This changelog references the relevant changes (bug and security fixes) done in 7.3 minor versions.

To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v7.3.0...v7.3.1

• 7.3.11 (2026-01-28)

• bug #63213 [DependencyInjection] Fix lazy proxy type resolution for decorated services (nicolas-grekas)

• bug #63212 [HttpClient] Fix dealing with truncated streams after headers arrived with CurlHttpClient (nicolas-grekas)

• bug #63208 [PropertyInfo] Fix DocBlock resolution for inherited promoted properties (yoeunes)

• bug #63170 [RateLimiter] Persist state when consuming negative tokens (jhogervorst)

• bug #63137 [HttpFoundation] Fix PdoSessionHandler charset-collation mismatch with the Doctrine DBAL (samy-mahmoudi)

• bug #63211 [HttpClient] Fix dealing with multiple levels of AsyncResponse decoration (nicolas-grekas)

• bug #63202 [Messenger] Only send UNLISTEN query if we are actively listening (jwage)

• security #cve-2026-24739 [Process] Fix escaping for MSYS on Windows (nicolas-grekas)

• bug #63206 [PropertyInfo] Conflict with phpdocumentor/reflection-docblock >= 6 (all branches) (nicolas-grekas)

• bug #63204 [PropertyInfo] Fix resolution of self/parent types in inherited DocBlocks (yoeunes)

• bug #63195 [FrameworkBundle] Clean http_cache dir in KernelTestCase::ensureKernelShutdown() (nicolas-grekas)

• bug #63164 [Process] Fix escaping for MSYS on Windows (nicolas-grekas)

• bug #63192 [Finder] Fix appending empty iterators (nicolas-grekas)

• bug #63193 [PropertyInfo] Conflict with phpdocumentor/reflection-docblock >= 6 (branch 6.4 only) (nicolas-grekas)

• bug #63191 [Serializer] Apply #[Ignore] to the right metadata (VincentLanglet)

• 7.3.10 (2026-01-24)

• bug #63160 [DependencyInjection] Fix alias chain inversion when deprecated alias points to decorated service (amateescu)

• bug #63159 [JsonStreamer] Fix exponential resource class memory growth (mtarld)

• bug #62852 [Cache] Fix DSN auth not passed to clusters in RedisTrait (wikando-ck)

• bug #62959 [PropertyInfo] do not parse scalar as an object (xabbuh)

• bug #63136 [Serializer] Fix is/has/can accessor naming to strip prefix unless colliding (nicolas-grekas)

• bug #63144 [Form] Fix OrderedHashMap auto-increment logic with mixed keys (yoeunes)

• bug #63154 [Form] don't skip custom view transformers while normalizing submitted newlines (xabbuh)

• bug #63155 [HttpClient] Skip HTTP/3 when using a proxy (nicolas-grekas)

• bug #63084 [PropertyInfo] fix exception with nullable value-of phpdoc (Максим Колокольников, maxmirazh33)

• bug #63051 [DoctrineBridge] Fix custom type based on Uid on entity loader (IndraGunawan)

• bug #63108 [ErrorHandler] fix parsing of complexe type (jderusse)

• bug #63126 [PropertyInfo] Throw when phpdocumentor/reflection-docblock v6 is in use (branch 6.4 only) (nicolas-grekas)

• bug #63113 [Form] Fix ICU 72+ whitespace handling in DateTimeToLocalizedStringTransformer (roukmoute)

• bug #63052 [Serializer] Fix NameConverter not detecting wrong input format with allow_extra_attributes=false (xersion22)

• bug #63064 [Translation] Fix handling of empty lines in CsvFileLoader (fnogatz)

• bug #63043 [FrameworkBundle] Check for console package before register CommandDataCollector (gimler)

• bug #63016 [FrameworkBundle] Ensure a fresh container is used after cache warmup in KernelTestCase (lyrixx)

• bug #62762 [Finder] Fix Finder::append() breaking generic typing contract (jack-worman)

• bug #62973 [WebProfiler] fix the security profiler template (aurac)

