PhpDocExtractor compatible with phpDocumentor v5 (@DerManoMann)

[PR] https://github.com/symfony/symfony/pull/37648

Changelog (https://github.com/symfony/symfony/compare/v4.4.9...v4.4.10)

  • bug #37227 [DependencyInjection][CheckTypeDeclarationsPass] Handle unresolved parameters pointing to environment variables (@fancyweb)
  • bug #37103 [Form] switch the context when validating nested forms (@xabbuh)
  • bug #37182 [HttpKernel] Fix regression where Store does not return response body correctly (@mpdude)
  • bug #37193 [DependencyInjection][CheckTypeDeclarationsPass] Always resolve parameters (@fancyweb)
  • bug #37191 [HttpClient] fix offset computation for data chunks (@nicolas-grekas)
  • bug #37177 [Ldap] fix refreshUser() ignoring extra_fields (@arkste)
  • bug #37181 [Mailer] Remove an internal annot (@fabpot)
  • bug #36913 [FrameworkBundle] fix type annotation on ControllerTrait::addFlash() (@ThomasLandauer)
  • bug #37162 [Mailer] added the reply-to addresses to the API SES transport request. (@ribeiropaulor)
  • bug #37167 [Mime] use fromString when creating a new Address (@fabpot)
  • bug #37169 [Cache] fix forward compatibility with Doctrine DBAL 3 (@xabbuh)
  • bug #37159 [Mailer] Fixed generator bug when creating multiple transports using Transport::fromDsn (@atailouloute)
  • bug #37048 [HttpClient] fix monitoring timeouts when other streams are active (@nicolas-grekas)
  • bug #37085 [Form] properly cascade validation to child forms (@xabbuh)
  • bug #37095 [PhpUnitBridge] Fix undefined index when output of "composer show" cannot be parsed (@nicolas-grekas)
  • bug #37092 [PhpUnitBridge] fix undefined var on version 3.4 (@nicolas-grekas)
  • bug #37065 [HttpClient] Throw JsonException instead of TransportException on empty response in Response::toArray() (@jeroennoten)
  • bug #37077 [WebProfilerBundle] Move ajax clear event listener initialization on loadToolbar (@Bruno BOUTAREL)
  • bug #37049 [Serializer] take into account the context when preserving empty array objects (@xabbuh)

[PR] https://github.com/symfony/symfony/pull/37246

Changelog (https://github.com/symfony/symfony/compare/v4.4.8...v4.4.9)

  • bug #37008 [Security] Fixed AbstractToken::hasUserChanged() (@wouterj)
  • bug #36894 [Validator] never directly validate Existence (Required/Optional) constraints (@xabbuh)
  • bug #37007 [Console] Fix QuestionHelper::disableStty() (@chalasr)
  • bug #36865 [Form] validate subforms in all validation groups (@xabbuh)
  • bug #36907 Fixes sprintf(): Too few arguments in form transformer (@pedrocasado)
  • bug #36868 [Validator] Use Mime component to determine mime type for file validator (@pierredup)
  • bug #37000 Add meaningful message when using ProcessHelper and Process is not installed (@l-vo)
  • bug #36995 [TwigBridge] fix fallback html-to-txt body converter (@nicolas-grekas)
  • bug #36993 [ErrorHandler] fix setting $trace to null in FatalError (@nicolas-grekas)
  • bug #36987 Handle fetch mode deprecation of DBAL 2.11. (@derrabus)
  • bug #36974 [Security] Fixed handling of CSRF logout error (@wouterj)
  • bug #36947 [Mime] Allow email message to have "To", "Cc", or "Bcc" header to be valid (@Ernest Hymel)
  • bug #36914 Parse and render anonymous classes correctly on php 8 (@derrabus)
  • bug #36921 [OptionsResolver][Serializer] Remove calls to deprecated ReflectionParameter::getClass() (@derrabus)
  • bug #36920 [VarDumper] fix PHP 8 support (@nicolas-grekas)
  • bug #36917 [Cache] Accessing undefined constants raises an Error in php8 (@derrabus)
  • bug #36891 Address deprecation of ReflectionType::getClass() (@derrabus)
  • bug #36899 [VarDumper] ReflectionFunction::isDisabled() is deprecated (@derrabus)
  • bug #36905 [Validator] Catch expected ValueError (@derrabus)
  • bug #36915 [DomCrawler] Catch expected ValueError (@derrabus)
  • bug #36908 [Cache][HttpClient] Made method signatures compatible with their corresponding traits (@derrabus)
  • bug #36906 [DomCrawler] Catch expected ValueError (@derrabus)
  • bug #36904 [PropertyAccess] Parse php 8 TypeErrors correctly (@derrabus)
  • bug #36839 [BrowserKit] Raw body with custom Content-Type header (@azhurb)
  • bug #36896 [Config] Removed implicit cast of ReflectionProperty to string (@derrabus)
  • bug #35944 [Security/Core] Fix wrong roles comparison (@thlbaut)
  • bug #36882 [PhpUnitBridge] fix installing under PHP >= 8 (@nicolas-grekas)
  • bug #36833 [HttpKernel] Fix that the Store would not save responses with the X-Content-Digest header present (@mpdude)
  • bug #36867 [PhpUnitBridge] fix bad detection of unsilenced deprecations (@nicolas-grekas)
  • bug #36862 [Security] Unserialize $parentData, if needed, to avoid errors (@rfaivre)
  • bug #36855 [HttpKernel] Fix error logger when stderr is redirected to /dev/null (@fabpot)
  • bug #36838 [HttpKernel] Bring back the debug toolbar (@derrabus)
  • bug #36592 [BrowserKit] Allow Referer set by history to be overridden (@Slamdunk)
  • bug #36823 [HttpClient] fix PHP warning + accept status code >= 600 (@nicolas-grekas)
  • bug #36824 [Security/Core] fix compat of NativePasswordEncoder with pre-PHP74 values of PASSWORD_* consts (@nicolas-grekas)
  • bug #36811 [DependencyInjection] Fix register event listeners compiler pass (@X-Coder264)
  • bug #36789 Change priority of KernelEvents::RESPONSE subscriber (@marcw)
  • bug #36794 [Serializer] fix issue with PHP 8 (@nicolas-grekas)
  • bug #36786 [WebProfiler] Remove 'none' when appending CSP tokens (@ndench)
  • bug #36743 [Yaml] Fix escaped quotes in quoted multi-line string (@ossinkine)
  • bug #36777 [TwigBundle] FormExtension does not have a constructor anymore since sf 4.0 (@Tobion)
  • bug #36716 [Mime] handle passing custom mime types as string (@mcneely)
  • bug #36747 Queue name is a required parameter (@theravel)
  • bug #36751 [Mime] fix bad method call on EmailAddressContains (@Kocal)
  • bug #36696 [Console] don't check tty on stdin, it breaks with "data lost during stream conversion" (@nicolas-grekas)
  • bug #36569 [PhpUnitBridge] Mark parent class also covered in CoverageListener (@lyrixx)
  • bug #36690 [Yaml] prevent notice for invalid octal numbers on PHP 7.4 (@xabbuh)
  • bug #36590 [Console] Default hidden question to 1 attempt for non-tty session (@ostrolucky)
  • bug #36497 [Filesystem] Handle paths on different drives (@crishoj)
  • bug #36678 [WebProfiler] Do not add src-elem CSP directives if they do not exist (@ndench)
  • bug #36501 [DX] Show the ParseException message in all YAML file loaders (@fancyweb)
  • bug #36683 [Yaml] fix parse error when unindented collections contain a comment (@wdiesveld)
  • bug #36672 [Validator] Skip validation when email is an empty object (@acrobat)
  • bug #36673 [PhpUnitBridge] fix PHP 5.3 compat again (@nicolas-grekas)
  • bug #36505 [Translation] Fix for translation:update command updating ICU messages (@artemoliynyk)
  • bug #36627 [Validator] fix lazy property usage. (@bendavies)
  • bug #36601 [Serializer] do not transform empty \Traversable to Array (@soyuka)
  • bug #36606 [Cache] Fixed not supported Redis eviction policies (@SerheyDolgushev)
  • bug #36625 [PhpUnitBridge] fix compat with PHP 5.3 (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/37017

Changelog (https://github.com/symfony/symfony/compare/v4.4.7...v4.4.8)

  • bug #36536 [Cache] Allow invalidateTags calls to be traced by data collector (@l-vo)
  • bug #36566 [PhpUnitBridge] Use COMPOSER_BINARY env var if available (@fancyweb)
  • bug #36560 [YAML] escape DEL(\x7f) (@sdkawata)
  • bug #36539 [PhpUnitBridge] fix compatibility with phpunit 9 (@garak)
  • bug #36555 [Cache] skip APCu in chains when the backend is disabled (@nicolas-grekas)
  • bug #36523 [Form] apply automatically step=1 for datetime-local input (@ottaviano)
  • bug #36519 [FrameworkBundle] debug:autowiring: Fix wrong display when using class_alias (@weaverryan)
  • bug #36454 [DependencyInjection][ServiceSubscriber] Support late aliases (@fancyweb)
  • bug #36498 [Security/Core] fix escape for username in LdapBindAuthenticationProvider.php (@stoccc)
  • bug #36506 [FrameworkBundle] Fix session.attribute_bag service definition (@fancyweb)
  • bug #36500 [Routing][PrefixTrait] Add the _locale requirement (@fancyweb)
  • bug #36457 [Cache] CacheItem with tag is never a hit after expired (@alexander-schranz, @nicolas-grekas)
  • bug #36490 [HttpFoundation] workaround PHP bug in the session module (@nicolas-grekas)
  • bug #36483 [SecurityBundle] fix accepting env vars in remember-me configurations (@zek)
  • bug #36343 [Form] Fixed handling groups sequence validation (@HeahDude)
  • bug #36460 [Cache] Avoid memory leak in TraceableAdapter::reset() (@lyrixx)
  • bug #36467 Mailer from sender fixes (@fabpot)
  • bug #36408 [PhpUnitBridge] add PolyfillTestCaseTrait::expectExceptionMessageMatches to provide FC with recent phpunit versions (@soyuka)
  • bug #36447 Remove return type for Twig function workflow_metadata() (@gisostallenberg)
  • bug #36449 [Messenger] Make sure redis transports are initialized correctly (@Seldaek)
  • bug #36411 [Form] RepeatedType should always have inner types mapped (@biozshock)
  • bug #36441 [DI] fix loading defaults when using the PHP-DSL (@nicolas-grekas)
  • bug #36434 [HttpKernel] silence E_NOTICE triggered since PHP 7.4 (@xabbuh)
  • bug #36365 [Validator] Fixed default group for nested composite constraints (@HeahDude)
  • bug #36422 [HttpClient] fix HTTP/2 support on non-SSL connections - CurlHttpClient only (@nicolas-grekas)
  • bug #36417 Force ping after transport exception (@oesteve)
  • bug #35591 [Validator] do not merge constraints within interfaces (@greedyivan)
  • bug #36377 [HttpClient] Fix scoped client without query option configuration (@X-Coder264)
  • bug #36387 [DI] fix detecting short service syntax in yaml (@nicolas-grekas)
  • bug #36392 [DI] add missing property declarations in InlineServiceConfigurator (@nicolas-grekas)
  • bug #36400 Allowing empty secrets to be set (@weaverryan)
  • bug #36380 [Process] Fixed input/output error on PHP 7.4 (@mbardelmeijer)
  • bug #36376 [Workflow] Use a strict comparison when retrieving raw marking in MarkingStore (@lyrixx)
  • bug #36375 [Workflow] Use a strict comparison when retrieving raw marking in MarkingStore (@lyrixx)
  • bug #36305 [PropertyInfo][ReflectionExtractor] Check the array mutator prefixes last when the property is singular (@fancyweb)
  • bug #35656 [HttpFoundation] Fixed session migration with custom cookie lifetime (@Guite)
  • bug #36342 [HttpKernel][FrameworkBundle] fix compat with Debug component (@nicolas-grekas)
  • bug #36315 [WebProfilerBundle] Support for Content Security Policy style-src-elem and script-src-elem in WebProfiler (@ampaze)
  • bug #36286 [Validator] Allow URL-encoded special characters in basic auth part of URLs (@cweiske)
  • bug #36335 [Security] Track session usage whenever a new token is set (@wouterj)
  • bug #36332 [Serializer] Fix unitialized properties (from PHP 7.4.2) when serializing context for the cache key (@alanpoulain)
  • bug #36337 [MonologBridge] Fix $level type (@fancyweb)
  • bug #36223 [Security][Http][SwitchUserListener] Ignore all non existent username protection errors (@fancyweb)
  • bug #36239 [HttpKernel][LoggerDataCollector] Prevent keys collisions in the sanitized logs processing (@fancyweb)
  • bug #36245 [Validator] Fixed calling getters before resolving groups (@HeahDude)
  • bug #36265 Fix the reporting of deprecations in twig:lint (@stof)
  • bug #36283 [Security] forward multiple attributes voting flag (@xabbuh)

[PR] https://github.com/symfony/symfony/pull/36614

Changelog (https://github.com/symfony/symfony/compare/v4.4.6...v4.4.7)

  • security #cve-2020-5255 [HttpFoundation] Do not set the default Content-Type based on the Accept header (@yceruto)
  • security #cve-2020-5275 [Security] Fix access_control behavior with unanimous decision strategy (@chalasr)
  • bug #36262 [DI] fix generating TypedReference from PriorityTaggedServiceTrait (@nicolas-grekas)
  • bug #36252 [Security/Http] Allow setting cookie security settings for delete_cookies (@wouterj)
  • bug #36261 [FrameworkBundle] revert to legacy wiring of the session when circular refs are detected (@nicolas-grekas)
  • bug #36259 [DomCrawler] Fix BC break in assertions breaking Panther (@dunglas)
  • bug #36181 [BrowserKit] fixed missing post request parameters in file uploads (@codebay)
  • bug #36216 [Validator] Assert Valid with many groups (@phucwan91)
  • bug #36222 [Console] Fix OutputStream for PHP 7.4 (@guillbdx)

[PR] https://github.com/symfony/symfony/pull/36268
[SECURITY] Security release

Changelog (https://github.com/symfony/symfony/compare/v4.4.5...v4.4.6)

  • bug #36169 [HttpKernel] fix locking for PHP 7.4+ (@nicolas-grekas)
  • bug #36175 [Security/Http] Remember me: allow to set the samesite cookie flag (@dunglas)
  • bug #36173 [Http Foundation] Fix clear cookie samesite (@guillbdx)
  • bug #36176 [Security] Check if firewall is stateless before checking for session/previous session (@koenreiniers)
  • bug #36149 [Form] Support customized intl php.ini settings (@jorrit)
  • bug #36172 [Debug] fix for PHP 7.3.16+/7.4.4+ (@nicolas-grekas)
  • bug #36151 [Security] Fixed hardcoded value of SODIUM_CRYPTO_PWHASH_MEMLIMIT_INTERACTIVE (@lyrixx)
  • bug #36141 Prevent warning in proc_open() (@BenMorel)
  • bug #36143 [FrameworkBundle] Fix Router Cache (@guillbdx)
  • bug #36103 [DI] fix preloading script generation (@nicolas-grekas)
  • bug #36118 [Security/Http] don't require the session to be started when tracking its id (@nicolas-grekas)
  • bug #36108 [DI] Fix CheckTypeDeclarationPass (@guillbdx)
  • bug #36121 [VarDumper] fix side-effect by not using mt_rand() (@nicolas-grekas)
  • bug #36073 [PropertyAccess][DX] Improved errors when reading uninitialized properties (@HeahDude)
  • bug #36063 [FrameworkBundle] start session on flashbag injection (@William Arslett)
  • bug #36031 [Console] Fallback to default answers when unable to read input (@ostrolucky)
  • bug #36083 [DI][Form] Fixed test suite (TimeType changes & unresolved merge conflict) (@wouterj)
  • bug #36026 [Mime] Fix boundary header (@guillbdx)
  • bug #36020 [Form] ignore microseconds submitted by Edge (@xabbuh)
  • bug #36038 [HttpClient] disable debug log with curl 7.64.0 (@nicolas-grekas)
  • bug #36041 fix import from config file using type: glob (@Tobion)
  • bug #35987 [DoctrineBridge][DoctrineExtractor] Fix wrong guessed type for "json" type (@fancyweb)
  • bug #35949 [DI] Fix container lint command when a synthetic service is used in an expression (@HypeMC)
  • bug #36023 [HttpClient] fix requests to hosts that idn_to_ascii() cannot handle (@nicolas-grekas)
  • bug #35938 [Form] Handle false as empty value on expanded choices (@fancyweb)
  • bug #36030 [SecurityBundle] Minor fix in LDAP config tree builder (@HeahDude)
  • bug #35993 Remove int return type from FlattenException::getCode (@wucdbm)
  • bug #36004 [Yaml] fix dumping strings containing CRs (@xabbuh)
  • bug #35982 [DI] Fix XmlFileLoader bad error message (@przemyslaw-bogusz)
  • bug #35957 [DI] ignore extra tags added by autoconfiguration in PriorityTaggedServiceTrait (@nicolas-grekas)
  • bug #35937 Revert "bug symfony#28179 [DomCrawler] Skip disabled fields processing in Form" (@dmaicher)
  • bug #35928 [Routing] Prevent localized routes _locale default & requirement from being overridden (@fancyweb)
  • bug #35912 [FrameworkBundle] register only existing transport factories (@xabbuh)
  • bug #35899 [DomCrawler] prevent deprecation being triggered from assertion (@xabbuh)
  • bug #35910 [SecurityBundle] Minor fixes in configuration tree builder (@HeahDude)

[PR] https://github.com/symfony/symfony/pull/36232

Changelog (https://github.com/symfony/symfony/compare/v4.4.4...v4.4.5)

  • bug #35781 [Form] NumberToLocalizedStringTransformer return int if scale = 0 (@VincentLanglet)
  • bug #35846 [Serializer] prevent method calls on null values (@xabbuh)
  • bug #35897 [FrameworkBundle] add missing Messenger options to XML schema definition (@xabbuh)
  • bug #35870 [ErrorHandler] fix parsing static return type on interface method annotation (@alekitto)
  • bug #35839 [Security] Allow switching to another user when already switched (@chalasr)
  • bug #35851 [DoctrineBridge] Use new Types::* constants and support new json types (@fancyweb)
  • bug #35716 [PhpUnitBridge] Fix compatibility to PHPUnit 9 (@Benjamin)
  • bug #35803 [Cache] Fix versioned namespace atomic clears (@trvrnrth)
  • bug #35817 [DoctrineBridge] Use new Types::* constants and support new json type (@fancyweb)
  • bug #35832 [Debug][ErrorHandler] improved deprecation notices for methods new args and return type (@HeahDude)
  • bug #35827 [BrowserKit] Nested file array prevents uploading file (@afilina)
  • bug #35707 [ExpressionLanguage] Fixed collisions of character operators with object properties (@Andrej-in-ua)
  • bug #35794 [DoctrineBridge][DoctrineExtractor] Fix indexBy with custom and some core types (@fancyweb)
  • bug #35787 [PhpUnitBridge] Use trait instead of extending deprecated class (@marcello-moenkemeyer)
  • bug #35792 [Security] Prevent TypeError in case RememberMetoken has no attached user (@nikophil)
  • bug #35735 [Routing] Add locale requirement for localized routes (@mtarld)
  • bug #35772 [Config] don't throw on missing excluded paths (@nicolas-grekas)
  • bug #35774 [Ldap] force default network timeout (@nicolas-grekas)
  • bug #35702 [VarDumper] fixed DateCaster not displaying additional fields (@Makdessi Alex)
  • bug #35722 [HttpKernel] Set previous exception when rethrown from controller resolver (@danut007ro)
  • bug #35714 [HttpClient] Correctly remove trace level options for HttpCache (@aschempp)
  • bug #35718 [HttpKernel] fix registering DebugHandlersListener regardless of the PHP_SAPI (@nicolas-grekas)
  • bug #35728 Add missing autoload calls (@greg0ire)
  • bug #35693 [Finder] Fix unix root dir issue (@chr-hertel)
  • bug #35709 [HttpFoundation] fix not sending Content-Type header for 204 responses (@Tobion)
  • bug #35710 [ErrorHandler] silence warning when zend.assertions=-1 (@nicolas-grekas)
  • bug #35676 [Console] Handle zero row count in appendRow() for Table (@Adam Prickett)
  • bug #35696 [Console] Don't load same-namespace alternatives on exact match (@chalasr)
  • bug #35674 [HttpClient] fix getting response content after its destructor throwed an HttpExceptionInterface (@nicolas-grekas)
  • bug #35672 [HttpClient] fix HttpClientDataCollector when handling canceled responses (@thematchless)
  • bug #35641 [Process] throw when PhpProcess::fromShellCommandLine() is used (@Guikingone)
  • bug #35645 [ErrorHandler] Never throw on warnings triggered by assert() and set assert.exception=1 in Debug::enable() (@nicolas-grekas)
  • bug #35633 [Mailer] Do not ping the SMTP server before sending every message (@micheh)
  • bug #33897 [Console] Consider STDIN interactive (@ostrolucky)
  • bug #35605 [HttpFoundation][FrameworkBundle] fix support for samesite in session cookies (@fabpot)
  • bug #35609 [DoctrineBridge] Fixed submitting ids with query limit or offset (@HeahDude)
  • bug #35597 [PHPunit bridge] Provide current file as file path (@greg0ire)
  • bug #33960 [DI] Unknown env prefix not recognized as such (@ro0NL)
  • bug #35342 [DI] Fix support for multiple tags for locators and iterators (@Alexandre Parent)
  • bug #33820 [PhpUnitBridge] Fix some errors when using serialized deprecations (@l-vo)
  • bug #35553 Fix HTTP client config handling (@julienfalque)
  • bug #35588 [ErrorHandler] Escape variable in Exception template (@jderusse)
  • bug #35583 Add missing use statements (@fabpot)
  • bug #35582 Missing use statement 4.4 (@fabpot)
  • bug #34123 [Form] Fix handling of empty_data's \Closure value in Date/Time form types (@yceruto)
  • bug #35537 [Config][XmlReferenceDumper] Prevent potential \TypeError (@fancyweb)
  • bug #35227 [Mailer] Fix broken mandrill http send for recipients with names (@vilius-g)
  • bug #35430 [Translation] prefer intl domain when adding messages to catalogue (@Guite)
  • bug #35497 Fail on empty password verification (without warning on any implementation) (@Stefan Kruppa)
  • bug #35546 [Validator] check for __get method existence if property is uninitialized (@alekitto)
  • bug #35332 [Yaml][Inline] Fail properly on empty object tag and empty const tag (@fancyweb)
  • bug #35489 [PhpUnitBridge] Fix running skipped tests expecting only deprecations (@chalasr)
  • bug #35161 [FrameworkBundle] Check non-null type for numeric type (@Arman-Hosseini)
  • bug #34059 [DomCrawler] Skip disabled fields processing in Form (@sbogx)
  • bug #34114 [Console] SymonfyStyle - Check value isset to avoid PHP notice (@leevigraham)
  • bug #35557 [Config] dont catch instances of Error (@nicolas-grekas)
  • bug #35562 [HttpClient] fix HttpClientDataCollector when handling canceled responses (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/35905

Changelog (since https://github.com/symfony/symfony/compare/v4.4.3...v4.4.4)

  • bug #35530 [HttpClient] Fix regex bearer (@noniagriconomie)
  • bug #35532 [Validator] fix access to uninitialized property when getting value (@greedyivan)
  • bug #35486 [Translator] Default value for 'sort' option in translation:update should be 'asc' (@versgui)
  • bug #35305 [HttpKernel] Fix stale-if-error behavior, add tests (@mpdude)
  • bug #34808 [PhpUnitBridge] Properly handle phpunit arguments for configuration file (@biozshock)
  • bug #35517 [Intl] Provide more locale translations (@ro0NL)
  • bug #35518 [Mailer] Fix STARTTLS support for Postmark and Mandrill (@fabpot)
  • bug #35480 [Messenger] Check for all serialization exceptions during message dec… (@Patrick Berenschot)
  • bug #35502 [Messenger] Fix bug when using single route with XML config (@Nyholm)
  • bug #35438 [SecurityBundle] fix ldap_bind service arguments (@Ioni14)
  • bug #35429 [DI] CheckTypeDeclarationsPass now checks if value is type of parameter type (@pfazzi)
  • bug #35464 [ErrorHandler] Add debug argument to decide whether debug page is shown or not (@yceruto)
  • bug #35423 Fixes a runtime error when accessing the cache panel (@DamienHarper)
  • bug #35428 [Cache] fix checking for igbinary availability (@nicolas-grekas)
  • bug #35424 [HttpKernel] Check if lock can be released (@sjadema)

[PR] https://github.com/symfony/symfony/pull/35540

Changelog (since https://github.com/symfony/symfony/compare/v4.3.10...v4.3.11)

  • bug #35530 [HttpClient] Fix regex bearer (@noniagriconomie)
  • bug #35532 [Validator] fix access to uninitialized property when getting value (@greedyivan)
  • bug #35305 [HttpKernel] Fix stale-if-error behavior, add tests (@mpdude)
  • bug #34808 [PhpUnitBridge] Properly handle phpunit arguments for configuration file (@biozshock)
  • bug #35480 [Messenger] Check for all serialization exceptions during message dec… (@Patrick Berenschot)
  • bug #35428 [Cache] fix checking for igbinary availability (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/35539
[EOM] End of maintenance release for branch 4.3

Changelog (since https://github.com/symfony/symfony/compare/v4.4.2...v4.4.3)

  • bug #35364 [Yaml] Throw on unquoted exclamation mark (@fancyweb)
  • bug #35065 [Security] Use supportsClass in addition to UnsupportedUserException (@linaori)
  • bug #35351 Revert #34797 "Fixed translations file dumper behavior" and fix #34713 (@yceruto)
  • bug #35355 [DI] Fix EnvVar not loaded when Loader requires an env var (@jderusse)
  • bug #35343 [Security] Fix RememberMe with null password (@jderusse)
  • bug #34223 [DI] Suggest typed argument when binding fails with untyped argument (@gudfar)
  • bug #35323 [FrameworkBundle] Set booted flag to false when test kernel is unset (@thiagocordeiro)
  • bug #35324 [HttpClient] Fix strict parsing of response status codes (@Armando-Walmeric)
  • bug #35318 [Yaml] fix PHP const mapping keys using the inline notation (@xabbuh)
  • bug #35306 [FrameworkBundle] Make sure one can use fragments.hinclude_default_template (@Nyholm)
  • bug #35304 [HttpKernel] Fix that no-cache MUST revalidate with the origin (@mpdude)
  • bug #35299 Avoid stale-if-error in FrameworkBundle's HttpCache if kernel.debug = true (@mpdude)
  • bug #35240 [SecurityBundle] Fix collecting traceable listeners info on lazy firewalls (@chalasr)
  • bug #35151 [DI] deferred exceptions in ResolveParameterPlaceHoldersPass (@Islam93)
  • bug #35290 [Filesystem][FilesystemCommonTrait] Use a dedicated directory when there are no namespace (@fancyweb)
  • bug #35099 [FrameworkBundle] Do not throw exception on value generate key (@jderusse)
  • bug #35278 [EventDispatcher] expand listener in place (@xabbuh)
  • bug #35269 [HttpKernel][FileLocator] Fix deprecation message (@fancyweb)
  • bug #35254 [PHPUnit-Bridge] Fail-fast in simple-phpunit if one of the passthru() commands fails (@mpdude)
  • bug #35261 [Routing] Fix using a custom matcher & generator dumper class (@fancyweb)
  • bug #34643 [Dotenv] Fixed infinite loop with missing quote followed by quoted value (@naitsirch)
  • bug #35239 [Security\Http] Prevent canceled remember-me cookie from being accepted (@chalasr)
  • bug #35267 [Debug] fix ClassNotFoundFatalErrorHandler (@nicolas-grekas)
  • bug #35252 [Serializer] Fix cache in MetadataAwareNameConverter (@bastnic)
  • bug #35200 [TwigBridge] do not render preferred choices as selected (@xabbuh)
  • bug #35243 [HttpKernel] release lock explicitly (@nicolas-grekas)
  • bug #35193 [TwigBridge] button_widget now has its title attr translated even if its label = null or false (@stephen-lewis)
  • bug #35219 [PhpUnitBridge] When using phpenv + phpenv-composer plugin, composer executable is wrapped into a bash script (@oleg-andreyev)
  • bug #35150 [Messenger] Added check if json_encode succeeded (@toooni)
  • bug #35137 [Messenger] Added check if json_encode succeeded (@toooni)
  • bug #35170 [FrameworkBundle][TranslationUpdateCommand] Do not output positive feedback on stderr (@fancyweb)
  • bug #35245 [HttpClient] fix exception in case of PSR17 discovery failure (@nicolas-grekas)
  • bug #35244 [Cache] fix processing chain adapter based cache pool (@xabbuh)
  • bug #35247 [FrameworkBundle][ContainerLintCommand] Only skip .errored. services (@fancyweb)
  • bug #35225 [DependencyInjection] Handle ServiceClosureArgument for callable in container linting (@shieldo)
  • bug #35223 [HttpClient] Don't read from the network faster than the CPU can deal with (@nicolas-grekas)
  • bug #35214 [DI] DecoratorServicePass should keep container.service_locator on the decorated definition (@malarzm)
  • bug #35209 [HttpClient] fix support for non-blocking resource streams (@nicolas-grekas)
  • bug #35210 [HttpClient] NativeHttpClient should not send >1.1 protocol version (@nicolas-grekas)
  • bug #35162 [Mailer] Make sure you can pass custom headers to Mailgun (@Nyholm)
  • bug #33672 [Mailer] Remove line breaks in email attachment content (@Stuart Fyfe)
  • bug #35101 [Routing] Fix i18n routing when the url contains the locale (@fancyweb)
  • bug #35124 [TwigBridge][Form] Added missing help messages in form themes (@cmen)
  • bug #35195 [HttpClient] fix casting responses to PHP streams (@nicolas-grekas)
  • bug #35168 [HttpClient] fix capturing SSL certificates with NativeHttpClient (@nicolas-grekas)
  • bug #35134 [PropertyInfo] Fix BC issue in phpDoc Reflection library (@jaapio)
  • bug #35184 [Mailer] Payload sent to Sendgrid doesn't include names (@versgui)
  • bug #35173 [Mailer][MailchimpBridge] Fix missing attachments when sending via Mandrill API (@vilius-g)
  • bug #35172 [Mailer][MailchimpBridge] Fix incorrect sender address when sender has name (@vilius-g)
  • bug #35125 [Translator] fix performance issue in MessageCatalogue and catalogue operations (@ArtemBrovko)
  • bug #35120 [HttpClient] fix scheduling pending NativeResponse (@nicolas-grekas)
  • bug #35117 [Cache] do not overwrite variable value (@xabbuh)
  • bug #35113 [VarDumper] Fix "Undefined index: argv" when using CliContextProvider (@xepozz)
  • bug #34673 Migrate server:log command away from WebServerBundle (@jderusse)
  • bug #35103 [Translation] Use locale_parse for computing fallback locales (@alanpoulain)
  • bug #35060 [Security] Fix missing defaults for auto-migrating encoders (@chalasr)
  • bug #35067 [DependencyInjection][CheckTypeDeclarationsPass] Handle \Closure for callable (@fancyweb)
  • bug #35094 [Console] Fix filtering out identical alternatives when there is a command loader (@fancyweb)

[PR] https://github.com/symfony/symfony/pull/35413

Changelog (since https://github.com/symfony/symfony/compare/v4.3.9...v4.3.10)

  • bug #35364 [Yaml] Throw on unquoted exclamation mark (@fancyweb)
  • bug #35065 [Security] Use supportsClass in addition to UnsupportedUserException (@linaori)
  • bug #35343 [Security] Fix RememberMe with null password (@jderusse)
  • bug #34223 [DI] Suggest typed argument when binding fails with untyped argument (@gudfar)
  • bug #35324 [HttpClient] Fix strict parsing of response status codes (@Armando-Walmeric)
  • bug #35318 [Yaml] fix PHP const mapping keys using the inline notation (@xabbuh)
  • bug #35304 [HttpKernel] Fix that no-cache MUST revalidate with the origin (@mpdude)
  • bug #35299 Avoid stale-if-error in FrameworkBundle's HttpCache if kernel.debug = true (@mpdude)
  • bug #35151 [DI] deferred exceptions in ResolveParameterPlaceHoldersPass (@Islam93)
  • bug #35278 [EventDispatcher] expand listener in place (@xabbuh)
  • bug #35254 [PHPUnit-Bridge] Fail-fast in simple-phpunit if one of the passthru() commands fails (@mpdude)
  • bug #35261 [Routing] Fix using a custom matcher & generator dumper class (@fancyweb)
  • bug #34643 [Dotenv] Fixed infinite loop with missing quote followed by quoted value (@naitsirch)
  • bug #35239 [Security\Http] Prevent canceled remember-me cookie from being accepted (@chalasr)
  • bug #35267 [Debug] fix ClassNotFoundFatalErrorHandler (@nicolas-grekas)
  • bug #35193 [TwigBridge] button_widget now has its title attr translated even if its label = null or false (@stephen-lewis)
  • bug #35219 [PhpUnitBridge] When using phpenv + phpenv-composer plugin, composer executable is wrapped into a bash script (@oleg-andreyev)
  • bug #35150 [Messenger] Added check if json_encode succeeded (@toooni)
  • bug #35170 [FrameworkBundle][TranslationUpdateCommand] Do not output positive feedback on stderr (@fancyweb)
  • bug #35223 [HttpClient] Don't read from the network faster than the CPU can deal with (@nicolas-grekas)
  • bug #35214 [DI] DecoratorServicePass should keep container.service_locator on the decorated definition (@malarzm)
  • bug #35210 [HttpClient] NativeHttpClient should not send >1.1 protocol version (@nicolas-grekas)
  • bug #33672 [Mailer] Remove line breaks in email attachment content (@Stuart Fyfe)
  • bug #35101 [Routing] Fix i18n routing when the url contains the locale (@fancyweb)
  • bug #35124 [TwigBridge][Form] Added missing help messages in form themes (@cmen)
  • bug #35168 [HttpClient] fix capturing SSL certificates with NativeHttpClient (@nicolas-grekas)
  • bug #35134 [PropertyInfo] Fix BC issue in phpDoc Reflection library (@jaapio)
  • bug #35173 [Mailer][MailchimpBridge] Fix missing attachments when sending via Mandrill API (@vilius-g)
  • bug #35172 [Mailer][MailchimpBridge] Fix incorrect sender address when sender has name (@vilius-g)
  • bug #35125 [Translator] fix performance issue in MessageCatalogue and catalogue operations (@ArtemBrovko)
  • bug #35120 [HttpClient] fix scheduling pending NativeResponse (@nicolas-grekas)
  • bug #35117 [Cache] do not overwrite variable value (@xabbuh)
  • bug #35113 [VarDumper] Fix "Undefined index: argv" when using CliContextProvider (@xepozz)
  • bug #35103 [Translation] Use locale_parse for computing fallback locales (@alanpoulain)
  • bug #35094 [Console] Fix filtering out identical alternatives when there is a command loader (@fancyweb)
  • bug #35039 [DI] skip looking for config class when the extension class is anonymous (@nicolas-grekas)
  • bug #35049 [ProxyManager] fix generating proxies for root-namespaced classes (@nicolas-grekas)
  • bug #35022 [Dotenv] FIX missing getenv (@mccullagh)
  • bug #35025 [HttpClient][Psr18Client] Remove Psr18ExceptionTrait (@fancyweb)
  • bug #35014 [HttpClient] make pushed responses retry-able (@nicolas-grekas)
  • bug #35010 [VarDumper] ignore failing __debugInfo() (@nicolas-grekas)
  • bug #34998 [DI] fix auto-binding service providers to their service subscribers (@nicolas-grekas)
  • bug #33670 [DI] Service locators can't be decorated (@malarzm)
  • bug #35000 [Console][SymfonyQuestionHelper] Handle multibytes question choices keys and custom prompt (@fancyweb)
  • bug #34996 Fix displaying anonymous classes on PHP 7.4 (@nicolas-grekas)
  • bug #29839 [Validator] fix comparisons with null values at property paths (@xabbuh)
  • bug #34900 [DoctrineBridge] Fixed submitting invalid ids when using queries with limit (@HeahDude)
  • bug #34791 [Serializer] Skip uninitialized (PHP 7.4) properties in PropertyNormalizer and ObjectNormalizer (@vudaltsov)
  • bug #34956 [Messenger][AMQP] Use delivery_mode=2 by default (@lyrixx)
  • bug #34915 [FrameworkBundle] Fix invalid Windows path normalization in TemplateNameParser (@mvorisek)
  • bug #34981 stop using deprecated Doctrine persistence classes (@xabbuh)
  • bug #34904 [Validator][ConstraintValidator] Safe fail on invalid timezones (@fancyweb)
  • bug #34955 Require doctrine/persistence ^1.3 (@nicolas-grekas)
  • bug #34923 [DI] Fix support for immutable setters in CallTrait (@Lctrs)
  • bug #34918 [Translation] fix memoryleak in PhpFileLoader (@nicolas-grekas)
  • bug #34920 [Routing] fix memoryleak when loading compiled routes (@nicolas-grekas)
  • bug #34787 [Cache] Propagate expiry when syncing items in ChainAdapter (@trvrnrth)
  • bug #34896 [Cache] fix memory leak when using PhpFilesAdapter (@nicolas-grekas)
  • bug #34438 [HttpFoundation] Use Cache-Control: must-revalidate only if explicit lifetime has been given (@mpdude)
  • bug #34449 [Yaml] Implement multiline string as scalar block for tagged values (@natepage)
  • bug #34601 [MonologBridge] Fix debug processor datetime type (@mRoca)
  • bug #34842 [ExpressionLanguage] Process division by zero (@tigr1991)
  • bug #34902 [PropertyAccess] forward caught exception (@xabbuh)
  • bug #34888 [TwigBundle] add tags before processing them (@xabbuh)
  • bug #34762 [Config] never try loading failed classes twice with ClassExistenceResource (@nicolas-grekas)
  • bug #34839 [Cache] fix memory leak when using PhpArrayAdapter (@nicolas-grekas)
  • bug #34812 [Yaml] fix parsing negative octal numbers (@xabbuh)
  • bug #34854 [Messenger] gracefully handle missing event dispatchers (@xabbuh)
  • bug #34788 [SecurityBundle] Properly escape regex in AddSessionDomainConstraintPass (@fancyweb)
  • bug #34755 [FrameworkBundle] resolve service locators in debug:* commands (@nicolas-grekas)
  • bug #34832 [Validator] Allow underscore character "_" in URL username and password (@romainneutron)
  • bug #34776 [DI] fix resolving bindings for named TypedReference (@nicolas-grekas)
  • bug #34738 [SecurityBundle] Passwords are not encoded when algorithm set to "true" (@nieuwenhuisen)
  • bug #34779 [Security] do not validate passwords when the hash is null (@xabbuh)
  • bug #34757 [DI] Fix making the container path-independent when the app is in /app (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/35412

Changelog (since https://github.com/symfony/symfony/compare/v4.4.1...v4.4.2)

  • bug #35051 [DependencyInjection] Fix binding tagged services to containers (@nicolas-grekas)
  • bug #35039 [DI] skip looking for config class when the extension class is anonymous (@nicolas-grekas)
  • bug #35049 [ProxyManager] fix generating proxies for root-namespaced classes (@nicolas-grekas)
  • bug #35022 [Dotenv] FIX missing getenv (@mccullagh)
  • bug #35023 [HttpKernel] ignore failures generated by opcache.restrict_api (@nicolas-grekas)
  • bug #35024 [HttpFoundation] fix pdo session handler for sqlsrv (@azjezz)
  • bug #35025 [HttpClient][Psr18Client] Remove Psr18ExceptionTrait (@fancyweb)
  • bug #35015 [Config] fix perf of glob discovery when GLOB_BRACE is not available (@nicolas-grekas)
  • bug #35014 [HttpClient] make pushed responses retry-able (@nicolas-grekas)
  • bug #35010 [VarDumper] ignore failing __debugInfo() (@nicolas-grekas)
  • bug #34998 [DI] fix auto-binding service providers to their service subscribers (@nicolas-grekas)
  • bug #34954 [Mailer] Fixed undefined index when sending via Mandrill API (@wulff)
  • bug #33670 [DI] Service locators can't be decorated (@malarzm)
  • bug #35000 [Console][SymfonyQuestionHelper] Handle multibytes question choices keys and custom prompt (@fancyweb)
  • bug #35005 [HttpClient] force HTTP/1.1 when NTLM auth is used (@nicolas-grekas)
  • bug #34707 [Validation][FrameworkBundle] Allow EnableAutoMapping to work without auto-mapping namespaces (@ogizanagi)
  • bug #34996 Fix displaying anonymous classes on PHP 7.4 (@nicolas-grekas)
  • bug #29839 [Validator] fix comparisons with null values at property paths (@xabbuh)
  • bug #34900 [DoctrineBridge] Fixed submitting invalid ids when using queries with limit (@HeahDude)
  • bug #34791 [Serializer] Skip uninitialized (PHP 7.4) properties in PropertyNormalizer and ObjectNormalizer (@vudaltsov)
  • bug #34956 [Messenger][AMQP] Use delivery_mode=2 by default (@lyrixx)
  • bug #34915 [FrameworkBundle] Fix invalid Windows path normalization in TemplateNameParser (@mvorisek)
  • bug #34981 stop using deprecated Doctrine persistence classes (@xabbuh)
  • bug #34904 [Validator][ConstraintValidator] Safe fail on invalid timezones (@fancyweb)
  • bug #34935 [FrameworkBundle][DependencyInjection] Skip removed ids in the lint container command and its associated pass (@fancyweb)
  • bug #34957 [Security] Revert "AbstractAuthenticationListener.php error instead info" (@larzuk91)
  • bug #34922 [FrameworkBundle][Secrets] Hook configured local dotenv file (@fancyweb)
  • bug #34967 [HttpFoundation] fix redis multi host dsn not recognized (@Jan Christoph Beyer)
  • bug #34963 [Lock] fix constructor argument type declaration (@xabbuh)
  • bug #34955 Require doctrine/persistence ^1.3 (@nicolas-grekas)
  • bug #34923 [DI] Fix support for immutable setters in CallTrait (@Lctrs)
  • bug #34878 [TwigBundle] fix broken FilesystemLoader::exists() with Twig 3 (@dpesch)
  • bug #34921 [HttpFoundation] Removed "Content-Type" from the preferred format guessing mechanism (@yceruto)
  • bug #34886 [HttpKernel] fix triggering deprecation in file locator (@xabbuh)
  • bug #34918 [Translation] fix memoryleak in PhpFileLoader (@nicolas-grekas)
  • bug #34920 [Routing] fix memoryleak when loading compiled routes (@nicolas-grekas)
  • bug #34787 [Cache] Propagate expiry when syncing items in ChainAdapter (@trvrnrth)
  • bug #34694 [Validator] Fix auto-mapping constraints should not be validated (@ogizanagi)
  • bug #34848 [Process] change the syntax of portable command lines (@nicolas-grekas)
  • bug #34862 [FrameworkBundle][ContainerLintCommand] Reinitialize bundles when the container is reprepared (@fancyweb)
  • bug #34896 [Cache] fix memory leak when using PhpFilesAdapter (@nicolas-grekas)
  • bug #34438 [HttpFoundation] Use Cache-Control: must-revalidate only if explicit lifetime has been given (@mpdude)
  • bug #34449 [Yaml] Implement multiline string as scalar block for tagged values (@natepage)
  • bug #34601 [MonologBridge] Fix debug processor datetime type (@mRoca)
  • bug #34842 [ExpressionLanguage] Process division by zero (@tigr1991)
  • bug #34902 [PropertyAccess] forward caught exception (@xabbuh)
  • bug #34903 Fixing bad order of operations with null coalescing operator (@weaverryan)
  • bug #34888 [TwigBundle] add tags before processing them (@xabbuh)
  • bug #34760 [Mailer] Fix SMTP Authentication when using STARTTLS (@DjLeChuck)
  • bug #34762 [Config] never try loading failed classes twice with ClassExistenceResource (@nicolas-grekas)
  • bug #34783 [DependencyInjection] Handle env var placeholders in CheckTypeDeclarationsPass (@fancyweb)
  • bug #34839 [Cache] fix memory leak when using PhpArrayAdapter (@nicolas-grekas)
  • bug #34812 [Yaml] fix parsing negative octal numbers (@xabbuh)
  • bug #34854 [Messenger] gracefully handle missing event dispatchers (@xabbuh)
  • bug #34802 [Security] Check UserInterface::getPassword is not null before calling needsRehash (@dbrekelmans)
  • bug #34788 [SecurityBundle] Properly escape regex in AddSessionDomainConstraintPass (@fancyweb)
  • bug #34859 [SecurityBundle] Fix TokenStorage::reset not called in stateless firewall (@jderusse)
  • bug #34827 [HttpFoundation] get currently session.gc_maxlifetime if ttl doesnt exists (@rafaeltovar)
  • bug #34755 [FrameworkBundle] resolve service locators in debug:* commands (@nicolas-grekas)
  • bug #34832 [Validator] Allow underscore character "_" in URL username and password (@romainneutron)
  • bug #34811 [TwigBridge] Update bootstrap_4_layout.html.twig missing switch-custom label (@sabruss)
  • bug #34820 [FrameworkBundle][SodiumVault] Create secrets directory only when it is used (@fancyweb)
  • bug #34776 [DI] fix resolving bindings for named TypedReference (@nicolas-grekas)
  • bug #34794 [DependencyInjection] Resolve expressions in CheckTypeDeclarationsPass (@fancyweb)
  • bug #34797 [Translation] Fix FileDumper behavior (@yceruto)
  • bug #34738 [SecurityBundle] Passwords are not encoded when algorithm set to "true" (@nieuwenhuisen)
  • bug #34759 [SecurityBundle] Fix switch_user provider configuration handling (@fancyweb)
  • bug #34779 [Security] do not validate passwords when the hash is null (@xabbuh)
  • bug #34786 [SecurityBundle] Use config variable in AnonymousFactory (@martijnboers)
  • bug #34784 [FrameworkBundle] Set the parameter bag as resolved in ContainerLintCommand (@fancyweb)
  • bug #34763 [Security/Core] Fix checking for SHA256/SHA512 passwords (@David Brooks)
  • bug #34757 [DI] Fix making the container path-independent when the app is in /app (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/35053