• bug #63000 [JsonStreamer] Fix memory leak by caching stream readers/writers (mtarld)

• bug #62997 [TypeInfo] Fix type resolution when called class is in other namespace (mtarld)

• bug #63004 [Process] Ignore invalid env var names (nicolas-grekas)

• bug #63005 [FrameworkBundle] Revert destination file change for secrets:decrypt-to-local (nicolas-grekas)

• bug #63012 [HttpFoundation] Fix double-prefixing of session keys when using redis/memcached (nicolas-grekas)

• bug #63001 [Scheduler] Fix array to string conversion in #[AsCronTask] arguments (serhiilabs)

• bug #62953 [Serializer] Fix removing nested values (gnoddep)

• bug #62988 [Messenger] Fix DBALv4 support by replacing trigger by explicit pg_notify() (nicolas-grekas)

• bug #62795 [FrameworkBundle] Fix mocking decorated services in tests (nicolas-grekas)

• bug #62838 [Serializer] Fix serialization of method with same name than property (VincentLanglet)

• bug #62872 [Messenger] Fix processing batches (HypeMC)

• bug #62848 [HttpKernel] Fix using HTTP Cache in worker mode (nicolas-grekas, stakovicz)

• bug #62954 [HttpClient] Fix existing headers must be replaced in CachingHttpClient (Toflar)

• bug #62884 [Form][TwigBridge] Prevent cached block prefixes from leaking across nested collections (nicolas-grekas)

• bug #62886 [PropertyAccess][PropertyInfo][Serializer] Skip methods that look like getters but return void or never (jordikroon)

• 7.3.9 (2025-12-31)

• bug #62873 [Cache] Fix namespace of chained pools when using another chain as template (nicolas-grekas)

• bug #62840 [Cache] Fix stampede protection when forcing item recomputation (nicolas-grekas)

• bug #62845 [HttpClient] Fix ever growing $maxHostConnections (nicolas-grekas)

• bug #62843 [DependencyInjection] Fix referencing build-time array parameters (nicolas-grekas)

• bug #62841 [Form] Always normalize CRLF and CR to LF in TextareaType (alexandre-daubois)

• bug #62490 [FrameworkBundle] Fix cache:pool:prune exit code on failure (yoeunes)

• bug #62813 [Console] Fix EofShortcut instruction when using a modern terminal on Windows (fperxas)

• bug #62827 [Console] Fix choice autocomplete issue when string has spaces (ayyoub-afwallah)

• bug #62826 [Security] Fix persisting valid origin for both safe and non-safe requests (llegaz)

• bug #62797 [Serializer] Fix inconsistent field naming from accessors when using groups (nicolas-grekas)

• bug #62741 [Finder] Fix converting unanchored glob patterns to regex (nicolas-grekas)

• bug #62759 [Form] do not use PHPUnit mock objects without configured expectations (xabbuh)

• bug #62796 [Security] do not use PHPUnit mock objects without configured expectations (xabbuh)

• bug #62808 [Translation] do not use PHPUnit mock objects without configured expectations (xabbuh)

• bug #62775 [Process] Fix dealing with broken stdin pipes (nicolas-grekas)

• bug #62791 [Routing] Fix simple parameter mappings in routes (nicolas-grekas)

• bug #62793 [Cache] Fix calling the callback wrapper for ChainAdapter (nicolas-grekas)

• bug #62799 [Cache][HttpFoundation] Fix VARBINARY columns on sqlsrv (nicolas-grekas)

• bug #62803 [AssetMapper] Batch concurrent requests to prevent flooding jsdelivr (nicolas-grekas)

• bug #62810 [TwigBundle] Align TemplateIterator handling of @! original bundle templates with TwigExtension (mbessolov)

• bug #62812 [Messenger][AMQP] Fix negative delays with AMQP messenger transport (hockdudu)

• bug #62794 [JsonPath] fix calling non-static method statically (keradus)

• bug #62772 [PropertyInfo] Fix calling same-named method with required args instead of reading public property (makraz)

• bug #62773 [Serializer] Do not skip nested null values when denormalizing (MatTheCat)

• bug #62745 [Validator] do not use PHPUnit mock objects without configured expectations (xabbuh)

• bug #62755 [DependencyInjection] Fix #[AutowireCallable] sometimes incorrectly inlined (HypeMC)

• bug #61963 [Doctrine][Messenger] Remove old MySQL special handling that causes deadlocks (psihius)

• bug #62744 [TwigBridge] do not use PHPUnit mock objects without configured expectations (xabbuh)

• bug #62756 [Mailer] do not use PHPUnit mock objects without configured expectations (xabbuh)

• bug #62740 [Serializer] Fix php 8.5 warning unexpected NAN value was coerced to … (aaa2000)

• bug #62758 [BrowserKit] Allow Cookie expiration to be an int (derrabus)

• bug #62764 [Console] Escape `` in description of console commands (SiebeVE)

• bug #62396 [PropertyInfo] Fix inconsistency between isWritable and getWriteInfo (yoeunes)

• bug #62699 [HttpClient] Fix ScopingHttpClient to always pass base_uri as string instead of parsed array (santysisi)

• bug #62717 [PropertyInfo] fix @var tag support for PhpStanExtractor (qconer)

• bug #62706 [HttpClient] Fix PHP deprecation when using AmpHttpClient (nicolas-grekas)

• bug #62698 [HttpClient] Fix copy as curl for arrays with resources & unreachable host (HypeMC)

• bug #62691 [JsonPath] Update and fix the compliance test suite (alexandre-daubois)

• bug #62686 [PropertyInfo] Fix PseudoType support in PhpDocTypeHelper (VincentLanglet)

• bug #62715 [DependencyInjection] Fix sharing services used only by tagged iterators (nicolas-grekas)

• bug #62714 [DependencyInjection] Handle recursive factory reentry for shared services in PhpDumper (nicolas-grekas)

• bug #62685 [DependencyInjection] Fix PriorityTaggedServiceTrait when tag attributes are not a list (GromNaN)

• 7.3.8 (2025-12-07)

• bug #62675 [DependencyInjection] Fix dealing with errored service definitions (nicolas-grekas)

• bug #62488 [HttpKernel] Make #[Cache] respect all explicit cache directives set in controller (ayyoub-afwallah)

• bug #62665 [DependencyInjection] Revert "bug #62541 Reset resolved state when setting a parameter" (nicolas-grekas)

• bug #62388 [TypeInfo] Simple array should be array type (matijn-made)

• bug #61962 [Console] Handle signals on text input (valx76)

• bug #62661 [Runtime] Reuse the already created Request object when the app needs one as argument and returns a kernel (nicolas-grekas)

• bug #62621 [Form] Fix moneytype step (Belhassen)

• bug #62627 [Console] Preserve --help option when a command is not found (santysisi)

• bug #62619 [Messenger] Fix PHP 8.5 deprecation for pgsqlGetNotify() in PostgreSQL transport (Shine-neko)

• bug #62612 [Yaml] Fix regression handling blank lines in unquoted scalars (yoeunes)

• bug #62645 [HttpClient] Fix sharing CurlClientState between clones of CurlHttpClient instances (nicolas-grekas)

• bug #62541 [DependencyInjection] Reset resolved state when setting a parameter (yoeunes)

• bug #62602 [Cache] Fix the creation of a redis connection with only ext-relay (stof)

• bug #62587 [PropertyInfo] treat mixed[] the same as array when getting types from docblocks (xabbuh)

• bug #62524 [Notifier][Mercure] Add support for Mercure 0.7 (Kocal)

• bug #62577 [PropertyInfo] treat mixed[] the same as array when getting types from docblocks (xabbuh)

• bug #62498 [FrameworkBundle] fix merging of enabled locales (dmaicher)

• bug #62551 [FrameworkBundle] register attribute loader arguments in a forward-compatible way (xabbuh)

• bug #62465 [JsonPath] Fix throwing on quoted True/False/Null (TamasSzigeti)