Changelog (since https://github.com/symfony/symfony/compare/v4.4.0...v4.4.1)

  • bug #34732 [DependencyInjection][Xml] Fix the attribute 'tag' is not allowed in 'bind' tag (@tienvx)
  • bug #34729 [DI] auto-register singly implemented interfaces by default (@nicolas-grekas)
  • bug #34728 [DI] fix overriding existing services with aliases for singly-implemented interfaces (@nicolas-grekas)
  • bug #34649 more robust initialization from request (@dbu)
  • bug #34715 [TwigBundle] remove service when base class is missing (@xabbuh)
  • bug #34600 [DoctrineBridge] do not depend on the QueryBuilder from the ORM (@xabbuh)
  • bug #34627 [Security/Http] call auth listeners/guards eagerly when they "support" the request (@nicolas-grekas)
  • bug #34671 [Security] Fix clearing remember-me cookie after deauthentication (@chalasr)
  • bug #34711 Fix the translation commands when a template contains a syntax error (@fabpot)
  • bug #34032 [Mime] Fixing multidimensional array structure with FormDataPart (@jvahldick)
  • bug #34560 [Config][ReflectionClassResource] Handle parameters with undefined constant as their default values (@fancyweb)
  • bug #34695 [Config] don't break on virtual stack frames in ClassExistenceResource (@nicolas-grekas)
  • bug #34716 [DependencyInjection] fix dumping number-like string parameters (@xabbuh)
  • bug #34558 [Console] Fix autocomplete multibyte input support (@fancyweb)
  • bug #34130 [Console] Fix commands description with numeric namespaces (@fancyweb)
  • bug #34562 [DI] Skip unknown method calls for factories in check types pass (@fancyweb)
  • bug #34677 [EventDispatcher] Better error reporting when arguments to dispatch() are swapped (@rimas-kudelis)
  • bug #33573 [TwigBridge] Add row_attr to all form themes (@fancyweb)
  • bug #34019 [Serializer] CsvEncoder::NO_HEADERS_KEY ignored when used in constructor (@Dario Savella)
  • bug #34083 [Form] Keep preferred_choices order for choice groups (@vilius-g)
  • bug #34091 [Debug] work around failing chdir() on Darwin (@mary2501)
  • bug #34305 [PhpUnitBridge] Read configuration CLI directive (@ro0NL)
  • bug #34490 [Serializer] Fix MetadataAwareNameConverter usage with string group (@antograssiot)
  • bug #34632 [Console] Fix trying to access array offset on value of type int (@Tavafi)
  • bug #34669 [HttpClient] turn exception into log when the request has no content-type (@nicolas-grekas)
  • bug #34662 [HttpKernel] Support typehint to deprecated FlattenException in controller (@andrew-demb)
  • bug #34619 Restores preview mode support for Html and Serializer error renderers (@yceruto)
  • bug #34636 [VarDumper] notice on potential undefined index (@sylvainmetayer)
  • bug #34668 [Cache] Make sure we get the correct number of values from redis::mget() (@thePanz)
  • bug #34621 [Routing] Continue supporting single colon in object route loaders (@fancyweb)
  • bug #34554 [HttpClient] Fix early cleanup of pushed HTTP/2 responses (@lyrixx)
  • bug #34607 [HttpKernel] Ability to define multiple kernel.reset tags (@rmikalkenas)
  • bug #34599 [Mailer][Mailchimp Bridge] Throwing undefined index _id when setting message id (@monteiro)
  • bug #34569 [Workflow] Apply the same logic of precedence between the apply() and the buildTransitionBlockerList() method (@lyrixx)
  • bug #34580 [HttpKernel] Don't cache "not-fresh" state (@nicolas-grekas)
  • bug #34577 [FrameworkBundle][Cache] Don't deep-merge cache pools configuration (@alxndrbauer)
  • bug #34515 [DependencyInjection] definitions are valid objects (@xabbuh)
  • bug #34536 [SecurityBundle] Don't require a user provider for the anonymous listener (@chalasr)
  • bug #34533 [Monolog Bridge] Fixed accessing static property as non static. (@Sander-Toonen)
  • bug #34502 [FrameworkBundle][ContainerLint] Keep "removing" compiler passes (@fancyweb)
  • bug #34552 [Dotenv] don't fail when referenced env var does not exist (@xabbuh)
  • bug #34546 [Serializer] Add DateTimeZoneNormalizer into Dependency Injection (@jewome62)
  • bug #34547 [Messenger] Error when specified default bus is not among the configured (@vudaltsov)
  • bug #34513 [Validator] remove return type declaration from __sleep() (@xabbuh)
  • bug #34551 [Security] SwitchUser is broken when the User Provider always returns a valid user (@tucksaun)
  • bug #34385 Avoid empty "If-Modified-Since" header in validation request (@mpdude)
  • bug #34458 [Validator] ConstraintValidatorTestCase: add missing return value to mocked validate method calls (@ogizanagi)
  • bug #34516 [HttpKernel] drop return type declaration (@xabbuh)
  • bug #34474 [Messenger] Ignore stamps in in-memory transport (@tienvx)

[PR] https://github.com/symfony/symfony/pull/34742

Changelog (since https://github.com/symfony/symfony/compare/v4.3.8...v4.3.9)

  • bug #34649 more robust initialization from request (@dbu)
  • bug #34671 [Security] Fix clearing remember-me cookie after deauthentication (@chalasr)
  • bug #34711 Fix the translation commands when a template contains a syntax error (@fabpot)
  • bug #34560 [Config][ReflectionClassResource] Handle parameters with undefined constant as their default values (@fancyweb)
  • bug #34695 [Config] don't break on virtual stack frames in ClassExistenceResource (@nicolas-grekas)
  • bug #34716 [DependencyInjection] fix dumping number-like string parameters (@xabbuh)
  • bug #34558 [Console] Fix autocomplete multibyte input support (@fancyweb)
  • bug #34130 [Console] Fix commands description with numeric namespaces (@fancyweb)
  • bug #34677 [EventDispatcher] Better error reporting when arguments to dispatch() are swapped (@rimas-kudelis)
  • bug #33573 [TwigBridge] Add row_attr to all form themes (@fancyweb)
  • bug #34019 [Serializer] CsvEncoder::NO_HEADERS_KEY ignored when used in constructor (@Dario Savella)
  • bug #34083 [Form] Keep preferred_choices order for choice groups (@vilius-g)
  • bug #34091 [Debug] work around failing chdir() on Darwin (@mary2501)
  • bug #34305 [PhpUnitBridge] Read configuration CLI directive (@ro0NL)
  • bug #34490 [Serializer] Fix MetadataAwareNameConverter usage with string group (@antograssiot)
  • bug #34632 [Console] Fix trying to access array offset on value of type int (@Tavafi)
  • bug #34669 [HttpClient] turn exception into log when the request has no content-type (@nicolas-grekas)
  • bug #34636 [VarDumper] notice on potential undefined index (@sylvainmetayer)
  • bug #34668 [Cache] Make sure we get the correct number of values from redis::mget() (@thePanz)
  • bug #34569 [Workflow] Apply the same logic of precedence between the apply() and the buildTransitionBlockerList() method (@lyrixx)
  • bug #34533 [Monolog Bridge] Fixed accessing static property as non static. (@Sander-Toonen)
  • bug #34546 [Serializer] Add DateTimeZoneNormalizer into Dependency Injection (@jewome62)
  • bug #34547 [Messenger] Error when specified default bus is not among the configured (@vudaltsov)
  • bug #34551 [Security] SwitchUser is broken when the User Provider always returns a valid user (@tucksaun)
  • bug #34385 Avoid empty "If-Modified-Since" header in validation request (@mpdude)
  • bug #34458 [Validator] ConstraintValidatorTestCase: add missing return value to mocked validate method calls (@ogizanagi)
  • bug #34451 [DependencyInjection] Fix dumping multiple deprecated aliases (@shyim)
  • bug #34448 [Form] allow button names to start with uppercase letter (@xabbuh)
  • bug #34419 [Cache] Disable igbinary on PHP >= 7.4 (@nicolas-grekas)
  • bug #34366 [HttpFoundation] Allow redirecting to URLs that contain a semicolon (@JayBizzle)
  • bug #34397 [FrameworkBundle] Remove project dir from Translator cache vary scanned directories (@fancyweb)
  • bug #34408 [Cache] catch exceptions when using PDO directly (@xabbuh)
  • bug #34410 [HttpFoundation] Fix MySQL column type definition. (@jbroutier)
  • bug #34398 [Config] fix id-generation for GlobResource (@nicolas-grekas)
  • bug #34396 [Finder] Allow ssh2 stream wrapper for sftp (@damienalexandre)
  • bug #34383 [DI] Use reproducible entropy to generate env placeholders (@nicolas-grekas)
  • bug #34381 [WebProfilerBundle] Require symfony/twig-bundle (@fancyweb)

[PR] https://github.com/symfony/symfony/pull/34741

Changelog (since https://github.com/symfony/symfony/compare/v4.4.0-RC1...v4.4.0)

  • bug #34464 [Form] group constraints when calling the validator (@nicolas-grekas)
  • bug #34451 [DependencyInjection] Fix dumping multiple deprecated aliases (@shyim)
  • bug #34448 [Form] allow button names to start with uppercase letter (@xabbuh)
  • bug #34428 [Security] Fix best encoder not wired using migrate_from (@chalasr)

[PR] https://github.com/symfony/symfony/pull/34471

Changelog (since https://github.com/symfony/symfony/compare/v4.4.0-BETA2...v4.4.0-RC1)

  • bug #34419 [Cache] Disable igbinary on PHP >= 7.4 (@nicolas-grekas)
  • bug #34347 [Messenger] Perform no deep merging of bus middleware (@vudaltsov)
  • bug #34366 [HttpFoundation] Allow redirecting to URLs that contain a semicolon (@JayBizzle)
  • feature #34405 [HttpFoundation] Added possibility to configure expiration time in redis session handler (@mantulo)
  • bug #34397 [FrameworkBundle] Remove project dir from Translator cache vary scanned directories (@fancyweb)
  • bug #34384 [DoctrineBridge] Improve queries parameters display in Profiler (@fancyweb)
  • bug #34408 [Cache] catch exceptions when using PDO directly (@xabbuh)
  • bug #34411 [HttpKernel] Flatten "exception" controller argument if not typed (@chalasr)
  • bug #34410 [HttpFoundation] Fix MySQL column type definition. (@jbroutier)
  • bug #34403 [Cache] Redis Tag Aware warn on wrong eviction policy (@andrerom)
  • bug #34400 [HttpKernel] collect bundle classes, not paths (@nicolas-grekas)
  • bug #34398 [Config] fix id-generation for GlobResource (@nicolas-grekas)
  • bug #34404 [HttpClient] fix HttpClientDataCollector (@nicolas-grekas)
  • bug #34396 [Finder] Allow ssh2 stream wrapper for sftp (@damienalexandre)
  • bug #34383 [DI] Use reproducible entropy to generate env placeholders (@nicolas-grekas)
  • bug #34389 [WebProfilerBundle] add FrameworkBundle requirement (@xabbuh)
  • bug #34381 [WebProfilerBundle] Require symfony/twig-bundle (@fancyweb)
  • bug #34358 [Security] always check the token on non-lazy firewalls (@nicolas-grekas, @lyrixx)
  • bug #34390 [FrameworkBundle] fix wiring of httplug client (@nicolas-grekas)
  • bug #34369 [FrameworkBundle] Disallow WebProfilerBundle < 4.4 (@derrabus)
  • bug #34370 [DI] fix detecting singly implemented interfaces (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/34420

Changelog (since https://github.com/symfony/symfony/compare/v4.4.0-BETA1...v4.4.0-BETA2)

  • bug #34344 [Console] Constant STDOUT might be undefined (@nicolas-grekas)
  • security #cve-2019-18886 [Security\Core] throw AccessDeniedException when switch user fails (@nicolas-grekas)
  • security #cve-2019-18888 [Mime] fix guessing mime-types of files with leading dash (@nicolas-grekas)
  • security #cve-2019-11325 [VarExporter] fix exporting some strings (@nicolas-grekas)
  • security #cve-2019-18889 [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances (@nicolas-grekas)
  • security #cve-2019-18888 [HttpFoundation] fix guessing mime-types of files with leading dash (@nicolas-grekas)
  • security #cve-2019-18887 [HttpKernel] Use constant time comparison in UriSigner (@stof)

[PR] https://github.com/symfony/symfony/pull/34353
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v4.3.7...v4.3.8)

  • bug #34344 [Console] Constant STDOUT might be undefined (@nicolas-grekas)
  • security #cve-2019-18886 [Security\Core] throw AccessDeniedException when switch user fails (@nicolas-grekas)
  • security #cve-2019-18888 [Mime] fix guessing mime-types of files with leading dash (@nicolas-grekas)
  • security #cve-2019-11325 [VarExporter] fix exporting some strings (@nicolas-grekas)
  • security #cve-2019-18889 [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances (@nicolas-grekas)
  • security #cve-2019-18888 [HttpFoundation] fix guessing mime-types of files with leading dash (@nicolas-grekas)
  • security #cve-2019-18887 [HttpKernel] Use constant time comparison in UriSigner (@stof)

[PR] https://github.com/symfony/symfony/pull/34352
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v4.2.11...v4.2.12)

  • security #cve-2019-18886 [Security\Core] throw AccessDeniedException when switch user fails (@nicolas-grekas)
  • security #cve-2019-18889 [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances (@nicolas-grekas)
  • security #cve-2019-11325 [VarExporter] fix exporting some strings (@nicolas-grekas)
  • security #cve-2019-18888 [HttpFoundation] fix guessing mime-types of files with leading dash (@nicolas-grekas)
  • security #cve-2019-18887 [HttpKernel] Use constant time comparison in UriSigner (@stof)

[PR] https://github.com/symfony/symfony/pull/34351
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v4.3.7...v4.4.0-BETA1)

  • feature #34333 Revert "feature #34329 [ExpressionLanguage] add XOR operator (ottaviano)" (@nicolas-grekas)
  • feature #34332 Allow \Throwable $previous everywhere (@fancyweb)
  • feature #34329 [ExpressionLanguage] add XOR operator (@ottaviano)
  • feature #34312 [ErrorHandler] merge and remove the ErrorRenderer component (@nicolas-grekas, @yceruto)
  • feature #34309 [HttpKernel] make ExceptionEvent able to propagate any throwable (@nicolas-grekas)
  • feature #34139 [Security] Add migrating encoder configuration (@chalasr)
  • feature #32194 [HttpFoundation] Add a way to anonymize IPs (@Seldaek)
  • feature #34252 [Console] Add support for NO_COLOR env var (@Seldaek)
  • feature #34295 [DI][FrameworkBundle] add EnvVarLoaderInterface - remove SecretEnvVarProcessor (@nicolas-grekas)
  • feature #31310 [DependencyInjection] Added option ignore_errors: not_found for imported config files (@pulzarraider)
  • feature #34216 [HttpClient] allow arbitrary JSON values in requests (@pschultz)
  • feature #31977 Add handling for delayed message to redis transport (@alexander-schranz)
  • feature #34217 [Messenger] use events consistently in worker (@Tobion)
  • feature #33065 Deprecate things that prevent \Throwable from bubbling down (@fancyweb)
  • feature #34184 [VarDumper] display the method we're in when dumping stack traces (@nicolas-grekas)
  • feature #33732 [Console] Rename some methods related to redraw frequency (@javiereguiluz)
  • feature #31587 [Routing][Config] Allow patterns of resources to be excluded from config loading (@tristanbes)
  • feature #32256 [DI] Add compiler pass and command to check that services wiring matches type declarations (@alcalyn, @GuilhemN, @nicolas-grekas)
  • feature #32061 Add new Form WeekType (@dFayet)
  • feature #33954 Form theme: support Bootstrap 4 custom switches (@romaricdrigon)
  • feature #33854 [DI] Add ability to choose behavior of decorations on non existent decorated services (@mtarld)
  • feature #34185 [Messenger] extract worker logic to listener and get rid of SendersLocatorInterface::getSenderByAlias (@Tobion)
  • feature #34156 Adding DoctrineClearEntityManagerWorkerSubscriber to reset EM in worker (@weaverryan)
  • feature #34133 [Cache] add DeflateMarshaller - remove phpredis compression (@nicolas-grekas)
  • feature #34177 [HttpFoundation][FrameworkBundle] allow configuring the session handler with a DSN (@nicolas-grekas)
  • feature #32107 [Validator] Add AutoMapping constraint to enable or disable auto-validation (@dunglas)
  • feature #34170 Re-allow to use "tagged" in service definitions (@dunglas)
  • feature #34043 [Lock] Add missing lock connection string in FrameworkExtension (@jderusse)
  • feature #34057 [Lock][Cache] Allows URL DSN in PDO adapters (@jderusse)
  • feature #34151 [DomCrawler] normalizeWhitespace should be true by default (@dunglas)
  • feature #34020 [Security] Allow to stick to a specific password hashing algorithm (@chalasr)
  • feature #34131 [FrameworkBundle] Remove suffix convention when using env vars to override secrets from the vault (@nicolas-grekas)
  • feature #34051 [HttpClient] allow option "buffer" to be a stream resource (@nicolas-grekas)
  • feature #34028 [ExpressionLanguage][Lexer] Exponential format for number (@tigr1991)
  • feature #34069 [Messenger] Removing "sync" transport and replacing it with config trick (@weaverryan)
  • feature #34014 [DI] made the env(base64:...) processor able to decode base64url (@nicolas-grekas)
  • feature #34044 [HttpClient] Add a canceled state to the ResponseInterface (@Toflar)
  • feature #33997 [FrameworkBundle] Add secrets:* commands and env(secret:...) processor to deal with secrets seamlessly (@Tobion, @jderusse, @nicolas-grekas)
  • feature #34013 [DI] add LazyString for lazy computation of string values injected into services (@nicolas-grekas)
  • feature #33961 [TwigBridge] Add show-deprecations option to the lint:twig command (@yceruto)
  • feature #33973 [HttpClient] add HttpClient::createForBaseUri() (@nicolas-grekas)
  • feature #33980 [HttpClient] try using php-http/discovery when nyholm/psr7 is not installed (@nicolas-grekas)
  • feature #33967 [Mailer] Add Message-Id to SentMessage when sending an email (@fabpot)
  • feature #33896 [Serializer][CSV] Add context options to handle BOM (@malarzm)
  • feature #33883 [Mailer] added ReplyTo option for PostmarkApiTransport (@pierregaste)
  • feature #33053 [ErrorHandler] Rework fatal errors (@fancyweb)
  • feature #33939 [Cache] add TagAwareMarshaller to optimize data storage when using AbstractTagAwareAdapter (@nicolas-grekas)
  • feature #33941 Keeping backward compatibility with legacy FlattenException usage (@yceruto)
  • feature #33851 [EventDispatcher] Allow to omit the event name when registering listeners (@derrabus)
  • feature #33461 [Cache] Improve RedisTagAwareAdapter invalidation logic & requirements (@andrerom)
  • feature #33779 [DI] enable improved syntax for defining method calls in Yaml (@nicolas-grekas)
  • feature #33743 [HttpClient] Async HTTPlug client (@Nyholm)
  • feature #33856 [Messenger] Allow to configure the db index on Redis transport (@chalasr)
  • feature #33881 [VarDumper] Added a support for casting Ramsey/Uuid (@lyrixx)
  • feature #33861 [CssSelector] Support *:only-of-type (@jakzal)
  • feature #33793 [EventDispatcher] A compiler pass for aliased userland events (@derrabus)
  • feature #33791 [Form] Added CountryType option for using alpha3 country codes (@creiner)
  • feature #33628 [DependencyInjection] added Ability to define a priority method for tagged service (@lyrixx)
  • feature #33775 [Console] Add deprecation message for non-int statusCode (@jschaedl)
  • feature #33783 [WebProfilerBundle] Try to display the most useful panel by default (@fancyweb)
  • feature #33701 [HttpKernel] wrap compilation of the container in an opportunistic lock (@nicolas-grekas)
  • feature #33789 [Serializer] Deprecate the XmlEncoder::TYPE_CASE_ATTRIBUTES constant (@pierredup)
  • feature #31446 [VarDumper] Output the location of calls to dump() (@ktherage)
  • feature #33412 [Console] Do not leak hidden console commands (@m-vo)
  • feature #33676 [Security] add "anonymous: lazy" mode to firewalls (@nicolas-grekas)
  • feature #32440 [DomCrawler] add a normalizeWhitespace argument to text() method (@Simperfit)
  • feature #33148 [Intl] Excludes locale from language codes (split localized language names) (@ro0NL)
  • feature #31202 [FrameworkBundle] WebTestCase KernelBrowser::getContainer null return type (@Simperfit)
  • feature #33038 [ErrorHandler] Forward \Throwable (@fancyweb)
  • feature #33574 [Http][DI] Replace REMOTE_ADDR in trusted proxies with the current REMOTE_ADDR (@mcfedr)
  • feature #33113 [Messenger][DX] Display real handler if handler is wrapped (@DavidBadura)
  • feature #33128 [FrameworkBundle] Sort tagged services (@krome162504)
  • feature #33658 [Yaml] fix parsing inline YAML spanning multiple lines (@xabbuh)
  • feature #33698 [HttpKernel] compress files generated by the profiler (@nicolas-grekas)
  • feature #33317 [Messenger] Added support for from_transport attribute on messenger.message_handler tag (@ruudk)
  • feature #33584 [Security] Deprecate isGranted()/decide() on more than one attribute (@wouterj)
  • feature #33663 [Security] Make stateful firewalls turn responses private only when needed (@nicolas-grekas)
  • feature #33609 [Form][SubmitType] Add "validate" option (@fancyweb)
  • feature #33621 Revert "feature #33507 [WebProfiler] Deprecated intercept_redirects in 4.4 (dorumd)" (@lyrixx)
  • feature #33605 [Twig] Add NotificationEmail (@fabpot)
  • feature #33623 [DependencyInjection] Allow binding iterable and tagged services (@lyrixx)
  • feature #33507 [WebProfiler] Deprecated intercept_redirects in 4.4 (@dorumd)
  • feature #33579 Adding .gitattributes to remove Tests directory from "dist" (@Nyholm)
  • feature #33562 [Mailer] rename SmtpEnvelope to Envelope (@xabbuh)
  • feature #33565 [Mailer] Rename an exception class (@fabpot)
  • feature #33516 [Cache] Added reserved characters constant for CacheItem (@andyexeter)
  • feature #33503 [SecurityBundle] Move Anonymous DI integration to new AnonymousFactory (@wouterj)
  • feature #33535 [WebProfilerBundle] Assign automatic colors to custom Stopwatch categories (@javiereguiluz)
  • feature #32565 [HttpClient] Allow enabling buffering conditionally with a Closure (@rjwebdev)
  • feature #32032 [DI] generate preload.php file for PHP 7.4 in cache folder (@nicolas-grekas)
  • feature #33117 [FrameworkBundle] Added --sort option for TranslationUpdateCommand (@k0d3r1s)
  • feature #32832 [Serializer] Allow multi-dimenstion object array in AbstractObjectNormalizer (@alediator)
  • feature #33189 New welcome page on startup for 4.4 LTS & 5.0 (@yceruto)
  • feature #33295 [OptionsResolver] Display full nested option hierarchy in exceptions (@fancyweb)
  • feature #33486 [VarDumper] Display fully qualified title (@pavinthan, @nicolas-grekas)
  • feature #33496 Deprecated not passing dash symbol (-) to STDIN commands (@yceruto)
  • feature #32742 [Console] Added support for definition list and horizontal table (@lyrixx)
  • feature #33494 [Mailer] Change DSN syntax (@fabpot)
  • feature #33471 [Mailer] Check email validity before opening an SMTP connection (@fabpot)
  • feature #31177 #21571 Comparing roles to detected that users has changed (@oleg-andreyev)
  • feature #33459 [Validator] Deprecated CacheInterface in favor of PSR-6 (@derrabus)
  • feature #33271 Added new ErrorController + Preview and enabling there the error renderer mechanism (@yceruto)
  • feature #33454 [Mailer] Improve an exception when trying to send a RawMessage without an Envelope (@fabpot)
  • feature #33327 [ErrorHandler] Registering basic exception handler for late failures (@yceruto)
  • feature #33446 [TwigBridge] lint all templates from configured Twig paths if no argument was provided (@yceruto)
  • feature #33409 [Mailer] Add support for multiple mailers (@fabpot)
  • feature #33424 [Mailer] Change the DSN semantics (@fabpot)
  • feature #33319 Allow configuring class names through methods instead of class parameters in Doctrine extensions (@alcaeus)
  • feature #33283 [ErrorHandler] make DebugClassLoader able to add return type declarations (@nicolas-grekas)
  • feature #33323 [TwigBridge] Throw an exception when one uses email as a context variable in a TemplatedEmail (@fabpot)
  • feature #33308 [SecurityGuard] Deprecate returning non-boolean values from checkCredentials() (@derrabus)
  • feature #33217 [FrameworkBundle][DX] Improving the redirect config when using RedirectController (@yceruto)
  • feature #33015 [HttpClient] Added TraceableHttpClient and WebProfiler panel (@jeremyFreeAgent)
  • feature #33091 [Mime] Add Address::fromString (@gisostallenberg)
  • feature #33144 [DomCrawler] Added Crawler::matches(), ::closest(), ::outerHtml() (@lyrixx)
  • feature #33152 Mark all dispatched event classes as final (@Tobion)
  • feature #33258 [HttpKernel] deprecate global dir to load resources from (@Tobion)
  • feature #33272 [Translation] deprecate support for null locales (@xabbuh)
  • feature #33269 [TwigBridge] Mark all classes extending twig as @final (@fabpot)
  • feature #33270 [Mime] Remove NamedAddress (@fabpot)
  • feature #33169 [HttpFoundation] Precalculate session expiry timestamp (@azjezz)
  • feature #33237 [Mailer] Remove the auth mode DSN option and support in the eSMTP transport (@fabpot)
  • feature #33233 [Mailer] Simplify the way TLS/SSL/STARTTLS work (@fabpot)
  • feature #32360 [Monolog] Added ElasticsearchLogstashHandler (@lyrixx)
  • feature #32489 [Messenger] Allow exchange type headers binding (@CedrickOka)
  • feature #32783 [Messenger] InMemoryTransport handle acknowledged and rejected messages (@tienvx)
  • feature #33155 [ErrorHandler] Added call() method utility to turns any PHP error into \ErrorException (@yceruto)
  • feature #33203 [Mailer] Add support for the queued flag in the EmailCount assertion (@fabpot)
  • feature #30323 [ErrorHandler] trigger deprecation in DebugClassLoader when child class misses a return type (@fancyweb, @nicolas-grekas)
  • feature #33137 [DI] deprecate support for non-object services (@nicolas-grekas)
  • feature #32845 [HttpKernel][FrameworkBundle] Add alternative convention for bundle directories (@yceruto)
  • feature #32548 [Translation] XliffLintCommand: allow .xliff file extension (@codegain)
  • feature #28363 [Serializer] Encode empty objects as objects, not arrays (@mcfedr)
  • feature #33122 [WebLink] implement PSR-13 directly (@nicolas-grekas)
  • feature #33078 Add compatibility trait for PHPUnit constraint classes (@alcaeus)
  • feature #32988 [Intl] Support ISO 3166-1 Alpha-3 country codes (@terjebraten-certua)
  • feature #32598 [FrameworkBundle][Routing] Private service route loaders (@fancyweb)
  • feature #32486 [DoctrineBridge] Invokable event listeners (@fancyweb)
  • feature #31083 [Validator] Allow objects implementing __toString() to be used as violation messages (@mdlutz24)
  • feature #32122 [HttpFoundation] deprecate HeaderBag::get() returning an array and add all($key) instead (@Simperfit)
  • feature #32807 [HttpClient] add "max_duration" option (@fancyweb)
  • feature #31546 [Dotenv] Use default value when referenced variable is not set (@j92)
  • feature #32930 [Mailer][Mime] Add PHPUnit constraints and assertions for the Mailer (@fabpot)
  • feature #32912 [Mailer] Add support for the profiler (@fabpot)
  • feature #32940 [PhpUnitBridge] Add polyfill for PhpUnit namespace (@jderusse)
  • feature #31843 [Security] add support for opportunistic password migrations (@nicolas-grekas)
  • feature #32824 [Ldap] Add security LdapUser and provider (@chalasr)
  • feature #32922 [PhpUnitBridge] make the bridge act as a polyfill for newest PHPUnit features (@nicolas-grekas)
  • feature #32927 [Mailer] Add message events logger (@fabpot)
  • feature #32916 [Mailer] Add a name to the transports (@fabpot)
  • feature #32917 [Mime] Add AbstractPart::asDebugString() (@fabpot)
  • feature #32543 [FrameworkBundle] add config translator cache_dir (@Raulnet)
  • feature #32669 [Yaml] Add flag to dump NULL as ~ (@OskarStark)
  • feature #32896 [Mailer] added debug info to TransportExceptionInterface (@fabpot)
  • feature #32817 [DoctrineBridge] Deprecate RegistryInterface (@Koc)
  • feature #32504 [ErrorRenderer] Add DebugCommand for easy debugging and testing (@yceruto)
  • feature #32581 [DI] Allow dumping the container in one file instead of many files (@nicolas-grekas)
  • feature #32762 [Form][DX] derive default timezone from reference_date option when possible (@yceruto)
  • feature #32745 [Messenger][Profiler] Attempt to give more useful source info when using HandleTrait (@ogizanagi)
  • feature #32680 [Messenger][Profiler] Collect the stamps at the end of dispatch (@ogizanagi)
  • feature #32683 [VarDumper] added support for Imagine/Image (@lyrixx)
  • feature #32749 [Mailer] Make transport factory test case public (@Koc)
  • feature #32718 [Form] use a reference date to handle times during DST (@xabbuh)
  • feature #32637 [ErrorHandler] Decouple from ErrorRenderer component (@yceruto)
  • feature #32609 [Mailer][DX][RFC] Rename mailer bridge transport classes (@Koc)
  • feature #32587 [Form][Validator] Generate accept attribute with file constraint and mime types option (@Coosos)
  • feature #32658 [Form] repeat preferred choices in list of all choices (@Seb33300, @xabbuh)
  • feature #32698 [WebProfilerBundle] mark all classes as internal (@Tobion)
  • feature #32695 [WebProfilerBundle] Decoupling TwigBundle and using the new ErrorRenderer mechanism (@yceruto)
  • feature #31398 [TwigBundle] Deprecating error templates for non-html formats and using ErrorRenderer as fallback (@yceruto)
  • feature #32582 [Routing] Deprecate ServiceRouterLoader and ObjectRouteLoader in favor of ContainerLoader and ObjectLoader (@fancyweb)
  • feature #32661 [ErrorRenderer] Improving the exception page provided by HtmlErrorRenderer (@yceruto)
  • feature #32332 [DI] Move non removing compiler passes to after removing passes (@alexpott)
  • feature #32475 [Process] Deprecate Process::inheritEnvironmentVariables() (@ogizanagi)
  • feature #32583 [Mailer] Logger vs debug mailer (@fabpot)
  • feature #32471 Add a new ErrorHandler component (mirror of the Debug component) (@yceruto)
  • feature #32463 [VarDumper] Allow to configure VarDumperTestTrait casters & flags (@ogizanagi)
  • feature #31946 [Mailer] Extract transport factory and allow create custom transports (@Koc)
  • feature #31194 [PropertyAccess] Improve errors when trying to find a writable property (@pierredup)
  • feature #32435 [Validator] Add a new constraint message when there is both min and max (@Lctrs)
  • feature #32470 Rename ErrorCatcher to ErrorRenderer (rendering part only) (@yceruto)
  • feature #32462 [WebProfilerBundle] Deprecating templateExists method (@yceruto)
  • feature #32446 [Lock] rename and deprecate Factory into LockFactory (@Simperfit)
  • feature #31975 Dynamic bundle assets (@garak)
  • feature #32429 [VarDumper] Let browsers trigger their own search on double CMD/CTRL + F (@ogizanagi)
  • feature #32198 [Lock] Split "StoreInterface" into multiple interfaces with less responsability (@Simperfit)
  • feature #31511 [Validator] Allow to use property paths to get limits in range constraint (@Lctrs)
  • feature #32424 [Console] don't redraw progress bar more than every 100ms by default (@nicolas-grekas)
  • feature #32418 [Console] Added Application::reset() (@lyrixx)
  • feature #31217 [WebserverBundle] Deprecate the bundle in favor of symfony local server (@Simperfit)
  • feature #31554 [SECURITY] AbstractAuthenticationListener.php error instead info. Rebase of #28462 (@berezuev)
  • feature #32284 [Cache] Add argument $prefix to AdapterInterface::clear() (@nicolas-grekas)
  • feature #32423 [ServerBundle] Display all logs by default (@lyrixx)
  • feature #26339 [Console] Add ProgressBar::preventRedrawFasterThan() and forceRedrawSlowerThan() methods (@ostrolucky)
  • feature #31269 [Translator] Dump native plural formats to po files (@Stadly)
  • feature #31560 [Ldap][Security] LdapBindAuthenticationProvider does not bind before search query (@Simperfit)
  • feature #31626 [Console] allow answer to be trimmed by adding a flag (@Simperfit)
  • feature #31876 [WebProfilerBundle] Add clear button to ajax tab (@Matts)
  • feature #32415 [Translation] deprecate passing a null locale (@Simperfit)
  • feature #32290 [HttpClient] Add $response->toStream() to cast responses to regular PHP streams (@nicolas-grekas)
  • feature #32402 [Intl] Exclude root language (@ro0NL)
  • feature #32295 [FrameworkBundle] Add autowiring alias for PSR-14 (@nicolas-grekas)
  • feature #32390 [DependencyInjection] Deprecated passing Parameter instances as class name to Definition (@derrabus)
  • feature #32106 [FrameworkBundle] Use default_locale as default value for translator.fallbacks (@dunglas)
  • feature #32294 [FrameworkBundle] Allow creating chained cache pools by providing several adapters (@nicolas-grekas)
  • feature #32207 [FrameworkBundle] Allow to use the BrowserKit assertions with Panther and API Platform's test client (@dunglas)
  • feature #32344 [HttpFoundation][HttpKernel] Improving the request/response format autodetection (@yceruto)
  • feature #32231 [HttpClient] Add support for NTLM authentication (@nicolas-grekas)
  • feature #32265 [Validator] deprecate non-string constraint violation codes (@xabbuh)
  • feature #31528 [Validator] Add a Length::$allowEmptyString option to reject empty strings (@ogizanagi)
  • feature #32081 [WIP][Mailer] Overwrite envelope sender and recipients from config (@Devristo)
  • feature #32255 [HttpFoundation] Drop support for ApacheRequest (@lyrixx)
  • feature #31825 [Messenger] Added support for auto trimming of redis streams (@Toflar)
  • feature #32277 Remove @experimental annotations (@fabpot)
  • feature #30981 [Mime] S/MIME Support (@sstok)
  • feature #32180 [Lock] add an InvalidTTLException to be more accurate (@Simperfit)
  • feature #32241 [PropertyAccess] Deprecate null as allowed value for defaultLifetime argument in createCache method (@jschaedl)
  • feature #32221 [ErrorCatcher] Make IDEs and static analysis tools happy (@fabpot)
  • feature #32227 Rename the ErrorHandler component to ErrorCatcher (@fabpot)
  • feature #31065 Add ErrorHandler component (@yceruto)
  • feature #32126 [Process] Allow writing portable "prepared" command lines (@Simperfit)
  • feature #31532 [Ldap] Add users extraFields in ldap component (@Simperfit)
  • feature #32104 Add autowiring for HTTPlug (@nicolas-grekas)
  • feature #32130 [Form] deprecate int/float for string input in NumberType (@xabbuh)
  • feature #31547 [Ldap] Add exception for mapping ldap errors (@Simperfit)
  • feature #31764 [FrameworkBundle] add attribute stamps (@walidboughdiri)
  • feature #32059 [PhpUnitBridge] Bump PHPUnit 7+8 (@ro0NL)
  • feature #32041 [Validator] Deprecate unused arg in ExpressionValidator (@ogizanagi)
  • feature #31287 [Config] Introduce find method in ArrayNodeDefinition to ease configuration tree manipulation (@jschaedl)
  • feature #31959 [DomCrawler][Feature][DX] Add Form::getName() method (@JustBlackBird)
  • feature #32026 [VarDumper] caster for HttpClient's response dumps all info (@nicolas-grekas)
  • feature #31976 [HttpClient] add HttplugClient for compat with libs that need httplug v1 or v2 (@nicolas-grekas)
  • feature #31956 [Mailer] Changed EventDispatcherInterface dependency from Component to Contracts (@Koc)
  • feature #31980 [HttpClient] make Psr18Client implement relevant PSR-17 factories (@nicolas-grekas)
  • feature #31919 [WebProfilerBundle] Select default theme based on user preferences (@javiereguiluz)
  • feature #31451 [FrameworkBundle] Allow dots in translation domains (@jschaedl)
  • feature #31321 [DI] deprecates tag !tagged in favor of !tagged_iterator (@jschaedl)
  • feature #31658 [HTTP Foundation] Deprecate passing argument to method Request::isMethodSafe() (@dFayet)
  • feature #31597 [Security] add MigratingPasswordEncoder (@nicolas-grekas)
  • feature #31351 [Validator] Improve TypeValidator to handle array of types (@jschaedl)
  • feature #31526 [Validator] Add compared value path to violation parameters (@ogizanagi)
  • feature #31514 Add exception as HTML comment to beginning and end of exception_full.html.twig (@ruudk)
  • feature #31739 [FrameworkBundle] Add missing BC layer for deprecated ControllerNameParser injections (@chalasr)
  • feature #31831 [HttpClient] add $response->cancel() (@nicolas-grekas)
  • feature #31334 [Messenger] Add clear Entity Manager middleware (@Koc)
  • feature #31594 [Security] add PasswordEncoderInterface::needsRehash() (@nicolas-grekas)
  • feature #31821 [FrameworkBundle][TwigBundle] Add missing deprecations for PHP templating layer (@yceruto)
  • feature #31509 [Monolog] Setup the LoggerProcessor after all other processor (@lyrixx)
  • feature #31785 [Messenger] Deprecate passing a bus locator to ConsumeMessagesCommand's constructor (@chalasr)
  • feature #31700 [MonologBridge] RouteProcessor class is now final to ease the the removal of deprecated event (@Simperfit)
  • feature #31732 [HttpKernel] Make DebugHandlersListener internal (@chalasr)
  • feature #31539 [HttpKernel] Add lts config (@noniagriconomie)
  • feature #31437 [Cache] Add Redis Sentinel support (@StephenClouse)
  • feature #31543 [DI] deprecate short callables in yaml (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/

Changelog (since https://github.com/symfony/symfony/compare/v4.3.6...v4.3.7)

  • bug #34294 [Workflow] Fix error when we use ValueObject for the marking property (@FabienSalles)
  • bug #34297 [DI] fix locators with numeric keys (@nicolas-grekas)
  • bug #34282 [DI] Dont cache classes with missing parents (@nicolas-grekas)
  • bug #34287 [HttpClient] Fix a crash when calling CurlHttpClient::__destruct() (@dunglas)
  • bug #34129 [FrameworkBundle][Translation] Invalidate cached catalogues when the scanned directories change (@fancyweb)
  • bug #34246 [Serializer] Use context to compute MetadataAwareNameConverter cache (@antograssiot)
  • bug #34251 [HttpClient] expose only gzip when doing transparent compression (@nicolas-grekas)
  • bug #34244 [Inflector] add support for 'species' (@jeffreymoelands)
  • bug #34085 [Console] Detect dimensions using mode CON if vt100 is supported (@rtek)
  • bug #34199 [HttpClient] Retry safe requests using HTTP/1.1 when HTTP/2 fails (@nicolas-grekas)
  • bug #34192 [Routing] Fix URL generator instantiation (@X-Coder264, @HypeMC)
  • bug #34134 [Messenger] fix retry of messages losing the routing key and properties (@Tobion)
  • bug #34181 [Stopwatch] Fixed bug in getDuration when counting multiple ongoing periods (@TimoBakx)
  • bug #34165 [PropertyInfo] Fixed type extraction for nullable collections of non-nullable elements (@happyproff)
  • bug #34179 [Stopwatch] Fixed a bug in StopwatchEvent::getStartTime (@TimoBakx)
  • bug #34203 [FrameworkBundle] [HttpKernel] fixed correct EOL and EOM month (@erics86)
  • bug #34035 [Serializer] Fix property name usage for denormalization (@antograssiot)

[PR] https://github.com/symfony/symfony/pull/34323

Changelog (since https://github.com/symfony/symfony/compare/v4.3.5...v4.3.6)

  • bug #34198 [HttpClient] Fix perf issue when doing thousands of requests with curl (@nicolas-grekas)
  • bug #33998 [Config] Disable default alphabet sorting in glob function due of unstable sort (@hurricane-voronin)
  • bug #34144 [Serializer] Improve messages for unexpected resources values (@fancyweb)
  • bug #34186 [HttpClient] always return the empty string when the response cannot have a body (@nicolas-grekas)
  • bug #34167 [HttpFoundation] Allow to not pass a parameter to Request::isMethodSafe() (@dunglas)
  • bug #33828 [DoctrineBridge] Auto-validation must work if no regex are passed (@dunglas)
  • bug #34080 [SecurityBundle] correct types for default arguments for firewall configs (@shieldo)
  • bug #34152 [Workflow] Made the configuration more robust for the 'property' key (@lyrixx)
  • bug #34154 [HttpClient] fix handling of 3xx with no Location header - ignore Content-Length when no body is expected (@nicolas-grekas)
  • bug #34140 [Security/Core] make NativePasswordEncoder use sodium to validate passwords when possible (@nicolas-grekas)
  • bug #33999 [Form] Make sure to collect child forms created on *_SET_DATA events (@yceruto)
  • bug #34090 [WebProfilerBundle] Improve display in Email panel for dark theme (@antograssiot)
  • bug #34116 [HttpClient] ignore the body of responses to HEAD requests (@nicolas-grekas)
  • bug #32456 [Messenger] use database platform to convert correctly the DateTime (@roukmoute)
  • bug #34107 [Messenger] prevent infinite redelivery loops and blocked queues (@Tobion)
  • bug #32341 [Messenger] Show exceptions after multiple retries (@TimoBakx)
  • bug #34082 Revert "[Messenger] Fix exception message of failed message is dropped (@Tobion)
  • bug #34021 [TwigBridge] do not render errors for checkboxes twice (@xabbuh)
  • bug #34017 [Messenger] Fix ignored options in redis transport (@chalasr)
  • bug #34041 [HttpKernel] fix wrong removal of the just generated container dir (@nicolas-grekas)
  • bug #34024 [Routing] fix route loading with wildcard, but dir or file is empty (@gseidel)
  • bug #34023 [Dotenv] allow LF in single-quoted strings (@nicolas-grekas)
  • bug #33818 [Yaml] Throw exception for tagged invalid inline elements (@gharlan)
  • bug #33994 [Mailer] Fix Mandrill Transport API payload for named addresses (@Michaël Perrin)
  • bug #33985 [HttpClient] workaround curl_multi_select() issue (@nicolas-grekas)
  • bug #33948 [PropertyInfo] Respect property name case when guessing from public method name (@antograssiot)
  • bug #33962 [Cache] fixed TagAwareAdapter returning invalid cache (@v-m-i)
  • bug #33958 [DI] Add extra type check to php dumper (@gquemener)
  • bug #33965 [HttpFoundation] Add plus character + to legal mime subtype (@ilzrv)
  • bug #32943 [Dotenv] search variable values in ENV first then env file (@soufianZantar)
  • bug #33943 [VarDumper] fix resetting the "bold" state in CliDumper (@nicolas-grekas)
  • bug #33936 [HttpClient] Missing argument in method_exists (@detinkin)
  • bug #33937 [Cache] ignore unserialization failures in AbstractTagAwareAdapter::doDelete() (@nicolas-grekas)
  • bug #33935 [HttpClient] send Accept: */* by default, fix removing it when needed (@nicolas-grekas)
  • bug #33922 [Cache] remove implicit dependency on symfony/filesystem (@nicolas-grekas)
  • bug #33927 Allow to set SameSite config to 'none' (@ihmels)
  • bug #33930 [Cache] clean tags folder on invalidation (@nicolas-grekas)
  • bug #33919 [VarDumper] fix array key error for class SymfonyCaster (@zcodes)
  • bug #33885 [Form][DateTimeImmutableToDateTimeTransformer] Preserve microseconds and use \DateTime::createFromImmutable() when available (@fancyweb)
  • bug #33900 [HttpKernel] Fix to populate $dotenvVars in data collector when not using putenv() (@mynameisbogdan)