• bug #62482 [DependencyInjection] Fix loose validation in #[Autowire] attribute (yoeunes)

• bug #62513 [FrameworkBundle] Add missing useAttributeAsKey calls (MatTheCat)

• bug #62523 [DependencyInjection] Fix state corruption in PhpFileLoader during recursive imports (yoeunes)

• bug #62543 [Cache] ensure compatibility with RelayCluster 0.20.0 (xabbuh)

• bug #62536 [Cache] ensure compatibility with Relay extension 0.20.0 (xabbuh)

• bug #62506 [DependencyInjection] Fix query_string env processor for URLs without query string (yoeunes)

• bug #62502 [HttpFoundation] Fix Expires response header for EventStream (4513)

• bug #62503 [HttpClient] Fix releasing uploaded stream resources (nicolas-grekas)

• bug #62474 [Config] Fix nullable EnumNode with BackedEnum (yoeunes)

• bug #62485 [DependencyInjection] Fix loop corruption in CheckTypeDeclarationsPass (yoeunes)

• bug #62486 [DependencyInjection] Fix invalid PHP syntax for nullable TypedReference in PhpDumper (yoeunes)

• bug #62487 [Security] Fix UserBadge validation bypass via identifier normalizer (yoeunes)

• bug #62489 [FrameworkBundle] Fix TypeError when traversing scalar values in debug:config (yoeunes)

• bug #62493 [Console] Fix exception message when abbreviation matches multiple hidden commands (yoeunes)

• bug #62471 [String] Fix normalization in trimPrefix/trimSuffix (yoeunes)

• bug #62456 [AssetMapper] Fix entrypoint status lost during update (yoeunes)

• bug #62416 [Console] Fix completion for global options values (HypeMC)

• bug #62458 [Workflow] Fix MethodMarkingStore crash with inherited uninitialized properties (yoeunes)

• bug #62459 [Routing] Fix case sensitivity for static host matching in compiled routes (yoeunes)

• bug #62461 [Routing] Fix localized prefix updates breaking aliases (yoeunes)

• bug #62460 [Routing] Fix addNamePrefix breaking aliases to external routes (yoeunes)

• bug #62449 [HttpKernel] Fix using MapRequestPayload on nullable arguments (nicolas-grekas)

• bug #62415 [HttpClient] Don't reset unused clients in data collector (HypeMC)

• bug #62437 [DependencyInjection] Fix preloading LazyClosure (nicolas-grekas)

• bug #62409 [Yaml] Align unquoted multiline scalar parsing with spec for comments (yoeunes)

• bug #62398 [Cache] Fix accepting named closures as early-expiration callbacks (nicolas-grekas)

• bug #62406 [Notifier] do not use recipient phone numbers as sender e-mail addresses (xabbuh)

• bug #62407 [FrameworkBundle] work around limitation in JsonResponse when the data is null (xabbuh)

• bug #62400 [Form] Fix EnumType choice_label logic for grouped choices (yoeunes)

• bug #62393 [Dependencyinjection] Call default index method when index is not provided by tag (yoeunes)

• bug #62372 [Cache] Recognize saveDeferred events as writes in CacheDataCollector (yitznewton)

• bug #62335 [Console] Fix signal handlers not being cleared after command termination (yoeunes)

• bug #62348 [Translation][Lokalise] fix "Project too big for sync export" (santysisi)

• bug #62304 [DependencyInjection] Fix lazy proxy creation for interfaces aliased to final classes (yoeunes)

• bug #62036 [HttpKernel] Fix StreamedResponse with chunks support in HttpKernelBrowser (wuchen90)

• bug #62063 [JsonStreamer] Rebuild cache on class update (mtarld)

• bug #62287 [HttpFoundation] Fix AcceptHeader overwrites items with different parameters (yoeunes)

• bug #62325 [Routing] Fix default value not taken if usigng name:entity.attribute (eltharin)

• bug #62329 [DependencyInjection] Fix merging explicit tags and #[AsTaggeditem] (nicolas-grekas)