[PR] https://github.com/symfony/symfony/pull/34209

Changelog (since https://github.com/symfony/symfony/compare/v4.3.4...v4.3.5)

  • bug #33742 [Crawler] document $default as string|null (@nicolas-grekas)
  • bug #32308 [Messenger] DoctrineTransport: ensure auto setup is only done once (@bendavies)
  • bug #33871 [HttpClient] bugfix exploding values of headers (@michaljusiega)
  • bug #33834 [Validator] Fix ValidValidator group cascading usage (@fancyweb)
  • bug #33863 [Routing] gracefully handle docref_root ini setting (@nicolas-grekas)
  • bug #33846 [Cache] give 100ms before starting the expiration countdown (@nicolas-grekas)
  • bug #33853 [HttpClient] fix "no_proxy" option ignored in NativeHttpClient (@Harry-Dunne)
  • bug #33841 [VarDumper] fix dumping uninitialized SplFileInfo (@nicolas-grekas)
  • bug #33842 [Cache] fix logger usage in CacheTrait::doGet() (@nicolas-grekas)
  • bug #33835 [Workflow] Fixed BC break on WorkflowInterface (@lyrixx)
  • bug #33799 [Security]: Don't let falsy usernames slip through impersonation (@j4nr6n)
  • bug #33814 [HttpFoundation] Check if data passed to SessionBagProxy::initialize is an array (@mynameisbogdan)
  • bug #33744 [DI] Add CSV env var processor tests / support PHP 7.4 (@ro0NL)
  • bug #33805 [FrameworkBundle] Fix wrong returned status code in ConfigDebugCommand (@jschaedl)
  • bug #33781 [AnnotationCacheWarmer] add RedirectController to annotation cache (@jenschude)
  • bug #33777 Fix the :only-of-type pseudo class selector (@jakzal)
  • bug #32051 [Serializer] Add CsvEncoder tests for PHP 7.4 (@ro0NL)
  • feature #33776 Copy phpunit.xsd to a predictable path (@julienfalque)
  • bug #33759 [Security/Http] fix parsing X509 emailAddress (@nicolas-grekas)
  • bug #33733 [Serializer] fix denormalization of string-arrays with only one element (@mkrauser)
  • bug #33754 [Cache] fix known tag versions ttl check (@SwenVanZanten)
  • bug #33646 [HttpFoundation] allow additinal characters in not raw cookies (@marie)
  • bug #33748 [Console] Do not include hidden commands in suggested alternatives (@m-vo)
  • bug #33625 [DependencyInjection] Fix wrong exception when service is synthetic (@k0d3r1s)
  • bug #32979 [Messenger] return empty envelopes when RetryableException occurs (@surikman)
  • bug #32522 [Validator] Accept underscores in the URL validator, as the URL will load (@battye)
  • bug #32437 Fix toolbar load when GET params are present in "_wdt" route (@Molkobain)
  • bug #32925 [Translation] Collect original locale in case of fallback translation (@digilist)
  • bug #33691 [HttpClient] fix race condition when reading response with informational status (@nicolas-grekas)
  • bug #33727 [HttpClient] workaround bad Content-Length sent by old libcurl (@nicolas-grekas)
  • bug #31198 [FrameworkBundle] Fix framework bundle lock configuration not working as expected (@HypeMC)
  • bug #33719 [Cache] dont override native Memcached options (@nicolas-grekas)
  • bug #33703 [Cache] fail gracefully when locking is not supported (@nicolas-grekas)
  • bug #33713 Fix exceptions (PDOException) error code type (@fruty)
  • bug #32335 [Form] Names for buttons should start with lowercase (@mcfedr)
  • bug #33706 [Mailer][Messenger] ensure legacy event dispatcher compatibility (@xabbuh)
  • bug #33688 Add missing row_attr option to FormType (@mcsky)
  • bug #33693 [Security] use LegacyEventDispatcherProxy (@dmaicher)
  • bug #33675 [PhpUnit] Fix usleep mock return value (@fabpot)
  • bug #33652 [Cache] skip igbinary on PHP 7.4.0 (@nicolas-grekas)
  • bug #33643 [HttpClient] fix throwing HTTP exceptions when the 1st chunk is emitted (@nicolas-grekas)
  • bug #33618 fix tests depending on other components' tests (@xabbuh)
  • bug #33626 [PropertyInfo] ensure compatibility with type resolver 0.5 (@xabbuh)
  • bug #33620 [Twig] Fix Twig config extra keys (@fabpot)
  • bug #33600 [Messenger] Fix exception message of failed message is dropped on retry (@tienvx)
  • bug #33601 [HttpClient] Add default value for Accept header (@numerogeek)
  • bug #33340 [Finder] Adjust regex to correctly match comments in gitignore contents (@Jeroeny)
  • bug #33588 [PropertyInfo] ensure compatibility with type resolver 0.5 (@xabbuh)
  • bug #33575 [WebProfilerBundle] Fix time panel legend buttons (@fancyweb)
  • bug #33571 [Inflector] add support 'see' to 'ee' for singularize 'fees' to 'fee' (@maxhelias)
  • bug #32763 [Console] Get dimensions from stty on windows if possible (@rtek)
  • bug #33570 Fixed cache pools affecting each other due to an overwritten seed variable (@roed)
  • bug #33517 [Yaml] properly catch legacy tag syntax usages (@xabbuh)
  • bug #33546 [DependencyInjection] Accept existing interfaces as valid named args (@fancyweb)
  • bug #33547 [HttpClient] Re-enable Server Push support (@dunglas)
  • bug #33521 Fixed incompatibility between ServiceSubscriberTrait and classes with protected $container property (@a-menshchikov)
  • bug #33518 [Yaml] don't dump a scalar tag value on its own line (@xabbuh)
  • bug #33505 [HttpClient] fallbackto CURLMOPT_MAXCONNECTS when CURLMOPT_MAX_HOST_CONNECTIONS is not available (@nicolas-grekas)
  • bug #32818 [HttpKernel] Fix getFileLinkFormat() to avoid returning the wrong URL in Profiler (@Arman-Hosseini)
  • bug #33487 [HttpKernel] Fix Apache mod_expires Session Cache-Control issue (@pbowyer)
  • bug #33469 [FrameworkBundle] Fixed suggested package for missing server:dump command (@lyrixx)
  • bug #31964 [Router] routing cache crash when using generator_class (@dFayet)
  • bug #33481 [Messenger] fix empty amqp body returned as false (@Tobion)
  • bug #33387 [Mailer] maintain sender/recipient name in SMTP envelopes (@xabbuh)
  • bug #33449 Fix gmail relay (@Beno!t POLASZEK)
  • bug #33391 [HttpClient] fix support for 103 Early Hints and other informational status codes (@nicolas-grekas)
  • bug #33444 [HttpClient] improve handling of HTTP/2 PUSH, disable it by default (@nicolas-grekas)
  • bug #33435 [Validator] Only handle numeric values in DivisibleBy (@fancyweb)
  • bug #33437 Fix #33427 (@sylfabre)
  • bug #33439 [Validator] Sync string to date behavior and throw a better exception (@fancyweb)
  • bug #33436 [DI] fix support for "!tagged_locator foo" (@nicolas-grekas)
  • bug #32903 [PHPUnit Bridge] Avoid registering listener twice (@alexpott)
  • bug #33432 [Mailer] Fix Mailgun support when a response is not JSON as expected (@fabpot)
  • bug #33402 [Finder] Prevent unintentional file locks in Windows (@jspringe)
  • bug #33376 [Mailer] Remove the default dispatcher in AbstractTransport (@fabpot)
  • bug #33357 [FrameworkBundle] Fix about command not showing .env vars (@brentybh)
  • bug #33396 Fix #33395 PHP 5.3 compatibility (@kylekatarnls)
  • bug #33363 [Routing] fix static route reordering when a previous dynamic route conflicts (@nicolas-grekas)
  • bug #33385 [Console] allow Command::getName() to return null (@nicolas-grekas)
  • bug #33353 Return null as Expire header if it was set to null (@danrot)
  • bug #33382 [ProxyManager] remove ProxiedMethodReturnExpression polyfill (@nicolas-grekas)
  • bug #33377 [Yaml] fix dumping not inlined scalar tag values (@xabbuh)

[PR] https://github.com/symfony/symfony/pull/33891

Changelog (since https://github.com/symfony/symfony/compare/v4.3.3...v4.3.4)

  • bug #33335 [DependencyInjection] Fixed the getServiceIds implementation to always return aliases (@pdommelen)
  • bug #33298 [Messenger] Stop worker when it should stop (@tienvx)
  • bug #33292 [VarExporter] fix support for PHP 7.4 (@nicolas-grekas)
  • bug #33282 [HttpKernel] Do not extend the new SF 4.3 ControllerEvent so we can make it final (@Tobion)
  • bug #33278 [FrameworkBundle] Fix BrowserKit assertions to make them compatible with Panther (@dunglas)
  • bug #33216 [Mime] Trim and remove line breaks from NamedAddress name arg (@maldoinc)
  • bug #33124 [Config] Add handling for ignored keys in ArrayNode::mergeValues. (@Alexandre Parent)
  • bug #33244 [Router] Fix TraceableUrlMatcher behaviour with trailing slash (@Xavier Leune)
  • bug #33232 Fix handling for session parameters (@vkhramtsov)
  • bug #32497 [Messenger] DispatchAfterCurrentBusMiddleware does not cancel messages from delayed handlers (@Nyholm, @BastienClement)
  • bug #33127 [Messenger] make delay exchange and queues durable like the normal ones by default (@Tobion)
  • bug #33210 [Mailer] Don't duplicate addresses in Sendgrid Transport (@pierredup)
  • bug #33172 [Console] fixed a PHP notice when there is no function in the stack trace of an Exception (@fabpot)
  • bug #33157 Fix getMaxFilesize() returning zero (@ausi)
  • bug #33139 [Intl] Cleanup unused language aliases entry (@ro0NL)
  • bug #33126 [SecurityBundle] display the correct class name on the deprecated notice (@maxhelias)
  • bug #33093 [EventDispatcher] wrong Request class (@maxhelias)
  • bug #33092 [DependencyInjection] Improve an exception message (@fabpot)
  • bug #32541 [HttpKernel] trim the leading backslash in the controller init (@Simperfit, @fabpot)
  • bug #32455 [HttpFoundation] Clear invalid session cookie (@Toflar)
  • bug #33066 [Serializer] Fix negative DateInterval (@jderusse)
  • bug #33045 Make HttpClientTestCase compatible with PHPUnit8 (@jderusse)
  • bug #33033 [Lock] consistently throw NotSupportException (@xabbuh)
  • bug #33022 [HttpClient] Remove CURLOPT_CONNECTTIMEOUT_MS curl opt (@lyrixx)
  • bug #32516 [FrameworkBundle][Config] Ignore exceptions thrown during reflection classes autoload (@fancyweb)
  • bug #33010 [TwigBridge] pass translation parameters to the trans filter (@xabbuh)
  • bug #32981 Fix tests/code for php 7.4 (@jderusse)
  • bug #32986 [Mime] fixed wrong mimetype (@rjwebdev)
  • bug #32992 [ProxyManagerBridge] Polyfill for unmaintained version (@jderusse)
  • bug #32989 [HttpClient] Declare $active first to prevent weird issue (@Kocal)
  • bug #32999 Added correct plural for box -> boxes (@cinamo)
  • bug #32933 [PhpUnitBridge] fixed PHPUnit 8.3 compatibility: method handleError was renamed to __invoke (@karser)
  • bug #32947 [Intl] Support DateTimeInterface in IntlDateFormatter::format (@pierredup)
  • bug #32919 [Intl] Order alpha2 to alpha3 mapping + phpdoc fixes (@ro0NL)
  • bug #32792 [Messenger] Fix incompatibility with FrameworkBundle <4.3.1 (@chalasr)
  • bug #32836 [Messenger] Removed named parameters and replaced with ? placeholders for sqlsrv compatibility (@David Legatt)
  • bug #32838 [FrameworkBundle] Detect indirect env vars in routing (@ro0NL)
  • bug #32918 [Intl] Order alpha2 to alpha3 mapping (@ro0NL)
  • bug #32902 [PhpUnitBridge] Allow sutFqcnResolver to return array (@VincentLanglet)
  • bug #32814 Create mailBody with only attachments part present (@srsbiz)
  • bug #32682 [HttpFoundation] Revert getClientIp @return docblock (@ossinkine)
  • bug #32910 [Yaml] PHP-8: Uncaught TypeError: abs() expects parameter 1 to be int or float, string given (@Aleksandr Dankovtsev)
  • bug #32870 #32853 Check if $this->parameters is array. (@ABGEO07)
  • bug #32899 [Mailer] fix wrong error message when connection closes unexpectedly (@fabpot)
  • bug #32895 [Mailer] Fix error not being thrown properly (@fabpot)
  • bug #32868 [PhpUnitBridge] Allow symfony/phpunit-bridge > 4.2 to be installed with phpunit 4.8 (@jderusse)
  • bug #32823 [HttpClient] Preserve the case of headers when sending them (@nicolas-grekas)
  • bug #32767 [Yaml] fix comment in multi line value (@soufianZantar)
  • bug #32790 [HttpFoundation] Fix getMaxFilesize (@bennyborn)
  • bug #32796 [Cache] fix warning on PHP 7.4 (@jpauli)
  • bug #32806 [Console] fix warning on PHP 7.4 (@rez1dent3)
  • bug #32809 Don't add object-value of static properties in the signature of container metadata-cache (@arjenm)
  • bug #32708 Recompile container when translations directory changes (@pierredup)
  • bug #32722 [DependencyInjection] Fix bindings and tagged_locator (@deguif)
  • bug #32802 Make sure trace_level is always defined (@dbu)
  • bug #30096 [DI] Fix dumping Doctrine-like service graphs (bis) (@weaverryan, @nicolas-grekas)
  • bug #32799 [HttpKernel] do not stopwatch sections when profiler is disabled (@Tobion)
  • bug #32631 [Messenger] expire delay queue and fix auto_setup logic (@Tobion)
  • bug #32641 [Messenger] Retrieve table default options from the SchemaManager (@vincenttouzet)

[PR] https://github.com/symfony/symfony/pull/33345

Changelog (since https://github.com/symfony/symfony/compare/v4.3.2...v4.3.3)

  • bug #32726 [Messenger] Fix redis last error not cleared between calls (@chalasr)
  • bug #32760 [HttpKernel] clarify error handler restoring process (@xabbuh)
  • bug #32730 [Inflector] Fix pluralizing words ending with "son" (@norkunas)
  • bug #32715 [DI] fix perf issue with lazy autowire error messages (@nicolas-grekas)
  • bug #32503 Fix multiSelect ChoiceQuestion when answers have spaces (@IceMaD)
  • bug #32688 [Yaml] fix inline handling when dumping tagged values (@xabbuh)
  • bug #32710 [Security/Core] align defaults for sodium with PHP 7.4 (@nicolas-grekas)
  • bug #32644 [WebProfileBundle] Avoid getting right to left style (@Arman-Hosseini)
  • bug #32689 [HttpClient] rewind stream when using Psr18Client (@nicolas-grekas)
  • bug #32700 [Messenger] Flatten collection of stamps collected by the traceable middleware (@ogizanagi)
  • bug #32699 [HttpClient] fix canceling responses in a streaming loop (@nicolas-grekas)
  • bug #32679 [Intl] relax some date parser patterns (@xabbuh)
  • bug #31303 [VarDumper] Use \ReflectionReference for determining if a key is a reference (php >= 7.4) (@dorumd, @nicolas-grekas)
  • bug #32485 [Validator] Added support for validation of giga values (@kernig)
  • bug #32567 [Messenger] pass transport name to factory (@Tobion)
  • bug #32568 [Messenger] Fix UnrecoverableExceptionInterface handling (@LanaiGrunt)
  • bug #32604 Properly handle optional tag attributes for !tagged_iterator (@apfelbox)
  • bug #32571 [HttpClient] fix debug output added to stderr at shutdown (@nicolas-grekas)
  • bug #32443 [PHPUnitBridge] Mute deprecations triggered from phpunit (@greg0ire)
  • bug #32572 Bump minimum version of symfony/phpunit-bridge (@fancyweb)
  • bug #32438 [Serializer] XmlEncoder: don't cast padded strings (@ogizanagi)
  • bug #32579 [Config] Do not use absolute path when computing the vendor freshness (@lyrixx)
  • bug #32563 Container*::getServiceIds() should return strings (@mathroc)
  • bug #32553 [Mailer] Allow register mailer configuration in xml format (@Koc)
  • bug #32442 Adding missing event_dispatcher wiring for messenger.middleware.send_message (@weaverryan)
  • bug #32466 [Config] Fix for signatures of typed properties (@tvandervorm)
  • bug #32501 [FrameworkBundle] Fix descriptor of routes described as callable array (@ribeiropaulor)
  • bug #32500 [Debug][DebugClassLoader] Include found files instead of requiring them (@fancyweb)
  • bug #32464 [WebProfilerBundle] Fix Twig 1.x compatibility (@yceruto)
  • bug #31620 [FrameworkBundle] Inform the user when save_path will be ignored (@gnat42)
  • bug #32096 Don't assume port 0 for X-Forwarded-Port (@alexbowers, @xabbuh)
  • bug #31820 [SecurityBundle] Fix profiler dump for non-invokable security listeners (@chalasr)
  • bug #32392 [Messenger] Doctrine Transport: Support setting auto_setup from DSN (@bendavies)
  • bug #31267 [Translator] Load plurals from mo files properly (@Stadly)
  • bug #31266 [Translator] Load plurals from po files properly (@Stadly)
  • bug #32383 [Serializer] AbstractObjectNormalizer ignores the property types of discriminated classes (@sandergo90)
  • bug #32413 [Messenger] fix publishing headers set on AmqpStamp (@Tobion)
  • bug #32421 [EventDispatcher] Add tag kernel.rest on 'debug.event_dispatcher' service (@lyrixx)
  • bug #32398 [Messenger] Removes deprecated call to ReflectionType::__toString() on MessengerPass (@brunowowk)
  • bug #32379 [SecurityBundle] conditionally register services (@xabbuh)
  • bug #32380 [Messenger] fix broken key normalization (@Tobion)
  • bug #32363 [FrameworkBundle] reset cache pools between requests (@nicolas-grekas)
  • bug #32365 [DI] fix processing of regular parameter bags by MergeExtensionConfigurationPass (@nicolas-grekas)
  • bug #32187 [PHPUnit] Fixed composer error on Windows (@misterx)
  • bug #32299 [Lock] Stores must implement putOffExpiration (@jderusse)
  • bug #32302 [Mime] Remove @internal annotations for the serialize methods (@francoispluchino)
  • bug #32334 [Messenger] Fix authentication for redis transport (@alexander-schranz)
  • bug #32309 Fixing validation for messenger transports retry_strategy service key (@weaverryan)
  • bug #32331 [Workflow] only decorate when an event dispatcher was passed (@xabbuh)
  • bug #32236 [Cache] work aroung PHP memory leak (@nicolas-grekas)
  • bug #32206 Catch JsonException and rethrow in JsonEncode (@phil-davis)
  • bug #32211 [Mailer] Fix error message when connecting to a stream raises an error before connect() (@fabpot)
  • bug #32210 [Mailer] Fix timeout type hint (@fabpot)
  • bug #32199 [EventDispatcher] improve error messages in the event dispatcher (@xabbuh)
  • bug #32200 [Security/Core] work around sodium_compat issue (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/32788

Changelog (since https://github.com/symfony/symfony/compare/v4.2.10...v4.2.11)

  • bug #32760 [HttpKernel] clarify error handler restoring process (@xabbuh)
  • bug #32503 Fix multiSelect ChoiceQuestion when answers have spaces (@IceMaD)
  • bug #32688 [Yaml] fix inline handling when dumping tagged values (@xabbuh)
  • bug #32644 [WebProfileBundle] Avoid getting right to left style (@Arman-Hosseini)
  • bug #32700 [Messenger] Flatten collection of stamps collected by the traceable middleware (@ogizanagi)
  • bug #32679 [Intl] relax some date parser patterns (@xabbuh)
  • bug #31303 [VarDumper] Use \ReflectionReference for determining if a key is a reference (php >= 7.4) (@dorumd, @nicolas-grekas)
  • bug #32485 [Validator] Added support for validation of giga values (@kernig)
  • bug #32572 Bump minimum version of symfony/phpunit-bridge (@fancyweb)
  • bug #32438 [Serializer] XmlEncoder: don't cast padded strings (@ogizanagi)
  • bug #32579 [Config] Do not use absolute path when computing the vendor freshness (@lyrixx)
  • bug #32563 Container*::getServiceIds() should return strings (@mathroc)
  • bug #32466 [Config] Fix for signatures of typed properties (@tvandervorm)
  • bug #32500 [Debug][DebugClassLoader] Include found files instead of requiring them (@fancyweb)
  • bug #32464 [WebProfilerBundle] Fix Twig 1.x compatibility (@yceruto)
  • bug #31620 [FrameworkBundle] Inform the user when save_path will be ignored (@gnat42)
  • bug #32096 Don't assume port 0 for X-Forwarded-Port (@alexbowers, @xabbuh)
  • bug #31267 [Translator] Load plurals from mo files properly (@Stadly)
  • bug #31266 [Translator] Load plurals from po files properly (@Stadly)
  • bug #32383 [Serializer] AbstractObjectNormalizer ignores the property types of discriminated classes (@sandergo90)
  • bug #32421 [EventDispatcher] Add tag kernel.rest on 'debug.event_dispatcher' service (@lyrixx)
  • bug #32398 [Messenger] Removes deprecated call to ReflectionType::__toString() on MessengerPass (@brunowowk)
  • bug #32379 [SecurityBundle] conditionally register services (@xabbuh)
  • bug #32363 [FrameworkBundle] reset cache pools between requests (@nicolas-grekas)
  • bug #32365 [DI] fix processing of regular parameter bags by MergeExtensionConfigurationPass (@nicolas-grekas)
  • bug #32187 [PHPUnit] Fixed composer error on Windows (@misterx)
  • bug #32299 [Lock] Stores must implement putOffExpiration (@jderusse)
  • bug #32236 [Cache] work aroung PHP memory leak (@nicolas-grekas)
  • bug #32206 Catch JsonException and rethrow in JsonEncode (@phil-davis)
  • bug #32200 [Security/Core] work around sodium_compat issue (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/32787
[EOM] End of maintenance release for branch 4.2

Changelog (since https://github.com/symfony/symfony/compare/v4.3.1...v4.3.2)

  • bug #31954 [PhpunitBridge] Read environment variable from superglobals (@greg0ire)
  • bug #32131 [Mailgun Mailer] fixed issue when using html body (@alOneh)
  • bug #31730 [PhpUnitBridge] More accurate grouping (@greg0ire)
  • bug #31966 [Messenger] Doctrine Connection find and findAll now correctly decode headers (@TimoBakx)
  • bug #31972 Add missing rendering of form help block. (@alexsegura)
  • bug #32141 [HttpClient] fix dealing with 1xx informational responses (@nicolas-grekas)
  • bug #32138 [Filesystem] fix mirroring directory into parent directory (@xabbuh)
  • bug #32137 [HttpFoundation] fix accessing session bags (@xabbuh)
  • bug #32147 [HttpClient] fix timing measurements with NativeHttpClient (@nicolas-grekas)
  • bug #32165 revert #30525 due to performance penalty (@bendavies)
  • bug #32164 [EventDispatcher] collect called listeners information only once (@xabbuh)
  • bug #32173 [FrameworkBundle] Fix calling Client::getProfile() before sending a request (@dunglas)
  • bug #32163 [DoctrineBridge] Fix type error (@norkunas)
  • bug #32154 [Messenger] fix retrying handlers using DoctrineTransactionMiddleware (@Tobion)
  • bug #32169 [Security/Core] require libsodium >= 1.0.14 (@nicolas-grekas)
  • bug #32170 [Security/Core] Don't use ParagonIE_Sodium_Compat (@nicolas-grekas)
  • bug #32156 [Workflow] re-add workflow.definition tag to workflow services (@nikossvnk)
  • bug #32053 [Messenger] No need for retry to require SentStamp (@Tobion)
  • bug #32083 [HttpClient] fixing passing debug info to progress callback (@nicolas-grekas)
  • bug #32129 [DebugBundle] fix register ReflectionCaster::unsetClosureFileInfo caster in var cloner service (@alekitto)
  • bug #32027 [Messenger] Remove DispatchAfterCurrentBusStamp when message is put on internal queue (@Nyholm)
  • bug #32125 [Form] accept floats for input="string" in NumberType (@xabbuh)
  • bug #32094 [Validator] Use LogicException for missing Property Access Component in comparison constraints (@Lctrs)
  • bug #32136 [FrameworkBundle] sync require-dev and conflict constraints (@xabbuh)
  • bug #32123 [Form] fix translation domain (@xabbuh)
  • bug #32115 [SecurityBundle] don't validate IP addresses from env var placeholders (@xabbuh)
  • bug #32116 [FrameworkBundle] tag the FileType service as a form type (@xabbuh)
  • bug #32109 [Messenger] fix delay exchange recreation after disconnect (@Tobion)
  • bug #32090 [Debug] workaround BC break in PHP 7.3 (@nicolas-grekas)
  • bug #32076 [Lock] Fix PDO prune not called (@jderusse)
  • bug #32071 Fix expired lock not cleaned (@jderusse)
  • bug #32052 [Messenger] fix AMQP delay queue to be per exchange (@Tobion)
  • bug #32065 [HttpClient] throw DecodingExceptionInterface when toArray() fails because of content-type error (@nicolas-grekas)
  • bug #32057 [HttpFoundation] Fix SA/phpdoc JsonResponse (@ro0NL)
  • bug #32040 [DI] Show the right class autowired when providing a non-existing class (@Simperfit)
  • bug #32035 [Messenger] fix delay delivery for non-fanout exchanges (@Tobion)
  • bug #32025 SimpleCacheAdapter fails to cache any item if a namespace is used (@moufmouf)
  • bug #32022 [HttpClient] Don't use CurlHttpClient on Windows when curl.cainfo is not set (@nicolas-grekas)
  • bug #32037 [Form] validate composite constraints in all groups (@xabbuh)
  • bug #32007 [Serializer] Handle true and false appropriately in CSV encoder (@battye)
  • bug #32036 [Messenger] improve logs (@Tobion)
  • bug #31998 Parameterize Mailgun's region (@jderusse)
  • bug #32000 [Routing] fix absolute url generation when scheme is not known (@Tobion)
  • bug #32012 Add statement to fileLink to ignore href code when no fileLink. (@bmxmale)
  • bug #32024 [VarDumper] fix dumping objects that implement __debugInfo() (@nicolas-grekas)
  • bug #32014 Do not log or call the proxy function when the locale is the same (@gmponos)
  • bug #32011 [HttpClient] fix closing debug stream prematurely (@nicolas-grekas)
  • bug #32017 [Contracts] add missing required dependencies (@mbessolov)
  • bug #31992 Fix sender/recipients in SMTP Envelope (@fabpot)
  • bug #31999 [PhpunitBridge] Restore php 5.5 compat (@greg0ire)
  • bug #31991 [EventDispatcher] collect called listeners information only once (@xabbuh)
  • bug #31988 [TwigBridge] add back possibility to use form themes without translations (@xabbuh)
  • bug #31982 [HttpClient] fix Psr18Client handling of non-200 response codes (@nicolas-grekas)
  • bug #31953 [DoctrineBridge] fix handling nested embeddables (@xabbuh)
  • bug #31962 Fix reporting unsilenced deprecations from insulated tests (@nicolas-grekas)
  • bug #31936 PropertyInfoLoader should not try to add validation to non-existent property (@weaverryan)
  • bug #31923 [Serializer] Fix DataUriNormalizer deprecation (MIME type guesser is optional) (@ogizanagi)
  • bug #31928 [FrameworkBundle] avoid service id conflicts with Swiftmailer (@xabbuh)
  • bug #31925 [Form] fix usage of legacy TranslatorInterface (@nicolas-grekas)
  • bug #31908 [Validator] fix deprecation layer of ValidatorBuilder (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/32195

Changelog (since https://github.com/symfony/symfony/compare/v4.2.9...v4.2.10)

  • bug #31972 Add missing rendering of form help block. (@alexsegura)
  • bug #32137 [HttpFoundation] fix accessing session bags (@xabbuh)
  • bug #32164 [EventDispatcher] collect called listeners information only once (@xabbuh)
  • bug #32173 [FrameworkBundle] Fix calling Client::getProfile() before sending a request (@dunglas)
  • bug #32163 [DoctrineBridge] Fix type error (@norkunas)
  • bug #32170 [Security/Core] Don't use ParagonIE_Sodium_Compat (@nicolas-grekas)
  • bug #32094 [Validator] Use LogicException for missing Property Access Component in comparison constraints (@Lctrs)
  • bug #32123 [Form] fix translation domain (@xabbuh)
  • bug #32116 [FrameworkBundle] tag the FileType service as a form type (@xabbuh)
  • bug #32090 [Debug] workaround BC break in PHP 7.3 (@nicolas-grekas)
  • bug #32076 [Lock] Fix PDO prune not called (@jderusse)
  • bug #32071 Fix expired lock not cleaned (@jderusse)
  • bug #32057 [HttpFoundation] Fix SA/phpdoc JsonResponse (@ro0NL)
  • bug #32025 SimpleCacheAdapter fails to cache any item if a namespace is used (@moufmouf)
  • bug #32037 [Form] validate composite constraints in all groups (@xabbuh)
  • bug #32007 [Serializer] Handle true and false appropriately in CSV encoder (@battye)
  • bug #32000 [Routing] fix absolute url generation when scheme is not known (@Tobion)
  • bug #32024 [VarDumper] fix dumping objects that implement __debugInfo() (@nicolas-grekas)
  • bug #31962 Fix reporting unsilenced deprecations from insulated tests (@nicolas-grekas)
  • bug #31925 [Form] fix usage of legacy TranslatorInterface (@nicolas-grekas)
  • bug #31908 [Validator] fix deprecation layer of ValidatorBuilder (@nicolas-grekas)
  • bug #31894 Fix wrong requirements for ocramius/proxy-manager in root composer.json (@henrikvolmer)
  • bug #31865 [Form] Fix wrong DateTime on outdated ICU library (@aweelex)
  • bug #31879 [Cache] Pass arg to get callback everywhere (@fancyweb)
  • bug #31863 [HttpFoundation] Fixed case-sensitive handling of cache-control header in RedirectResponse constructor (@Ivo)
  • bug #31869 Fix json-encoding when JSON_THROW_ON_ERROR is used (@nicolas-grekas)
  • bug #31868 [HttpKernel] Fix handling non-catchable fatal errors (@nicolas-grekas)
  • bug #31860 [HttpFoundation] work around PHP 7.3 bug related to json_encode() (@nicolas-grekas)
  • bug #31407 [Security] added support for updated "distinguished name" format in x509 authentication (@Robert Kopera)
  • bug #31786 [Translation] Fixed case sensitivity of lint:xliff command (@javiereguiluz)
  • bug #31757 [DomCrawler] Fix type error with null Form::$currentUri (@chalasr)
  • bug #31654 [HttpFoundation] Do not set X-Accel-Redirect for paths outside of X-Accel-Mapping (@vilius-g)

[PR] https://github.com/symfony/symfony/pull/32192

Changelog (since https://github.com/symfony/symfony/compare/v4.3.0...v4.3.1)

  • bug #31894 Fix wrong requirements for ocramius/proxy-manager in root composer.json (@henrikvolmer)
  • bug #31865 [Form] Fix wrong DateTime on outdated ICU library (@aweelex)
  • bug #31893 [HttpKernel] fix link to source generation (@nicolas-grekas)
  • bug #31880 [FrameworkBundle] fix BC-breaking property in WebTestAssertionsTrait (@nicolas-grekas)
  • bug #31881 [FramworkBundle][HttpKernel] fix KernelBrowser BC layer (@nicolas-grekas)
  • bug #31879 [Cache] Pass arg to get callback everywhere (@fancyweb)
  • bug #31874 [Doctrine Bridge] Check field type before adding Length constraint (@belinde)
  • bug #31872 [Messenger] Add missing runtime check for ext redis version (@chalasr)
  • bug #31864 [Cache] Fixed undefined variable in ArrayTrait (@eXtreme)
  • bug #31863 [HttpFoundation] Fixed case-sensitive handling of cache-control header in RedirectResponse constructor (@Ivo)
  • bug #31850 [HttpClient] add $response->cancel() (@nicolas-grekas)
  • bug #31871 [HttpClient] revert bad logic around JSON_THROW_ON_ERROR (@nicolas-grekas)
  • bug #31869 Fix json-encoding when JSON_THROW_ON_ERROR is used (@nicolas-grekas)
  • bug #31868 [HttpKernel] Fix handling non-catchable fatal errors (@nicolas-grekas)
  • bug #31834 [HttpClient] Don't throw InvalidArgumentException on bad Location header (@nicolas-grekas)
  • bug #31846 [Mailer] Set default crypto method (@bpolaszek)
  • bug #31849 [Console] Add check for Konsole/Yakuake to disable hyperlinks (@belinde)
  • bug #31854 Rename the Symfony Mailer service implementation to avoid conflict with SwitMailer (@tgalopin)
  • bug #31856 [VarDumper] fix dumping the cloner itself (@nicolas-grekas)
  • bug #31861 [HttpClient] work around PHP 7.3 bug related to json_encode() (@nicolas-grekas)
  • bug #31860 [HttpFoundation] work around PHP 7.3 bug related to json_encode() (@nicolas-grekas)
  • bug #31852 [Form] add missing symfony/service-contracts dependency (@nicolas-grekas)
  • bug #31836 [DoctrineBridge] do not process private properties from parent class (@xabbuh)
  • bug #31790 [Messenger] set amqp content_type based on serialization format (@Tobion)
  • bug #31832 [HttpClient] fix unregistering the debug buffer when using curl (@nicolas-grekas)
  • bug #31407 [Security] added support for updated "distinguished name" format in x509 authentication (@Robert Kopera)
  • bug #31774 [Mailer] Fix the possibility to set a From header from MessageListener (@fabpot)
  • bug #31811 [DoctrineBridge] don't add embedded properties to wrapping class metadata (@xabbuh)
  • bug #31786 [Translation] Fixed case sensitivity of lint:xliff command (@javiereguiluz)
  • bug #31815 [Translator] Collect locale details earlier in the process (@pierredup)
  • bug #31761 [TwigBridge] suggest Translation Component when TranslationExtension is used (@nicolas-grekas)
  • bug #31748 [Messenger] Inject RoutableMessageBus instead of bus locator (@chalasr)
  • bug #31763 [Security\Core] Make SodiumPasswordEncoder validate BCrypt-ed passwords (@nicolas-grekas)
  • bug #31744 [Validator] Fix TimezoneValidator default option (@ro0NL)
  • bug #31749 [DoctrineBridge][Validator] do not enable validator auto mapping by default (@xabbuh)
  • bug #31757 [DomCrawler] Fix type error with null Form::$currentUri (@chalasr)
  • bug #31721 [PHPUnitBridge] Use a more appropriate group when deprecating mode (@greg0ire)

[PR] https://github.com/symfony/symfony/pull/31901

Changelog (since https://github.com/symfony/symfony/compare/v4.3.0-RC1...v4.3.0)

  • bug #31654 [HttpFoundation] Do not set X-Accel-Redirect for paths outside of X-Accel-Mapping (@vilius-g)

[PR] https://github.com/symfony/symfony/pull/31717

Changelog (since https://github.com/symfony/symfony/compare/v4.3.0-BETA2...v4.3.0-RC1)

  • bug #31650 Create an abstract HTTP transport and extend it in all HTTP transports (@bocharsky-bw)
  • feature #31641 [HttpClient] make $response->getInfo('debug') return extended logs about the HTTP transaction (@nicolas-grekas)
  • feature #31571 [Contracts] split in one package per sub-contracts (@nicolas-grekas)
  • bug #31625 [Messenger] Disable the SchemaAssetsFilter when setup the transport (@vincenttouzet)
  • bug #31621 [Messenger] Fix missing auto_setup for RedisTransport (@chalasr)
  • bug #31584 [Workflow] Do not trigger extra guards (@lyrixx)
  • bug #31632 [Messenger] Use "real" memory usage to honor --memory-limit (@chalasr)
  • bug #31610 [HttpClient] fix handling exceptions thrown before first mock chunk (@nicolas-grekas)
  • bug #31615 Allow WrappedListener to describe uncallable listeners (@derrabus)
  • bug #31599 [Translation] Fixed issue with new vs old TranslatorInterface in TranslationDataCollector (@althaus)
  • bug #31565 [Mime][HttpFoundation] Added mime type audio/x-hx-aac-adts (@ifaridjalilov)
  • bug #31591 [FrameworkBundle] fix named autowiring aliases for TagAwareCacheInterface (@nicolas-grekas)
  • bug #31590 [Cache] improve logged messages (@nicolas-grekas)
  • bug #31586 [HttpClient] display proper error message on TransportException when curl is used (@nicolas-grekas)
  • bug #31349 [WebProfilerBundle] Use absolute URL for profiler links (@Alumbrados)
  • bug #31541 [DI] fix using bindings with locators of service subscribers (@nicolas-grekas)
  • bug #31568 [Process] Fix infinite waiting for stopped process (@mshavliuk)

[PR] https://github.com/symfony/symfony/pull/31652

Changelog (since https://github.com/symfony/symfony/compare/v4.2.8...v4.2.9)

  • bug #31584 [Workflow] Do not trigger extra guards (@lyrixx)
  • bug #31632 [Messenger] Use "real" memory usage to honor --memory-limit (@chalasr)
  • bug #31599 [Translation] Fixed issue with new vs old TranslatorInterface in TranslationDataCollector (@althaus)
  • bug #31349 [WebProfilerBundle] Use absolute URL for profiler links (@Alumbrados)
  • bug #31541 [DI] fix using bindings with locators of service subscribers (@nicolas-grekas)
  • bug #31568 [Process] Fix infinite waiting for stopped process (@mshavliuk)
  • bug #31551 [ProxyManager] isProxyCandidate() does not take into account interfaces (@andrerom)
  • bug #31335 [Doctrine] Respect parent class contract in ContainerAwareEventManager (@Koc)
  • bug #31421 [Routing][AnnotationClassLoader] fix utf-8 encoding in default route name (@przemyslaw-bogusz)
  • bug #31510 Use the current working dir as default first arg in 'link' binary (@lyrixx)
  • bug #31524 [HttpFoundation] prevent deprecation when filesize matches error code (@xabbuh)
  • bug #31535 [Debug] Wrap call to require_once in a try/catch (@lyrixx)
  • bug #31477 [PropertyAccess] Add missing property to PropertyAccessor (@vudaltsov)
  • bug #31479 [Cache] fix saving unrelated keys in recursive callback calls (@nicolas-grekas)
  • bug #31438 [Serializer] Fix denormalization of object with variadic constructor typed argument (@ajgarlag)
  • bug #31445 [Messenger] Making cache rebuild correctly when message subscribers change (@weaverryan)
  • bug #31442 [Validator] Fix finding translator parent definition in compiler pass (@deguif)
  • bug #31475 [HttpFoundation] Allow set 'None' on samesite cookie flag (@markitosgv)
  • bug #31456 Remove deprecated usage of some Twig features (@fabpot)
  • bug #31207 [Routing] Fixed unexpected 404 NoConfigurationException (@yceruto)
  • bug #31261 [Console] Commands with an alias should not be recognized as ambiguous when using register (@Simperfit)
  • bug #31371 [DI] Removes number of elements information in debug mode (@jschaedl)
  • bug #31418 [FrameworkBundle] clarify the possible class/interface of the cache (@xabbuh)
  • bug #31411 [Intl] Fix root fallback locale (@ro0NL)
  • bug #31377 [Console] Fix auto-complete for ChoiceQuestion (multi-select answers) (@battye)
  • bug #31380 [WebProfilerBundle] Don't filter submitted IP values (@javiereguiluz)

[PR] https://github.com/symfony/symfony/pull/31651

Changelog (since https://github.com/symfony/symfony/compare/v4.3.0-BETA1...v4.3.0-BETA2)

  • bug #31569 [HttpClient] Only use CURLMOPT_MAX_HOST_CONNECTIONS & CURL_VERSION_HTTP2 if defined (@GawainLynch)
  • bug #31566 [Security] fixed a fatal error when upgrading from 4.2 (@fabpot)
  • bug #31219 [HttpClient] Allow arrays as query parameters (@sleepyboy)
  • bug #31482 [Messenger][DoctrineBridge] Throws UnrecoverableMessageHandlingException when passed invalid entity manager name (@Koc)
  • feature #31471 [Messenger] Add "non sendable" stamps (@weaverryan)
  • bug #31545 [Messenger] Fix redis Connection::get() should be non blocking by default (@chalasr)
  • bug #31537 [Workflow] use method marking store (@noniagriconomie)
  • bug #31551 [ProxyManager] isProxyCandidate() does not take into account interfaces (@andrerom)
  • bug #31542 [HttpClient] add missing argument check (@nicolas-grekas)
  • bug #31544 [Messenger] Fix undefined index on read timeout (@chalasr)
  • bug #31335 [Doctrine] Respect parent class contract in ContainerAwareEventManager (@Koc)
  • bug #31421 [Routing][AnnotationClassLoader] fix utf-8 encoding in default route name (@przemyslaw-bogusz)
  • bug #31493 [EventDispatcher] Removed "callable" type hint from WrappedListener constructor (@wskorodecki)
  • bug #31502 [WebProfilerBundle][Form] The form data collector return serialized data (@Simperfit)
  • bug #31510 Use the current working dir as default first arg in 'link' binary (@lyrixx)
  • bug #31524 [HttpFoundation] prevent deprecation when filesize matches error code (@xabbuh)
  • bug #31535 [Debug] Wrap call to require_once in a try/catch (@lyrixx)
  • feature #31030 [Serializer] Deprecate calling createChildContext without the format parameter (@dbu)
  • bug #31459 Fix the interface incompatibility of EventDispatchers (@keulinho)
  • bug #31463 [DI] default to service id - not FQCN - when building tagged locators (@nicolas-grekas)
  • feature #31294 [Form] Add intl/choice_translation_locale option to TimezoneType (@ro0NL)
  • feature #31452 [FrameworkBundle] Add cache configuration for PropertyInfo (@alanpoulain)
  • feature #31486 [Doctrine][PropertyInfo] Detect if the ID is writeable (@dunglas)
  • bug #31481 [Validator] Autovalidation: skip readonly props (@dunglas)
  • bug #31480 Update dependencies in the main component (@DavidPrevot)
  • bug #31477 [PropertyAccess] Add missing property to PropertyAccessor (@vudaltsov)
  • bug #31479 [Cache] fix saving unrelated keys in recursive callback calls (@nicolas-grekas)
  • bug #30930 [FrameworkBundle] Fixed issue when a parameter contains a '' (@lyrixx)
  • bug #31438 [Serializer] Fix denormalization of object with variadic constructor typed argument (@ajgarlag)
  • bug #31445 [Messenger] Making cache rebuild correctly when message subscribers change (@weaverryan)
  • bug #31442 [Validator] Fix finding translator parent definition in compiler pass (@deguif)
  • bug #31475 [HttpFoundation] Allow set 'None' on samesite cookie flag (@markitosgv)
  • feature #31454 [Messenger] remove send_and_handle which can be achieved with SyncTransport (@Tobion)
  • bug #31425 [Messenger] On failure retry, make message appear received from original sender (@weaverryan)
  • bug #31472 [Messenger] Fix routable message bus default bus (@weaverryan)
  • bug #31465 [Serializer] Fix BC break: DEPTH_KEY_PATTERN must be public (@dunglas)
  • bug #31458 [TwigBundle] Fix Mailer integration in Twig (@fabpot)
  • bug #31456 Remove deprecated usage of some Twig features (@fabpot)
  • bug #31207 [Routing] Fixed unexpected 404 NoConfigurationException (@yceruto)
  • bug #31261 [Console] Commands with an alias should not be recognized as ambiguous when using register (@Simperfit)
  • bug #31371 [DI] Removes number of elements information in debug mode (@jschaedl)
  • bug #31418 [FrameworkBundle] clarify the possible class/interface of the cache (@xabbuh)