• bug #62356 [HttpClient] Fix Warning: curl_multi_select(): timeout must be positive (Jeroeny)

• bug #62334 [PropertyInfo] Fix ReflectionExtractor handling of underscore-only property names (yoeunes)

• bug #58473 [Serializer] Fix AbstractObjectNormalizer to allow scalar values to be normalized (Hanmac, xabbuh)

• bug #62093 [Security] Fix HttpUtils::createRequest() when the context’s base URL isn’t empty (MatTheCat)

• bug #62007 [Serializer] fix inherited properties normalization (Link1515)

• bug #62286 [Cache] compatibility with ext-redis 6.3 (xabbuh)

• bug #62321 [Serializer] Fix BackedEnumNormalizer behavior with partial denormalization (yoeunes)

• bug #62344 [OptionsResolver] Fix missing prototype key in nested error paths (yoeunes)

• bug #62346 [Clock] Align MockClock::sleep() behavior with NativeClock for negative values (yoeunes)

• bug #62347 [OptionsResolver] Ensure remove() also unsets deprecation status (yoeunes)

• bug #62359 [Yaml] Fix parsing of unquoted multiline scalars with comments or blank lines (yoeunes)

• bug #62350 [ExpressionLanguage] Compile numbers with var_export in Compiler::repr for thread-safety (yoeunes)

• 7.3.7 (2025-11-12)

• security #cve-2025-64500 [HttpFoundation] Fix parsing pathinfo with no leading slash (nicolas-grekas)

• bug #62333 Postal mailer transport message ID retrieval (lalcebo)

• 7.3.6 (2025-11-06)

• bug #62324 [HttpFoundation] Fix parsing hosts and schemes in URLs (nicolas-grekas)

• bug #62171 [Messenger] Fix commands writing to STDERR instead of STDOUT (wazum)

• bug #62315 Keep body size limit for AMP redirects (villermen)

• bug #62237 [Form] Fix EnumType choice_label logic for grouped choices (yoeunes)

• bug #62283 [Filesystem] Unify logic for isAbsolute() in Path (yoeunes)

• bug #62091 [BrowserKit] The BrowserKit history with parameter separator without slash. (biozshock)

• bug #62297 [Twig] Ensure WrappedTemplatedEmail::getReturnPath() returns a string (yoeunes)

• bug #62294 [Console] Add missing VERBOSITY_SILENT case in CommandDataCollector (yoeunes)

• bug #62290 [Routing] Fix matching the "0" URL (cs278)

• bug #62285 [HttpClient] Reject 3xx pushed responses (nicolas-grekas)

• bug #62267 [Config] Use the empty string instead of null as an array offset (santysisi)

• bug #62246 [HttpFoundation] Allow Request::setFormat() to override predefined formats (longwave)

• bug #62242 [MonologBridge] Accept HttpExceptionInterface in HttpCodeActivationStrategy (GromNaN)

• bug #62222 [Cache] fix ext-redis 6.2.0 compatibility (xabbuh)

• bug #62197 [Validator] Fix call to undefined getParser() in YamlValidator (yoeunes)

• bug #62201 [HtmlSanitizer] Remove srcdoc from allowed attributes (Spomky)

• 7.3.5 (2025-10-28)

• bug #62153 [HttpFoundation] Fix issue where ServerEvent with "0" data is not sent (santysisi)

• bug #62145 [Mailer] Fix parsing message ids in SMTP responses (hacfi)

• bug #62096 [Cache] fix compatibility with Relay 0.12.1 (xabbuh)

• bug #62078 [FrameworkBundle] Fix secrets:encrypt-from-local (nicolas-grekas)

• bug #62028 [Validator] Update regular expression in URL validator (mjaschen)

• bug #62087 [Cache] fix compatibility with Relay 0.12.1 (xabbuh)

• bug #62083 [TypeInfo] Fix resolving use statements with line breaks (ostrolucky)

• bug #62054 [AssetMapper] Fix parsing @import that don't use url() (nicolas-grekas)