[PR] https://github.com/symfony/symfony/pull/31577

Changelog (since https://github.com/symfony/symfony/compare/v4.2.0...v4.3.0-BETA1)

  • feature #31249 [Translator] Set sources when extracting strings from php files (@Stadly)
  • feature #31365 [Intl] Made countries ISO 3166 compliant + exclude Zzzz script code (@ro0NL)
  • feature #31060 [Validator] Make API endpoint for NotCompromisedPasswordValidator configurable (@xelan)
  • feature #31353 [FrameworkBundle] Show injected services for iterator and array arguments (@jschaedl)
  • feature #31350 [Intl] Rename Regions to Countries (@ro0NL)
  • feature #31364 [Bridge/PhpUnit] Extract all the code but shebang from bin/simple-phpunit (@JustBlackBird)
  • feature #30985 [Form] Keep preferred choices order in ChoiceType (@vudaltsov)
  • feature #31288 [Messenger] RoutableMessageBus route to default bus (@dirk39)
  • feature #31292 [Validator] Allow intl timezones (@ro0NL)
  • feature #30970 [Messenger] Adding failure transport support (@weaverryan)
  • feature #31318 [Intl] Compile localized timezone offset name (@ro0NL)
  • feature #31248 [Translator] Add sources when dumping qt files (@Stadly)
  • feature #31280 [WebServerBundle] Change the default pidfile location to cache directory (@jschaedl)
  • feature #31293 [Form] Remove default option grouping in TimezoneType (@ro0NL)
  • feature #31262 [Intl] Update timezones to ICU 64.2 + compile zone to country mapping (@ro0NL)
  • feature #31295 [Intl] Add timezone offset utilities (@ro0NL)
  • feature #30958 [Messenger] Allows to register handlers on a specific transport (@sroze)
  • feature #31061 [BridgeDoctrineMessenger] Doctrine ping connection middleware (@insidestyles)
  • feature #31282 [Messenger] Add WorkerStoppedEvent (@chalasr)
  • feature #31138 [Security] Dispatch an event when "logout user on change" steps in (@Simperfit)
  • feature #31242 Update LoggingTranslator to log the change of a locale (@gmponos)
  • feature #30917 [Messenger] Add a redis stream transport (@soyuka, @alexander-schranz)
  • feature #31195 [Form] Add intltimezone input to TimezoneType (@ro0NL)
  • feature #31134 [Routing] do not encode comma in query and fragment (@Tobion)
  • feature #31220 [TwigBridge] bootstrap4 file_widget: allow setting label attributes declared in label_attr (@AngelFQC)
  • feature #31204 [Messenger] ease testing and allow forking the middleware stack (@nicolas-grekas)
  • feature #30370 [Cache] Add optimized FileSystem & Redis TagAware Adapters (@andrerom)
  • feature #28831 [Intl] Add Timezones (@ro0NL)
  • feature #31170 [Security] deprecate BCryptPasswordEncoder in favor of NativePasswordEncoder (@nicolas-grekas)
  • feature #31140 [Security] Add NativePasswordEncoder (@nicolas-grekas)
  • feature #31130 [VarDumper] add caster for WeakReference instances of PHP 7.4 (@nicolas-grekas)
  • feature #31082 [Form] Show all option normalizers on debug:form command (@yceruto)
  • feature #30957 [Messenger] Remove base64_encode & use addslashes (@weaverryan)
  • feature #30717 [Serializer] Use name converter when normalizing constraint violation list (@norkunas)
  • feature #28846 [Intl] Simplify API (@ro0NL)
  • feature #31093 [PhpUnitBridge] ClockMock does not mock gmdate() (@Simperfit)
  • feature #29211 [PhpUnitBridge] Url encoded deprecations helper config (@greg0ire)
  • feature #31062 [Dotenv] Deprecate useage of "putenv" (@Nyholm)
  • feature #31021 [Cache] Added command for list all available cache pools (@Nyholm)
  • feature #31027 [Config] Deprecate TreeBuilder::root (@gharlan)
  • feature #31019 [Security] Replace Argon2*PasswordEncoder by SodiumPasswordEncoder (@chalasr)
  • feature #30997 [Console] Add callback support to Console\Question autocompleter (@Mikkel Paulson)
  • feature #30959 [FrameworkBundle] [TwigBundle] Move the hinclude key away from templating (@Simperfit)
  • feature #30968 [Security] Add Argon2idPasswordEncoder (@chalasr)
  • feature #30963 [Serializer] Experimental for ObjectListExtractor (@joelwurtz)
  • feature #30933 [Routing][ObjectRouteLoader] Allow invokable route loader services (@fancyweb)
  • feature #30897 [DIC] Add a require env var processor (@mpdude)
  • feature #30964 [HttpKernel] Add a "short" trace header format, make header configurable (@mpdude)
  • feature #29935 [DI] Fix bad error message for unused bind under _defaults (@przemyslaw-bogusz)
  • feature #30962 [DoctrineBridge] Deprecated implicit optimization in DoctrineChoiceLoader (@HeahDude)
  • feature #30862 [Routing] UrlHelper to get absolute URL for a path (@vudaltsov)
  • feature #30607 [Serializer] Add Support of recursive denormalization on object_to_populate (@jewome62)
  • feature #30429 [Form] group_by as callback returns array (@antonch1989)
  • feature #30887 [FrameworkBundle] fix search in debug autowiring (@sez-open)
  • feature #30935 Use env variable to create anytype of lock store (@jderusse)
  • feature #30932 [Validator] Add an option to disable NotCompromisedPasswordValidator (@lyrixx)
  • feature #30909 [Translator] Add comments when dumping po files (@deguif)
  • feature #30913 [Messenger] Uses an AmqpStamp to provide flags and attributes (@sroze)
  • feature #30900 [Validator] add new Timezone validation constraint (@phansys)
  • feature #30915 [Serializer] Add datetimezone normalizer (@jewome62)
  • feature #28937 Improve Translator caching (@rpkamp)
  • feature #30904 [Serializer] provide new ObjectPropertyListExtractorInterface (@dmaicher)
  • feature #30902 [Workflow] The TransitionEvent is able to modify the context (@lyrixx)
  • feature #30908 [Workflow] Added workflow_transition_blockers twig function (@lyrixx)
  • feature #30893 Add "input" option to NumberType (@fancyweb, @Bernhard Schussek)
  • feature #30898 [Validator] Wire NotCompromisedPassword in FrameworkBundle and handle non UTF-8 password (@tgalopin)
  • feature #30890 [Workflow] Changed initial_places to initial_marking, added property (@HeahDude, @lyrixx)
  • feature #30906 [symfony/HttpKernel] Throws an error when the generated class name is invalid. (@drupol)
  • feature #30892 [DomCrawler] Improve Crawler HTML5 parser need detection (@tgalopin)
  • feature #30901 Renamed NotPwned to NotCompromisedPassword (@javiereguiluz)
  • feature #30020 [Messenger] Ensure message is handled only once per handler (@keulinho, @sroze)
  • feature #30545 #30536 PropertyAccessor->getValue disable exception (@dimabory)
  • feature #30008 [messenger] Adds a stamp to provide a routing key on message publishing (@G15N, @sroze)
  • feature #29097 [Messenger] Add a "in-memory://" transport (@GaryPEGEOT, @sroze)
  • feature #30537 [HttpClient] logger integration (@antonch1989, @nicolas-grekas)
  • feature #30853 [Twig] Remove TemplatedEmail::template() (@fabpot)
  • feature #30757 [Messenger] Adding MessageCountAwareInterface to get transport message count (@weaverryan)
  • feature #28929 [HttpKernel][Framework] Locale aware services (@neghmurken)
  • feature #29306 [DomCrawler] Optionally use html5-php to parse HTML (@tgalopin)
  • feature #30255 [DependencyInjection] Invokable Factory Services (@zanbaldwin)
  • feature #30843 [HttpClient] Add ScopingHttpClient::forBaseUri() + tweak MockHttpClient (@nicolas-grekas)
  • feature #30844 [Cache] add logs on early-recomputation and locking (@nicolas-grekas)
  • feature #30520 [RouterDebugCommand] add link to Controllers (@nicoweb)
  • feature #30212 [DI] Add support for "wither" methods - for greater immutable services (@nicolas-grekas)
  • feature #30674 [FrameworkBundle] change the way http clients are configured by leveraging ScopingHttpClient (@nicolas-grekas)
  • feature #29312 [EventDispatcher] Split events across requests (@ro0NL)
  • feature #30827 [TwigBridge] Add template file link to debug:twig command (@yceruto)
  • feature #30826 [Form] Add file links for described classes in debug:form command (@yceruto)
  • feature #30813 New PHPUnit assertions for the WebTestCase (@Pierstoval, @fabpot)
  • feature #27738 [Validator] Add a HaveIBeenPwned password validator (@dunglas)
  • feature #30690 Changing messenger bus id from 'message_bus' to 'messenger.default_bus' (@THERAGE Kévin)
  • feature #30810 [Inflector] remove "internal" marker from the component (@nicolas-grekas)
  • feature #26890 [Inflector] Support pluralization in the inflector (@mbabker)
  • feature #28637 [Validator] add number constraints (@jschaedl)
  • feature #30754 [Messenger] New messenger:stop-workers Command (@weaverryan)
  • feature #30707 [Messenger][DX] Allow stamps to be passed directly to MessageBusInterface::dispatch() (@weaverryan)
  • feature #29007 [Messenger] Add a Doctrine transport (@vincenttouzet)
  • feature #30628 Making the serializer configurable by transport (@weaverryan)
  • feature #30569 [FrameworkBundle][HttpKernel] Provide intuitive error message when a controller fails because it's not registered as a service (@moynzzz)
  • feature #26484 [Validator] String normalization options for string-based validators (@renan-taranto)
  • feature #30320 [Form][TwigBridge] Add row_attr to form theme (@alexander-schranz)
  • feature #30371 [OptionsResolver] Add a new method addNormalizer and normalization hierarchy (@yceruto)
  • feature #27735 [Validator][DoctrineBridge][FWBundle] Automatic data validation (@dunglas)
  • feature #30758 [PropertyAccess] Allow Can Accessor in Property Access (@ragboyjr)
  • feature #30116 [Filesystem] Fix mirroring a directory into itself or in his child with realpath checks (@Fleuv, @XuruDragon)
  • feature #28879 [Debug] Mimic __toString php behavior in FlattenException (@Deltachaos)
  • feature #29495 [Ldap] Implement pagination (@kevans91)
  • feature #29448 [Ldap] Entry move support (@kevans91)
  • feature #30741 Add the Mailer component (@fabpot)
  • feature #30780 Fix some exception previous type hints (@fabpot)
  • feature #30729 [HttpKernel] change $previous argument for HttpException to \Throwable (@sGy1980de)
  • feature #30744 [Finder] Throw a dedicated exception for non-existing directory (@xelan)
  • feature #30759 [Messenger] Adding the "sync" transport to call handlers synchronously (@weaverryan)
  • feature #30772 [Contracts][EventDispatcher] move the Event class to symfony/contracts (@nicolas-grekas)
  • feature #30708 [Messenger] ReceiverInterface::handle() to get() & Worker with prioritized transports (@weaverryan)
  • feature #27648 [Lock] Added MongoDBStore (@Joe Bennett)
  • feature #30752 [HttpClient] use "nyholm/psr7" by default in Psr18Client (@nicolas-grekas)
  • feature #30671 Add optional parameter prefetching for AMQP connection (@fbouchery)
  • feature #25707 [DI] ServiceProviderInterface, implementation for ServiceLocator (@kejwmen)
  • feature #30606 [Validator] allow brackets in the optional query string (@Emmanuel BORGES)
  • feature #29476 [Messenger] Add a command to setup transports (@vincenttouzet)
  • feature #30719 [Mime] Add BodyRendererInterface (@fabpot)
  • feature #30664 [Finder] Get filename without extension (@antonch1989)
  • feature #30645 Alias for each assets package (@gpenverne)
  • feature #30706 [PropertyInfo] Add possibility to extract private and protected properties in reflection extractor (@joelwurtz)
  • feature #27808 [DI] Deprecate non-string default envs (@ro0NL)
  • feature #30691 [Contracts][EventDispatcher] add EventDispatcherInterface to symfony/contracts and use it where possible (@nicolas-grekas)
  • feature #20978 [Form] TransformationFailedException: Support specifying message to display (@ogizanagi)
  • feature #30676 Avoid dispatching SendMessageToTransportsEvent on redeliver (@weaverryan)
  • feature #26555 [Validator] Add constraint on unique elements collection(Assert\Unique) (@zenmate, @nicolas-grekas)
  • feature #27684 [FrameworkBundle] Debug container environment variables (@ro0NL)
  • feature #30666 [Form][Console] Use dumper (@ro0NL)
  • feature #30559 [HttpClient] Parse common API error formats for better exception messages (@dunglas)
  • feature #28898 [Console] Add dumper (@ro0NL)
  • feature #30629 [HttpClient] added CachingHttpClient (@fabpot)
  • feature #30602 [BrowserKit] Add support for HttpClient (@fabpot, @THERAGE Kévin)
  • feature #30651 Allow user to set the project dir (@tdutrion)
  • feature #30654 [HttpClient] Add a ScopingHttpClient (@XuruDragon)
  • feature #30388 [Security] undeprecate the RoleHierarchyInterface (@xabbuh)
  • feature #30652 Fixing a bug where messenger:consume could send message to wrong bus (@weaverryan)
  • feature #30650 Dispatching two events when a message is sent & handled (@weaverryan)
  • feature #30557 [Messenger] Worker events + global retry functionality (@weaverryan)
  • feature #30468 [Workflow] Added support for many inital places (@lyrixx)
  • feature #30448 [Finder] Ignore paths from .gitignore #26714 (@amaabdou)
  • feature #30625 [HttpKernel] add RealHttpKernel: handle requests with HttpClientInterface (@fabpot)
  • feature #30508 [Routing] Exposed "utf8" option, defaults "locale" and "format" in configuration (@Jules Pietri)
  • feature #28920 [EventDispatcher] swap arguments of dispatch() to allow registering events by FQCN (@nicolas-grekas)
  • feature #30605 [Cache] added DSN support for rediss in AbstractAdapter and RedisTrait (@alex-vasilchenko-md)
  • feature #30604 [HttpClient] add MockHttpClient (@nicolas-grekas)
  • feature #21035 [FrameworkBundle] Deprecate the Templating component integration (@dunglas, @fabpot)
  • feature #30567 [HttpClient] exceptions carry response (@antonch1989)
  • feature #28849 [Messenger] Support for handling messages after current bus is finished (@Nyholm)
  • feature #29538 [Workflow] Add colors to workflow dumps (@alexislefebvre)
  • feature #28975 [DI] Add an url EnvProcessor (@jderusse)
  • feature #30419 [FrameworkBundle] Add integration of http-client component (@Ioni14, @nicoweb)
  • feature #30583 [Messenger] Display a nice error when connection fail (@lyrixx)
  • feature #30450 [Profiler] Render the performance graph with SVG (@Tom32i)
  • feature #29130 [Serializer] Normalize constraint violation parameters (@ogizanagi)
  • feature #28330 [MonologBridge] Add monolog processors adding route and command info (@trakos)
  • feature #30339 [Monolog] Disable DebugLogger in CLI (@lyrixx)
  • feature #30584 [Intl] Add compile binary (@ro0NL)
  • feature #30579 Using AMQP auto-setup in all cases, not just in debug (@weaverryan)
  • feature #30348 [DependencyInjection] Add ability to define an index for service in an injected service locator argument (@XuruDragon, @nicolas-grekas)
  • feature #30469 Create a hyperlink to interfaces/classes that can be autowired (@SerkanYildiz)
  • feature #30334 [DI] add ReverseContainer: a locator that turns services back to their ids (@nicolas-grekas)
  • feature #30539 [Messenger] deprecate LoggingMiddleware in favor of providing a logger to SendMessageMiddleware (@nicolas-grekas)
  • feature #30556 [HttpClient] Allow to pass user/pw as an array (@dunglas)
  • feature #30547 [HttpClient] Add new bearer option (@dunglas)
  • feature #29303 [Messenger] add welcome notice when running the command (@nicolas-grekas)
  • feature #30541 [BrowserKit] Rename Client to Browser (@fabpot)
  • feature #30504 [DI] replace "nullable" env processor by improving the "default" one (@nicolas-grekas)
  • feature #30499 [HttpClient] add ResponseInterface::toArray() (@nicolas-grekas)
  • feature #30472 [Translation] Add XLIFF 1 source to metadata to differentiate from attr (@ostrolucky)
  • feature #30484 [Mime] added Headers::toArray() (@fabpot)
  • feature #30482 [Mime] Fix support for date form parts (@fabpot)
  • feature #30385 [SecurityBundle] Validate the IPs configured in access_control (@javiereguiluz)
  • feature #30413 [HttpClient][Contracts] introduce component and related contracts (@nicolas-grekas)
  • feature #30377 [Validator] add MIR card scheme (@antonch1989)
  • feature #29146 [Workflow] Added a context to Workflow::apply() (@lyrixx)
  • feature #30433 [Form] Allow to disable and customize PercentType symbol (@Ken Stanley, @OskarStark)
  • feature #30408 [HttpKernel] Better exception page when the invokable controller returns nothing (@dimabory)
  • feature #30325 [HttpKernel] Prevent search engines from indexing dev applications (@GaryPEGEOT)
  • feature #30390 [FrameworkBundle] Fix UrlGenerator::generate to return an empty string instead of null (@Emmanuel BORGES)
  • feature #30375 [Messenger] Added transport agnostic exception (@nikossvnk, @lolmx)
  • feature #29254 [FrameworkBundle] Added the condition routing option to the debug router command (@soufianZantar)
  • feature #30286 Drop more usages of Serializable (@nicolas-grekas)
  • feature #30379 [FrameworkBundle][Routing] allow boolean container parameters for routes (@dmaicher)
  • feature #29661 [Filesystem] Support resources and deprecate using arrays in dumpFile() and appendToFile() (@thewilkybarkid)
  • feature #30358 [Form] be able to specify the input format for times (@xabbuh)
  • feature #30416 Mime messages (@fabpot)
  • feature #22048 [Security] deprecate the Role and SwitchUserRole classes (@xabbuh)
  • feature #30345 [Monolog] Added a way to configure the ConsoleFormatter from the ConsoleHandler (@lyrixx)
  • feature #30357 [TwigBridge] rename parent_form() to form_parent() (@xabbuh)
  • feature #30257 [DependencyInjection] Allow to choose an index for tagged collection (@deguif, @XuruDragon)
  • feature #30311 [VarDumper] Implement DsCaster (@enumag)
  • feature #27570 [PropertyInfo] Added support for extract type from default value (@tsantos84)
  • feature #28919 [DX][WebProfilerBundle] Add Pretty Print functionality for Request Content (@SamFleming)
  • feature #28723 [Form] deprecate custom formats with HTML5 widgets (@xabbuh)
  • feature #29865 [Console] Added suggestions for missing packages (@przemyslaw-bogusz)
  • feature #30301 [VarDumper] add link to source next to class names (@nicolas-grekas)
  • feature #30225 publish message with custom queue options : flags | attributes (@fedor.f, @insidestyles)
  • feature #30249 [Routing] deprecate some router options (@Tobion)
  • feature #30267 [Form] add option to render NumberType as type="number" (@xabbuh)
  • feature #28969 [Form] deprecate using invalid names for buttons (@xabbuh)
  • feature #29887 [Form] Add input_format option to DateType and DateTimeType (@fancyweb)
  • feature #30051 Drop \Serializable implementations (@renanbr)
  • feature #30236 Add element to ghost in Exception (@przemyslaw-bogusz)
  • feature #30120 [FrameworkBundle][Translation] Added support for PHP files with trans() in translation commands (@yceruto)
  • feature #28812 [Form] add a convenience method to get the parent form in Twig templates (@xabbuh)
  • feature #29121 [FrameworkBundle][Translation] Add support for Translator paths, Twig paths and Translator aware services paths in commands (@yceruto)
  • feature #28477 [Validator] Add new json Validator (@zairigimad)
  • feature #30126 [Form] forward valid numeric values to transform() (@xabbuh)
  • feature #28635 [Form] Add label_translation_parameters, help_translation_parameters and attr_translation_parameters options to base form type (@webnet-fr)
  • feature #29767 Nullable environment variable processor (@bpolaszek)
  • feature #30111 [SecurityBundle] Deprecate the normalization of the cookie names (@javiereguiluz)
  • feature #30027 [FrameworkBundle] Add sid_length and sid_bits_per_character session ini options in session configuration (@XuruDragon)
  • feature #30075 [DependencyInjection] Added information about deprecated aliases in debug:autowiring (@XuruDragon)
  • feature #30024 [Debug] Display more details in the simple error page of Debug (@javiereguiluz)
  • feature #30052 [Security] Replace serialization API (@renanbr)
  • feature #27898 [Yaml] Fixed invalid Parser behavior (@guiguiboy)
  • feature #29753 [Console] Add an iterate method to the ProgressBar class (@jvasseur)
  • feature #29999 [PropertyAccess] speed up accessing object properties (@xabbuh)
  • feature #29641 [Validator] NotBlank: add a new option to allow null values (@dunglas)
  • feature #28721 [Form] deprecate some options for single_text widgets (@xabbuh)
  • feature #29936 [Mime] Add a set of default content-types for some extensions (@fabpot)
  • feature #28865 [Routing] allow using compiled matchers and generators without dumping PHP code (@nicolas-grekas)
  • feature #29236 [Cache] deprecate all PSR-16 adapters, provide Psr16Cache instead (@nicolas-grekas)
  • feature #29958 introducing native php serialize() support for Messenger transport (@weaverryan, @xabbuh)
  • feature #29861 [Form][TwigBridge] Add help_html (@mpiot)
  • feature #29968 [DI] Added support for deprecating aliases (@j92, @Renan)
  • feature #29850 [FrameworkBundle] xliff-version option to translation update command (@andrewwro)
  • feature #29896 [Mime] Add the component (@fabpot)
  • feature #29862 Add block prefix to csrf token field (@alexander-schranz)
  • feature #29881 [BrowserKit] Various changes to the Response class (@fabpot)
  • feature #29813 [FrameworkBundle] Remove ControllerTrait::isFormValid() (@lyrixx)
  • feature #29148 Load original file metadata when loading Xliff 1.2 files (@eternoendless)
  • feature #29840 [FrameworkBundle] pass project dir into the assets install command (@xabbuh)
  • feature #29821 [VarDumper] add caster for OpenSSL X.509 resources (@nicolas-grekas)
  • feature #29781 [DI] Add trim env processor (@ogizanagi)
  • feature #28902 [Debug] Detect virtual methods using @method (@ro0NL)
  • feature #29780 [Profiler] Still show locale and fallback locale even if no trans used (@ogizanagi)
  • feature #29680 [Form] Add new block_prefix option for an easy form theming (@yceruto)
  • feature #29528 [DebugBundle] Added 'theme' option to change the color of dump() when rendered inside templates (@dem3trio)
  • feature #24576 [FrameworkBundle] Added ControllerTrait::isFormValid (@lyrixx)
  • feature #29483 [HttpKernel] Set the default locale early (@thewilkybarkid)
  • feature #29186 [HttpKernel] Increase priority of AddRequestFormatsListener (@thewilkybarkid)
  • feature #29658 [Validator] Choices constraint improvement (@nikophil)
  • feature #29283 [Serializer] CsvEncoder no header option (encode / decode) (@redecs)
  • feature #29718 [PHPUnit bridge] Bump php version of PHPUnit-bridge (@gmponos)
  • feature #29599 [Routing] Allow force-generation of trailing parameters using eg "/exports/news.{!_format}" (@zavulon)
  • feature #29613 [VarDumper] Use hyperlinks in CliDescriptor (@ogizanagi)
  • feature #28581 [DomCrawler] return empty string on Crawler::text() and Crawler::html() instead of an exception (@respinoza)
  • feature #29286 [WebProfilerBundle] Enable translation filters (@ro0NL)
  • feature #29517 [Hackday][Messenger] Add an alias for transport.symfony_serializer so SerializerInterface can be autowired (@karser)
  • feature #29108 [DI] compute autowiring error messages lazily (@nicolas-grekas)
  • feature #29235 [VarDumper] add support for links in CliDumper (@nicolas-grekas)
  • feature #29541 [FrameworkBundle] Stop calling Kernel::boot() twice in cli (@chalasr)
  • feature #28931 [PhpUnitBridge] Added ClassExistsMock (@ro0NL)
  • feature #29504 [Validator] Add support for UATP card validation (@raulfraile)
  • feature #29168 [Console] Add hyperlinks support (@ostrolucky)
  • feature #29439 [PhpUnitBridge] install PHPUnit 7 on PHP 7.1 and fix requir. for PHPUnit 6 (@gregurco)
  • feature #29452 [Form] Shortcut debug:form for partial type name (@ro0NL)
  • feature #28954 [Debug] Mark ErrorHandler and ExceptionHandler classes as final (@fancyweb)
  • feature #28479 [Validator] Checking a BIC along with an IBAN (@sylfabre)
  • feature #28858 [DI] Deprecated using env vars with cannotBeEmpty() (@ro0NL)
  • feature #28976 [DI] Add a "default" EnvProcessor (@jderusse)
  • feature #29127 [DomCrawler] Added return of element name in extract() method (@andrey-helldar)
  • feature #29145 [Workflow] Trigger entered event for subject entering in the Workflow for the first time (@lyrixx)

[PR] https://github.com/symfony/symfony/pull/31435

Changelog (since https://github.com/symfony/symfony/compare/v4.2.7...v4.2.8)

  • bug #31338 Revert "bug #30620 [FrameworkBundle][HttpFoundation] make session service resettable (dmaicher)" (@nicolas-grekas)
  • bug #31326 fix ConsoleFormatter - call to a member function format() on string (@keksa)
  • bug #31331 [Workflow] Fixed dumping when many transition with same name exist (@lyrixx)
  • bug #31302 [FramworkBundle] mark any env vars found in the ide setting as used (@nicolas-grekas)
  • bug #31290 [TwigBundle] Use the apply tag instead of the filter tag (@greg0ire)
  • bug #31275 [Translator] Preserve default domain when extracting strings from php files (@Stadly)
  • bug #31240 Fix url matcher edge cases with trailing slash (@arjenm)
  • bug #31201 [Form] resolve class name parameters (@xabbuh)
  • bug #31213 [WebProfilerBundle] Intercept redirections only for HTML format (@javiereguiluz)
  • bug #31210 [PhpUnitBridge] fix reading phpunit.xml on bootstrap (@nicolas-grekas)
  • bug #31023 [Routing] Fix route URL generation in CLI context (@X-Coder264)
  • bug #31117 [FrameworkBundle] fix math depth handler configuration (@Raulnet)
  • bug #31182 [Routing] fix trailing slash matching with empty-matching trailing vars (@nicolas-grekas)
  • bug #31167 [Routing] fix matching trailing vars with defaults (@nicolas-grekas)
  • bug #31164 [Validator] fix LegacyTranslatorProxy (@nicolas-grekas)
  • bug #31156 [FrameworkBundle] call method with Translator component only (@xabbuh)

[PR] https://github.com/symfony/symfony/pull/31347

Changelog (since https://github.com/symfony/symfony/compare/v4.2.6...v4.2.7)

  • bug #31107 [Routing] fix trailing slash redirection with non-greedy trailing vars (@nicolas-grekas)
  • bug #31108 [FrameworkBundle] decorate the ValidatorBuilder's translator with LegacyTranslatorProxy (@nicolas-grekas)
  • bug #31121 [HttpKernel] Fix get session when the request stack is empty (@yceruto)
  • bug #31084 [HttpFoundation] Make MimeTypeExtensionGuesser case insensitive (@vermeirentony)
  • bug #31142 Revert "bug #30423 [Security] Rework firewall's access denied rule (dimabory)" (@chalasr)
  • security #cve-2019-10910 [DI] Check service IDs are valid (@nicolas-grekas)
  • security #cve-2019-10909 [FrameworkBundle][Form] Fix XSS issues in the form theme of the PHP templating engine (@stof)
  • security #cve-2019-10912 [Cache][PHPUnit Bridge] Prevent destructors with side-effects from being unserialized (@nicolas-grekas)
  • security #cve-2019-10911 [Security] Add a separator in the remember me cookie hash (@pborreli)
  • security #cve-2019-10913 [HttpFoundation] reject invalid method override (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/31148
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v4.1.11...v4.1.12)

  • security #cve-2019-10910 [DI] Check service IDs are valid (@nicolas-grekas)
  • security #cve-2019-10909 [FrameworkBundle][Form] Fix XSS issues in the form theme of the PHP templating engine (@stof)
  • security #cve-2019-10912 [Cache][PHPUnit Bridge] Prevent destructors with side-effects from being unserialized (@nicolas-grekas)
  • security #cve-2019-10911 [Security] Add a separator in the remember me cookie hash (@pborreli)
  • security #cve-2019-10913 [HttpFoundation] reject invalid method override (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/31147
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v4.2.5...v4.2.6)

  • bug #31088 [DI] fix removing non-shared definition while inlining them (@nicolas-grekas)
  • bug #29944 [DI] Overriding services autowired by name under _defaults bind not working (@przemyslaw-bogusz, @renanbr)
  • bug #30993 [FrameworkBundle] Fix for Controller DEPRECATED when using composer --optimized (@aweelex)
  • bug #31076 [HttpKernel] Fixed LoggerDataCollector crashing on empty file (@althaus)
  • bug #31071 property normalizer should also pass format and context to isAllowedAttribute (@dbu)
  • bug #31059 Show more accurate message in profiler when missing stopwatch (@linaori)
  • bug #31026 [Serializer] Add default object class resolver (@jdecool)
  • bug #31031 [Serializer] MetadataAwareNameConverter: Do not assume that property names are strings (@soyuka)
  • bug #31043 [VarExporter] support PHP7.4 __serialize & __unserialize (@nicolas-grekas)
  • bug #30423 [Security] Rework firewall's access denied rule (@dimabory)
  • bug #31020 [VarExporter] fix exporting classes with private constructors (@nicolas-grekas)
  • bug #31012 [Process] Fix missing $extraDirs when open_basedir returns (@arsonik)
  • bug #30852 [Console] fix buildTableRows when Colspan is use with content too long (@Raulnet)
  • bug #30950 [Serializer] Also validate callbacks when given in the normalizer context (@dbu)
  • bug #30907 [Serializer] Respect ignored attributes in cache key of normalizer (@dbu)
  • bug #30085 Fix TestRunner compatibility to PhpUnit 8 (@alexander-schranz)
  • bug #30999 Fix dark themed componnents (@ro0NL)
  • bug #30977 [serializer] prevent mixup in normalizer of the object to populate (@dbu)
  • bug #30976 [Debug] Fixed error handling when an error is already handled when another error is already handled (5) (@lyrixx)
  • bug #30979 Fix the configurability of CoreExtension deps in standalone usage (@stof)
  • bug #30918 [Cache] fix using ProxyAdapter inside TagAwareAdapter (@dmaicher)
  • bug #30961 [Form] fix translating file validation error message (@xabbuh)
  • bug #30951 Handle case where no translations were found (@greg0ire)
  • bug #29800 [Validator] Only traverse arrays that are cascaded into (@corphi)
  • bug #30921 [Translator] Warm up the translations cache in dev (@tgalopin)
  • bug #30922 [TwigBridge] fix horizontal spacing of inlined Bootstrap forms (@xabbuh)
  • bug #30860 [Profiler] Fix dark theme elements color (@dFayet)
  • bug #30895 [Form] turn failed file uploads into form errors (@xabbuh)
  • bug #30919 [Translator] Fix wrong dump for PO files (@deguif)
  • bug #30889 [DependencyInjection] Fix a wrong error when using a factory (@Simperfit)
  • bug #30911 [Console] Fix table trailing backslash (@maidmaid)
  • bug #30903 [Messenger] Uses the SerializerStamp when deserializing the envelope (@sroze)
  • bug #30879 [Form] Php doc fixes and cs + optimizations (@Jules Pietri)
  • bug #30883 [Console] Fix stty not reset when aborting in QuestionHelper::autocomplete() (@Simperfit)
  • bug #30878 [Console] Fix inconsistent result for choice questions in non-interactive mode (@chalasr)
  • bug #30825 [Routing] Fix: annotation loader ignores method's default values (@voronkovich)

[PR] https://github.com/symfony/symfony/pull/31125

Changelog (since https://github.com/symfony/symfony/compare/v4.2.4...v4.2.5)

  • bug #30660 [Bridge][Twig] DebugCommand - fix escaping and filter (@SpacePossum)
  • bug #30784 [Translator] Add resource path to exception message for schema valida… (@jschaedl)
  • bug #30720 Fix getSetMethodNormalizer to correctly ignore the attributes specified in "ignored_attributes" (@Emmanuel BORGES)
  • bug #30749 [Serializer] Added check of constuctor modifiers to AbstractNormalizer (@NekaKawaii)
  • bug #30776 [Routing] Fix routes annotation loading with glob pattern (@snoob)
  • bug #30773 [DependencyInjection] Fix hardcoded hotPathTagName (@jderusse)
  • bug #30737 [Validator] Improve constraint default option check (@vudaltsov)
  • bug #30736 [Validator] Fix annotation default for @Count and @Length (@vudaltsov)
  • bug #30621 [Cache] Ensure key exists before checking array value (@jrjohnson)
  • bug #30711 [Serializer] Use object class resolver when extracting attributes (@joelwurtz)
  • bug #30641 [FrameworkBundle] properly describe service definitions without class (@xabbuh)
  • bug #30620 [FrameworkBundle][HttpFoundation] make session service resettable (@dmaicher)
  • bug #30648 Debug finalized config in debug:config (@ro0NL)
  • bug #30640 [Phpunit] fixed support for PHP 5.3 (@fabpot)
  • bug #30616 Fix case when multiple loaders are providing paths for the same namespace (@yceruto)
  • bug #30595 Do not validate child constraints if form has no validation groups (@maryo)
  • bug #30440 [TwigBridge] Fix DebugCommand when chain loader is involved (@yceruto)
  • bug #30479 Check if Client exists when test.client does not exist, to provide clearer exception message (@SerkanYildiz)
  • bug #30597 [Form] Added ResetInterface to CachingFactoryDecorator (@HeahDude)
  • bug #30593 Fixed usage of TranslatorInterface in form extension (fixes #30591) (@althaus)
  • feature #30584 [Intl] Add compile binary (@ro0NL)
  • bug #30487 Fix Cache error while using anonymous class (@Emmanuel BORGES)
  • bug #30576 [Cache] fix LockRegistry (@nicolas-grekas)
  • bug #30548 Correct language code for ukrainian language (@stanleyk)
  • bug #30518 [Cache] Fix perf when using RedisCluster by reducing roundtrips to the servers (@nicolas-grekas)
  • bug #30515 [Cache] Only delete one key at a time when on Predis + Cluster (@andrerom)
  • bug #30511 [Process] fix using argument $php of new PhpProcess() (@nicolas-grekas)
  • bug #30507 [Routing] Fixed XML options resolution (@Jules Pietri)
  • bug #30506 [TwigBridge] remove deprecation triggered when using Twig 2.7 (@nicolas-grekas)
  • bug #30496 [PHPUnit-Bridge] override some Composer environment variables (@nicoweb)
  • bug #30505 [TwigBridge] Remove usages of the spaceless tag (@nicolas-grekas)
  • bug #30466 [Messenger] Make 'headers' key optional for encoded messages (@yceruto)
  • bug #30474 compatibility with phpunit8 (@garak)
  • bug #30497 [HttpKernel] Change default log level for output streams (@yceruto)
  • bug #30498 [translation] Update defaut format from yml to yaml (@GaryPEGEOT)
  • bug #30490 Don't resolve the Deprecation error handler mode until a deprecation is triggered (@Emmanuel BORGES)
  • bug #30396 [Form] Avoid a form type extension appears many times in debug:form (@markitosgv)
  • bug #30361 [PropertyInfo] Fix undefined variable fromConstructor when passing context to getTypes (@mantis)
  • bug #30361 [PropertyInfo] Fix undefined variable fromConstructor when passing context to getTypes (@mantis, @OskarStark)
  • bug #30410 [Monolog] Really reset logger when calling logger::reset() (@lyrixx)
  • bug #30437 [Debug] detect annotations before blank docblock lines (@xabbuh)
  • bug #30417 Autoconfig: don't automatically tag decorators (@dunglas)
  • bug #30392 [PropertyAccess] Fixed PropertyPathBuilder remove that fails to reset internal indexes (@GregOriol)

[PR] https://github.com/symfony/symfony/pull/30838

Changelog (since https://github.com/symfony/symfony/compare/v4.2.3...v4.2.4)

  • bug #30383 [WebProfilerBundle] toolbar: invisible route name in Firefox (@inmarelibero)
  • bug #26532 [HttpKernel] Correctly merging cache directives in HttpCache/ResponseCacheStrategy (@aschempp)
  • bug #30363 Fixed the DebugClassLoader compatibility with eval()'d code on Darwin (@skalpa)
  • bug #30329 [Form] IntegerType: reject submitted non-integer numbers (@xabbuh)
  • bug #30331 [Cache] fix warming up cache.system and apcu (@nicolas-grekas)
  • bug #30347 [Security] Change FormAuthenticator if condition (@PReimers)
  • bug #30354 [Console] handles multi-byte characters in autocomplete (@jls-esokia)
  • bug #30351 Fix getItems() performance issue with RedisCluster (php-redis) (@andrerom)
  • bug #30350 [VarDumper] Keep a ref to objects to ensure their handle cannot be reused while cloning (@nicolas-grekas)
  • bug #30327 [HttpKernel] Fix possible infinite loop of exceptions (@enumag)
  • bug #27601 [Routing] fix URL generation with look-around requirements (@nasimnabavi)
  • bug #30277 [Console] Prevent ArgvInput::getFirstArgument() from returning an option value (@chalasr)
  • bug #29981 [Security] Complain about an empty decision strategy (@corphi)
  • bug #29822 [EventDispatcher] Fix unknown priority (@ro0NL)
  • bug #30324 [Validator] Fixed duplicate UUID (@ralfkuehnel)
  • bug #30265 [Form] do not validate non-submitted form fields in PATCH requests (@xabbuh)
  • bug #30313 Avoid mutating the Finder when building the iterator (@stof)
  • bug #30294 [FrameworkBundle] Fix Descriptor throwing on non existent parent (@GuilhemN)
  • bug #30271 [Console] Fix command testing with missing user inputs (@chalasr)
  • bug #30278 Remove unnecessary ProgressBar stdout writes (fixes flickering) (@ostrolucky)
  • bug #30274 [VarDumper] fix serializing Stub instances (@nicolas-grekas)
  • bug #30273 [Validator] Added missing use statement for UnexpectedTypeException (@devrck)
  • bug #30247 Don't resolve the Deprecation error handler mode until a deprecation is triggered (@ossinkine)
  • bug #30264 [Debug][ErrorHandler] Preserve next error handler (@fancyweb)
  • bug #30245 fix lost namespace in eval (@fizzka)
  • bug #30090 [FrameworkBundle] add constraint validators before optimizations (@xabbuh)
  • feature #30126 [Form] forward valid numeric values to transform() (@xabbuh)
  • bug #30122 [Security] fix switch user without having current token (@Antoine Lamirault)
  • bug #30136 use PropertyAccessorInterface instead of PropertyAccessor (@nick-zh)
  • bug #30124 Fix KernelTestCase compatibility for PhpUnit 8 (bis) (@nicolas-grekas)
  • bug #30061 [Form] render integer types with grouping as text input (@xabbuh)
  • bug #30063 [Form] don't lose int precision with not needed type casts (@xabbuh)
  • bug #30076 [Form] ignore _method forms in NativeRequestHandler (@xabbuh)
  • bug #30084 Fix KernelTestCase compatibility for PhpUnit 8 (@alexander-schranz)
  • bug #30093 [DependencyInjection] add $lazyLoad context to the generated code for lazy non-shared service by PhpDumper (@XuruDragon)
  • bug #30102 [Workflow] Graphviz dumper escape not always a string (@Korbeil)
  • bug #29884 [Form] CsrfValidationListener marks the token as invalid if it is not a string (@umpirsky)
  • bug #30058 [Routing] fix perf issue when dumping large number of routes (@nicolas-grekas)
  • bug #30062 [Form] do not overwrite the constraint being evaluated (@xabbuh)
  • bug #30074 Fix wrong value in file id attribute for Xliff 2.0 (@deguif)
  • bug #30078 [Messenger] Fix DataCollector template (@ottaviano)
  • bug #30087 [PhpUnitBridge] fix PHP 5.3 compat (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/30431

Changelog (since https://github.com/symfony/symfony/compare/v4.2.2...v4.2.3)

  • bug #30050 [Cache] fix pruning pdo cache for vendors that throw on execute (@bendavies)
  • bug #30046 [DI] Fix dumping Doctrine-like service graphs (@nicolas-grekas)
  • bug #30028 [Form] fix some docblocks and type checks (@xabbuh)
  • bug #30037 Disable Twig in the profiler menu when Twig is not used (@javiereguiluz)
  • bug #30026 [VarDumper] dont implement Serializable in Stub (@nicolas-grekas)
  • bug #30034 [Config] ensure moving away from Serializable wont break cache:clear (@nicolas-grekas)
  • bug #29532 [Messenger] fixed RabbitMQ arguments not passed as integer values (@thePanz)
  • bug #30013 [Routing] dont redirect routes with greedy trailing vars with no explicit slash (@nicolas-grekas)
  • bug #30006 [Security] don't do nested calls to serialize() (@nicolas-grekas, @Renan)
  • bug #30007 [FrameworkBundle] Support use of hyphen in asset package name (@damaya, @XuruDragon)
  • bug #30004 Fix format strings for deprecation notices (@TysonAndre)
  • bug #29984 [VarDumper] Fixed search bar (@ro0NL)
  • bug #29764 [HttpFoundation] Check file exists before unlink (@adam-mospan)
  • bug #29783 [HttpFoundation] MemcachedSessionHandler::close() must close connection (@grachevko)
  • bug #29794 Always pass $key to NullAdapter->createCacheItem (@TysonAndre)
  • bug #29844 [Console] Fixed #29835: ConfirmationQuestion with default true for answer '0' (@mrthehud)
  • bug #29869 [Debug][ErrorHandler] Preserve our error handler when a logger sets another one (@fancyweb)
  • bug #29900 [Cache] PDO-based cache pool table autocreation does not work (@errogaht)
  • bug #29926 [Form] Changed UrlType input type to text when default_protocol is not null (@MatTheCat)
  • bug #29961 [Translation] Concatenated translation messages (@Stadly)
  • bug #29847 [Cache] fix used variable name (@xabbuh)
  • bug #29920 [Debug][DebugClassLoader] Match more cases for final, deprecated and internal classes / methods extends (@fancyweb)
  • bug #29922 Avoid dots in generated class names (@derrabus)
  • bug #29863 [Security] Do not mix password_*() API with libsodium one (@chalasr)
  • bug #29894 [DependencyInjection] the string "0" is a valid service identifier (@xabbuh)
  • bug #29885 Update MimeType extensions (@fabpot)
  • bug #29875 [TwigBridge] fix compatibility with Twig >= 2.6.1 (@xabbuh)
  • bug #29873 [Debug] remove return type hint for PHP 5 compatibility (@xabbuh)
  • bug #29837 Fix SwiftMailerHandler to support Monolog's latest reset functionality (@Seldaek)
  • bug #29853 Revert "bug #29597 [DI] fix reporting bindings on overriden services as unused" (@mmarynich)
  • bug #29833 [DebugClassLoader] expose proxyfied findFile() method (@fancyweb)

[PR] https://github.com/symfony/symfony/pull/30068

Changelog (since https://github.com/symfony/symfony/compare/v4.1.10...v4.1.11)