• bug #62058 [Console] Ensure SHELL_VERBOSITY is always restored properly (ttskch)

• bug #62037 Fix generating logout link with stateless csrf (pierredup)

• bug #62041 [DebugBundle] Wire DumpDataCollector's webMode argument (HypeMC)

• bug #62038 [Translation][Loco] filter should be empty when filtering on all domains (atomiix)

• bug #62003 [Serializer] Fix unexpected type in denormalization errors when float|int union type used in constructor with non numeric string in form-data request (d-mitrofanov-v)

• bug #61990 [Cache][RedisTagAwareAdapter] Add Predis2 Replication Interface check (BrianMwit)

• bug #61939 [FrameworkBundle] fix using lock from service id when previous locks used env vars (AydinHassan)

• bug #61970 [Cache] fix compatibility with RelayCluster 0.11 and 0.12 (xabbuh)

• bug #61964 [PropertyInfo][TypeInfo] Fix resolving constructor type with templates (HypeMC)

• bug #61960 [WebProfilerBundle] ”finish” errored requests (MatTheCat)

• bug #61954 [TypeInfo] Fix type alias with template resolving (mtarld)

• bug #61924 [Mailer] Revert " Fix memory leak with mailer.message_logger_listener" (kochen)

• bug #61943 [TypeInfo] ArrayShape can resolve key type as callable instead of string (Dean151)

• bug #61947 [Cache] fix Relay Cluster 0.12 compatibility (xabbuh)

• bug #61945 [Cache] fix compatibility with Relay 0.12 (xabbuh)

• bug #61928 [Form] keep labels from configured choices (xabbuh)

• bug #61889 [Serializer] Fix discriminator class mapping with allow_extra_attributes=false (chris54721)

• bug #61861 [Console] Ensure terminal is usable after termination signal (johnstevenson)

• bug #61912 [FrameworkBundle] Fix support of dumping workflow when workflow is decorated by TraceableWorkflow (lyrixx)

• bug #61876 [Mailer][MailJet] Fix forbidden headers case-sensitive comparison (benjamintoussaint)

• bug #61874 [Scheduler] Don’t get next run date from null (MatTheCat)

• bug #61875 [Form] do not cast too big floats to int (xabbuh)

• bug #61869 [JsonPath] do not pass more than one byte to ord() (xabbuh)

• bug #61856 [Console] do not pass the empty string to ord() (xabbuh)

• bug #61855 [DoctrineBridge][Yaml] don't cast strings exceeding the min/max int ranges (xabbuh)

• bug #61844 do not coerce NAN to other types (xabbuh)

• 7.3.4 (2025-09-27)

• bug #61830 [Security] Fix preload warning in AuthorizationChecker (MatTheCat)

• bug #61825 [DoctrineBridge] Make EntityUserProviders pass attributes to their loader (MatTheCat)

• bug #61818 [Notifier] Rename LOX24RequestParser to Lox24RequestParser (nicolas-grekas)

• bug #61808 [Config] Fix incorrect serialized data mangling (aboks)

• bug #61793 [AssetMapper] Prevent duplicate entries in module preloads (xDeSwa)

• bug #61785 [ObjectMapper] Preserve non-promoted constructor parameters (rvanlaak)

• bug #60515 [Mailer] Fix memory leak with mailer.message_logger_listener (andrew-demb)

• bug #61757 [FrameworkBundle] Perform-no-deep-merging on workflow transitions' from/to configs (nicolas-grekas)

• bug #61766 Fix ord()-related PHP 8.5 deprecations (nicolas-grekas)

• bug #61368 [HttpKernel] Refine Vary header check to skip special handling of 'Accept-Language' when it's the only entry and '_vary_by_language' is true in CacheAttributeListener (santysisi)

• bug #61752 [PropertyInfo] Fix getting type from constructor of parent class in PhpStanExtractor (wuchen90)

• bug #61746 [Serializer] Fix unknown type in denormalization errors when union type used in constructor (d-mitrofanov-v)

• bug #61724 [Console] Fix handling of \E in Bash completion (HypeMC)