  • bug #30013 [Routing] dont redirect routes with greedy trailing vars with no explicit slash (@nicolas-grekas)
  • bug #30006 [Security] don't do nested calls to serialize() (@nicolas-grekas, @Renan)
  • bug #30007 [FrameworkBundle] Support use of hyphen in asset package name (@damaya, @XuruDragon)
  • bug #29764 [HttpFoundation] Check file exists before unlink (@adam-mospan)
  • bug #29783 [HttpFoundation] MemcachedSessionHandler::close() must close connection (@grachevko)
  • bug #29844 [Console] Fixed #29835: ConfirmationQuestion with default true for answer '0' (@mrthehud)
  • bug #29869 [Debug][ErrorHandler] Preserve our error handler when a logger sets another one (@fancyweb)
  • bug #29926 [Form] Changed UrlType input type to text when default_protocol is not null (@MatTheCat)
  • bug #29961 [Translation] Concatenated translation messages (@Stadly)
  • bug #29920 [Debug][DebugClassLoader] Match more cases for final, deprecated and internal classes / methods extends (@fancyweb)
  • bug #29863 [Security] Do not mix password_*() API with libsodium one (@chalasr)
  • bug #29894 [DependencyInjection] the string "0" is a valid service identifier (@xabbuh)
  • bug #29885 Update MimeType extensions (@fabpot)
  • bug #29875 [TwigBridge] fix compatibility with Twig >= 2.6.1 (@xabbuh)
  • bug #29873 [Debug] remove return type hint for PHP 5 compatibility (@xabbuh)
  • bug #29837 Fix SwiftMailerHandler to support Monolog's latest reset functionality (@Seldaek)
  • bug #29853 Revert "bug #29597 [DI] fix reporting bindings on overriden services as unused" (@mmarynich)
  • bug #29833 [DebugClassLoader] expose proxyfied findFile() method (@fancyweb)

[PR] https://github.com/symfony/symfony/pull/30016

Changelog (since https://github.com/symfony/symfony/compare/v4.2.1...v4.2.2)

  • bug #29494 [HttpFoundation] Fix request uri when it starts with double slashes (@alquerci)
  • bug #29697 [DI] Fixed wrong factory method in exception (@Wojciech Gorczyca)
  • bug #29679 [HttpKernel] Correctly Render Signed URIs Containing Fragments (@zanbaldwin)
  • bug #29754 Ensure final input of CommandTester works with default (@Firehed)
  • bug #29695 [Form] Do not ignore the choice groups for caching (@vudaltsov)
  • bug #29738 [Intl] handle null date and time types (@xabbuh)
  • bug #29708 [FrameworkBundle] access the container getting it from the kernel (@xabbuh)
  • bug #29676 [HttpFoundation] Fix erasing cookies issue (@eiannone)
  • bug #29741 [VarExporter] fix exporting array indexes (@xabbuh)
  • bug #29704 [FrameworkBundle] improve errors in tests missing the BrowserKit component (@xabbuh)
  • bug #29721 [SecurityBundle] Fix traceable voters (@ro0NL)
  • bug #29617 [Console] Add specific replacement for help text in single command applications (@codedmonkey)
  • bug #29714 [Event Dispatcher] fixed 29703: TraceableEventDispatcher reset() callStack to null (@mlievertz)
  • bug #29597 [DI] fix reporting bindings on overriden services as unused (@nicolas-grekas)
  • bug #29639 [Yaml] detect circular references (@xabbuh)
  • bug #29644 [Cache] fix bad optim (@nicolas-grekas)
  • bug #29648 [Cache] fix Simple\Psr6Cache proxying of metadata (@nicolas-grekas)
  • bug #29569 [FrameworkBundle] decouple debug:autowiring from phpdocumentor/reflection-docblock (@SerkanYildiz)
  • bug #29546 [DI] map snake-case ids of service subscribers to camel-case autowiring aliases (@nicolas-grekas)
  • bug #29409 Fix env fallback to an unresolved variable (@jderusse)
  • bug #29626 [Routing] fix trailing slash redirections involving a trailing var (@nicolas-grekas)
  • bug #29411 [EventDispatcher] Revers event tracing order (@ro0NL)
  • bug #29533 Fixed public directory when configured in composer.json (@alexander-schranz)
  • bug #29619 [Console] OutputFormatter: move strtolower to createStyleFromString (@ogizanagi)
  • bug #29621 [Security] Prefer clone() over unserialize(serialize()) for user refreshment (@chalasr)
  • bug #29591 [Cache] Fix undefined variable in ArrayTrait (@eXtreme)
  • bug #29558 [Messenger] Restore message handlers laziness (@chalasr)
  • bug #29589 [VarExporter] dont call userland code with uninitialized objects (@nicolas-grekas)
  • bug #29542 [Routing] fix dumping same-path routes with placeholders (@nicolas-grekas)
  • bug #29587 [Debug] ignore underscore vs backslash namespaces in DebugClassLoader (@nicolas-grekas)
  • bug #29584 [FrameworkBundle] fix describing routes with no controllers (@nicolas-grekas)
  • bug #29582 [DI] move RegisterServiceSubscribersPass before DecoratorServicePass (@kbond)
  • bug #29527 [TwigBridge][Form] Prevent multiple rendering of form collection prototypes (@Shoplifter)
  • bug #29571 [Yaml] ensures that the mb_internal_encoding is reset to its initial value (@Jörn Lang)
  • bug #29513 [Hackday][Serializer] Deserialization ignores argument type hint from phpdoc for array in constructor argument (@karser)
  • bug #29323 [Security] defer log message in guard authenticator (@eschultz-magix)
  • bug #29539 [WebProfilerBundle][TwigBundle] CSS fixes (@ro0NL)
  • bug #29543 [Cache] Don't erase processed redis dsn (@chalasr)
  • bug #29531 [Validator] Added IBAN format for Vatican City State (@raulfraile)
  • bug #29501 [Form] filter out invalid language values (@xabbuh)
  • bug #29307 [Form] Filter arrays out of scalar form types (@nicolas-grekas)
  • bug #29500 [Form] filter out invalid Intl values (@xabbuh)
  • bug #29499 [Validator] Fixed grouped composite constraints (@HeahDude)

[PR] https://github.com/symfony/symfony/pull/29803

Changelog (since https://github.com/symfony/symfony/compare/v4.1.9...v4.1.10)

  • bug #29494 [HttpFoundation] Fix request uri when it starts with double slashes (@alquerci)
  • bug #29697 [DI] Fixed wrong factory method in exception (@Wojciech Gorczyca)
  • bug #29679 [HttpKernel] Correctly Render Signed URIs Containing Fragments (@zanbaldwin)
  • bug #29754 Ensure final input of CommandTester works with default (@Firehed)
  • bug #29695 [Form] Do not ignore the choice groups for caching (@vudaltsov)
  • bug #29738 [Intl] handle null date and time types (@xabbuh)
  • bug #29708 [FrameworkBundle] access the container getting it from the kernel (@xabbuh)
  • bug #29704 [FrameworkBundle] improve errors in tests missing the BrowserKit component (@xabbuh)
  • bug #29617 [Console] Add specific replacement for help text in single command applications (@codedmonkey)
  • bug #29714 [Event Dispatcher] fixed 29703: TraceableEventDispatcher reset() callStack to null (@mlievertz)
  • bug #29597 [DI] fix reporting bindings on overriden services as unused (@nicolas-grekas)
  • bug #29639 [Yaml] detect circular references (@xabbuh)
  • bug #29626 [Routing] fix trailing slash redirections involving a trailing var (@nicolas-grekas)
  • bug #29411 [EventDispatcher] Revers event tracing order (@ro0NL)
  • bug #29533 Fixed public directory when configured in composer.json (@alexander-schranz)
  • bug #29619 [Console] OutputFormatter: move strtolower to createStyleFromString (@ogizanagi)
  • bug #29621 [Security] Prefer clone() over unserialize(serialize()) for user refreshment (@chalasr)
  • bug #29542 [Routing] fix dumping same-path routes with placeholders (@nicolas-grekas)
  • bug #29587 [Debug] ignore underscore vs backslash namespaces in DebugClassLoader (@nicolas-grekas)
  • bug #29584 [FrameworkBundle] fix describing routes with no controllers (@nicolas-grekas)
  • bug #29582 [DI] move RegisterServiceSubscribersPass before DecoratorServicePass (@kbond)
  • bug #29527 [TwigBridge][Form] Prevent multiple rendering of form collection prototypes (@Shoplifter)
  • bug #29571 [Yaml] ensures that the mb_internal_encoding is reset to its initial value (@Jörn Lang)
  • bug #29513 [Hackday][Serializer] Deserialization ignores argument type hint from phpdoc for array in constructor argument (@karser)
  • bug #29323 [Security] defer log message in guard authenticator (@eschultz-magix)
  • bug #29531 [Validator] Added IBAN format for Vatican City State (@raulfraile)
  • bug #29501 [Form] filter out invalid language values (@xabbuh)
  • bug #29307 [Form] Filter arrays out of scalar form types (@nicolas-grekas)
  • bug #29500 [Form] filter out invalid Intl values (@xabbuh)
  • bug #29499 [Validator] Fixed grouped composite constraints (@HeahDude)

[PR] https://github.com/symfony/symfony/pull/29802

Changelog (since https://github.com/symfony/symfony/compare/v4.2.0...v4.2.1)

  • security #cve-2018-19790 [Security\Http] detect bad redirect targets using backslashes (@xabbuh)
  • security #cve-2018-19789 [Form] Filter file uploads out of regular form types (@nicolas-grekas)
  • bug #29481 [TwigBridge] Deprecating legacy Twig paths in DebugCommand and simplifications (@yceruto)
  • bug #29436 [Cache] Fixed Memcached adapter doClear()to call flush() (@raitocz)
  • bug #29482 Fixes sprintf(): Too few arguments in MessageFormatter::choiceFormat (@stephanedelprat)
  • bug #29461 [Contracts] extract LocaleAwareInterface out of TranslatorInterface (@nicolas-grekas)
  • bug #29446 [VarExporter] fix dumping private properties from abstract classes (@nicolas-grekas)
  • bug #29441 [Routing] ignore trailing slash for non-GET requests (@nicolas-grekas)
  • bug #29445 [FrameworkBundle] Fix empty output for debug:autowiring when reflection-docblock is not installed (@chalasr)
  • bug #29444 [Workflow] Fixed BC break for Workflow metadata (@lyrixx)
  • bug #29432 [DI] dont inline when lazy edges are found (@nicolas-grekas)
  • bug #29413 [Serializer] fixed DateTimeNormalizer to maintain microseconds when a different timezone required (@rvitaliy)
  • bug #29424 [Routing] fix taking verb into account when redirecting (@nicolas-grekas)
  • bug #29418 [VarExporter] fix dumping protected property from abstract classes (@nicolas-grekas)
  • bug #29414 [DI] Fix dumping expressions accessing single-use private services (@chalasr)
  • bug #28853 [LDAP] Add TIMEOUT Option to LDAP Connection Options (@lmatte7)
  • bug #29399 [FrameworkBundle] define doctrine as default_pdo_provider only if the package is installed (@nicolas-grekas)
  • bug #29375 [Validator] Allow ConstraintViolation::__toString() to expose codes that are not null or emtpy strings (@phansys)
  • bug #29376 [EventDispatcher] Fix eventListener wrapper loop in TraceableEventDispatcher (@jderusse)
  • bug #29386 undeprecate the single-colon notation for controllers (@fbourigault)
  • bug #29393 [DI] fix edge case in InlineServiceDefinitionsPass (@nicolas-grekas)
  • bug #29394 [Config] fix path exclusion during glob discovery (@nicolas-grekas)
  • bug #29395 [FrameworkBundle][Messenger] Restore check for messenger serializer default id (@ogizanagi)
  • bug #29380 [Routing] fix greediness of trailing slash (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/29493
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v4.1.8...v4.1.9)

  • security #cve-2018-19790 [Security\Http] detect bad redirect targets using backslashes (@xabbuh)
  • security #cve-2018-19789 [Form] Filter file uploads out of regular form types (@nicolas-grekas)
  • bug #29436 [Cache] Fixed Memcached adapter doClear()to call flush() (@raitocz)
  • bug #29441 [Routing] ignore trailing slash for non-GET requests (@nicolas-grekas)
  • bug #29444 [Workflow] Fixed BC break for Workflow metadata (@lyrixx)
  • bug #29432 [DI] dont inline when lazy edges are found (@nicolas-grekas)
  • bug #29413 [Serializer] fixed DateTimeNormalizer to maintain microseconds when a different timezone required (@rvitaliy)
  • bug #29424 [Routing] fix taking verb into account when redirecting (@nicolas-grekas)
  • bug #29414 [DI] Fix dumping expressions accessing single-use private services (@chalasr)
  • bug #29375 [Validator] Allow ConstraintViolation::__toString() to expose codes that are not null or emtpy strings (@phansys)
  • bug #29376 [EventDispatcher] Fix eventListener wrapper loop in TraceableEventDispatcher (@jderusse)
  • bug #29386 undeprecate the single-colon notation for controllers (@fbourigault)
  • bug #29393 [DI] fix edge case in InlineServiceDefinitionsPass (@nicolas-grekas)
  • bug #29380 [Routing] fix greediness of trailing slash (@nicolas-grekas)
  • bug #29343 [Form] Handle all case variants of "nan" when parsing a number (@mwhudson, @xabbuh)
  • bug #29373 [Routing] fix trailing slash redirection (@nicolas-grekas)
  • bug #29355 [PropertyAccess] calculate cache keys for property setters depending on the value (@xabbuh)
  • bug #29369 [DI] fix combinatorial explosion when analyzing the service graph (@nicolas-grekas)
  • bug #29349 [Debug] workaround opcache bug mutating "$this" !?! (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/29492
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v4.0.14...v4.0.15)

  • security #cve-2018-19790 [Security\Http] detect bad redirect targets using backslashes (@xabbuh)
  • security #cve-2018-19789 [Form] Filter file uploads out of regular form types (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/29491
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v4.2.0-RC1...v4.2.0)

  • bug #29343 [Form] Handle all case variants of "nan" when parsing a number (@mwhudson, @xabbuh)
  • bug #29373 [Routing] fix trailing slash redirection (@nicolas-grekas)
  • bug #29355 [PropertyAccess] calculate cache keys for property setters depending on the value (@xabbuh)
  • bug #29369 [DI] fix combinatorial explosion when analyzing the service graph (@nicolas-grekas)
  • bug #29349 [Debug] workaround opcache bug mutating "$this" !?! (@nicolas-grekas)
  • bug #29344 Fixes sprintf(): Too few arguments in Translator (@stephanedelprat)
  • bug #29318 [Console] Move back root exception to stack trace in verbose mode (@chalasr)

[PR] https://github.com/symfony/symfony/pull/29383

Changelog (since https://github.com/symfony/symfony/compare/v4.2.0-BETA2...v4.2.0-RC1)

  • bug #29332 [PropertyAccess] make cache keys encoding bijective (@nicolas-grekas)
  • bug #29298 [Routing] fix trailing slash redirection when using RedirectableUrlMatcher (@nicolas-grekas)
  • bug #29297 [Routing] fix trailing slash redirection when using RedirectableUrlMatcher (@nicolas-grekas)
  • bug #29313 [PropertyAccessor] fix encoding of cache keys (@nicolas-grekas)
  • bug #29328 [HttpKernel] handle anonymous classes when generating the dumped container class name (@nicolas-grekas)
  • bug #28917 [DoctrineBridge] catch errors while converting to db values in data collector (@alekitto)
  • bug #29317 [WebProfiler] Detect non-file paths in file viewer (@ro0NL)
  • bug #29305 [EventDispatcher] Unwrap wrapped listeners internally (@ro0NL)
  • bug #29302 [Contracts][Cache] allow retrieving metadata of cached items (@nicolas-grekas)
  • bug #29315 [DI] fix copying expression providers when analyzing the service graph (@nicolas-grekas)
  • bug #27314 [DoctrineBridge] fix case sensitivity issue in RememberMe\DoctrineTokenProvider (@PF4Public)
  • bug #29310 [MonologBridge] Return empty list for unknown requests (@ro0NL)
  • bug #29316 [VarDumper] Fix ClassStub ellipsis (@ro0NL)
  • bug #29300 [Translation] fix dumping catalogues cache (@nicolas-grekas)
  • bug #29308 [Translation] Use XLIFF source rather than resname when there's no target (@thewilkybarkid)
  • bug #26244 [BrowserKit] fixed BC Break for HTTP_HOST header (@brizzz)
  • bug #28147 [DomCrawler] exclude fields inside "template" tags (@Gorjunov)
  • bug #29260 [Lock] Fixed PdoStore::putOffExpiration(), PdoStore::getHashedKey() (@PavelPrischepa)
  • bug #29222 [Dotenv] properly parse backslashes in unquoted env vars (@xabbuh)
  • bug #29256 [HttpFoundation] Fixed absolute Request URI with default port (@thomasbisignani)
  • bug #29274 [Routing] Remove duplicate schemes and methods for invokable controllers (@claudusd)
  • bug #29285 [HttpKernel][WebProfilerBundle] Getting the cached client mime type instead of guessing it again (@yceruto)
  • bug #29271 [HttpFoundation] Fix trailing space for mime-type with parameters (@Sascha Dens)
  • feature #29167 [Messenger] Add a trait for synchronous query & command buses (@ogizanagi)
  • bug #29243 [Cache] fix optimizing Psr6Cache for AdapterInterface pools (@nicolas-grekas)
  • bug #29247 [DI] fix taking lazy services into account when dumping the container (@nicolas-grekas)
  • bug #29249 [Form] Fixed empty data for compound date interval (@HeahDude)
  • bug #29265 [Bridge/PhpUnit] Use composer to download phpunit (@nicolas-grekas)
  • bug #28769 [FrameworkBundle] deal with explicitly enabled workflow nodes (@xabbuh)

[PR] https://github.com/symfony/symfony/pull/29339

Changelog (since https://github.com/symfony/symfony/compare/v4.1.7...v4.1.8)

  • bug #29318 [Console] Move back root exception to stack trace in verbose mode (@chalasr)
  • bug #29332 [PropertyAccess] make cache keys encoding bijective (@nicolas-grekas)
  • bug #29298 [Routing] fix trailing slash redirection when using RedirectableUrlMatcher (@nicolas-grekas)
  • bug #29297 [Routing] fix trailing slash redirection when using RedirectableUrlMatcher (@nicolas-grekas)
  • bug #29313 [PropertyAccessor] fix encoding of cache keys (@nicolas-grekas)
  • bug #28917 [DoctrineBridge] catch errors while converting to db values in data collector (@alekitto)
  • bug #29317 [WebProfiler] Detect non-file paths in file viewer (@ro0NL)
  • bug #29305 [EventDispatcher] Unwrap wrapped listeners internally (@ro0NL)
  • bug #27314 [DoctrineBridge] fix case sensitivity issue in RememberMe\DoctrineTokenProvider (@PF4Public)
  • bug #29310 [MonologBridge] Return empty list for unknown requests (@ro0NL)
  • bug #29308 [Translation] Use XLIFF source rather than resname when there's no target (@thewilkybarkid)
  • bug #26244 [BrowserKit] fixed BC Break for HTTP_HOST header (@brizzz)
  • bug #28147 [DomCrawler] exclude fields inside "template" tags (@Gorjunov)
  • bug #29222 [Dotenv] properly parse backslashes in unquoted env vars (@xabbuh)
  • bug #29256 [HttpFoundation] Fixed absolute Request URI with default port (@thomasbisignani)
  • bug #29274 [Routing] Remove duplicate schemes and methods for invokable controllers (@claudusd)
  • bug #29271 [HttpFoundation] Fix trailing space for mime-type with parameters (@Sascha Dens)
  • bug #29243 [Cache] fix optimizing Psr6Cache for AdapterInterface pools (@nicolas-grekas)
  • bug #29247 [DI] fix taking lazy services into account when dumping the container (@nicolas-grekas)
  • bug #29249 [Form] Fixed empty data for compound date interval (@HeahDude)
  • bug #29265 [Bridge/PhpUnit] Use composer to download phpunit (@nicolas-grekas)
  • bug #28769 [FrameworkBundle] deal with explicitly enabled workflow nodes (@xabbuh)
  • bug #29223 [Validator] Added the missing constraints instance checks (@thomasbisignani)
  • bug #28966 [PropertyAccessor] Fix unable to write to singular property using setter while plural adder/remover exist (@karser)
  • bug #29182 [Form] Fixed empty data for compound date types (@HeahDude)
  • bug #29191 [Routing] generate(null) should throw an exception (@nicolas-grekas)
  • bug #29185 [Form] Fixed keeping hash of equal \DateTimeInterface on submit (@HeahDude)
  • bug #29141 [Workflow] Fixed bug of buildTransitionBlockerList when many transition are enabled (@Tetragramat, @lyrixx)
  • bug #29137 [Workflow][FrameworkBundle] fixed guard event names for transitions (@destillat, @lyrixx)
  • bug #28731 [Form] invalidate forms on transformation failures (@xabbuh)
  • bug #29152 [Config] Unset key during normalization (@ro0NL)
  • bug #29165 [DI] align IniFileLoader to PHP bugfix #76965 (@nicolas-grekas)
  • bug #29115 Change button_widget class to btn-primary (@neFAST)
  • bug #29131 [Dotenv] dont use getenv() to read SYMFONY_DOTENV_VARS (@nicolas-grekas)
  • bug #29057 [HttpFoundation] replace any preexisting Content-Type headers (@nicolas-grekas)
  • bug #29076 [Serializer] Allow null values when denormalizing with constructor missing data (@danut007ro)
  • bug #29104 [DI] fix dumping inlined services (@nicolas-grekas)
  • bug #29054 [VarDumper] fix dump of closures created from callables (@nicolas-grekas)
  • bug #29102 [DI] fix GraphvizDumper ignoring inline definitions (@nicolas-grekas)
  • bug #29107 [DI] dont track classes/interfaces used to compute autowiring error messages (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/29335

Changelog (since https://github.com/symfony/symfony/compare/v4.2.0-BETA1...v4.2.0-BETA2)

  • bug #29190 [Debug][HttpKernel] remove frames added by DebugClassLoader in stack traces (@nicolas-grekas)
  • bug #29233 [FrameworkBundle] metadata_update_threshold default value must be an int (@dunglas)
  • bug #29226 [Messenger] Improved message when handler class does not exist (@neeckeloo)
  • bug #29223 [Validator] Added the missing constraints instance checks (@thomasbisignani)
  • bug #28966 [PropertyAccessor] Fix unable to write to singular property using setter while plural adder/remover exist (@karser)
  • bug #29182 [Form] Fixed empty data for compound date types (@HeahDude)
  • bug #29224 [SecurityBundle] Fix remember-me cookie framework inheritance when session is disabled (@fbourigault)
  • bug #29220 [Translation] make intl+icu format seamless by handling it in MessageCatalogue (@nicolas-grekas)
  • feature #29166 [Messenger] Add handled & sent stamps (@ogizanagi)
  • bug #29209 [VarExporter] fix handling of __sleep() (@nicolas-grekas)
  • bug #29196 [Messenger] Fix collecting messages (@ro0NL)
  • bug #29205 [Dotenv] skip loading "local" env twice (@nicolas-grekas)
  • bug #29204 [FrameworkBundle][WebServerBundle] Revert deprecation of --env and --no-debug console options (@chalasr)
  • bug #29191 [Routing] generate(null) should throw an exception (@nicolas-grekas)
  • bug #29199 [FrameworkBundle] conflict with Dotenv <4.2 to simplify recipes (@nicolas-grekas)
  • bug #29197 Revert "bug #29154 [FrameworkBundle] Define APP_ENV/APP_DEBUG from argv via Application::bootstrapEnv() (@nicolas-grekas)
  • bug #29185 [Form] Fixed keeping hash of equal \DateTimeInterface on submit (@HeahDude)
  • bug #29183 [HttpKernel] Fix collecting uploaded files (@ro0NL)
  • bug #29141 [Workflow] Fixed bug of buildTransitionBlockerList when many transition are enabled (@Tetragramat, @lyrixx)
  • bug #29137 [Workflow][FrameworkBundle] fixed guard event names for transitions (@destillat, @lyrixx)
  • bug #29184 [WebProfilerBundle] Fix theme settings (@ro0NL)
  • feature #29159 [Messenger] collect all stamps added on Envelope as collections (@nicolas-grekas)
  • bug #29171 [Dotenv] load .env.dist when it exists and .env is not found (@nicolas-grekas)
  • bug #28731 [Form] invalidate forms on transformation failures (@xabbuh)
  • bug #29152 [Config] Unset key during normalization (@ro0NL)
  • bug #29165 [DI] align IniFileLoader to PHP bugfix #76965 (@nicolas-grekas)
  • bug #29154 [FrameworkBundle] Define APP_ENV/APP_DEBUG from argv via Application::bootstrapEnv() (@chalasr)
  • bug #29129 [Dotenv] add loadEnv(), a smoother alternative to loadForEnv() (@nicolas-grekas)
  • bug #29113 [Routing] fix dumping conditions that use the request (@nicolas-grekas)
  • bug #29115 Change button_widget class to btn-primary (@neFAST)
  • bug #29131 [Dotenv] dont use getenv() to read SYMFONY_DOTENV_VARS (@nicolas-grekas)
  • bug #29057 [HttpFoundation] replace any preexisting Content-Type headers (@nicolas-grekas)
  • bug #29076 [Serializer] Allow null values when denormalizing with constructor missing data (@danut007ro)
  • bug #29128 [FrameworkBundle] Cleaning translation commands and fix a bug for --all option (@yceruto)
  • bug #29104 [DI] fix dumping inlined services (@nicolas-grekas)
  • bug #29054 [VarDumper] fix dump of closures created from callables (@nicolas-grekas)
  • bug #29102 [DI] fix GraphvizDumper ignoring inline definitions (@nicolas-grekas)
  • bug #29090 LoggingTranslator should implement Symfony\Contracts\Translation\TranslatorInterface (@desmax)
  • bug #29095 [TwigBridge] require the needed symfony/contracts package (@xabbuh)
  • bug #29107 [DI] dont track classes/interfaces used to compute autowiring error messages (@nicolas-grekas)
  • bug #29094 Add samesite attribute to session cookie after session migration (@rpkamp)
  • bug #29080 [FrameworkBundle] fix deps (@ro0NL)

[PR] https://github.com/symfony/symfony/pull/29237

Changelog (since https://github.com/symfony/symfony/compare/v4.1.0...v4.2.0-BETA1)

  • feature #28622 [VarDumper] add caster for Memcached (@jschaedl)
  • feature #29042 [DI] use filter_var() instead of XmlUtils::phpize() in EnvVarProcessor (@nicolas-grekas)
  • feature #29047 Revert "[HttpFoundation] Adds getAcceptableFormats() method for Request" (@Tobion)
  • feature #29046 [Bridge/Doctrine] remove workarounds from the past (@nicolas-grekas)
  • feature #29022 [Cache] allow to skip saving the computed value when using CacheInterface::get() (@nicolas-grekas)
  • feature #29010 [Messenger] make senders and handlers subscribing to parent interfaces receive all matching messages, wildcard included (@nicolas-grekas)
  • feature #29006 [Messenger] make TraceableMiddleware decorate a StackInterface instead of each middleware to free the callstack from noisy frames (@nicolas-grekas)
  • feature #28970 [FrameworkBundle] make debug:autowiring list useful services and their description (@nicolas-grekas)
  • feature #28952 [Translation] allow using the ICU message format using domains with the "+intl-icu" suffix (@nicolas-grekas)
  • feature #27914 [Security][SecurityBundle] Add voter individual decisions to profiler (@l-vo)
  • feature #28985 [Messenger] Move MiddlewareTestCase in Test ns (@ogizanagi)
  • feature #28892 [FrameworkBundle] Deprecate support for legacy directories in Translation comands (@chalasr)
  • feature #28854 [VarDumper] Scroll into view when searching (@ro0NL)
  • feature #28997 [FrameworkBundle] Deprecating support for legacy translations directory (@yceruto)
  • feature #28983 [Messenger] make dispatch(), handle() and send() methods return Envelope (@nicolas-grekas)
  • feature #28533 [DotEnv] Add a new loadForEnv() method mimicking Ruby's dotenv behavior (@dunglas)
  • feature #28943 [Messenger] Add StackInterface, allowing to unstack the call stack (@nicolas-grekas)
  • feature #28860 [Form] Deprecate TimezoneType regions option (@ro0NL)
  • feature #28945 [Messenger] remove AllowNoHandlerMiddleware in favor of a constructor argument on HandleMessageMiddleware (@nicolas-grekas)
  • feature #28947 [Messenger] remove classifying sub-namespaces in favor of semantic ones (@nicolas-grekas)
  • feature #27917 [Validator] catch any UnexpectedValueException on validation (@xabbuh)
  • feature #28875 [FWBundle] Add a new method AbstractController::addLink() (@dunglas)
  • feature #28934 [WebProfilerBundle] Add channel log filter (@ro0NL)
  • feature #28939 [WebProfilerBundle] Remove application name (@ro0NL)
  • feature #28709 [Serializer] Refactor and uniformize the config by introducing a default context (@dunglas)
  • feature #28914 [Messenger] make Envelope first class citizen for middleware handlers (@nicolas-grekas)
  • feature #28909 [Messenger] made dispatch() and handle() return void (@nicolas-grekas)
  • feature #28936 [WebProfilerBundle] Replay referer URL (@ro0NL)
  • feature #28893 [TwigBundle] Fix usage of TwigBundle without FrameworkBundle (@tgalopin)
  • feature #28891 [TwigBundle] Deprecating support for legacy templates directories (@yceruto)
  • feature #28911 [Messenger] rename "envelope items" and move them in the "Stamp" namespace (@nicolas-grekas)
  • feature #27043 [Form][TwigBridge] Add help_attr (@mpiot)
  • feature #28810 [HttpKernel] Deprecate usage of getRootDir() and kernel.root_dir (@fabpot)
  • feature #28809 [HttpKernel] Deprecate the Kernel name (@fabpot)
  • feature #28807 [HttpFoundation] Make ResponseHeaderBag::makeDisposition static (@fabpot)
  • feature #28842 [Validator] Deprecate checkMX and checkHost on Email validator (@fabpot)
  • feature #28833 [Intl] Blacklist invalid languages (@ro0NL)
  • feature #28815 YamlEncoder handle yml format (@kevin-biig)
  • feature #27742 [Process] Add feature "wait until callback" to process class (@Nek-)
  • feature #28713 [Cache] added support for connecting to Redis clusters via DSN (@nicolas-grekas)
  • feature #24263 Filter logs by level (@ro0NL)
  • feature #24151 Display the log context in the debug pages (@javiereguiluz)
  • feature #26261 [Validator] Improvement: provide file basename for constr. violation messages in FileValidator. (@TheCelavi)
  • feature #26324 [Form] allow additional http methods in form configuration (@alekitto)
  • feature #26771 [Filesystem] Fix mirroring a directory with a relative path and a custom iterator (@fxbt)
  • feature #27291 [OptionsResolver] Added support for nesting options definition (@yceruto)
  • feature #27261 [VarDumper] Allow to use a light theme out of the box (@ogizanagi)
  • feature #27967 [Finder] Added a way to inverse a previous sorting (@lyrixx)
  • feature #28061 [Security] add port in access_control (@roukmoute)
  • feature #28476 Added different protocols to be allowed as asset base_url (@alexander-schranz)
  • feature #27770 [FrameworkBundle] Moving Cache-related CompilerPass to Cache component (@Korbeil)
  • feature #28738 [OptionsResolver] Passing Options argument to deprecation closure (@yceruto)
  • feature #28718 [Cache] add CacheInterface::delete() + improve CacheTrait (@nicolas-grekas)
  • feature #24530 [Form] simplify the form type extension registration (@xabbuh)
  • feature #28586 [WebServerBundle] Added ability to display the current hostname address if available when binding to 0.0.0.0 (@respinoza)
  • feature #28763 [WebProfilerBundle] Extract server parameters into their own tab (@fabpot)
  • feature #28375 [Translator] Deprecated transChoice and moved it away from contracts (@Nyholm, @nicolas-grekas)
  • feature #28745 [WebServerBundle] Deprecate relying on --env in server:start and server:run (@chalasr)
  • feature #28505 [Serialized] allow configuring the serialized name of properties through metadata (@fbourigault)
  • feature #28669 [Serializer] Object class resolver (@alanpoulain)
  • feature #28653 [FrameworkBundle] Deprecate the "--env" and "--no-debug" console options (@chalasr)
  • feature #28693 [Security] Deprecate simple_preauth and simple_form in favor of Guard (@chalasr)
  • feature #28626 [Translation] marked getFallbackLocales() as internal (@boscho87)
  • feature #28571 [DependencyInjection] Improve ServiceLocatorTagPass service matching (@codedmonkey)
  • feature #28644 [Validator] Pre-check constraint validator dependencies (@ro0NL)
  • feature #28661 [Serializer] Add an option to skip null values (@dunglas)
  • feature #28679 [FrameworkBundle] Add vscode editor to ide config (@lexcast)
  • feature #28656 When a CSRF occures on a Form submit add a cause on the FormError object (@gmponos)
  • feature #28588 [Cache] add "setCallbackWrapper()" on adapters implementing CacheInterface for more flexibility (@nicolas-grekas)
  • feature #28598 [Cache] support configuring multiple Memcached servers in one DSN (@nicolas-grekas)
  • feature #28447 [HttpFoundation] make cookies auto-secure when passing them $secure=null + plan to make it and samesite=lax the defaults in 5.0 (@nicolas-grekas)
  • feature #28446 [SecurityBundle] make remember-me cookies auto-secure + inherit their default config from framework.session.cookie_* (@nicolas-grekas)
  • feature #28417 [VarExporter] add Instantiator::instantiate() to create+populate objects without calling their constructor nor any other methods (@nicolas-grekas)
  • feature #27819 [Serializer] deprecated normalizers and encoders who dont implement the base interfaces (@rodnaph)
  • feature #28572 Make it clear that the profiler is for dev only (@fabpot)
  • feature #28536 Favor LogicException for missing classes & functions (@ro0NL)
  • feature #28569 [Form] deprecate precision in IntegerToLocalizedStringTransformer (@xabbuh)
  • feature #28570 [Form] deprecate the unused scale option (@xabbuh)
  • feature #28566 [VarDumper] add casters for IntlDateFormatter and IntlCalendar (@jschaedl)
  • feature #28559 [VarDumper] add caster for IntlTimeZone (@jschaedl)
  • feature #28449 [DependencyInjection] improved message when alias service is not found (@xabbuh)
  • feature #27434 [Console] Add support for error ouput in the CommandTester (@cdekok)
  • feature #28555 [VarDumper] add caster for NumberFormatter (@jschaedl)
  • feature #28538 [Lock] Wrap release exception (@jderusse)
  • feature #28551 [VarDumper] add caster for MessageFormatter (@nicolas-grekas)
  • feature #28329 [Debug] Trigger a deprecation for new parameters not defined in sub classes (@GuilhemN)
  • feature #27920 Add Zookeeper data store for Lock Component (@Ganesh Chandrasekaran)
  • feature #28317 [VarDumper] Allow dd() to be called without arguments (@SjorsO)
  • feature #28424 [Ldap] Add verbose ext-ldap error if present for easier debugging (@scaytrase)
  • feature #28521 [Yaml] Added support for multiple files or directories in LintCommand (@yceruto)
  • feature #28522 [Translation] Added support for multiple files or directories in XliffLintCommand (@yceruto)
  • feature #28523 [FrameworkBundle] Register an identity translator as fallback (@yceruto)
  • feature #28473 [Validator] Check the BIC country with symfony/intl (@sylfabre)
  • feature #28487 [FrameworkBundle] Ignore backslashes in service ids when using debug:container and debug:autowiring (@respinoza)
  • feature #28412 [PhpUnitBridge] enable DebugClassLoader by default (@nicolas-grekas)
  • feature #28416 [FrameworkBundle] bind "ContainerInterface $parameterBag" arguments to the "parameter_bag" service (@nicolas-grekas)
  • feature #28316 Trigger deprecation notices when inherited class calls parent method but misses adding new arguments (@kevinjhappy)
  • feature #28373 [Console] Support max column width in Table (@ro0NL)
  • feature #28422 [VarExporter] throw component-specific exceptions (@nicolas-grekas)
  • feature #28415 [FrameworkBundle] Deprecate ContainerAwareCommand (@chalasr)
  • feature #28419 [Messenger] Change AmqpExt classes constructor signature (@fabpot)
  • feature #28405 [Messenger] Uses a messenger serializer, not an individual encoder/decoder (@sroze)
  • feature #28298 [WebServerBundle] Add support for Xdebug's Profiler (@maidmaid)
  • feature #28399 [Messenger] Add a SenderLocator decoupled from ContainerInterface (@fabpot)
  • feature #27321 [Messenger][Profiler] Trace middleware execution (@ogizanagi)
  • feature #28400 [Messenger] Add a simple serializer (@fabpot)
  • feature #28397 [Messenger] Change exceptions to use component's one (@fabpot)
  • feature #28387 [HttpKernel][Profiler] Add arg value resolver category in performances panel (@ogizanagi)
  • feature #25015 [Validator] Deprecate validating DateTimeInterface in Date|Time|DateTime constraints (@ro0NL)
  • feature #28394 [Messenger] Add interfaces to be type-hinted even when not using a Container (@fabpot)
  • feature #27981 [TwigBridge] Added template "name" argument to debug:twig command to find their paths (@yceruto)
  • feature #28207 [DI] leverage Contracts\Service (@nicolas-grekas)
  • feature #22225 [Console] Support formatted text cutting (@ro0NL)
  • feature #28206 [Contracts] Add traits+interfaces from the DI component (@nicolas-grekas)
  • feature #27456 [LOCK] Add a PdoStore (@jderusse)
  • feature #24297 Feature/doctrine type guesser simple json array support (@iluuu1994)
  • feature #26859 [Dotenv] add a flag to allow env vars override (@fmata)
  • feature #26997 [PropertyInfo] Add an extractor to guess if a property is initializable (@dunglas)
  • feature #27667 [Form][OptionsResolver] Show deprecated options definition on debug:form command (@yceruto)
  • feature #27021 [Serializer] Allow to access extra infos in name converters (@dunglas)
  • feature #26923 [FrameworkBundle] Allow user to specify folder for flock (@MaksSlesarenko)
  • feature #25125 [VarDumper] New env var to select the dump format (@dunglas)
  • feature #28117 [FrameworkBundle] add class description to debug:container command (@gimler)
  • feature #28270 [Messenger] Uses Symfony Serializer by default for envelope items (@sroze)
  • feature #27935 [FrameworkBundle] [Command] TranslationUpdate change default output to xlf (@Alexis BOYER)
  • feature #28168 Add SameSite cookies to FrameWorkBundle (@rpkamp)
  • feature #28303 [Process] Add relative path support for PHP_BINARY env var of PhpExecutableFinder (@maidmaid)
  • feature #28096 [Contracts] Add Cache contract to extend PSR-6 with tag invalidation, callback-based computation and stampede protection (@nicolas-grekas)
  • feature #27399 [Translation] Added intl message formatter. (@aitboudad, @Nyholm)
  • feature #28315 [DI] Trigger exception when using '@id' name in parent option (@Seb33300)
  • feature #28210 [Contracts] Add Translation\TranslatorInterface + decouple symfony/validator from symfony/translation (@nicolas-grekas)
  • feature #28331 [FrameworkBundle] Don't populate fallback cache on warmup (@nicolas-grekas)
  • feature #28264 [VarDumper] make RedisCaster handle RedisCluster and dump all options on all drivers (@nicolas-grekas)
  • feature #28289 [Serializer] Add support for ignoring comments while XML encoding (@maidmaid)
  • feature #28294 [Messenger] Remove the "obscure" message subscriber configuration (@sroze)
  • feature #28271 [Messenger] Allow interfaces to be type-hinted as well (@sroze)
  • feature #28190 [Messenger] Add a --bus option to the messenger:consume-messages command (@chalasr, @sroze)
  • feature #28275 [Messenger] Only subscribe to a given bus from the MessageSubscriber (@sroze)
  • feature #28243 [FrameworkBundle] Deprecate Symfony\Bundle\FrameworkBundle\Controller\Controller (@sroze)
  • feature #28070 [Translator] Use ICU parent locales as fallback locales (@thewilkybarkid)
  • feature #28231 [VarExporter] a new component to serialize values to plain PHP code (@nicolas-grekas)
  • feature #28244 [FrameworkBundle] Added new "auto" mode for framework.session.cookie_secure to turn it on when https is used (@nicolas-grekas)
  • feature #28277 [Serializer] AbstractObjectNormalizer improve performance (@martiis)
  • feature #28247 [Messenger] Don't make EnvelopeItemInterface extend Serializable (@nicolas-grekas)
  • feature #27926 [Serializer] XmlEncoder doesn't ignore PI nodes while encoding (@maidmaid)
  • feature #27890 Mock date() in ClockMock (@Dominic Tubach)
  • feature #28218 Improve support for anonymous classes (@nicolas-grekas)
  • feature #28221 [DomCrawler] Add a way to filter direct children (@Einenlum)
  • feature #28234 [DI] Allow autowiring by type + parameter name (@nicolas-grekas)
  • feature #28156 [Serializer] Fix the XML comments encoding (@maidmaid)
  • feature #28069 [Validator] New DivisibleBy constraint for testing divisibility (@colinodell)
  • feature #28176 [DI] [FrameworkBundle] Add LoggerAwareInterface to auto configuration (@GaryPEGEOT)
  • feature #27957 [Routing] Add fallback to cultureless locale for internationalized routes (@fancyweb)
  • feature #28027 [Config] Rename FileLoaderLoadException to LoaderLoadException (@ProgMiner)
  • feature #28085 [Config] show proposals when unsupported option is provided (@fmata)
  • feature #27806 [DI] Allow autoconfiguring bindings (@nicolas-grekas)
  • feature #21002 [Form] Added options for separate date/time labels in DateTimeType. (@mktcode)
  • feature #27763 [WebProfilerBundle] Append new ajax request to the end of the list (@BoShurik)
  • feature #28035 [DomCrawler] Allow using non-absolute base URIs (@javiereguiluz)
  • feature #28106 [Yaml] save preg_match() calls when possible (@xabbuh)
  • feature #27678 Allow to configure some options of the profiler interface (@javiereguiluz)
  • feature #27943 [Security] Deprecate returning stringish objects from Security::getUser (@ro0NL)
  • feature #27956 Added types and tweaked PHPdoc of clickLink() and submitForm() methods (@javiereguiluz)
  • feature #27976 [Security] Remember me: allow to set the samesite cookie flag (@dunglas)
  • feature #27978 [WebProfilerBundle] Show relative path of the template and improving panel view (@yceruto)
  • feature #27891 [Finder] Allow arrays as parameters of some methods for better fluent experience and code readability (@jfredon)
  • feature #27829 [DoctrineBridge] Inject the entity manager instead of the class metadata factory in DoctrineExtractor (@dunglas)
  • feature #27093 Add symfony/contracts: a set of abstractions extracted out of the Symfony components (@nicolas-grekas)
  • feature #27807 Added new methods submitForm and clickLink to Client class (@nowiko)
  • feature #27879 [Routing] deprecate non string requirement names (@xabbuh)
  • feature #26933 [Console] Add title table (@maidmaid)
  • feature #27697 [ProxyManagerBridge][DI] allow proxifying interfaces with "lazy: Some\ProxifiedInterface" (@nicolas-grekas)
  • feature #27645 [Cache] Add MarshallerInterface allowing to change the serializer, providing a default one that automatically uses igbinary when available (@nicolas-grekas)
  • feature #27694 [FrameworkBundle][Cache] Allow configuring PDO-based cache pools, with table auto-creation on first use (@nicolas-grekas)
  • feature #27774 [FrameworkBundle] allow turning routes to utf8 mode by default (@nicolas-grekas)
  • feature #27821 [Process][Console] deprecated defining commands as strings (@nicolas-grekas)
  • feature #27320 [Messenger] Activation middleware decorator (@ogizanagi)
  • feature #27519 [HttpKernel][FrameworkBundle] Turn HTTP exceptions to HTTP status codes by default (@nicolas-grekas)
  • feature #27020 [Serializer] Allow to access to the format and context in circular ref handler (@dunglas)
  • feature #27783 [DI] Add ServiceLocatorArgument to generate array-based locators optimized for OPcache shared memory (@nicolas-grekas)
  • feature #27850 [Security] Allow passing null as $filter in LdapUserProvider to get the default filter (@louhde)
  • feature #27650 [SecurityBundle] Add json login ldap (@Rudy Onfroy)
  • feature #27798 [Security] Use AuthenticationTrustResolver in SimplePreAuthenticationListener (@nicolas-grekas)
  • feature #27801 [MonologBridge] Add ProcessorInterface, enabling autoconfiguration of monolog processors (@nicolas-grekas)
  • feature #27503 [Serializer] Allow to pass a single value for the groups opt (@dunglas)
  • feature #27715 [Serializer] Deprecate CsvEncoder as_collection false default value (@ogizanagi)
  • feature #27768 [VarDumper] display the signature of callables (@nicolas-grekas)
  • feature #27766 [VarDumper] show proxified class on hover (@nicolas-grekas)
  • feature #27675 [DoctrineBridge] always load event listeners lazy via ServiceLocator (@dmaicher)
  • feature #27499 Improved an error message related to controllers (@javiereguiluz)
  • feature #26300 [PropertyInfo] Implement "Collection" types in PhpDocExtractor (@popy-dev)
  • feature #26946 [WebProfilerBundle] Display uploaded files in the profiler (@javiereguiluz)
  • feature #27476 [Config] deprecate tree builders without root nodes (@xabbuh)
  • feature #27586 [PropertyAccess] Add Property Path to Exception Message (@rodnaph)
  • feature #27699 Redesigned the default error page in production (@javiereguiluz)
  • feature #27655 [Translation] Added support for translation files with other filename patterns (@javiereguiluz)
  • feature #27580 [Form] Add ability to clear form errors (@colinodell)
  • feature #27247 [Form] Deprecate searchAndRenderBlock returning empty string (@ostrolucky)
  • feature #27646 [Cache] added support for phpredis 4 compression and tcp_keepalive options (@nicolas-grekas)
  • feature #27605 [DX] Log potential redirect loops caused by forced HTTPS (@colinodell)
  • feature #27653 [Translation] Improved the performance of the lint:xliff command (@javiereguiluz)
  • feature #27421 CacheWarmerAggregate handle deprecations logs (@ScullWM)
  • feature #27611 [FrameworkBundle][SecurityBundle] Moved security expression providers pass logic to SecurityBundle (@HeahDude)
  • feature #27277 [OptionsResolver] Introduce ability to deprecate options, allowed types and values (@yceruto)
  • feature #26919 [TwigBridge] Added bundle name suggestion on wrongly overrided templates paths (@pmontoya, @Pascal Montoya)
  • feature #26486 [HttpFoundation] Adds getAcceptableFormats() method for Request (@AndreiIgna)
  • feature #27535 [TwigBundle] Enhance the twig not found exception (@behnoushnorouzi)
  • feature #27551 [FrameworkBundle] show public/private for aliases in debug:container command (@OskarStark)
  • feature #27543 [Cache] serialize objects using native arrays when possible (@nicolas-grekas)
  • feature #27563 [Cache] Improve perf of array-based pools (@nicolas-grekas)
  • feature #27604 [Cache] Prevent stampede at warmup using flock() (@nicolas-grekas)
  • feature #27315 [TwigBundle] add exception chain breadcrumbs navigation (@kiler129)
  • feature #27031 [Cache] Use sub-second accuracy for internal expiry calculations (@nicolas-grekas)
  • feature #27549 [Cache] Unconditionally use PhpFilesAdapter for system pools (@nicolas-grekas)
  • feature #27009 [Cache] Add stampede protection via probabilistic early expiration (@nicolas-grekas)
  • feature #27471 [DI] Improve performance of removing/inlining passes (@nicolas-grekas)
  • feature #27462 [FrameworkBundle] Deprecate auto-injection of the container in AbstractController instances (@nicolas-grekas)
  • feature #27077 [DependencyInjection] add ServiceSubscriberTrait (@kbond)
  • feature #27398 [Cache] Remove TaggableCacheInterface, alias cache.app.taggable to CacheInterface (@nicolas-grekas)
  • feature #27343 [Messenger][Profiler] Show dispatch caller (@ogizanagi)
  • feature #27429 [PropertyInfo] Auto-enable PropertyInfo component (@sroze)
  • feature #27430 [PropertyInfo] Add an alias to the property info type extractor (@sroze)
  • feature #27417 [WebProfilerBundle] Make Twig bundle an explicit dependency (@fabpot)
  • feature #27024 [Finder] added "use natural sort" option (@vyshkant)
  • feature #26934 [FrameworkBundle] Allow configuring taggable cache pools (@nicolas-grekas)
  • feature #26981 No more support for custom anon/remember tokens based on FQCN (@Iltar van der Berg)
  • feature #27336 [Security][SecurityBundle] FirewallMap/FirewallContext deprecations (@chalasr)
  • feature #27157 [DI] Select specific key from an array resolved env var (@bobvandevijver)
  • feature #27165 [DI] Allow binding by type+name (@nicolas-grekas)
  • feature #26929 [Cache] Add [Taggable]CacheInterface, the easiest way to use a cache (@nicolas-grekas)
  • feature #27305 [Security/Core] Add "is_granted()" to security expressions, deprecate "has_role()" (@nicolas-grekas)
  • feature #27069 [LDAP] Add "applyOperations" method to EntryManager (@mablae)
  • feature #27118 [BrowserKit] Adds support for meta refresh (@jhedstrom)
  • feature #27268 [DI] fine tune dumped factories (@nicolas-grekas)
  • feature #27075 [DI][DX] Allow exclude to be an array of patterns (@magnetik)
  • feature #27138 [HttpKernel] Better exception page when the controller returns nothing (@lyrixx)

[PR] https://github.com/symfony/symfony/pull/29073

Changelog (since https://github.com/symfony/symfony/compare/v4.1.6...v4.1.7)

  • bug #28820 [DependencyInjection] Fix tags on multiple decorated service (@Soner Sayakci)
  • bug #29020 Fix ini_get() for boolean values (@deguif)
  • bug #28955 [Messenger] send using the routing_key for AMQP transport (@nicolas-grekas)
  • bug #28960 also clean away the NO_AUTO_CACHE_CONTROL_HEADER if we have no session (@dbu)
  • feature #28893 [TwigBundle] Fix usage of TwigBundle without FrameworkBundle (@tgalopin)
  • bug #28889 [Serializer] Reduce class discriminator overhead (@fbourigault)
  • bug #28861 [DependencyInjection] Skip empty proxy code (@olvlvl)
  • bug #28801 Convert InsufficientAuthenticationException to HttpException with 401 status code (@vincentchalamon)
  • bug #28840 add missing double-quotes to extra_fields output message (@danielkay)
  • bug #28838 [DI] Default undefined env to empty string during compile (@ro0NL)
  • bug #28863 [Process] Allow to pass non-string arguments to Process (@vudaltsov)
  • bug #28712 [Form] reverse transform RFC 3339 formatted dates (@xabbuh)
  • bug #28813 Fix for race condition in console output stream write (@rudolfratusinski)
  • bug #27772 [Console] Fixes multiselect choice question defaults in non-interactive mode (@veewee)
  • bug #28835 [FrameworkBundle] Setting missing default paths under BC layer (@yceruto)
  • bug #28760 [DI] fix dumping inline services again (@nicolas-grekas)
  • bug #28689 [Process] fix locking of pipe files on Windows (@nicolas-grekas)
  • bug #28704 [Form] fix multi-digit seconds fraction handling (@xabbuh)
  • bug #28793 [SecurityBundle] do not override custom access decision configs (@xabbuh)
  • bug #28783 [FrameworkBundle] add missing cache prefix seed attribute to XSD (@xabbuh)
  • bug #28072 [Security] Do not deauthenticate user when the first refreshed user has changed (@gpekz)
  • bug #28735 [FWBundle] Automatically enable PropertyInfo when using Flex (@dunglas)
  • bug #28751 [FrameworkBundle] Register messenger before the profiler (@sroze)

[PR] https://github.com/symfony/symfony/pull/29071

Changelog (since https://github.com/symfony/symfony/compare/v4.1.5...v4.1.6)

  • bug #28604 [Finder] fixed root directory access for ftp/sftp wrapper (@DerDu)
  • bug #28688 [FWBundle] Throw if PropertyInfo is enabled, but the component isn't installed (@dunglas)
  • bug #28638 [Console] Fix clearing sections containing questions (@chalasr)
  • bug #28690 [FrameworkBundle] dont suggest hidden services in debug:container and debug:autow commands (@nicolas-grekas)
  • bug #28648 [PHPUnitBridge] Fix ClockMock microtime() format (@acasademont)
  • bug #28678 [DI] fix dumping setters before their inlined instances (@nicolas-grekas)
  • bug #28672 [DI] fix error in dumped container (@nicolas-grekas)
  • bug #28664 [Console] Don't return early as this bypasses the auto exit feature (@duncan3dc)

[PR] https://github.com/symfony/symfony/pull/28707

Changelog (since https://github.com/symfony/symfony/compare/v4.1.4...v4.1.5)

  • bug #28636 [HttpFoundation] X-Accel-Mapping does not use HTTP key=value syntax (@c960657)
  • bug #28376 [TwigBundle] Fixed caching of templates in src/Resources//views on cache warmup (@yceruto)
  • bug #28565 [HttpFoundation][Security] forward locale and format to subrequests (@nicolas-grekas)
  • bug #28561 [Cache] prevent getting older entries when the version key is evicted (@nicolas-grekas)
  • bug #28562 [HttpFoundation] fix hidding warnings from session handlers (@nicolas-grekas)
  • bug #28545 [Console] Send the right exit code to console.terminate listeners (@mpdude)
  • bug #28553 [Debug] Fix false-positive "MicroKernelTrait::loadRoutes()" method is considered internal" (@nicolas-grekas)
  • bug #28466 [Form] fail reverse transforming invalid RFC 3339 dates (@xabbuh)
  • bug #28540 [Intl] parse numbers terminated with decimal separator (@xabbuh)
  • bug #28548 [Console] Fixed boxed table style with colspan (@ro0NL)
  • bug #28433 [HttpFoundation] Allow reuse of Session between requests if ID did not change (@tgalopin)
  • bug #28508 [Form] forward false label option to nested types (@xabbuh)
  • bug #28471 [MonologBridge] Re-add option option to ignore empty context and extra data (@mpdude)
  • bug #28464 [Form] forward the invalid_message option in date types (@xabbuh)
  • bug #28524 [PhpUnitBridge] fix disabling DeprecationErrorHandler using phpunit.xml file (@soerenbernstein)
  • bug #28512 [DI] fix infinite loop involving self-references in decorated services (@nicolas-grekas)
  • bug #28507 [DI] fix dumping lazy services (@nicolas-grekas)
  • bug #28469 [Form][TwigBridge] fix not displaying labels when value is false (@xabbuh)
  • bug #28495 [PhpUnitBridge] Implement startTest rather than startTestSuite (@greg0ire)
  • bug #28480 [DI] Detect circular references with ChildDefinition parent (@Seb33300)
  • bug #28497 [VarDumper] Fix global dump function return value for PHP7 (@patrickcarlohickman)
  • bug #28499 [Ldap] Use shut up operator on connection errors at ldap_start_tls (@Andras Debreczeni)
  • bug #28372 [Form] Fix DateTimeType html5 input format (@franzwilding, @mcfedr)
  • bug #28396 [Intl] Blacklist Eurozone and United Nations in Region Data Generator (@gregurco)
  • bug #28418 [FrameworkBundle] Register the messenger data collector only when the profiler is enabled (@pierredup)
  • bug #28393 [Console] fixed corrupt error output for unknown multibyte short option (@downace)
  • bug #28411 [Debug] fix detecting overriden final/internal methods implemented using traits (@nicolas-grekas)
  • bug #28404 [Controller][ServiceValueResolver] Making method access case insensitive (@nicoweb)
  • bug #28401 [Console] Fix SymfonyQuestionHelper::askQuestion() with choice value as default (@chalasr)
  • bug #28388 [DI] configure inlined services before injecting them when dumping the container (@nicolas-grekas)
  • bug #28377 fix fopen flags (@SpacePossum)
  • bug #27764 [TwigBundle] Fixed caching of templates in default path on cache warmup (@yceruto)
  • bug #28366 [DI] Fix dumping some complex service graphs (@nicolas-grekas)
  • bug #27970 [FileValidator] Format file size in validation message according to binaryFormat option (@jfredon)
  • bug #28029 [TwigBundle] remove cache warmers when Twig cache is disabled (@xabbuh)
  • bug #28322 [Workflow] Make sure we do not run the next transition on an updated state (@Nyholm)
  • bug #28344 [HttpKernel][FrameworkBundle] Fix escaping of serialized payloads passed to test clients (@nicolas-grekas)
  • bug #28183 [WebProfilerBundle] fix wrong url when base path is the index (@ismail1432)
  • bug #28334 [FWB][Messenger] Revert "Move commands-specifics to a compiler pass in FWB" (@sroze)
  • bug #28328 [Messenger][FrameworkBundle] Move commands-specifics to a compiler pass in FWB (@sroze)

[PR] https://github.com/symfony/symfony/pull/28642

Changelog (since https://github.com/symfony/symfony/compare/v4.1.3...v4.1.4)

  • bug #28278 [HttpFoundation] Fix unprepared BinaryFileResponse sends empty file (@wackymole)
  • bug #28284 [PhpUnitBridge] keep compat with composer 1.0 (@nicolas-grekas)
  • bug #28251 [HttpFoundation] Allow RedisCluster class for RedisSessionHandler (@michaelperrin)
  • bug #28241 [HttpKernel] fix forwarding trusted headers as server parameters (@nicolas-grekas)
  • bug #28220 [PropertyAccess] fix type error handling when writing values (@xabbuh)
  • bug #28249 [Cache] enable Memcached::OPT_TCP_NODELAY to fix perf of misses (@nicolas-grekas)
  • bug #28252 [DoctrineBridge] support __toString as documented for UniqueEntityValidator (@dmaicher)
  • bug #28216 [FrameworkBundle] message_bus alias public (@sroze)
  • bug #28113 [Form] Add help texts for checkboxes in horizontal bootstrap 4 forms (@apfelbox)
  • bug #28100 [Security] Call AccessListener after LogoutListener (@chalasr)
  • bug #28174 Remove the HTML5 validation from the profiler URL search form (@Soullivaneuh)
  • bug #28159 [DI] Fix autowire inner service (@hason)
  • bug #28060 [DI] Fix false-positive circular ref leading to wrong exceptions or infinite loops at runtime (@nicolas-grekas)
  • bug #28144 [HttpFoundation] fix false-positive ConflictingHeadersException (@nicolas-grekas)
  • bug #28152 [Translation] fix perf of lint:xliff command (@nicolas-grekas)
  • bug #28115 [Form] Remove extra .form-group wrapper around file widget in bootstrap 4 (@MrMitch)
  • bug #28120 [Routing] Fixed scheme redirecting for root path (@twoleds)
  • bug #28112 Fix CSS property typo (@AhmedAbdulrahman)
  • bug #28012 [PropertyInfo] Allow nested collections (@jderusse)
  • bug #28055 [PropertyInfo] Allow nested collections (@jderusse)
  • bug #28083 Remove the Expires header when calling Response::expire() (@javiereguiluz)

[PR] https://github.com/symfony/symfony/pull/28291

Changelog (since https://github.com/symfony/symfony/compare/v4.1.2...v4.1.3)

  • security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (@nicolas-grekas)
  • security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (@nicolas-grekas)
  • bug #28003 [HttpKernel] Fixes invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet (@netiul)
  • bug #28007 [FrameworkBundle] fixed guard event names for transitions (@destillat)
  • bug #28045 [HttpFoundation] Fix Cookie::isCleared (@ro0NL)
  • bug #28080 [HttpFoundation] fixed using _method parameter with invalid type (@Phobetor)
  • bug #28059 [Messenger] Fix error message on undefined message class for non-subscriber handler (@chalasr)
  • bug #28052 [HttpKernel] Fix merging bindings for controllers' locators (@nicolas-grekas)
  • bug #28014 [Messenger] Fix chaining senders with their aliases (@sroze)

[PR] https://github.com/symfony/symfony/pull/28104
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v4.0.13...v4.0.14)

  • security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (@nicolas-grekas)
  • security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (@nicolas-grekas)
  • bug #28003 [HttpKernel] Fixes invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet (@netiul)
  • bug #28007 [FrameworkBundle] fixed guard event names for transitions (@destillat)
  • bug #28045 [HttpFoundation] Fix Cookie::isCleared (@ro0NL)
  • bug #28080 [HttpFoundation] fixed using _method parameter with invalid type (@Phobetor)
  • bug #28052 [HttpKernel] Fix merging bindings for controllers' locators (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/28103
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v4.1.1...v4.1.2)

  • bug #28005 [HttpKernel] Fixed templateExists on parse error of the template name (@yceruto)
  • bug #28013 [Messenger] Add missing typehint on chain sender (@sroze)
  • bug #27997 Serbo-Croatian has Serbian plural rule (@kylekatarnls)
  • bug #26193 Fix false-positive deprecation notices for TranslationLoader and WriteCheckSessionHandler (@iquito)
  • bug #27827 [Serializer] Supports nested abstract items (@sroze)
  • bug #27958 [Form] Remaining changes for bootstrap 4 file fields (@apfelbox)
  • bug #27919 [Form] Improve rendering of file field in bootstrap 4 (@apfelbox)
  • bug #27941 [WebProfilerBundle] Fixed icon alignment issue using Bootstrap 4.1.2 (@jmsche)
  • bug #27937 [HttpFoundation] reset callback on StreamedResponse when setNotModified() is called (@rubencm)
  • bug #27927 [HttpFoundation] Suppress side effects in 'get' and 'has' methods of NamespacedAttributeBag (@webnet-fr)
  • bug #27913 [EventDispatcher] Clear orphaned events on reset (@acasademont)
  • bug #27923 [Form/Profiler] Massively reducing memory footprint of form profiling pages... (@VincentChalnot)
  • bug #27918 [Console] correctly return parameter's default value on "--" (@seschwar)
  • bug #27826 [Serializer] Fix serialization of items with groups across entities and discrimination map (@sroze)
  • bug #27904 [Filesystem] fix lock file permissions (@fritzmg)
  • bug #27903 [Lock] fix lock file permissions (@fritzmg)
  • bug #27889 [Form] Replace .initialism with .text-uppercase. (@vudaltsov)
  • bug #27902 Fix the detection of the Process new argument (@stof)
  • bug #27885 [HttpFoundation] don't encode cookie name for BC (@nicolas-grekas)
  • bug #27782 [DI] Fix dumping ignore-on-uninitialized references to synthetic services (@nicolas-grekas)
  • bug #27435 [OptionResolver] resolve arrays (@Doctrs)
  • bug #27728 [TwigBridge] Fix missing path and separators in loader paths list on debug:twig output (@yceruto)
  • bug #27837 [PropertyInfo] Fix dock block lookup fallback loop (@DerManoMann)
  • bug #27848 [Workflow] Fixed BC break (@lyrixx)
  • bug #27758 [WebProfilerBundle] Prevent toolbar links color override by css (@alcalyn)
  • bug #27847 [Security] Fix accepting null as $uidKey in LdapUserProvider (@louhde)
  • bug #27820 [Messenger] Fix a bug when having more than one named handler per message subscriber (@sroze)
  • bug #27834 [DI] Don't show internal service id on binding errors (@nicolas-grekas)
  • bug #27831 Check for Hyper terminal on all operating systems. (@azjezz)
  • bug #27794 Add color support for Hyper terminal . (@azjezz)
  • bug #27809 [HttpFoundation] Fix tests: new message for status 425 (@dunglas)
  • bug #27618 [PropertyInfo] added handling of nullable types in PhpDoc (@oxan)
  • bug #27659 [HttpKernel] Make AbstractTestSessionListener compatible with CookieClearingLogoutHandler (@thewilkybarkid)
  • bug #27752 [Cache] provider does not respect option maxIdLength with versioning enabled (@Constantine Shtompel)
  • bug #27773 [Serializer] Class discriminator and serialization groups (@sroze)
  • bug #27710 [DependencyInjection] fix handling of empty DI extension configs (@xabbuh)
  • bug #27776 [ProxyManagerBridge] Fix support of private services (bis) (@nicolas-grekas)
  • bug #27714 [HttpFoundation] fix session tracking counter (@nicolas-grekas, @dmaicher)
  • bug #27727 [Routing] Disallow object usage inside Route (@paxal)
  • bug #27736 [Routing] fix too much greediness in host-matching regex (@nicolas-grekas)
  • bug #27747 [HttpFoundation] fix registration of session proxies (@nicolas-grekas)
  • bug #27754 [HttpFoundation] missing namespace for RedisProxy (@Bonfante)
  • bug #27722 Redesign the Debug error page in prod (@javiereguiluz)
  • bug #27716 [DI] fix dumping deprecated service in yaml (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/28043

Changelog (since https://github.com/symfony/symfony/compare/v4.0.12...v4.0.13)

  • bug #28005 [HttpKernel] Fixed templateExists on parse error of the template name (@yceruto)
  • bug #27997 Serbo-Croatian has Serbian plural rule (@kylekatarnls)
  • bug #26193 Fix false-positive deprecation notices for TranslationLoader and WriteCheckSessionHandler (@iquito)
  • bug #27941 [WebProfilerBundle] Fixed icon alignment issue using Bootstrap 4.1.2 (@jmsche)
  • bug #27937 [HttpFoundation] reset callback on StreamedResponse when setNotModified() is called (@rubencm)
  • bug #27927 [HttpFoundation] Suppress side effects in 'get' and 'has' methods of NamespacedAttributeBag (@webnet-fr)
  • bug #27923 [Form/Profiler] Massively reducing memory footprint of form profiling pages... (@VincentChalnot)
  • bug #27918 [Console] correctly return parameter's default value on "--" (@seschwar)
  • bug #27904 [Filesystem] fix lock file permissions (@fritzmg)
  • bug #27903 [Lock] fix lock file permissions (@fritzmg)
  • bug #27889 [Form] Replace .initialism with .text-uppercase. (@vudaltsov)
  • bug #27902 Fix the detection of the Process new argument (@stof)
  • bug #27885 [HttpFoundation] don't encode cookie name for BC (@nicolas-grekas)
  • bug #27782 [DI] Fix dumping ignore-on-uninitialized references to synthetic services (@nicolas-grekas)
  • bug #27435 [OptionResolver] resolve arrays (@Doctrs)
  • bug #27728 [TwigBridge] Fix missing path and separators in loader paths list on debug:twig output (@yceruto)
  • bug #27837 [PropertyInfo] Fix dock block lookup fallback loop (@DerManoMann)
  • bug #27758 [WebProfilerBundle] Prevent toolbar links color override by css (@alcalyn)
  • bug #27847 [Security] Fix accepting null as $uidKey in LdapUserProvider (@louhde)
  • bug #27834 [DI] Don't show internal service id on binding errors (@nicolas-grekas)
  • bug #27831 Check for Hyper terminal on all operating systems. (@azjezz)
  • bug #27794 Add color support for Hyper terminal . (@azjezz)
  • bug #27809 [HttpFoundation] Fix tests: new message for status 425 (@dunglas)
  • bug #27618 [PropertyInfo] added handling of nullable types in PhpDoc (@oxan)
  • bug #27659 [HttpKernel] Make AbstractTestSessionListener compatible with CookieClearingLogoutHandler (@thewilkybarkid)
  • bug #27752 [Cache] provider does not respect option maxIdLength with versioning enabled (@Constantine Shtompel)
  • bug #27776 [ProxyManagerBridge] Fix support of private services (bis) (@nicolas-grekas)
  • bug #27714 [HttpFoundation] fix session tracking counter (@nicolas-grekas, @dmaicher)
  • bug #27747 [HttpFoundation] fix registration of session proxies (@nicolas-grekas)
  • bug #27722 Redesign the Debug error page in prod (@javiereguiluz)
  • bug #27716 [DI] fix dumping deprecated service in yaml (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/28042
[EOM] End of maintenance release for branch 4.0

Changelog (since https://github.com/symfony/symfony/compare/v4.1.0...v4.1.1)

  • bug #27626 [TwigBundle][DX] Only add the Twig WebLinkExtension if the WebLink component is enabled (@thewilkybarkid)
  • bug #27702 [TwigBundle] bump lowest deps to fix issue with "double-colon" controller service refs (@nicolas-grekas)
  • bug #27701 [SecurityBundle] Dont throw if "security.http_utils" is not found (@nicolas-grekas)
  • bug #27690 [DI] Resolve env placeholder in logs (@ro0NL)
  • bug #27687 [HttpKernel] fix argument's error messages in ServiceValueResolver (@nicolas-grekas)
  • bug #27614 [VarDumper] Fix dumping by splitting Server/Connection out of Dumper/ServerDumper (@nicolas-grekas)
  • bug #27681 [DI] Avoid leaking unused env placeholders (@ro0NL)
  • bug #26534 allow_extra_attributes does not throw an exception as documented (@deviantintegral)
  • bug #27664 [FrameworkBundle] Ignore keepQueryParams attribute when generating route redirect (@vudaltsov)
  • bug #27668 [Lock] use 'r+' for fopen (fixes issue on Solaris) (@fritzmg)
  • bug #27669 [Filesystem] fix file lock on SunOS (@fritzmg)
  • bug #27662 [HttpKernel] fix handling of nested Error instances (@xabbuh)
  • bug #27651 [Messenger] Fixed MessengerPass::guessHandledClasses return type (@massimilianobraglia)
  • bug #26845 [Config] Fixing GlobResource when inside phar archive (@vworldat)
  • bug #27382 [Form] Fix error when rendering a DateIntervalType form with exactly 0 weeks (@krixon)
  • bug #27309 Fix surrogate not using original request (@Toflar)
  • bug #27467 [HttpKernel] fix session tracking in surrogate master requests (@nicolas-grekas)
  • bug #27632 [HttpFoundation] Ensure RedisSessionHandler::updateTimestamp returns a boolean (@MatTheCat)
  • bug #27630 [Validator][Form] Remove BOM in some xlf files (@gautierderuette)
  • bug #27596 [Framework][Workflow] Added support for interfaces (@vudaltsov)
  • bug #27593 [ProxyManagerBridge] Fixed support of private services (@nicolas-grekas)
  • bug #27591 [VarDumper] Fix dumping ArrayObject and ArrayIterator instances (@nicolas-grekas)
  • bug #27528 [FrameworkBundle] give access to non-shared services when using test.service_container (@nicolas-grekas)
  • bug #27584 Avoid calling eval when there is no script embedded in the toolbar (@stof)
  • bug #27581 Fix bad method call with guard authentication + session migration (@weaverryan)
  • bug #27576 [Cache] Fix expiry comparisons in array-based pools (@nicolas-grekas)
  • bug #27566 [FrameworkBundle] fix for allowing single colon controller notation (@dmaicher)
  • bug #27556 Avoiding session migration for stateless firewall UsernamePasswordJsonAuthenticationListener (@weaverryan)
  • bug #27452 Avoid migration on stateless firewalls (@weaverryan)
  • bug #27568 [DI] Deduplicate generated proxy classes (@nicolas-grekas)
  • bug #27511 [Routing] fix matching host patterns, utf8 prefixes and non-capturing groups (@nicolas-grekas)
  • bug #27326 [Serializer] deserialize from xml: Fix a collection that contains the only one element (@webnet-fr)
  • bug #27562 [HttpKernel] Log/Collect exceptions at prio 0 (@ro0NL)
  • bug #27567 [PhpUnitBridge] Fix error on some Windows OS (@Nsbx)
  • bug #27357 [Lock] Remove released semaphore (@jderusse)
  • bug #27416 TagAwareAdapter over non-binary memcached connections corrupts memcache (@Aleksey Prilipko)
  • bug #27514 [Debug] Pass previous exception to FatalErrorException (@pmontoya)
  • bug #27516 Revert "bug #26138 [HttpKernel] Catch HttpExceptions when templating is not installed (cilefen)" (@nicolas-grekas)
  • bug #27501 [FrameworkBundle] Fix test-container on kernel reboot, revert to returning the real container from Client::getContainer() (@nicolas-grekas)
  • bug #27472 [DI] Ignore missing tree root nodes on validate (@ro0NL)
  • bug #27458 [WebProfilerBundle] fixed getSession when no session has been set deprecation warnings (@GregOriol)
  • bug #27318 [Cache] memcache connect should not add duplicate entries on sequential calls (@Aleksey Prilipko)
  • bug #27498 [Routing] Don't reorder past variable-length placeholders (@nanocom, @nicolas-grekas)
  • bug #27496 [DebugBundle] DebugBundle::registerCommands should be noop (@ogizanagi)
  • bug #27485 [BrowserKit] Fix a BC break in Client affecting Panthère (@dunglas)
  • bug #27470 [DI] Remove default env type check on validate (@ro0NL)
  • bug #27454 [FrameworkBundle][TwigBridge] Fix BC break from strong dependency on CSRF token storage (@tgalopin)
  • bug #27389 [Serializer] Fix serializer tries to denormalize null values on nullable properties (@ogizanagi)
  • bug #27272 [FrameworkBundle] Change priority of AddConsoleCommandPass to TYPE_BEFORE_REMOVING (@upyx)
  • bug #27396 [HttpKernel] fix registering IDE links (@nicolas-grekas)
  • bug #26973 [HttpKernel] Set first trusted proxy as REMOTE_ADDR in InlineFragmentRenderer. (@kmadejski)
  • bug #27303 [Process] Consider "executable" suffixes first on Windows (@sanmai)
  • bug #27297 Triggering RememberMe's loginFail() when token cannot be created (@weaverryan)

[PR] https://github.com/symfony/symfony/pull/27706

Changelog (since https://github.com/symfony/symfony/compare/v4.0.11...v4.0.12)

  • bug #27626 [TwigBundle][DX] Only add the Twig WebLinkExtension if the WebLink component is enabled (@thewilkybarkid)
  • bug #27701 [SecurityBundle] Dont throw if "security.http_utils" is not found (@nicolas-grekas)
  • bug #27690 [DI] Resolve env placeholder in logs (@ro0NL)
  • bug #26534 allow_extra_attributes does not throw an exception as documented (@deviantintegral)
  • bug #27668 [Lock] use 'r+' for fopen (fixes issue on Solaris) (@fritzmg)
  • bug #27669 [Filesystem] fix file lock on SunOS (@fritzmg)
  • bug #27662 [HttpKernel] fix handling of nested Error instances (@xabbuh)
  • bug #26845 [Config] Fixing GlobResource when inside phar archive (@vworldat)
  • bug #27382 [Form] Fix error when rendering a DateIntervalType form with exactly 0 weeks (@krixon)
  • bug #27309 Fix surrogate not using original request (@Toflar)
  • bug #27467 [HttpKernel] fix session tracking in surrogate master requests (@nicolas-grekas)
  • bug #27630 [Validator][Form] Remove BOM in some xlf files (@gautierderuette)
  • bug #27596 [Framework][Workflow] Added support for interfaces (@vudaltsov)
  • bug #27593 [ProxyManagerBridge] Fixed support of private services (@nicolas-grekas)
  • bug #27591 [VarDumper] Fix dumping ArrayObject and ArrayIterator instances (@nicolas-grekas)
  • bug #27581 Fix bad method call with guard authentication + session migration (@weaverryan)
  • bug #27576 [Cache] Fix expiry comparisons in array-based pools (@nicolas-grekas)
  • bug #27556 Avoiding session migration for stateless firewall UsernamePasswordJsonAuthenticationListener (@weaverryan)
  • bug #27452 Avoid migration on stateless firewalls (@weaverryan)
  • bug #27568 [DI] Deduplicate generated proxy classes (@nicolas-grekas)
  • bug #27326 [Serializer] deserialize from xml: Fix a collection that contains the only one element (@webnet-fr)
  • bug #27567 [PhpUnitBridge] Fix error on some Windows OS (@Nsbx)
  • bug #27357 [Lock] Remove released semaphore (@jderusse)
  • bug #27416 TagAwareAdapter over non-binary memcached connections corrupts memcache (@Aleksey Prilipko)
  • bug #27514 [Debug] Pass previous exception to FatalErrorException (@pmontoya)
  • bug #27516 Revert "bug #26138 [HttpKernel] Catch HttpExceptions when templating is not installed (cilefen)" (@nicolas-grekas)
  • bug #27318 [Cache] memcache connect should not add duplicate entries on sequential calls (@Aleksey Prilipko)
  • bug #27389 [Serializer] Fix serializer tries to denormalize null values on nullable properties (@ogizanagi)
  • bug #27272 [FrameworkBundle] Change priority of AddConsoleCommandPass to TYPE_BEFORE_REMOVING (@upyx)
  • bug #27396 [HttpKernel] fix registering IDE links (@nicolas-grekas)
  • bug #26973 [HttpKernel] Set first trusted proxy as REMOTE_ADDR in InlineFragmentRenderer. (@kmadejski)
  • bug #27303 [Process] Consider "executable" suffixes first on Windows (@sanmai)
  • bug #27297 Triggering RememberMe's loginFail() when token cannot be created (@weaverryan)
  • bug #27344 [HttpKernel] reset kernel start time on reboot (@kiler129)
  • bug #27365 [Serializer] Check the value of enable_max_depth if defined (@dunglas)
  • bug #27358 [PhpUnitBridge] silence some stderr outputs (@ostrolucky)
  • bug #27366 [DI] never inline lazy services (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/27705

Changelog (since https://github.com/symfony/symfony/compare/v4.1.0-BETA3...v4.1.0)

  • bug #27420 Revert "feature #26702 Mark ExceptionInterfaces throwable (ostrolucky)" (@nicolas-grekas)
  • bug #27415 Insert correct parameter_bag service in AbstractController (@curry684)

[PR] https://github.com/symfony/symfony/pull/27424

Changelog (since https://github.com/symfony/symfony/compare/v4.1.0-BETA2...v4.1.0-BETA3)

  • bug #27388 [Routing] Account for greediness when merging route patterns (@nicolas-grekas)
  • bug #27344 [HttpKernel] reset kernel start time on reboot (@kiler129)
  • bug #27365 [Serializer] Check the value of enable_max_depth if defined (@dunglas)
  • bug #27358 [PhpUnitBridge] silence some stderr outputs (@ostrolucky)
  • bug #27366 [DI] never inline lazy services (@nicolas-grekas)
  • bug #27352 Remove reference to the test container after kernel shutdown (@stof)
  • bug #27350 [HttpKernel] fix deprecation in AbstractTestSessionListener (@alekitto)
  • bug #27367 [FrameworkBundle] cleanup generated test container (@nicolas-grekas)
  • bug #27379 [FrameworkBundle] Fix using test.service_container when Client is rebooted (@nicolas-grekas)
  • bug #27364 [DI] Fix bad exception on uninitialized references to non-shared services (@nicolas-grekas)
  • bug #27359 [HttpFoundation] Fix perf issue during MimeTypeGuesser intialization (@nicolas-grekas)
  • security #cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be configured
  • security #cve-2018-11406 clear CSRF tokens when the user is logged out
  • security #cve-2018-11385 migrating session for UsernamePasswordJsonAuthenticationListener
  • security #cve-2018-11385 migrating session for UsernamePasswordJsonAuthenticationListener
  • security #cve-2018-11385 Adding session authentication strategy to Guard to avoid session fixation
  • security #cve-2018-11385 Adding session strategy to ALL listeners to avoid any possible fixation
  • security #cve-2018-11386 [HttpFoundation] Break infinite loop in PdoSessionHandler when MySQL is in loose mode
  • bug #27341 [WebProfilerBundle] Fixed validator/dump trace CSS (@yceruto)
  • bug #27337 [FrameworkBundle] fix typo in CacheClearCommand (@emilielorenzo)
  • bug #27292 [Serializer] Fix and improve constraintViolationListNormalizer's RFC7807 compliance (@dunglas)

[PR] https://github.com/symfony/symfony/pull/27390

Changelog (since https://github.com/symfony/symfony/compare/v4.0.10...v4.0.11)

  • bug #27364 [DI] Fix bad exception on uninitialized references to non-shared services (@nicolas-grekas)
  • bug #27359 [HttpFoundation] Fix perf issue during MimeTypeGuesser intialization (@nicolas-grekas)
  • security #cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be configured
  • security #cve-2018-11406 clear CSRF tokens when the user is logged out
  • security #cve-2018-11385 migrating session for UsernamePasswordJsonAuthenticationListener
  • security #cve-2018-11385 Adding session authentication strategy to Guard to avoid session fixation
  • security #cve-2018-11385 Adding session strategy to ALL listeners to avoid any possible fixation
  • security #cve-2018-11386 [HttpFoundation] Break infinite loop in PdoSessionHandler when MySQL is in loose mode
  • bug #27341 [WebProfilerBundle] Fixed validator/dump trace CSS (@yceruto)
  • bug #27337 [FrameworkBundle] fix typo in CacheClearCommand (@emilielorenzo)

[PR] https://github.com/symfony/symfony/pull/27383
[SECURITY] Security release

Changelog (since https://github.com/symfony/symfony/compare/v4.1.0-BETA1...v4.1.0-BETA2)

  • bug #27312 Supress deprecation notices thrown when getting private servies from container in tests (@arderyp)
  • feature #27275 [Messenger] Allow to scope handlers per bus (@ogizanagi, @sroze)
  • bug #27264 [Validator] Use strict type in URL validator (@mimol91)
  • bug #27267 [DependencyInjection] resolve array env vars (@jamesthomasonjr)
  • bug #26781 [Form] Fix precision of MoneyToLocalizedStringTransformer's divisions on transform() (@syastrebov)
  • bug #27270 [Routing] Fix adding name prefix to canonical route names (@ismail1432)
  • bug #27286 [Translation] Add Occitan plural rule (@kylekatarnls)
  • bug #27271 [DI] Allow defining bindings on ChildDefinition (@nicolas-grekas)
  • bug #27246 Disallow invalid characters in session.name (@ostrolucky)
  • feature #27230 [Messenger] Select alternatives on missing receiver arg or typo (@yceruto)
  • bug #27287 [PropertyInfo] fix resolving parent|self type hints (@nicolas-grekas)
  • bug #27281 [HttpKernel] Fix dealing with self/parent in ArgumentMetadataFactory (@fabpot)
  • bug #24805 [Security] Fix logout (@MatTheCat)
  • bug #27265 [DI] Shared services should not be inlined in non-shared ones (@nicolas-grekas)
  • bug #27141 [Process] Suppress warnings when open_basedir is non-empty (@cbj4074)
  • bug #27250 [Session] limiting :key for GET_LOCK to 64 chars (@oleg-andreyev)
  • feature #27128 [Messenger] Middleware factories support in config (@ogizanagi)
  • bug #27214 [HttpKernel] Fix services are no longer injected into __invoke controllers method (@ogizanagi)
  • bug #27237 [Debug] Fix populating error_get_last() for handled silent errors (@nicolas-grekas)
  • bug #27232 [Cache][Lock] Fix usages of error_get_last() (@nicolas-grekas)
  • bug #27236 [Filesystem] Fix usages of error_get_last() (@nicolas-grekas)
  • feature #27202 [Messenger] Improve the profiler panel (@ogizanagi)
  • bug #27191 [DI] Display previous error messages when throwing unused bindings (@nicolas-grekas)
  • bug #27231 [FrameworkBundle] Fix cache:clear on vagrant (@nicolas-grekas)
  • bug #27222 [WebProfilerBundle][Cache] Fix misses calculation when calling getItems (@fsevestre)
  • bug #27227 [HttpKernel] Handle NoConfigurationException "onKernelException()" (@nicolas-grekas)
  • feature #27034 [Messenger][DX] Uses custom method names for handlers (@sroze)
  • bug #27228 [Messenger] Remove autoconfiguration for Sender/ReceiverInterface (@kbond)
  • bug #27229 [Messenger] Rename tag attribute "name" by "alias" (@yceruto)
  • bug #27224 [Messenger] Make sure default receiver name is set before command configuration (@yceruto)
  • feature #27225 [Messenger] Autoconfiguring TransportFactoryInterface classes (@yceruto)
  • bug #27220 [Messenger] Fix new AMQP Transport test with Envelope & fix contract (@ogizanagi)
  • bug #27184 [Messenger] Fix return senders based on the message parents/interfaces (@yceruto)
  • feature #27182 [Messenger] Re-introduce wrapped message configuration (with fix) (@sroze, @ogizanagi)
  • bug #27209 [Workflow] add is deprecated since Symfony 4.1. Use addWorkflow() instead (@xkobal)
  • feature #26803 [Messenger] Add debug:messenger CLI command (@ro0NL, @sroze)
  • bug #27189 [Profiler] Fix dump makes toolbar disappear (@ogizanagi)
  • bug #27199 [Messenger] Fix default bus name (@ogizanagi)
  • bug #27198 [Messenger] Fix the transport factory after moving it (@sroze)
  • bug #27197 [Messenger] Fix AMQP Transport factory & TransportFactoryInterface (@ogizanagi)
  • bug #27196 [Messenger] Fix AMQP Transport (@yceruto)

[PR] https://github.com/symfony/symfony/pull/27331

Changelog (since https://github.com/symfony/symfony/compare/v4.0.9...v4.0.10)

  • bug #27264 [Validator] Use strict type in URL validator (@mimol91)
  • bug #27267 [DependencyInjection] resolve array env vars (@jamesthomasonjr)
  • bug #26781 [Form] Fix precision of MoneyToLocalizedStringTransformer's divisions on transform() (@syastrebov)
  • bug #27286 [Translation] Add Occitan plural rule (@kylekatarnls)
  • bug #27271 [DI] Allow defining bindings on ChildDefinition (@nicolas-grekas)
  • bug #27246 Disallow invalid characters in session.name (@ostrolucky)
  • bug #27287 [PropertyInfo] fix resolving parent|self type hints (@nicolas-grekas)
  • bug #27281 [HttpKernel] Fix dealing with self/parent in ArgumentMetadataFactory (@fabpot)
  • bug #24805 [Security] Fix logout (@MatTheCat)
  • bug #27265 [DI] Shared services should not be inlined in non-shared ones (@nicolas-grekas)
  • bug #27141 [Process] Suppress warnings when open_basedir is non-empty (@cbj4074)
  • bug #27250 [Session] limiting :key for GET_LOCK to 64 chars (@oleg-andreyev)
  • bug #27237 [Debug] Fix populating error_get_last() for handled silent errors (@nicolas-grekas)
  • bug #27232 [Cache][Lock] Fix usages of error_get_last() (@nicolas-grekas)
  • bug #27236 [Filesystem] Fix usages of error_get_last() (@nicolas-grekas)
  • bug #27191 [DI] Display previous error messages when throwing unused bindings (@nicolas-grekas)
  • bug #27231 [FrameworkBundle] Fix cache:clear on vagrant (@nicolas-grekas)
  • bug #27222 [WebProfilerBundle][Cache] Fix misses calculation when calling getItems (@fsevestre)
  • bug #27227 [HttpKernel] Handle NoConfigurationException "onKernelException()" (@nicolas-grekas)
  • bug #27152 [HttpFoundation] use brace-style regex delimiters (@xabbuh)
  • bug #27158 [Cache] fix logic for fetching tag versions on TagAwareAdapter (@dmaicher)
  • bug #27143 [Console] By default hide the short exception trace line from exception messages in Symfony's commands (@yceruto)
  • bug #27133 [Doctrine Bridge] fix priority for doctrine event listeners (@dmaicher)
  • bug #27135 [FrameworkBundle] Use the correct service id for CachePoolPruneCommand in its compiler pass (@DemonTPx)
  • feature #24896 Add CODE_OF_CONDUCT.md (@egircys)

[PR] https://github.com/symfony/symfony/pull/27330

Changelog (since https://github.com/symfony/symfony/compare/v4.0.0...v4.1.0-BETA1)

  • feature #26945 [Messenger] Support configuring messages when dispatching (@ogizanagi)
  • feature #27168 [HttpKernel] Add Kernel::getAnnotatedClassesToCompile() (@nicolas-grekas)
  • feature #27170 Show the deprecations tab by default in the logger panel (@javiereguiluz)
  • feature #27130 [Messenger] Add a new time limit receiver (@sdelicata)
  • feature #27104 [DX] Redirect to proper Symfony version documentation (@noniagriconomie)
  • feature #27105 [Serializer] Add ->hasCacheableSupportsMethod() to CacheableSupportsMethodInterface (@nicolas-grekas)
  • feature #24896 Add CODE_OF_CONDUCT.md (@egircys)
  • feature #27092 [Workflow] "clear()" instead of "reset()" (@nicolas-grekas)
  • feature #26655 [WebProfilerBundle] Make WDT follow ajax requests if header set (@jeffreymb)
  • feature #27049 [Serializer] Cache the normalizer to use when possible (@dunglas, @nicolas-grekas)
  • feature #27062 [SecurityBundle] Register a UserProviderInterface alias if one provider only (@sroze)
  • feature #27065 [DI][Routing] Allow invokable objects to be used as PHP-DSL loaders (@aurimasniekis)
  • feature #26975 [Messenger] Add a memory limit option for ConsumeMessagesCommand (@sdelicata)
  • feature #26864 [Messenger] Define multiple buses from the framework.messenger.buses configuration (@sroze)
  • feature #27017 [Serializer] Allow to access to the context and various other infos in callbacks and max depth handler (@dunglas)
  • feature #26832 [MonologBridge] Added WebSubscriberProcessor to ease processor configuration (@lyrixx)
  • feature #24699 [HttpFoundation] Add HeaderUtils class (@c960657)
  • feature #26791 [BrowserKit] Bypass Header Informations (@cfjulien)
  • feature #26825 [Form] Add choice_translation_locale option for Intl choice types (@yceruto, @fabpot)
  • feature #26921 [DI][FrameworkBundle] Hide service ids that start with a dot (@nicolas-grekas)
  • feature #23659 [HttpKernel] LoggerDataCollector: splitting logs on different sub-requests (@vtsykun)
  • feature #26768 [DI] Allow autoconfigured calls in PHP (@Gary PEGEOT, @GaryPEGEOT)
  • feature #26833 [HttpKernel] Added support for timings in ArgumentValueResolvers (@iltar)
  • feature #26770 Do not normalize array keys in twig globals (@lstrojny)
  • feature #26787 [Security] Make security.providers optional (@MatTheCat)
  • feature #26970 [VarDumper] Add dd() helper == dump() + exit() (@nicolas-grekas)
  • feature #26941 [Messenger] Allow to configure the transport (@sroze)
  • feature #26632 [Messenger] Add AMQP adapter (@sroze)
  • feature #26863 [Console] Support iterable in SymfonyStyle::write/writeln (@ogizanagi)
  • feature #26847 [Console] add support for iterable in output (@Tobion)
  • feature #26660 [SecurityBundle] allow using custom function inside allow_if expressions (@dmaicher)
  • feature #26096 [HttpFoundation] Added a migrating session handler (@rossmotley)
  • feature #26528 [Debug] Support any Throwable object in FlattenException (@derrabus)
  • feature #26811 [PhpUnitBridge] Search for other SYMFONY _* env vars in phpunit.xml then phpunit.xml.dist (@lyrixx)
  • feature #26800 [PhpUnitBridge] Search for SYMFONY_PHPUNIT_REMOVE env var in phpunit.xml then phpunit.xml.dist (@lyrixx)
  • feature #26684 [Messenger] Remove the Doctrine middleware configuration from the FrameworkBundle (@sroze)
  • feature #21856 [LDAP] Allow adding and removing values to/from multi-valued attributes (@jean-gui)
  • feature #26767 [Form] ability to set rounding strategy for MoneyType (@syastrebov)
  • feature #23707 [Monolog Bridge][DX] Add a Monolog activation strategy for ignoring specific HTTP codes (@simshaun, @fabpot)
  • feature #26685 [Messenger] Add a MessageHandlerInterface (multiple messages + auto-configuration) (@sroze)
  • feature #26648 [Messenger] Added a middleware that validates messages (@Nyholm)
  • feature #26475 [HttpFoundation] split FileException into specialized ones about upload handling (@fmata)
  • feature #26702 Mark ExceptionInterfaces throwable (@ostrolucky)
  • feature #26656 [Workflow][Registry] Added a new 'all' method (@alexpozzi, @lyrixx)
  • feature #26693 [Console] Add box-double table style (@maidmaid)
  • feature #26698 [Console] Use UTF-8 bullet for listing (@ro0NL)
  • feature #26682 Improved the lint:xliff command (@javiereguiluz)
  • feature #26681 Allow to easily ask Symfony not to set a response to private automatically (@Toflar)
  • feature #26627 [DI] Add runtime service exceptions to improve the error message when controller arguments cannot be injected (@nicolas-grekas)
  • feature #26504 [FrameworkBundle] framework.php_errors.log now accept a log level (@Simperfit)
  • feature #26498 Allow "json:" env var processor to accept null value (@mcfedr)
  • feature #25928 [DI] Allow binary values in parameters. (@bburnichon)
  • feature #26647 [Messenger] Add a middleware that wraps all handlers in one Doctrine transaction. (@Nyholm)
  • feature #26668 [WebProfilerBundle] Live duration of AJAX request (@ostrolucky)
  • feature #26650 [Messenger] Clone messages to show in profiler (@Nyholm)
  • feature #26281 [FrameworkBundle] keep query in redirect (@Simperfit)
  • feature #26665 Improved the Ajax profiler panel when there are exceptions (@javiereguiluz)
  • feature #26654 [VarDumper] Provide binary, allowing to start a server at any time (@ogizanagi)
  • feature #26332 Add a data_help method in Form (@mpiot, @Nyholm)
  • feature #26671 More compact display of vendor code in exception pages (@javiereguiluz)
  • feature #26502 [Form] Add Bootstrap 4 style for field FileType (@zenmate)
  • feature #23888 [DI] Validate env vars in config (@ro0NL)
  • feature #26658 Adding support to bind scalar values to controller arguments (@weaverryan)
  • feature #26651 [Workflow] Added a TransitionException (@andrewtch, @lyrixx)
  • feature #23831 [VarDumper] Introduce a new way to collect dumps through a server dumper (@ogizanagi, @nicolas-grekas)
  • feature #26220 [HttpFoundation] Use parse_str() for query strings normalization (@nicolas-grekas)
  • feature #24411 [Messenger] Add a new Messenger component (@sroze)
  • feature #22150 [Serializer] Added a ConstraintViolationListNormalizer (@lyrixx)
  • feature #26639 [SecurityBundle] Added an alias from RoleHierarchyInterface to security.role_hierarchy (@lyrixx)
  • feature #26636 [DI] deprecate TypedReference::canBeAutoregistered() and getRequiringClass() (@nicolas-grekas)
  • feature #26445 [Serializer] Ignore comments when decoding XML (@q0rban)
  • feature #26284 [Routing] allow no-slash root on imported routes (@nicolas-grekas)
  • feature #26092 [Workflow] Add a MetadataStore to fetch some metadata (@lyrixx)
  • feature #26121 [FrameworkBundle] feature: add the ability to search a route (@Simperfit)
  • feature #25197 [FrameworkBundle][TwigBridge] make csrf_token() usable without forms (@xabbuh)
  • feature #25631 [DI] Service decoration: autowire the inner service (@dunglas)
  • feature #26076 [Workflow] Add transition blockers (@d-ph, @lyrixx)
  • feature #24363 [Console] Modify console output and print multiple modifyable sections (@pierredup)
  • feature #26381 Transform both switchToXHR() and removeXhr() to xmlHttpRequest() (@Simperfit)
  • feature #26449 Make ProgressBar::setMaxSteps public (@ostrolucky)
  • feature #26308 [Config] Introduce BuilderAwareInterface (@ro0NL)
  • feature #26518 [Routing] Allow inline definition of requirements and defaults (@nicolas-grekas)
  • feature #26143 [Routing] Implement i18n routing (@frankdejonge, @nicolas-grekas)
  • feature #26564 [HttpFoundation] deprecate call to Request::getSession() when Request::hasSession() returns false (@fmata)
  • feature #26408 Readd 'form_label_errors' block to disable errors on form labels (@birkof)
  • feature #25456 [Console] Make pretty the box style table (@maidmaid)
  • feature #26499 [FrameworkBundle] Allow fetching private services from test clients (@nicolas-grekas)
  • feature #26509 [BrowserKit] Avoid nullable values in some Client's methods (@ossinkine)
  • feature #26288 [FrameworkBundle] show the unregistered command warning at the end of the list command (@Simperfit)
  • feature #26520 Added some HTML5 features to the Symfony Profiler (@javiereguiluz)
  • feature #26398 [WebProfilerBundle] Display the missing translation panel by default (@javiereguiluz)
  • feature #23409 [Security] AuthenticationUtils::getLastUsername() return type inconsistency (@vudaltsov)
  • feature #26439 [Console] [DX] Fix command description/help display (@noniagriconomie)
  • feature #26372 Revert "feature #24763 [Process] Allow writing portable "prepared" command lines (Simperfit)" (@nicolas-grekas)
  • feature #26223 [FrameworkBundle] Add command to delete an item from a cache pool (@pierredup)
  • feature #26341 Autoconfigure service locator tag (@apfelbox)
  • feature #26330 [FORM] Fix HTML errors. (@Nyholm)
  • feature #26334 [SecurityBundle] Deprecate switch_user.stateless config node (@chalasr)
  • feature #26304 [Routing] support scheme requirement without redirectable dumped matcher (@Tobion)
  • feature #26283 [Routing] Redirect from trailing slash to no-slash when possible (@nicolas-grekas)
  • feature #25732 [Console] Add option to automatically run suggested command if there is only 1 alternative (@pierredup)
  • feature #26085 Deprecate bundle:controller:action and service:method notation (@Tobion)
  • feature #26175 [Security] Add configuration for Argon2i encryption (@CoalaJoe)
  • feature #26075 [Validator] Deprecate use of Locale validation constraint without setting "canonicalize" option to true (@phansys)
  • feature #26218 [MonologBridge] Allow to change level format in ConsoleFormatter (@ostrolucky)
  • feature #26232 [Lock] Add a TTL to refresh lock (@jderusse)
  • feature #26108 [Serializer] Add a MaxDepth handler (@dunglas)
  • feature #24778 [BrowserKit] add a way to switch to ajax for one request (@Simperfit)
  • feature #25605 [PropertyInfo] Added support for extracting type from constructor (@lyrixx)
  • feature #24763 [Process] Allow writing portable "prepared" command lines (@Simperfit)
  • feature #25218 [Serializer] add a constructor arguement to return csv always as collection (@Simperfit)
  • feature #25369 [Serializer] add a context key to return always as collection for XmlEncoder (@Simperfit)
  • feature #26213 [FrameworkBundle] Add support to 307/308 HTTP status codes in RedirectController (@ZipoKing)
  • feature #26149 Added support for name on the unit node (@Nyholm)
  • feature #24308 [Validator] support protocolless urls validation (@MyDigitalLife)
  • feature #26059 [Routing] Match 77.7x faster by compiling routes in one regexp (@nicolas-grekas)
  • feature #22447 [WebProfilerBundle] Imply forward request by a new X-Previous-Debug-Token header (@ro0NL)
  • feature #26152 [Intl] Add polyfill for Locale::canonicalize() (@nicolas-grekas)
  • feature #26073 [DoctrineBridge] Add support for datetime immutable types in doctrine type guesser (@jvasseur)
  • feature #26079 [Workflow] Remove constraints on transition/place name + Updated Dumper (@lyrixx)
  • feature #23617 [PropertyInfo] Add hassers for accessors prefixes (@sebdec)
  • feature #25997 Always show all deprecations except legacy ones when not weak (@greg0ire)
  • feature #25582 [Form] Support \DateTimeImmutable (@vudaltsov)
  • feature #24705 [Workflow] Add PlantUML dumper to workflow:dump command (@Plopix)
  • feature #24508 [Serializer] Fix security issue on CsvEncoder about CSV injection (@welcoMattic)
  • feature #25772 [Security] The AuthenticationException should implements Security's ExceptionInterface (@sroze)
  • feature #25164 [WebProfilerBundle] Improve controller linking (@ro0NL)
  • feature #22353 [Validator] Add canonicalize option for Locale validator (@phansys)
  • feature #26036 Added support for getting default values in Accept headers (@javiereguiluz)
  • feature #25780 [TwigBundle] Deprecating "false" in favor of "kernel.debug" as default value of "strict_variable" (@yceruto)
  • feature #23508 Deprecated the AdvancedUserInterface (@iltar)
  • feature #24781 [HttpFoundation] RedisSessionHandler (@dkarlovi)
  • feature #26028 Unwrap errors in FlattenException (@derrabus)
  • feature #25892 Adding an array adapter (@weaverryan)
  • feature #24894 [FrameworkBundle] add a notice when passing a routerInterface without warmupInterface in RouterCacheWarmer (@Simperfit)
  • feature #24632 [DependencyInjection] Anonymous services in PHP DSL (@unkind)
  • feature #25836 [HttpKernel] Make session-related services extra-lazy (@nicolas-grekas)
  • feature #25775 Introduce signaled process specific exception class (@Soullivaneuh)
  • feature #22253 [Config] allow changing the path separator (@bburnichon)
  • feature #25493 [Serializer] default_constructor_arguments context option for denormalization (@Nek-)
  • feature #25839 [SecurityBundle] Deprecate in_memory.user abstract service (@chalasr)
  • feature #24392 Display orphaned events in profiler (@kejwmen)
  • feature #25275 [DI] Allow for invokable event listeners (@ro0NL)
  • feature #25627 [DI] Add a simple CSV env var processor (@dunglas)
  • feature #25092 [Security] #25091 add target user to SwitchUserListener (@jwmickey)
  • feature #24777 [TwigBundle] Added priority to twig extensions (@Brunty)
  • feature #25710 [FrameworkBundle] add cache.app.simple psr simple cache (@dmaicher)
  • feature #25669 [Security] Fail gracefully if the security token cannot be unserialized from the session (@thewilkybarkid)
  • feature #25504 [Validator] Add option to pass custom values to Expression validator (@ostrolucky)
  • feature #25701 [FrameworkBundle] add autowiring aliases for TranslationReaderInterface, ExtractorInterface & TranslationWriterInterface (@Dennis Langen)
  • feature #25516 [Validator] Deprecated "checkDNS" option in Url constraint (@ro0NL)
  • feature #25588 Move SecurityUserValueResolver to security-http (@chalasr)
  • feature #25629 [Process] Make PhpExecutableFinder look for the PHP_BINARY env var (@nicolas-grekas)
  • feature #25562 allow autowire for http_utils class (@do-see)
  • feature #25478 [FrameworkBundle] add email_validation_mode option (@xabbuh)
  • feature #25366 [HttpKernel] Decouple exception logging from rendering (@ro0NL)
  • feature #25450 [PropertyAccess] add more information to NoSuchPropertyException Message (@Simperfit)
  • feature #25148 Pr/workflow name as graph label (@shdev)
  • feature #25324 [HttpFoundation] Incorrect documentation and method name for UploadedFile::getClientSize() (@Simperfit)
  • feature #24738 [FrameworkBundle][Routing] Use a PSR-11 container in FrameworkBundle Router (@ogizanagi)
  • feature #25439 Add ControllerTrait::getParameter() (@chalasr)
  • feature #25332 [VarDumper] Allow VarDumperTestTrait expectation to be non-scalar (@romainneutron)
  • feature #25301 [Console] Add box style table (@maidmaid)
  • feature #25415 [FrameworkBundle] Add atom editor to ide config (@lexcast)
  • feature #24442 [Validator] Html5 Email Validation (@PurpleBooth)
  • feature #25288 [DI][FrameworkBundle] Add PSR-11 "ContainerBag" to access parameters as-a-service (@nicolas-grekas, @sroze)
  • feature #25290 [FrameworkBundle] debug:autowiring: don't list FQCN when they are aliased (@nicolas-grekas)
  • feature #24375 [Serializer] Serialize and deserialize from abstract classes (@sroze)
  • feature #25346 [DoctrineBridge] DoctrineDataCollector comments the non runnable part of the query (@Simperfit)
  • feature #24216 added clean option to assets install command (@robinlehrmann)
  • feature #25142 [Process] Create a "isTtySupported" static method (@nesk)
  • feature #24751 [Workflow] Introduce a Workflow interface (@Simperfit)
  • feature #25293 [Routing] Parse PHP constants in YAML routing files (@ostrolucky)
  • feature #25295 [Translation] Parse PHP constants in YAML translation files (@ostrolucky)
  • feature #25294 [Serializer] Parse PHP constants in YAML mappings (@ostrolucky)
  • feature #24637 [FrameworkBundle] Improve the DX of TemplateController when using SF 4 (@dunglas)
  • feature #25178 [Routing] Allow to set name prefixes from the configuration (@sroze)
  • feature #25237 [VarDumper] add a GMP caster in order to cast GMP resources into string or integer (@Simperfit)
  • feature #25166 [WebProfilerBundle] Expose dotenv variables (@ro0NL)
  • feature #24785 [Profiler][Translation] Logging false by default and desactivated when using the profiler (@Simperfit)
  • feature #24826 [FrameworkBundle] Allow to pass a logger instance to the Router (@ogizanagi)
  • feature #24937 [DependencyInjection] Added support for variadics in named arguments (@PabloKowalczyk)
  • feature #24819 [Console] add setInputs to ApplicationTester and share some code (@Simperfit)
  • feature #25131 [SecurityBundle][Security][Translation] trigger some deprecations for legacy methods (@xabbuh)

[PR] https://github.com/symfony/symfony/pull/27181

Changelog (since https://github.com/symfony/symfony/compare/v4.0.8...v4.0.9)

  • bug #27074 [Debug][WebProfilerBundle] Fix setting file link format (@lyrixx, @nicolas-grekas)
  • bug #27088 ResolveBindingsPass: Don't throw error for unused service, missing parent class (@weaverryan)
  • bug #27086 [PHPUnitBridge] Add an implementation just for php 7.0 (@greg0ire)
  • bug #26138 [HttpKernel] Catch HttpExceptions when templating is not installed (@cilefen)
  • bug #27007 [Cache] TagAwareAdapterInterface::invalidateTags() should commit deferred items (@nicolas-grekas)
  • bug #27067 [HttpFoundation] Fix setting session-related ini settings (@e-moe)
  • bug #27061 [HttpKernel] Don't clean legacy containers that are still loaded (@nicolas-grekas)
  • bug #27064 [VarDumper] Fix HtmlDumper classes match (@ogizanagi)
  • bug #27016 [Security][Guard] GuardAuthenticationProvider::authenticate cannot return null (@biomedia-thomas)
  • bug #26831 [Bridge/Doctrine] count(): Parameter must be an array or an object that implements Countable (@gpenverne)
  • bug #27044 [Security] Skip user checks if not implementing UserInterface (@chalasr)
  • bug #27025 [DI] Add check of internal type to ContainerBuilder::getReflectionClass (@upyx)
  • bug #26994 [PhpUnitBridge] Add type hints (@greg0ire)
  • bug #26014 [Security] Fixed being logged out on failed attempt in guard (@iltar)
  • bug #25348 [HttpFoundation] Send cookies using header() to fix "SameSite" ones (@nicolas-grekas, @cvilleger)
  • bug #26910 Use new PHP7.2 functions in hasColorSupport (@johnstevenson)
  • bug #26999 [VarDumper] Fix dumping of SplObjectStorage (@corphi)
  • bug #25841 [DoctrineBridge] Fix bug when indexBy is meta key in PropertyInfo\DoctrineExtractor (@insekticid)
  • bug #26983 [TwigBridge] [Bootstrap 4] Fix PercentType error rendering. (@alexismarquis)
  • bug #26980 [TwigBundle] fix formatting arguments in plaintext format (@xabbuh)
  • bug #26886 Don't assume that file binary exists on *nix OS (@teohhanhui)
  • bug #26959 [Console] Fix PSR exception context key (@scaytrase)
  • bug #26899 [Routing] Fix loading multiple class annotations for invokable classes (@1ed)
  • bug #26643 Fix that ESI/SSI processing can turn a "private" response "public" (@mpdude)
  • bug #26932 [Form] Fixed trimming choice values (@HeahDude)
  • bug #26922 [TwigBundle] fix rendering exception stack traces (@xabbuh)
  • bug #26773 [HttpKernel] Make ServiceValueResolver work if controller namespace starts with a backslash in routing (@mathieutu)
  • bug #26870 Add d-block to bootstrap 4 alerts (@Normunds)
  • bug #26857 [HttpKernel] Dont create mock cookie for new sessions in tests (@nicolas-grekas)
  • bug #26875 [Console] Don't go past exact matches when autocompleting (@nicolas-grekas)
  • bug #26823 [Validator] Fix LazyLoadingMetadataFactory with PSR6Cache for non classname if tested values isn't existing class (@Pascal Montoya, @pmontoya)
  • bug #26834 [Yaml] Throw parse error on unfinished inline map (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/27103

Changelog (since https://github.com/symfony/symfony/compare/v4.0.7...v4.0.8)

  • bug #26802 [Security] register custom providers on ExpressionLanguage directly (@dmaicher)
  • bug #26794 [PhpUnitBridge] Catch deprecation error handler (@cvilleger)
  • bug #26788 [Security] Load the user before pre/post auth checks when needed (@chalasr)
  • bug #26792 [Routing] Fix throwing NoConfigurationException instead of 405 (@nicolas-grekas)
  • bug #26774 [SecurityBundle] Add missing argument to security.authentication.provider.simple (@i3or1s, @chalasr)
  • bug #26763 [Finder] Remove duplicate slashes in filenames (@helhum)
  • bug #26758 [WebProfilerBundle][HttpKernel] Make FileLinkFormatter URL format generation lazy (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/26849

Changelog (since https://github.com/symfony/symfony/compare/v4.0.6...v4.0.7)

  • bug #26387 [Yaml] Fix regression when trying to parse multiline (@antograssiot)
  • bug #26749 Add PHPDbg support to HTTP components (@hkdobrev)
  • bug #26609 [Console] Fix check of color support on Windows (@mlocati)
  • bug #26727 [HttpCache] Unlink tmp file on error (@Chansig)
  • bug #26675 [HttpKernel] DumpDataCollector: do not flush when a dumper is provided (@ogizanagi)
  • bug #26663 [TwigBridge] Fix rendering of currency by MoneyType (@ro0NL)
  • bug #26595 [DI] Do not suggest writing an implementation when multiple exist (@chalasr)
  • bug #26662 [DI] Fix hardcoded cache dir for warmups (@nicolas-grekas)
  • bug #26677 Support phpdbg SAPI in Debug::enable() (@hkdobrev)
  • bug #26600 [Routing] Fixed the importing of files using glob patterns that match multiple resources (@skalpa)
  • bug #26589 [Ldap] cast to string when checking empty passwords (@ismail1432)
  • bug #26626 [WebProfilerBundle] use the router to resolve file links (@nicolas-grekas)
  • bug #26634 [DI] Cleanup remainings from autoregistration (@nicolas-grekas)
  • bug #26635 [DI] Dont tell about autoregistration in strict autowiring mode (@nicolas-grekas)
  • bug #26621 [Form] no type errors with invalid submitted data types (@xabbuh)
  • bug #26612 [PHPunit] suite variable should be used (@prisis)
  • bug #26337 [Finder] Fixed leading/trailing / in filename (@lyrixx)
  • bug #26584 [TwigBridge] allow html5 compatible rendering of forms with null names (@systemist)
  • bug #24401 [Form] Change datetime to datetime-local for HTML5 datetime input (@pierredup)
  • bug #26513 [FrameworkBundle] Respect debug mode when warm up annotations (@Strate)
  • bug #26370 [Security] added userChecker to SimpleAuthenticationProvider (@i3or1s)
  • bug #26569 [BrowserKit] Fix cookie path handling when $domain is null (@dunglas)
  • bug #26273 [Security][Profiler] Display the original expression in 'Access decision log' (@lyrixx)
  • bug #26427 [DependencyInjection] fix regression when extending the Container class without a constructor (@lsmith77)
  • bug #26562 [Bridge\PhpUnit] Cannot autoload class "\Symfony\Bridge\PhpUnit\SymfonyTestsListener" (@Jake Bishop)
  • bug #26598 Fixes #26563 (open_basedir restriction in effect) (@temperatur)
  • bug #26568 [Debug] Reset previous exception handler earlier to prevent infinite loop (@nicolas-grekas)
  • bug #26590 Make sure form errors is valid HTML (@Nyholm)
  • bug #26567 [DoctrineBridge] Don't rely on ClassMetadataInfo->hasField in DoctrineOrmTypeGuesser anymore (@fancyweb)
  • feature #26408 Readd 'form_label_errors' block to disable errors on form labels (@birkof)
  • bug #26591 [TwigBridge] Make sure we always render errors. Eventhough labels are disabled (@Nyholm)
  • bug #26356 [FrameworkBundle] HttpCache is not longer abstract (@lyrixx)
  • bug #26548 [DomCrawler] Change bad wording in ChoiceFormField::untick (@dunglas)
  • bug #26482 [PhpUnitBridge] Ability to use different composer.json file (@amcastror)
  • bug #26443 [Fix][HttpFoundation] Fix the updating of timestamp in the MemcachedSessionHandler (@Alessandro Loffredo)
  • bug #26400 [Config] ReflectionClassResource check abstract class (@andrey1s)
  • bug #26433 [DomCrawler] extract(): fix a bug when the attribute list is empty (@dunglas)
  • bug #26041 Display the Welcome Page when there is no homepage defined (@javiereguiluz)
  • bug #26452 [Intl] Load locale aliases to support alias fallbacks (@jakzal)
  • bug #26450 [CssSelector] Fix CSS identifiers parsing - they can start with dash (@jakubkulhan)

[PR] https://github.com/symfony/symfony/pull/26752

Changelog (since https://github.com/symfony/symfony/compare/v4.0.5...v4.0.6)

  • bug #26393 [DI] Skip resource tracking if disabled (@chalasr)
  • bug #26403 fix the handling of timestamp in the MongoDBSessionHandler (@hjanuschka)
  • bug #26355 [DI] Fix missing "id" normalization when dumping the container (@nicolas-grekas)
  • bug #26368 [WebProfilerBundle] Fix Debug toolbar breaks app (@xkobal)
  • bug #26369 Use fill instead of style for svg colors (@rpkamp)
  • bug #26358 [FrameworkBundle] Silence "Failed to remove directory" on cache:clear (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/26418

Changelog (since https://github.com/symfony/symfony/compare/v4.0.4...v4.0.5)

  • bug #26327 [Form][WCAG] Errors sign for people that do not see colors (@Nyholm)
  • bug #26326 [Form][WCAG] Added role="presentation" on tables & removed bootstrap4 table (@Nyholm)
  • bug #26325 [Form][WCAG] Add hidden labels on date and time fields (@Nyholm)
  • bug #26338 [Debug] Keep previous errors of Error instances (@Philipp91)
  • bug #26328 [Form][WCAG] Fixed HTML errors (@Nyholm)
  • bug #26290 [FrameworkBundle] [Console][DX] add a warning when command is not found (@Simperfit)
  • bug #26318 [Routing] Fix GC control of PHP-DSL (@nicolas-grekas)
  • bug #26312 [Routing] Don't throw 405 when scheme requirement doesn't match (@nicolas-grekas)
  • bug #26275 Set controller without __invoke method from invokable class (@Tobion)
  • bug #26298 Fix ArrayInput::toString() for InputArgument::IS_ARRAY args (@maximium)
  • bug #26177 Update excluded_ajax_paths for sf4 (@jenaye)
  • bug #26289 [Security] Add missing use of Role (@tony-tran)
  • bug #26286 [Security] Add missing use for RoleInterface (@tony-tran)
  • bug #26265 [PropertyInfo] throw exception if docblock factory does not exist (@xabbuh)
  • bug #26247 [Translation] Process multiple segments within a single unit. (@timewasted)
  • bug #26254 fix custom radios/inputs for checkbox/radio type (@mssimi)
  • bug #26234 [FrameworkBundle] Add missing XML config for circular_reference_handler (@dunglas)
  • bug #26236 [PropertyInfo] ReflectionExtractor: give a chance to other extractors if no properties (@dunglas)
  • bug #26227 Add support for URL-like DSNs for the PdoSessionHandler (@stof)
  • bug #25557 [WebProfilerBundle] add a way to limit ajax request (@Simperfit)
  • bug #26088 [FrameworkBundle] Fix using annotation_reader in compiler pass to inject configured cache provider (@Laizerox)
  • bug #26157 [HttpKernel] Send new session cookie from AbstractTestSessionListener after session invalidation (@rpkamp)
  • bug #26230 [WebProfilerBundle] Fix anchor CSS (@ro0NL)
  • bug #26228 [HttpFoundation] Fix missing "throw" in JsonResponse (@nicolas-grekas)
  • bug #26211 [Console] Suppress warning from sapi_windows_vt100_support (@adawolfa)
  • bug #26176 Retro-fit proxy code to make it deterministic for older proxy manager implementations (@lstrojny)
  • bug #25787 Yaml parser regression with comments and non-strings (@alexpott)
  • bug #26156 Fixes #26136: Avoid emitting warning in hasParameterOption() (@greg-1-anderson)
  • bug #26183 [DI] Add null check for removeChild (@changmin.keum)
  • bug #26167 [TwigBridge] Apply some changes to support Bootstrap4-stable (@mpiot, @Nyholm)
  • bug #26173 [Security] fix accessing request values (@xabbuh)
  • bug #26089 [PhpUnitBridge] Added support for PHPUnit 7 in Coverage Listener (@lyrixx)
  • bug #26170 [PHPUnit bridge] Avoid running the remove command without any packages (@stof)
  • bug #26159 created validator.tl.xlf for Form/Translations (@ergiegonzaga)
  • bug #26100 [Routing] Throw 405 instead of 404 when redirect is not possible (@nicolas-grekas)
  • bug #26119 [TwigBundle][WebProfilerBundle] Fix JS collision (@ro0NL)
  • bug #26040 [Process] Check PHP_BINDIR before $PATH in PhpExecutableFinder (@nicolas-grekas)
  • bug #26067 [YAML] Issue #26065: leading spaces in YAML multi-line string literals (@tamc)
  • bug #26012 Exit as late as possible (@greg0ire)
  • bug #26082 [Cache][WebProfiler] fix collecting cache stats with sub-requests + allow clearing calls (@dmaicher)
  • bug #26024 [PhpBridge] add PHPUnit 7 support to SymfonyTestsListener (@shieldo)
  • bug #26020 [Lock] Log already-locked errors as "notice" instead of "warning" (@Simperfit)
  • bug #26043 [Serialized] add context to serialize and deserialize (@andrey1s)
  • bug #26127 Deterministic time in cache items for reproducible builds (@lstrojny)
  • bug #26128 Make kernel build time optionally deterministic (@lstrojny)
  • bug #26117 isCsrfTokenValid() replace string by ?string (@GaylordP)
  • bug #26112 Env var maps to undefined constant. (@dsmink)
  • bug #26111 [Security] fix merge of 2.7 into 2.8 + add test case (@dmaicher)
  • bug #25893 [Console] Fix hasParameterOption / getParameterOption when used with multiple flags (@greg-1-anderson)
  • bug #25756 [TwigBundle] Register TwigBridge extensions first (@fancyweb)
  • bug #26051 [WebProfilerBundle] Fix sub request link (@ro0NL)
  • bug #25947 PhpDocExtractor::getTypes() throws fatal error when type omitted (@Jared Farrish)
  • bug #25940 [Form] keep the context when validating forms (@xabbuh)
  • bug #26057 [SecurityBundle] use libsodium to run Argon2i related tests (@xabbuh)
  • bug #25373 Use the PCRE_DOLLAR_ENDONLY modifier in route regexes (@mpdude)
  • bug #24435 [Form] Make sure errors are a part of the label on bootstrap 4 - this is a requirement for WCAG2 (@Nyholm)
  • bug #25762 [DependencyInjection] always call the parent class' constructor (@xabbuh)
  • bug #25976 [Config] Handle Service/EventSubscriberInterface in ReflectionClassResource (@nicolas-grekas)
  • bug #25989 [DI][Routing] Fix tracking of globbed resources (@nicolas-grekas, @sroze)
  • bug #26009 [SecurityBundle] Allow remember-me factory creation when multiple user providers are configured. (@iisisrael)
  • bug #26010 [CssSelector] For AND operator, the left operand should have parentheses, not only right operand (@Arnaud CHASSEUX)
  • bug #26000 Fixed issue #25985 (@KevinFrantz)
  • bug #25996 Don't show wanna-be-private services as public in debug:container (@chalasr)
  • bug #25914 [HttpKernel] collect extension information as late as possible (@xabbuh)
  • bug #25981 [DI] Fix tracking of source class changes for lazy-proxies (@nicolas-grekas)
  • bug #25971 [Debug] Fix bad registration of exception handler, leading to mem leak (@nicolas-grekas)
  • bug #25962 [Routing] Fix trailing slash redirection for non-safe verbs (@nicolas-grekas)
  • bug #25948 [Form] Fixed empty data on expanded ChoiceType and FileType (@HeahDude)
  • bug #25978 Deterministic proxy names (@lstrojny)
  • bug #25972 support sapi_windows_vt100_support for php 7.2+ (@jhdxr)
  • bug #25744 [TwigBridge] Allow label translation to be safe (@MatTheCat)
  • bug #25932 Don't stop PSR-4 service discovery if a parent class is missing (@derrabus)

[PR] https://github.com/symfony/symfony/pull/26363

Changelog (since https://github.com/symfony/symfony/compare/v4.0.3...v4.0.4)

  • bug #25922 [HttpFoundation] Use the correct syntax for session gc based on Pdo driver (@tanasecosminromeo)
  • bug #25933 Disable CSP header on exception pages only in debug (@ostrolucky)
  • bug #25926 [Form] Fixed Button::setParent() when already submitted (@HeahDude)
  • bug #25927 [Form] Fixed submitting disabled buttons (@HeahDude)
  • bug #25397 [Console] Provide a DX where an array could be passed (@Simperfit)
  • bug #25858 [DI] Fix initialization of legacy containers by delaying include_once (@nicolas-grekas)
  • bug #25891 [DependencyInjection] allow null values for root nodes in YAML configs (@xabbuh)
  • bug #24864 Have weak_vendors ignore deprecations from outside (@greg0ire)
  • bug #25873 [Console] Fix using finally where the catch can also fail (@nicolas-grekas)
  • bug #25848 [Validator] add missing parent isset and add test (@Simperfit)
  • bug #25869 [Process] Skip environment variables with false value in Process (@francoispluchino)
  • bug #25864 [Yaml] don't split lines on carriage returns when dumping (@xabbuh)
  • bug #25863 [Yaml] trim spaces from unquoted scalar values (@xabbuh)
  • bug #25861 do not conflict with egulias/email-validator 2.0+ (@xabbuh)
  • bug #25851 [Validator] Conflict with egulias/email-validator 2.0 (@emodric)
  • bug #25837 [SecurityBundle] Don't register in memory users as services (@chalasr)
  • bug #25835 [HttpKernel] DebugHandlersListener should always replace the existing exception handler (@nicolas-grekas)
  • bug #25829 [Debug] Always decorate existing exception handlers to deal with fatal errors (@nicolas-grekas)
  • bug #25823 [Security] Notify that symfony/expression-language is not installed if ExpressionLanguage is used (@giovannialbero1992)
  • bug #25824 Fixing a bug where the dump() function depended on bundle ordering (@weaverryan)
  • bug #25763 [OptionsResolver] Fix options resolver with array allowed types (@mcg-web)
  • bug #25789 Enableable ArrayNodeDefinition is disabled for empty configuration (@kejwmen)
  • bug #25822 [Cache] Fix handling of apcu_fetch() edgy behavior (@nicolas-grekas)
  • bug #25816 Problem in phar see mergerequest #25579 (@betzholz)
  • bug #25781 [Form] Disallow transform dates beyond the year 9999 (@curry684)
  • bug #25287 [Serializer] DateTimeNormalizer handling of null and empty values (returning it instead of new object) (@Simperfit)
  • bug #25249 [Form] Avoid button label translation when it's set to false (@TeLiXj)
  • bug #25127 [TwigBridge] Pass the form-check-inline in parent (@Simperfit)
  • bug #25812 Copied NO language files to the new NB locale (@derrabus)
  • bug #25753 [Console] Fix restoring exception handler (@nicolas-grekas, @fancyweb)
  • bug #25801 [Router] Skip anonymous classes when loading annotated routes (@pierredup)
  • bug #25508 [FrameworkBundle] Auto-enable CSRF if the component + session are loaded (@nicolas-grekas)
  • bug #25657 [Security] Fix fatal error on non string username (@chalasr)
  • bug #25791 [Routing] Make sure we only build routes once (@sroze)
  • bug #25799 Fixed Request::__toString ignoring cookies (@Toflar)
  • bug #25755 [Debug] prevent infinite loop with faulty exception handlers (@nicolas-grekas)
  • bug #25771 [Validator] 19 digits VISA card numbers are valid (@xabbuh)
  • bug #25751 [FrameworkBundle] Add the missing enabled session attribute (@sroze)
  • bug #25750 [HttpKernel] Turn bad hosts into 400 instead of 500 (@nicolas-grekas)
  • bug #25699 [HttpKernel] Fix session handling: decouple "save" from setting response "private" (@nicolas-grekas)
  • bug #25490 [Serializer] Fixed throwing exception with option JSON_PARTIAL_OUTPUT_ON_ERROR (@diversantvlz)
  • bug #25737 [TwigBridge] swap filter/function and package names (@xabbuh)
  • bug #25731 [HttpFoundation] Always call proxied handler::destroy() in StrictSessionHandler (@nicolas-grekas)
  • bug #25733 [HttpKernel] Fix compile error when a legacy container is fresh again (@nicolas-grekas)
  • bug #25709 Tweaked some styles in the profiler tables (@javiereguiluz)
  • bug #25719 [HttpKernel] Uses cookies to track the requests redirection (@sroze)
  • bug #25696 [FrameworkBundle] Fix using "annotations.cached_reader" in after-removing passes (@nicolas-grekas)
  • feature #25669 [Security] Fail gracefully if the security token cannot be unserialized from the session (@thewilkybarkid)
  • bug #25700 Run simple-phpunit with --no-suggest option (@ro0NL)

[PR] https://github.com/symfony/symfony/pull/25957

Changelog (since https://github.com/symfony/symfony/compare/v4.0.2...v4.0.3)

  • bug #25685 Use triggering file to determine weak vendors if when the test is run in a separate process (@alexpott)
  • bug #25671 Remove randomness from dumped containers (@nicolas-grekas)
  • bug #25532 [HttpKernel] Disable CSP header on exception pages (@ostrolucky)
  • bug #25678 [WebProfilerBundle] set the var in the right scope (@Jochen Mandl)
  • bug #25491 [Routing] Use the default host even if context is empty (@sroze)
  • bug #25672 [WebServerBundle] use interface_exists instead of class_exists (@kbond)
  • bug #25662 Dumper shouldn't use html format for phpdbg / cli-server (@jhoff)
  • bug #25529 [Validator] Fix access to root object when using composite constraint (@ostrolucky)
  • bug #25404 [Form] Remove group options without data on debug:form command (@yceruto)
  • bug #25430 Fixes for Oracle in PdoSessionHandler (@elislenio)
  • bug #25117 [FrameworkBundle] Make cache:clear "atomic" and consistent with cache:warmup (@hkdobrev)
  • bug #25583 [HttpKernel] Call Response->setPrivate() instead of sending raw header() when session is started (@Toflar)
  • bug #25601 [TwigBundle/Brige] catch missing requirements to throw meaningful exceptions (@nicolas-grekas)
  • bug #25547 [DX][DependencyInjection] Suggest to write an implementation if the interface cannot be autowired (@sroze)
  • bug #25599 Add application/ld+json format associated to json (@vincentchalamon)
  • bug #25623 [HttpFoundation] Fix false-positive ConflictingHeadersException (@nicolas-grekas)
  • bug #25624 [WebServerBundle] Fix escaping of php binary with arguments (@nicolas-grekas)
  • bug #25604 Add check for SecurityBundle in createAccessDeniedException (@FGM)
  • bug #25591 [HttpKernel] fix cleaning legacy containers (@nicolas-grekas)
  • bug #25526 [WebProfilerBundle] Fix panel break when stopwatch component is not installed. (@umulmrum, @javiereguiluz)
  • bug #25606 Updating message to inform the user how to install the component (@weaverryan)
  • bug #25571 [SecurityBundle] allow auto_wire for SessionAuthenticationStrategy class (@xavren)
  • bug #25567 [Process] Fix setting empty env vars (@nicolas-grekas)
  • bug #25407 [Console] Commands with an alias should not be recognized as ambiguous (@Simperfit)
  • bug #25523 [WebServerBundle] fix a bug where require would not require the good file because of env (@Simperfit)
  • bug #25559 [Process] Dont use getenv(), it returns arrays and can introduce subtle breaks accros PHP versions (@nicolas-grekas)
  • bug #25552 [WebProfilerBundle] Let fetch() cast URL to string (@ro0NL)
  • bug #25521 [Console] fix a bug when you are passing a default value and passing -n would output the index (@Simperfit)

[PR] https://github.com/symfony/symfony/pull/25692

Changelog (since https://github.com/symfony/symfony/compare/v4.0.1...v4.0.2)

  • bug #25489 [FrameworkBundle] remove esi/ssi renderers if inactive (@dmaicher)
  • bug #25502 Fixing wrong class_exists on interface (@weaverryan)
  • bug #25427 Preserve percent-encoding in URLs when performing redirects in the UrlMatcher (@mpdude)
  • bug #25480 [FrameworkBundle] add missing validation options to XSD file (@xabbuh)
  • bug #25487 [Console] Fix a bug when passing a letter that could be an alias (@Simperfit)
  • bug #25425 When available use AnnotationRegistry::registerUniqueLoader (@jrjohnson)
  • bug #25474 [DI] Optimize Container::get() for perf (@nicolas-grekas)
  • bug #24594 [Translation] Fix InvalidArgumentException when using untranslated plural forms from .po files (@BjornTwachtmann)
  • bug #25233 [TwigBridge][Form] Fix hidden currency element with Bootstrap 3 theme (@julienfalque)
  • bug #25413 [HttpKernel] detect deprecations thrown by container initialization during tests (@nicolas-grekas)
  • bug #25408 [Debug] Fix catching fatal errors in case of nested error handlers (@nicolas-grekas)
  • bug #25330 [HttpFoundation] Support 0 bit netmask in IPv6 (::/0) (@stephank)
  • bug #25378 [VarDumper] Fixed file links leave blank pages when ide is configured (@antalaron)
  • bug #25410 [HttpKernel] Fix logging of post-terminate errors/exceptions (@nicolas-grekas)
  • bug #25409 [Bridge/Doctrine] Drop "memcache" type (@nicolas-grekas)
  • bug #25417 [Process] Dont rely on putenv(), it fails on ZTS PHP (@nicolas-grekas)
  • bug #25333 [DI] Impossible to set an environment variable and then an array as container parameter (@Phantas0s)
  • bug #25447 [Process] remove false-positive BC breaking exception on Windows (@nicolas-grekas)
  • bug #25381 [DI] Add context to service-not-found exceptions thrown by service locators (@nicolas-grekas)
  • bug #25438 [Yaml] empty lines don't count for indent detection (@xabbuh)
  • bug #25412 Extend Argon2i support check to account for sodium_compat (@mbabker)
  • bug #25392 [HttpFoundation] Fixed default user-agent (3.X -> 4.X) (@lyrixx)
  • bug #25389 [Yaml] fix some edge cases with indented blocks (@xabbuh)
  • bug #25396 [Form] Fix debug:form command definition (@yceruto)
  • bug #25398 [HttpFoundation] don't prefix cookies with "Set-Cookie:" (@pableu)
  • bug #25354 [DI] Fix non-string class handling in PhpDumper (@nicolas-grekas, @sroze)
  • bug #25340 [Serializer] Unset attributes when creating child context (@dunglas)
  • bug #25325 [Yaml] do not evaluate PHP constant names (@xabbuh)
  • bug #25380 [FrameworkBundle][Cache] register system cache clearer only if it's used (@xabbuh)
  • bug #25323 [ExpressionLanguage] throw an SyntaxError instead of an undefined index notice (@Simperfit)
  • bug #25363 [HttpKernel] Disable inlining on PHP 5 (@nicolas-grekas)
  • bug #25364 [DependencyInjection] Prevent a loop in aliases within the findDefinition method (@sroze)
  • bug #25337 Remove Exclusive Lock That Breaks NFS Caching (@brianfreytag)

[PR] https://github.com/symfony/symfony/pull/25507

Changelog (since https://github.com/symfony/symfony/compare/v4.0.0...v4.0.1)

  • bug #25304 [Bridge/PhpUnit] Prefer $_SERVER['argv'] over $argv (@ricknox)
  • bug #25272 [SecurityBundle] fix setLogoutOnUserChange calls for context listeners (@dmaicher)
  • bug #25282 [DI] Register singly-implemented interfaces when doing PSR-4 discovery (@nicolas-grekas)
  • bug #25274 [Security] Adding a GuardAuthenticatorHandler alias (@weaverryan)
  • bug #25308 [FrameworkBundle] Fix a bug where a color tag will be shown when passing an antislash (@Simperfit)
  • bug #25278 Fix for missing whitespace control modifier in form layout (@kubawerlos)
  • bug #25306 [Form][TwigBridge] Fix collision between view properties and form fields (@yceruto)
  • bug #25305 [Form][TwigBridge] Fix collision between view properties and form fields (@yceruto)
  • bug #25236 [Form][TwigBridge] Fix collision between view properties and form fields (@yceruto)
  • bug #25312 [DI] Fix deep-inlining of non-shared refs (@nicolas-grekas)
  • bug #25309 [Yaml] parse newlines in quoted multiline strings (@xabbuh)
  • bug #25313 [DI] Fix missing unset leading to false-positive circular ref (@nicolas-grekas)
  • bug #25268 [DI] turn $private to protected in dumped container, to make cache:clear BC (@nicolas-grekas)
  • bug #25285 [DI] Throw an exception if Expression Language is not installed (@sroze)
  • bug #25241 [Yaml] do not eagerly filter comment lines (@xabbuh)
  • bug #25284 [DI] Cast ids to string, as done on 3.4 (@nicolas-grekas, @sroze)
  • bug #25297 [Validator] Fixed the @Valid(groups={"group"}) against null exception case (@vudaltsov)
  • bug #25255 [Console][DI] Fail gracefully (@nicolas-grekas)
  • bug #25264 [DI] Trigger deprecation when setting a to-be-private synthetic service (@nicolas-grekas)
  • bug #25258 [link] Prevent warnings when running link with 2.7 (@dunglas)
  • bug #25244 [DI] Add missing deprecation when fetching private services from ContainerBuilder (@nicolas-grekas)
  • bug #24750 [Validator] ExpressionValidator should use OBJECT_TO_STRING (@Simperfit)
  • bug #25247 [DI] Fix false-positive circular exception (@nicolas-grekas)
  • bug #25226 [HttpKernel] Fix issue when resetting DumpDataCollector (@Pierstoval)
  • bug #25230 Use a more specific file for detecting the bridge (@greg0ire)
  • bug #25232 [WebProfilerBundle] [TwigBundle] Fix Profiler breaking XHTML pages (@tistre)

[PR] https://github.com/symfony/symfony/pull/25322

Changelog (since https://github.com/symfony/symfony/compare/v4.0.0-RC2...v4.0.0)

  • bug #25220 [HttpFoundation] Add Session::isEmpty(), fix MockFileSessionStorage to behave like the native one (@nicolas-grekas)
  • bug #25209 [VarDumper] Dont use empty(), it chokes on eg GMP objects (@nicolas-grekas)
  • bug #25200 [HttpKernel] Arrays with scalar values passed to ESI fragment renderer throw deprecation notice (@Simperfit)
  • bug #25201 [HttpKernel] Add a better error messages when passing a private or non-tagged controller (@Simperfit)
  • bug #25155 [DependencyInjection] Detect case mismatch in autowiring (@Simperfit, @sroze)
  • bug #25217 [Dotenv] Changed preg_match flags from null to 0 (@deekthesqueak)
  • bug #25180 [DI] Fix circular reference when using setters (@nicolas-grekas)
  • bug #25204 [DI] Clear service reference graph (@nicolas-grekas)
  • bug #25203 [DI] Fix infinite loop in InlineServiceDefinitionsPass (@nicolas-grekas)
  • bug #25185 [Serializer] Do not cache attributes if attributes in context (@sroze)
  • bug #25190 [HttpKernel] Keep legacy container files for concurrent requests (@nicolas-grekas)
  • bug #25182 [HttpFoundation] AutExpireFlashBag should not clear new flashes (@Simperfit, @sroze)
  • bug #25174 [Translation] modify definitions only if the do exist (@xabbuh)
  • bug #25179 [FrameworkBundle][Serializer] Remove YamlEncoder definition if Yaml component isn't installed (@ogizanagi)
  • bug #25160 [DI] Prevent a ReflectionException during cache:clear when the parent class doesn't exist (@dunglas)
  • bug #25163 [DI] Fix tracking of env vars in exceptions (@nicolas-grekas)
  • bug #25162 [HttpKernel] Read $_ENV when checking SHELL_VERBOSITY (@nicolas-grekas)
  • bug #25158 [DI] Remove unreachable code (@GawainLynch)
  • bug #25152 [Form] Don't rely on Symfony\Component\HttpFoundation\File\File if http-foundation isn't in FileType (@issei-m)
  • bug #24987 [Console] Fix global console flag when used in chain (@Simperfit)
  • bug #25137 Adding checks for the expression language (@weaverryan)
  • bug #25151 [FrameworkBundle] Automatically enable the CSRF protection if CSRF manager exists (@sroze)
  • bug #25043 [Yaml] added ability for substitute aliases when mapping is on single line (@Michał Strzelecki, @xabbuh)

[PR] https://github.com/symfony/symfony/pull/25224

Changelog (since https://github.com/symfony/symfony/compare/v4.0.0-RC1...v4.0.0-RC2)

  • bug #25146 [DI] Dont resolve envs in service ids (@nicolas-grekas)
  • bug #25113 [Routing] Fix "config-file-relative" annotation loader resources (@nicolas-grekas, @sroze)
  • bug #25065 [FrameworkBundle] Update translation commands to work with default paths (@yceruto)
  • bug #25109 Make debug:container search command case-insensitive (@jzawadzki)
  • bug #25121 [FrameworkBundle] Fix AssetsInstallCommand (@nicolas-grekas)
  • bug #25102 [Form] Fixed ContextErrorException in FileType (@chihiro-adachi)
  • bug #25130 [DI] Fix handling of inlined definitions by ContainerBuilder (@nicolas-grekas)
  • bug #25119 [DI] Fix infinite loop when analyzing references (@nicolas-grekas)
  • bug #25094 [FrameworkBundle][DX] Display a nice error message if an enabled component is missing (@derrabus)
  • bug #25100 [SecurityBundle] providerIds is undefined error when firewall provider is not specified (@karser)
  • bug #25100 [SecurityBundle] providerIds is undefined error when firewall provider is not specified (@karser)
  • bug #25100 [SecurityBundle] providerIds is undefined error when firewall provider is not specified (@karser)
  • bug #25097 [Bridge\PhpUnit] Turn "preserveGlobalState" to false by default, revert "Blacklist" removal (@nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/25150

Changelog (since https://github.com/symfony/symfony/compare/v4.0.0-BETA4...v4.0.0-RC1)

  • bug #25077 [Bridge/Twig] Let getFlashes starts the session (@MatTheCat)
  • bug #25082 [HttpKernel] Disable container inlining when legacy inlining has been used (@nicolas-grekas)
  • bug #25022 [Filesystem] Updated Filesystem::makePathRelative (@inso)
  • bug #25072 [Bridge/PhpUnit] Remove trailing "\n" from ClockMock::microtime(false) (@joky)
  • bug #25069 [Debug] Fix undefined variable $lightTrace (@nicolas-grekas)
  • bug #25053 [Serializer] Fixing PropertyNormalizer supports parent properties (@Christopher Hertel)
  • bug #25055 [DI] Analyze setter-circular deps more precisely (@nicolas-grekas)
  • feature #25056 [Bridge/PhpUnit] Sync the bridge version installed in vendor/ and in phpunit clone (@nicolas-grekas)
  • bug #25048 Allow EnumNode name to be null (@MatTheCat)
  • bug #25045 [SecurityBundle] Don't trigger auto-picking notice if provider is set per listener (@chalasr)
  • bug #25033 [FrameworkBundle] Dont create empty bundles directory by default (@ro0NL)
  • bug #25037 [DI] Skip hot_path tag for deprecated services as their class might also be (@nicolas-grekas)
  • bug #25038 [Cache] Memcached options should ignore "lazy" (@nicolas-grekas)
  • bug #25014 Move deprecation under use statements (@greg0ire)
  • bug #25030 [Console] Fix ability to disable lazy commands (@chalasr)
  • bug #25032 [Bridge\PhpUnit] Disable broken auto-require mechanism of phpunit (@nicolas-grekas)
  • bug #25016 [HttpKernel] add type-hint for the requestType (@Simperfit)
  • bug #25027 [FrameworkBundle] Hide server:log command based on deps (@sroze)
  • bug #24991 [DependencyInjection] Single typed argument can be applied on multiple parameters (@nicolas-grekas, @sroze)
  • bug #24983 [Validator] enter the context in which to validate (@xabbuh)
  • bug #24956 Fix ambiguous pattern (@weltling)
  • bug #24732 [DependencyInjection] Prevent service:method factory notation in PHP config (@vudaltsov)
  • bug #24979 [HttpKernel] remove services resetter even when it's an alias (@xabbuh)
  • bug #24972 [HttpKernel] Fix service arg resolver for controllers as array callables (@sroze, @nicolas-grekas)
  • bug #24971 [FrameworkBundle] Empty event dispatcher earlier in CacheClearCommand (@nicolas-grekas)
  • security #24995 Validate redirect targets using the session cookie domain (@nicolas-grekas)
  • security #24994 Prevent bundle readers from breaking out of paths (@xabbuh)
  • security #24993 Ensure that submitted data are uploaded files (@xabbuh)
  • security #24992 Namespace generated CSRF tokens depending of the current scheme (@dunglas)
  • bug #24975 [DomCrawler] Type fix Crawler:: discoverNamespace() (@VolCh)
  • bug #24954 [DI] Fix dumping with custom base class (@nicolas-grekas)
  • bug #24952 [HttpFoundation] Fix session-related BC break (@nicolas-grekas, @sroze)
  • bug #24943 [FrameworkBundle] Wire the translation.reader service instead of deprecated translation.loader in commands (@ogizanagi)

[PR] https://github.com/symfony/symfony/pull/25088

Changelog (since https://github.com/symfony/symfony/compare/v4.0.0-BETA3...v4.0.0-BETA4)

  • bug #24874 [TwigBridge] Fixed the .form-check-input class in the bs4 templates (@vudaltsov)
  • bug #24929 [Console] Fix traversable autocomplete values (@ro0NL)
  • feature #24860 [FrameworkBundle] Add default translations path option and convention (@yceruto)
  • bug #24921 [Debug] Remove false-positive deprecation from DebugClassLoader (@nicolas-grekas)
  • bug #24856 [FrameworkBundle] Add default mapping path for validator component in bundle-less app (@yceruto)
  • bug #24833 [FrameworkBundle] Add default mapping path for serializer component in bundle-less app (@yceruto)
  • bug #24908 [WebServerBundle] Prevent console.terminate from being fired when server:start finishes (@kbond)
  • bug #24888 [FrameworkBundle] Specifically inject the debug dispatcher in the collector (@ogizanagi)
  • bug #24909 [Intl] Update ICU data to 60.1 (@jakzal)
  • bug #24870 [YAML] Allow to parse custom tags when linting yaml files (@pierredup)
  • bug #24910 [HttpKernel][Debug] Remove noise from stack frames of deprecations (@nicolas-grekas)
  • bug #24906 [Bridge/ProxyManager] Remove direct reference to value holder property (@nicolas-grekas)
  • feature #24887 [Cache][Lock] Add RedisProxy for lazy Redis connections (@nicolas-grekas)
  • bug #24633 [Config] Fix cannotBeEmpty() (@ro0NL)
  • bug #24900 [Validator] Fix Costa Rica IBAN format (@Bozhidar Hristov)
  • bug #24904 [Validator] Add Belarus IBAN format (@Bozhidar Hristov)
  • bug #24837 [TwigBridge] [Bootstrap 4] Fix validation error design for expanded choiceType (@ostrolucky)
  • bug #24878 [HttpFoundation] Prevent PHP from sending Last-Modified on session start (@nicolas-grekas)
  • bug #24881 [WebserverBundle] fixed the bug that caused that the webserver would … (@Serkan Yildiz)
  • bug #24722 Replace more docblocks by type-hints (@nicolas-grekas)
  • bug #24850 [DI] Fix cannot bind env var (@ogizanagi)
  • bug #24851 [TwigBridge] Fix BC break due required twig environment (@ro0NL)

[PR] https://github.com/symfony/symfony/pull/24933

Changelog (since https://github.com/symfony/symfony/compare/v4.0.0-BETA2...v4.0.0-BETA3)

  • bug #24531 [HttpFoundation] Fix forward-compat of NativeSessionStorage with PHP 7.2 (@sroze)
  • bug #24828 [DI] Fix the "almost-circular refs" fix (@nicolas-grekas)
  • bug #24665 Fix dump panel hidden when closing a dump (@julienfalque)
  • bug #24802 [TwigBridge] [Bootstrap 4] Fix hidden errors (@ostrolucky)
  • bug #24816 [Serializer] Fix extra attributes when no group specified (@ogizanagi)
  • bug #24822 [DI] Fix "almost-circular" dependencies handling (@nicolas-grekas)
  • bug #24821 symfony/form auto-enables symfony/validator, even when not present (@weaverryan)
  • bug #24824 [FrameworkBundle][Config] fix: do not add resource checkers for no-debug (@dmaicher)
  • bug #24814 [Intl] Make intl-data tests pass and save language aliases again (@jakzal)
  • bug #24810 [Serializer] readd default argument value (@xabbuh)
  • bug #24809 [Config] Fix dump of config references for deprecated nodes (@chalasr)
  • bug #24796 [PhpUnitBridge] Fixed fatal error in CoverageListener when something goes wrong in Test::setUpBeforeClass (@lyrixx)
  • bug #24774 [HttpKernel] Let the storage manage the session starts (@sroze)
  • bug #24735 [VarDumper] fix trailling comma when dumping an exception (@Simperfit)
  • bug #24770 [Validator] Fix TraceableValidator is reset on data collector instantiation (@ogizanagi)
  • bug #24764 [HttpFoundation] add Early Hints to Reponse to fix test (@Simperfit)
  • bug #24759 Removes \n or space when $context/$extra are empty (@kirkmadera)
  • bug #24758 Throwing exception if redis and predis unavailable (@aequasi)

[PR] https://github.com/symfony/symfony/pull/24832

Changelog (since https://github.com/symfony/symfony/compare/v4.0.0-BETA1...v4.0.0-BETA2)

  • bug #24728 [Bridge\Twig] fix bootstrap checkbox_row to render properly & remove spaceless (@arkste)
  • bug #24709 [HttpKernel] Move services reset to Kernel::handle()+boot() (@nicolas-grekas)
  • bug #24703 [TwigBridge] Bootstrap 4 form theme fixes (@vudaltsov)
  • bug #24744 debug:container --types: Fix bug with non-existent classes (@weaverryan)
  • bug #24747 [VarDumper] HtmlDumper: fix collapsing nodes with depth < maxDepth (@ogizanagi)
  • bug #24743 [FrameworkBundle] Do not activate the cache if Doctrine's cache is not present (@sroze)
  • bug #24605 [FrameworkBundle] Do not load property_access.xml if the component isn't installed (@ogizanagi)
  • bug #24710 [TwigBridge] Fix template paths in profiler (@ro0NL)
  • bug #24706 [DependencyInjection] Add the possibility to disable assets via xml (@renatomefi)
  • bug #24696 Ensure DeprecationErrorHandler::collectDeprecations() is triggered (@alexpott)
  • bug #24711 [TwigBridge] Re-add Bootstrap 3 Checkbox Layout (@arkste)
  • bug #24713 [FrameworkBundle] fix CachePoolPrunerPass to use correct command service id (@kbond)
  • bug #24686 Fix $_ENV/$_SERVER precedence in test framework (@fabpot)
  • bug #24691 [HttpFoundation] Fix caching of session-enabled pages (@nicolas-grekas)
  • feature #24677 [HttpFoundation] Allow DateTimeImmutable in Response setters (@derrabus)
  • bug #24694 [Intl] Allow passing null as a locale fallback (@jakzal)
  • bug #24606 [HttpFoundation] Fix FileBag issue with associative arrays (@enumag)
  • bug #24673 [DI] Throw when a service name or an alias contains dynamic values (prevent an infinite loop) (@dunglas)
  • bug #24684 [Security] remove invalid deprecation notice on AbstractGuardAuthenticator::supports() (@kbond)
  • bug #24681 Fix isolated error handling (@alexpott)
  • bug #24575 Ensure that PHPUnit's error handler is still working in isolated tests (@alexpott)
  • bug #24597 [PhpUnitBridge] fix deprecation triggering test detection (@xabbuh)
  • feature #24671 [DI] Handle container.autowiring.strict_mode to opt-out from legacy autowiring (@nicolas-grekas)
  • bug #24660 Escape trailing \ in QuestionHelper autocompletion (@kamazee)
  • bug #24624 [Security] Fix missing BC layer for AbstractGuardAuthenticator::getCredentials() (@chalasr)
  • bug #24598 Prefer line formatter on missing cli dumper (@greg0ire)
  • bug #24635 [DI] Register default env var provided types (@ro0NL)
  • bug #24620 [FrameworkBundle][Workflow] Fix deprectation when checking workflow.registry service in dump command (@Jean-Beru)
  • bug #24644 [Security] Fixed auth provider authenticate() cannot return void (@glye)
  • bug #24642 [Routing] Fix resource miss (@dunglas)
  • bug #24608 Adding the Form default theme files to be warmed up in Twig's cache (@weaverryan)
  • bug #24626 streamed response should return $this (@DQNEO)
  • feature #24631 [Form] Fix FormEvents::* constant and value matching (@yceruto, @javiereguiluz)
  • bug #24630 [WebServerBundle] Prevent commands from being registered by convention (@chalasr)
  • bug #24589 Username and password in basic auth are allowed to contain '.' (@Richard Quadling)
  • bug #24566 Fixed unsetting from loosely equal keys OrderedHashMap (@maryo)
  • bug #24570 [Debug] Fix same vendor detection in class loader (@Jean-Beru)
  • bug #24573 Fixed pathinfo calculation for requests starting with a question mark. (@syzygymsu)
  • bug #24565 [Serializer] YamlEncoder: throw if the Yaml component isn't installed (@dunglas)
  • bug #24563 [Serializer] ObjectNormalizer: throw if PropertyAccess isn't installed (@dunglas)
  • bug #24571 [PropertyInfo] Add support for the iterable type (@dunglas)
  • bug #24579 pdo session fix (@mxp100)
  • bug #24536 [Security] Reject remember-me token if UserCheckerInterface::checkPostAuth() fails (@kbond)

[PR] https://github.com/symfony/symfony/pull/24762

Changelog (since https://github.com/symfony/symfony/compare/v3.3.0...v4.0.0-BETA1)

  • feature #24583 Adding a new debug:autowiring command (@weaverryan)
  • feature #24523 [HttpFoundation] Make sessions secure and lazy (@nicolas-grekas)
  • feature #22610 [Form] [TwigBridge] Added option to disable usage of default themes when rendering a form (@emodric)
  • feature #23112 [OptionsResolver] Support array of types in allowed type (@pierredup)
  • feature #24321 added ability to handle parent classes for PropertyNormalizer (@ivoba)
  • feature #24505 [HttpKernel] implement reset() in DumpDataCollector (@xabbuh)
  • feature #24425 [Console][HttpKernel] Handle new SHELL_VERBOSITY env var, also configures the default logger (@nicolas-grekas)
  • feature #24503 [MonologBridge][EventDispatcher][HttpKernel] remove deprecated features (@xabbuh)
  • feature #24387 [FORM] Prevent forms from extending itself as a parent (@pierredup)
  • feature #24484 [DI] Throw accurate failures when accessing removed services (@nicolas-grekas)
  • feature #24208 [Form] Display option definition from a given form type (@yceruto, @ogizanagi)
  • feature #22228 [HttpKernel] minor: add ability to construct with headers on http exceptions (@gsdevme)
  • feature #24467 [Process] drop non-existent working directory support (@xabbuh)
  • feature #23499 [Workflow] add guard is_valid() method support (@alain-flaus, @lyrixx)
  • feature #24364 [DependencyInjection][Filesystem][Security][SecurityBundle] remove deprecated features (@xabbuh)
  • feature #24441 [Bridge\Doctrine][FrameworkBundle] Remove legacy uses of ContainerAwareInterface (@nicolas-grekas)
  • feature #24388 [Security] Look at headers for switch_user username (@chalasr)
  • feature #24447 [Session] remove deprecated session handlers (@Tobion)
  • feature #24446 [Security] Remove GuardAuthenticatorInterface (@chalasr)
  • feature #23708 Added deprecation to cwd not existing Fixes #18249 (@alexbowers)
  • feature #24443 [Session] deprecate MemcacheSessionHandler (@Tobion)
  • feature #24409 [Bridge\Doctrine][FrameworkBundle] Deprecate some remaining uses of ContainerAwareTrait (@nicolas-grekas)
  • feature #24438 [Session][VarDumper] Deprecate accepting legacy mongo extension (@Tobion)
  • feature #24389 [DoctrineBridge] Deprecate dbal session handler (@Tobion)
  • feature #16835 [Security] Add Guard authenticator method (@Amo, @chalasr)
  • feature #24289 [FrameworkBundle][HttpKernel] Reset profiler (@derrabus)
  • feature #24144 [FrameworkBundle] Expose dotenv in bin/console about (@ro0NL)
  • feature #24403 [FrameworkBundle][Routing] Show welcome message if no routes are configured (@yceruto)
  • feature #24398 [DI] Remove AutowireExceptionPass (@ogizanagi)
  • feature #22679 [Form] Add tel and color types (@apetitpa)
  • feature #23845 [Validator] Add unique entity violation cause (@Ilya Vertakov)
  • feature #22132 [Lock] Automaticaly release lock when user forget it (@jderusse)
  • feature #21751 Bootstrap4 support for Twig form theme (@hiddewie, @javiereguiluz)
  • feature #24383 [FrameworkBundle] Don't clear app pools on cache:clear (@nicolas-grekas)
  • feature #24148 [Form] Hide label button when its setted to false (@TeLiXj)
  • feature #24380 [SecurityBundle] Remove auto picking the first provider (@ogizanagi)
  • feature #24378 [SecurityBundle] Deprecate auto picking the first provider (@ogizanagi)
  • feature #24260 [Security] Add impersonation support for stateless authentication (@chalasr)
  • feature #24300 [HttpKernel][FrameworkBundle] Add a minimalist default PSR-3 logger (@dunglas)
  • feature #21604 [Security] Argon2i Password Encoder (@zanbaldwin)
  • feature #24372 [DowCrawler] Default to UTF-8 when possible (@nicolas-grekas)
  • feature #24264 [TwigBundle] Improve the overriding of bundle templates (@yceruto)
  • feature #24197 [Translation] Moved PhpExtractor and PhpStringTokenParser to Translation component (@Nyholm)
  • feature #24362 [HttpKernel] Deprecate some compiler passes in favor of tagged iterator args (@nicolas-grekas)
  • feature #21027 [Asset] Provide default context (@ro0NL)
  • feature #22200 [DI] Reference tagged services in config (@ro0NL)
  • feature #24337 Adding a shortcuts for the main security functionality (@weaverryan, @javiereguiluz)
  • feature #24358 [TwigBundle] register an identity translator as fallback (@xabbuh)
  • feature #24357 [Yaml] include file and line no in deprecation message (@xabbuh)
  • feature #24330 [FrameworkBundle] register class metadata factory alias (@xabbuh)
  • feature #24348 [SecurityBundle] Remove remaining ACL stuff from SecurityBundle (@ogizanagi)
  • feature #24349 [SecurityBundle] Add missing AclSchemaListener deprecation (@ogizanagi)
  • feature #24202 [Filesystem] deprecate relative paths in makePathRelative() (@xabbuh)
  • feature #21716 [Serializer] Add Support for object_to_populate in CustomNormalizer (@chrisguitarguy)
  • feature #21960 Remove Validator\TypeTestCase and add validator logic to base TypeTestCase (@pierredup)
  • feature #24338 [HttpFoundation] Removed compatibility layer for PHP <5.4 sessions (@afurculita)
  • feature #22113 [Lock] Include lock component in framework bundle (@jderusse)
  • feature #24236 [WebProfilerBundle] Render file links for twig templates (@ro0NL)
  • feature #21239 [Serializer] throw more specific exceptions (@xabbuh)
  • feature #24341 [SecurityBundle] Remove ACL related code (@chalasr)
  • feature #24256 CsvEncoder handling variable structures and custom header order (@Oliver Hoff)
  • feature #23471 [Finder] Add a method to check if any results were found (@duncan3dc)
  • feature #23149 [PhpUnitBridge] Added a CoverageListener to enhance the code coverage report (@lyrixx)
  • feature #24161 [HttpKernel] Remove bundle inheritance (@fabpot)
  • feature #24318 [SecurityBundle] Deprecate ACL related code (@chalasr)
  • feature #24335 [Security][SecurityBundle] Deprecate the HTTP digest auth (@ogizanagi)
  • feature #21951 [Security][Firewall] Passing the newly generated security token to the event during user switching (@klandaika)
  • feature #23485 [Config] extracted the xml parsing from XmlUtils::loadFile into XmlUtils::parse (@Basster)
  • feature #22890 [HttpKernel] Add ability to configure catching exceptions for Client (@kbond)
  • feature #24239 [HttpFoundation] Deprecate compatibility with PHP <5.4 sessions (@afurculita)
  • feature #23882 [Security] Deprecated not being logged out after user change (@iltar)
  • feature #24200 Added an alias for FlashBagInterface in config (@tifabien)
  • feature #24295 [DI][DX] Throw exception on some ContainerBuilder methods used from extensions (@ogizanagi)
  • feature #24253 [Yaml] support parsing files (@xabbuh)
  • feature #24290 Adding Definition::addError() and a compiler pass to throw errors as exceptions (@weaverryan)
  • feature #24301 [DI] Add AutowireRequiredMethodsPass to fix bindings for @required methods (@nicolas-grekas)
  • feature #24226 [Cache] Add ResettableInterface to allow resetting any pool's local state (@nicolas-grekas)
  • feature #24303 [FrameworkBundle] allow forms without translations and validator (@xabbuh)
  • feature #24291 [SecurityBundle] Reset the authentication token between requests (@derrabus)
  • feature #24280 [VarDumper] Make dump() a little bit more easier to use (@freekmurze)
  • feature #24277 [Serializer] Getter for extra attributes in ExtraAttributesException (@mdeboer)
  • feature #24257 [HttpKernel][DI] Enable Kernel to implement CompilerPassInterface (@nicolas-grekas)
  • feature #23834 [DI] Add "PHP fluent format" for configuring the container (@nicolas-grekas)
  • feature #24180 [Routing] Add PHP fluent DSL for configuring routes (@nicolas-grekas)
  • feature #24232 [Bridge\Doctrine] Add "DoctrineType::reset()" method (@nicolas-grekas)
  • feature #24238 [DI] Turn services and aliases private by default, with BC layer (@nicolas-grekas)
  • feature #24242 [Form] Remove deprecated ChoiceLoaderInterface implementation in TimezoneType (@ogizanagi)
  • feature #23648 [Form] Add input + regions options to TimezoneType (@ro0NL)
  • feature #24185 [Form] Display general forms information on debug:form (@yceruto)
  • feature #23747 [Serializer][FrameworkBundle] Add a DateInterval normalizer (@Lctrs)
  • feature #24193 [FrameworkBundle] Reset stopwatch between requests (@derrabus)
  • feature #24160 [HttpKernel] Deprecate bundle inheritance (@fabpot)
  • feature #24159 Remove the profiler.matcher configuration (@fabpot)
  • feature #24155 [FrameworkBundle][HttpKernel] Add DI tag for resettable services (@derrabus)
  • feature #23625 Feature #23583 Add current and fallback locales in WDT / Profiler (@nemoneph)
  • feature #24179 [TwigBundle] Add default templates directory and option to configure it (@yceruto)
  • feature #24176 [Translation] drop MessageSelector support in the Translator (@xabbuh)
  • feature #24104 Make as many services private as possible (@nicolas-grekas)
  • feature #18314 [Translation] added support for adding custom message formatter (@aitboudad)
  • feature #24158 deprecated profiler.matcher configuration (@fabpot)
  • feature #23728 [WebProfilerBundle] Removed the deprecated web_profiler.position option (@javiereguiluz)
  • feature #24131 [Console] Do not display short exception trace for common console exceptions (@yceruto)
  • feature #24080 Deprecated the web_profiler.position option (@javiereguiluz)
  • feature #24114 [SecurityBundle] Throw a meaningful exception when an undefined user provider is used inside a firewall (@chalasr)
  • feature #24122 [DI] rename ResolveDefinitionTemplatesPass to ResolveChildDefinitionsPass (@nicolas-grekas)
  • feature #23901 [DI] Allow processing env vars (@nicolas-grekas)
  • feature #24093 [FrameworkBundle] be able to enable workflow support explicitly (@xabbuh)
  • feature #24064 [TwigBridge] Show Twig's loader paths on debug:twig command (@yceruto)
  • feature #23978 [Cache] Use options from Memcached DSN (@Bukashk0zzz)
  • feature #24067 [HttpKernel] Dont register env parameter resource (@ro0NL)
  • feature #24075 Implemented PruneableInterface on TagAwareAdapter (@Toflar)
  • feature #23262 Add scalar typehints/return types (@chalasr, @xabbuh)
  • feature #21414 [Console] Display file and line on Exception (@arno14)
  • feature #24068 [HttpKernel] Deprecate EnvParametersResource (@ro0NL)
  • feature #22542 [Lock] Check TTL expiration in lock acquisition (@jderusse)
  • feature #24031 [Routing] Add the possibility to define a prefix for all routes of a controller (@fabpot)
  • feature #24052 [DI] Remove case insensitive parameter names (@ro0NL)
  • feature #23967 [VarDumper] add force-collapse/expand + use it for traces (@nicolas-grekas)
  • feature #24033 [DI] Add ContainerInterface::IGNORE_ON_UNINITIALIZED_REFERENCE (@nicolas-grekas)
  • feature #24026 [Security] add impersonator_user to "User was reloaded" log message (@gharlan)
  • feature #24014 [Translator] Remove deprecated feature (@maidmaid)
  • feature #23603 [Cache] Add (pdo|chain) cache (adapter|simple) prune method (@robfrawley)
  • feature #23694 [Form] Add debug:form command (@yceruto)
  • feature #24028 [Yaml] mark some classes as final (@xabbuh)
  • feature #22543 [Lock] Expose an expiringDate and isExpired method in Lock (@jderusse)
  • feature #23667 [Translation] Create an TranslationReaderInterface and move TranslationLoader to TranslationComponent (@Nyholm)
  • feature #24024 [config] Add ability to deprecate a node (@sanpii)
  • feature #23668 [VarDumper] Add period caster (@maidmaid)
  • feature #23991 [DI] Improve psr4-based service discovery (alternative implementation) (@kbond)
  • feature #22382 [config] Add abbitily to deprecate a node (@Nyholm, @fabpot, @sanpii)
  • feature #23947 [Translation] Adding the ability do load in xliff2.0 (@Nyholm)
  • feature #23887 [Console] Allow commands to provide a default name for compile time registration (@chalasr, @nicolas-grekas)
  • feature #23874 [DI] Case sensitive parameter names (@ro0NL)
  • feature #23936 Remove some sf2 references (@fabpot)
  • feature #23680 [Webprofiler] Added blocks that allows extension of the profiler page. (@Nyholm)
  • feature #23665 Create an interface for TranslationWriter (@Nyholm)
  • feature #23890 [Translation] Adding the ability do dump in xliff2.0 (@Nyholm)
  • feature #23862 [SecurityBundle] resolve class name parameter inside AddSecurityVotersPass (@pjarmalavicius)
  • feature #23915 [DI] Allow get available services from service locator (@Koc)
  • feature #23792 [HttpKernel][FrameworkBundle] Add RebootableInterface, fix and un-deprecate cache:clear with warmup (@nicolas-grekas)
  • feature #23227 Add support for "controller" keyword for configuring routes controllers (@voronkovich)
  • feature #23815 [FrameworkBundle][SecurityBundle][TwigBundle][Yaml] remove deprecated code (@xabbuh)
  • feature #23857 [HttpKernel] Remove convention based commands registration (@chalasr)
  • feature #23869 [Console] Made console command shortcuts case insensitive (@thanosp)
  • feature #23855 [DI] Allow dumping inline services in Yaml (@nicolas-grekas)
  • feature #23836 [FrameworkBundle] Catch Fatal errors in commands registration (@chalasr)
  • feature #23805 [HttpKernel] Deprecated commands auto-registration (@GuilhemN)
  • feature #23816 [Debug] Detect internal and deprecated methods (@GuilhemN)
  • feature #23812 [FrameworkBundle] Allow micro kernel to subscribe events easily (@ogizanagi)
  • feature #22187 [DependencyInjection] Support local binding (@GuilhemN)
  • feature #23741 [DI] Generate one file per service factory (@nicolas-grekas)
  • feature #23807 [Debug] Trigger a deprecation when using an internal class/trait/interface (@GuilhemN)
  • feature #22587 [Workflow] Add transition completed event (@izzyp)
  • feature #23624 [FrameworkBundle] Commands as a service (@ro0NL)
  • feature #21111 [Validator] add groups support to the Valid constraint (@xabbuh)
  • feature #20361 [Config] Enable cannotBeEmpty along with requiresAtLeastOneElement (@ro0NL)
  • feature #23790 [Yaml] remove legacy php/const and php/object tag support (@xabbuh)
  • feature #23754 [Lock] Remove Filesystem\LockHandler (@jderusse)
  • feature #23712 [DependencyInjection] Deprecate autowiring service auto-registration (@GuilhemN)
  • feature #23719 Autoconfigure instances of ArgumentValueResolverInterface (@BPScott)
  • feature #23706 [Webprofiler] Improve sql explain table display (@mimol91)
  • feature #23709 [VarDumper] Make dump() variadic (@chalasr)
  • feature #23724 [Lock] Deprecate Filesystem/LockHandler (@jderusse)
  • feature #23593 [Workflow] Adding workflow name to the announce event (@Nyholm)
  • feature #20496 [Form] Allow pass filter callback to delete_empty option. (@Koc)
  • feature #23451 [Cache] Add (filesystem|phpfiles) cache (adapter|simple) prune method and prune command (@robfrawley)
  • feature #23519 [TwigBundle] Commands as a service (@ro0NL)
  • feature #23591 [VarDumper] Add time zone caster (@maidmaid)
  • feature #23614 [VarDumper] Remove low PHP version and hhvm compat in interval caster (@maidmaid)
  • feature #22317 [Console] Make SymfonyQuestionHelper::ask optional by default (@ro0NL)
  • feature #23510 [Console] Add a factory command loader for standalone application with lazy-loading needs (@ogizanagi)
  • feature #23357 [VarDumper] Add interval caster (@maidmaid)
  • feature #23550 [DebugBundle] Added min_depth to Configuration (@james-johnston-thumbtack)
  • feature #23561 [DI] Optimize use of private and pre-defined services (@nicolas-grekas)
  • feature #23569 Remove last legacy codes (@nicolas-grekas)
  • feature #23570 [FrameworkBundle] Make RouterCacheWarmer implement ServiceSubscriberInterface (@nicolas-grekas)
  • feature #22783 [TwigBridge] remove deprecated features (@xabbuh)
  • feature #23437 [TwigBridge] deprecate TwigRenderer (@Tobion)
  • feature #22801 [DI] Removed deprecated setting private/pre-defined services (@ro0NL)
  • feature #23515 [VarDumper] Added setMinDepth to VarCloner (@james-johnston-thumbtack)
  • feature #23484 [DI] Remove remaining deprecated features (@nicolas-grekas)
  • feature #23404 [Serializer] AbstractObjectNormalizer: Allow to disable type enforcement (@ogizanagi)
  • feature #23380 [Process] Remove enhanced sigchild compatibility (@maidmaid)
  • feature #21086 [MonologBridge] Add TokenProcessor (@maidmaid)
  • feature #22576 [Validator] Allow to use a property path to get value to compare in comparison constraints (@ogizanagi)
  • feature #22689 [DoctrineBridge] Add support for doctrin/dbal v2.6 types (@jvasseur)
  • feature #22734 [Console] Add support for command lazy-loading (@chalasr)
  • feature #19034 [Security] make it possible to configure a custom access decision manager service (@xabbuh)
  • feature #23037 [TwigBundle] Added a RuntimeExtensionInterface to take advantage of autoconfigure (@lyrixx)
  • feature #22811 [DI] Remove deprecated case insensitive service ids (@ro0NL)
  • feature #22176 [DI] Allow imports in string format for YAML (@ro0NL)
  • feature #23295 [Security] Lazy load user providers (@chalasr)
  • feature #23440 [Routing] Add matched and default parameters to redirect responses (@artursvonda, @Tobion)
  • feature #22804 [Debug] Removed ContextErrorException (@mbabker)
  • feature #22762 [Yaml] Support tagged scalars (@GuilhemN)
  • feature #22832 [Debug] Deprecate support for stacked errors (@mbabker)
  • feature #21469 [HttpFoundation] Find the original request protocol version (@thewilkybarkid)
  • feature #23431 [Validator] Add min/max amount of pixels to Image constraint (@akeeman)
  • feature #23223 Add support for microseconds in Stopwatch (@javiereguiluz)
  • feature #22341 [BrowserKit] Emulate back/forward browser navigation (@e-moe)
  • feature #22619 [FrameworkBundle][Translation] Move translation compiler pass (@lepiaf)
  • feature #22620 [FrameworkBundle][HttpKernel] Move httpkernel pass (@lepiaf)
  • feature #23402 [Ldap] Remove the RenameEntryInterface interface (@maidmaid)
  • feature #23337 [Component][Serializer][Normalizer] : Deal it with Has Method for the Normalizer/Denormalizer (@jordscream)
  • feature #23391 [Validator] Remove support of boolean value for the checkDNS option (@maidmaid)
  • feature #23376 [Process] Remove enhanced Windows compatibility (@maidmaid)
  • feature #22588 [VarDumper] Add filter in VarDumperTestTrait (@maidmaid)
  • feature #23288 [Yaml] deprecate the !str tag (@xabbuh)
  • feature #23039 [Validator] Support for parsing PHP constants in yaml loader (@mimol91)
  • feature #22431 [VarDumper] Add date caster (@maidmaid)
  • feature #23285 [Stopwatch] Add a reset method (@jmgq)
  • feature #23320 [WebServer] Allow * to bind all interfaces (as INADDR_ANY) (@jpauli, @fabpot)
  • feature #23272 [FrameworkBundle] disable unusable fragment renderers (@xabbuh)
  • feature #23332 [Yaml] fix the displayed line number (@fabpot, @xabbuh)
  • feature #23324 [Security] remove support for defining voters that don't implement VoterInterface. (@hhamon)
  • feature #23294 [Yaml][Lint] Add line numbers to JSON output. (@WybrenKoelmans)
  • feature #22836 [Process] remove deprecated features (@xabbuh)
  • feature #23286 [Yaml] remove deprecated unspecific tag behavior (@xabbuh)
  • feature #23026 [SecurityBundle] Add user impersonation info and exit action to the profiler (@yceruto)
  • feature #22863 [HttpFoundation] remove deprecated features (@xabbuh)
  • feature #22932 [HttpFoundation] Adds support for the immutable directive in the cache-control header (@twoleds)
  • feature #22554 [Profiler][Validator] Add a validator panel in profiler (@ogizanagi)
  • feature #22124 Shift responsibility for keeping Date header to ResponseHeaderBag (@mpdude)
  • feature #23122 Xml encoder optional type cast (@ragboyjr)
  • feature #23207 [FrameworkBundle] Allow .yaml file extension everywhere (@ogizanagi)
  • feature #23076 [Validator] Adds support to check specific DNS record type for URL (@iisisrael)
  • feature #22629 [Security] Trigger a deprecation when a voter is missing the VoterInterface (@iltar)
  • feature #22636 [Routing] Expose request in route conditions, if needed and possible (@ro0NL)
  • feature #22909 [Yaml] Deprecate using the non-specific tag (@GuilhemN)
  • feature #23184 [HttpFoundation] Remove obsolete ini settings for sessions (@fabpot)
  • feature #23042 Consistent error handling in remember me services (@lstrojny)
  • feature #22444 [Serializer] DateTimeNormalizer: allow to provide timezone (@ogizanagi)
  • feature #23143 [DI] Reference instead of inline for array-params (@nicolas-grekas)
  • feature #23154 [WebProfilerBundle] Sticky ajax window (@ro0NL)
  • feature #23161 [FrameworkBundle] Deprecate useless --no-prefix option (@chalasr)
  • feature #23169 [FrameworkBundle] Remove KernelTestCase deprecated code (@ogizanagi)
  • feature #23105 [SecurityBundle][Profiler] Give info about called security listeners in profiler (@chalasr)
  • feature #23148 [FrameworkBundle] drop hard dependency on the Stopwatch component (@xabbuh)
  • feature #23131 [FrameworkBundle] Remove dependency on Doctrine cache (@fabpot)
  • feature #23114 [SecurityBundle] Lazy load security listeners (@chalasr)
  • feature #23111 [Process] Deprecate ProcessBuilder (@nicolas-grekas)
  • feature #22675 [FrameworkBundle] KernelTestCase: deprecate not using KERNEL_CLASS (@ogizanagi)
  • feature #22917 [VarDumper] Cycle prev/next searching in HTML dumps (@ro0NL)
  • feature #23044 Automatically enable the routing annotation loader (@GuilhemN)
  • feature #22696 [PropertyInfo] Made ReflectionExtractor's prefix lists instance variables (@neemzy)
  • feature #23056 [WebProfilerBundle] Remove WebProfilerExtension::dumpValue() (@ogizanagi)
  • feature #23035 Deprecate passing a concrete service in optional cache warmers (@romainneutron)
  • feature #23036 Implement ServiceSubscriberInterface in optional cache warmers (@romainneutron)
  • feature #23046 [Form] Missing deprecated paths removal (@ogizanagi)
  • feature #23022 [Di] Remove closure-proxy arguments (@nicolas-grekas)
  • feature #22758 Remove HHVM support (@fabpot)
  • feature #22743 [Serializer] Remove support for deprecated signatures (@dunglas)
  • feature #22907 [Serializer] remove remaining deprecated features (@xabbuh)
  • feature #22886 [HttpKernel] remove deprecated features (@xabbuh)
  • feature #22906 [Console] remove remaining deprecated features (@xabbuh)
  • feature #22879 [Translation] remove deprecated features (@xabbuh)
  • feature #22880 [Routing] remove deprecated features (@xabbuh)
  • feature #22903 [DI] Deprecate XML services without ID (@ro0NL)
  • feature #22770 [Yaml] remove deprecated features (@xabbuh)
  • feature #22785 [ProxyManagerBridge] remove deprecated features (@xabbuh)
  • feature #22800 [FrameworkBundle] Remove deprecated code (@ogizanagi)
  • feature #22597 [Lock] Re-add the Lock component in 3.4 (@jderusse)
  • feature #22860 [Form] remove deprecated features (@xabbuh)
  • feature #22803 [DI] Deprecate Container::initialized() for privates (@ro0NL)
  • feature #22773 [DependencyInjection] remove deprecated autowiring_types feature (@hhamon)
  • feature #22809 [DI] Remove deprecated generating a dumped container without populating the method map (@ro0NL)
  • feature #22764 [DI] Remove deprecated dumping an uncompiled container (@ro0NL)
  • feature #22820 Remove PHP < 7.1.3 code (@ogizanagi)
  • feature #22763 [DI] Remove deprecated isFrozen() (@ro0NL)
  • feature #22837 [VarDumper] remove deprecated features (@xabbuh)
  • feature #22777 [Console] Remove deprecated console.exception event (@mbabker)
  • feature #22792 [PhpUnitBridge] remove deprecated features (@xabbuh)
  • feature #22821 [Security] remove deprecated features (@xabbuh)
  • feature #22750 [DependencyInjection] remove deprecated code in YamlFileLoader class (@hhamon)
  • feature #22828 [Finder] Deprecate FilterIterator (@ogizanagi)
  • feature #22791 [MonologBridge] remove deprecated features (@xabbuh)
  • feature #22740 [SecurityBundle][Security][Finder] Remove deprecated code paths (@ogizanagi)
  • feature #22823 [PropertyAccess] remove deprecated features (@xabbuh)
  • feature #22826 [Validator] improve strict option value deprecation (@xabbuh)
  • feature #22799 [Console] Remove deprecated features (@chalasr)
  • feature #22786 [ClassLoader][HttpKernel] Remove ClassLoader component & Kernel::loadClassCache (@ogizanagi, @xabbuh)
  • feature #22795 [Validator] remove deprecated features (@xabbuh)
  • feature #22784 [DoctrineBridge] remove deprecated features (@xabbuh)
  • feature #22749 Remove deprecated container injections and compiler passes (@chalasr)
  • feature #22796 [EventDispatcher] remove deprecated features (@xabbuh)
  • feature #22797 [Ldap] remove deprecated features (@xabbuh)
  • feature #22794 [ExpressionLanguage] remove deprecated features (@xabbuh)
  • feature #22779 [BC Break] Removed BC layers for ControllerResolver::getArguments() (@iltar)
  • feature #22782 [Debug][VarDumper] Remove the symfony_debug C extension (@nicolas-grekas)
  • feature #22771 [Workflow] Removed deprecated features (@lyrixx)
  • feature #22741 [Serializer] Remove deprecated DoctrineCache support (@dunglas)
  • feature #22733 Bump minimum version to PHP 7.1 for Symfony 4 (@fabpot, @dunglas, @nicolas-grekas)

[PR] https://github.com/symfony/symfony/pull/24612