• bug #61518 [HttpKernel] Handle an array vary header in the http cache store for write (philpichet)

• bug #61736 [PhpUnitBridge] do not try to modify the result of a PhptTestCase (xabbuh)

• bug #61728 [TypeInfo] Fix issue with merging union type with a nullable union type (matijn-made)

• bug #61731 [PhpUnitBridge] Fix gathering deprecation in phpt (nicolas-grekas)

• bug #61729 [PhpUnitBridge] Silence deprecation of __sleep/wakeup() (nicolas-grekas)

• bug #61727 Replace __sleep/wakeup() by __(un)serialize() for throwing and internal usages (nicolas-grekas)

• bug #61714 [SecurityBundle] Fix semantic configuration for singulars/plurals in XML (nicolas-grekas)

• bug #61132 [JsonPath] Make the component RFC compliant (alexandre-daubois)

• bug #60055 [MonologBridge] Make ConsoleHandler not handle messages at SILENT verbosity (okhoshi)

• bug #61701 [SecurityBundle] Add missing fixXmlConfig() call for issuer (OskarStark)

• bug #61693 [Console] Don’t append a new line to test inputs ending with an EOT (MatTheCat)

• bug #61596 [FrameworkBundle] Normalize workflow places separately (KevinVanSonsbeek)

• bug #61690 [Console] Don’t automatically append EOT to multiline test inputs (MatTheCat)

• bug #61667 [Config] Fix GlobResource pattern with trailing slash (HypeMC)

• bug #61658 [Messenger] map legacy options to the "sentinel" key when parsing DSNs (xabbuh)

• bug #61659 [Security] Fix HttpUtils::createRequest() when the base request is forwarded (MatTheCat)

• bug #61653 [Routing] Don't rebuild cache when controller action body changes (HypeMC)

• bug #61645 Replace backtick operator, deprecated in PHP 8.5, with shell_exec() (iluuu1994)

• bug #61617 [Validator] fall back to legacy options handling if configured named arguments do not match (xabbuh)

• bug #61097 [Serializer] Fix normalizing objects with accessors having the same name as a property (RafaelKr)

• bug #61615 [DependencyInjection] Fix optimizing ClassExistenceResource (nicolas-grekas)

• bug #61614 [SecurityBundle] Prevent accessing the tracked token storage when collecting data (MatTheCat)

• bug #61607 [Config] Fix ReflectionClassResource hash validation (HypeMC)

• bug #61605 [Cache] Fix internal representation of non-static values (nicolas-grekas)

• bug #61599 [Cache] Make TagAwareAdapter registrable as a service (a.dmitryuk)

• bug #61595 [Security] Pass attributes to nested ChainUserProviders (valtzu)

• bug #61580 [JsonStreamer] Fix encoding iterable lists (mtarld)

• bug #61232 [Messenger] Firebird Database - incompatibility with expected lowercase columns (DSsatwareAG)

• bug #61583 [DoctrineBridge] Fix exception catch when deleting temporary table in the sameDatabaseChecker (GromNaN)

• bug #61585 [HttpFoundation][SQLSRV] Change column type from TEXT to STRING (Matt-PMCT)

• bug #61571 [Serializer] Fix dealing with asymmetric visilibity for properties (santysisi)

• bug #60766 [DependencyInjection] Respect original service class when a proxy is defined (lyrixx)

• bug #61561 [JsonStreamer] Fix decoding iterable lists (mtarld)

• bug #61573 [Inflector][String] Fix edge cases (OskarStark)

• bug #61548 [Security] Fix attribute-based chained user providers (valtzu)

• 7.3.3 (2025-08-29)

• bug #61543 [TypeInfo] Prevent interfaces extending BackedEnum to be treated as BackedEnums (ettoredn)

• bug #61520 [Yaml] Fix scope resolution operator in flow mapping keys (MatTheCat)

• bug #61534 [HttpClient] Fix PHP 8.5 deprecation using str_increment() (nicolas-grekas)

• bug #61529 [FrameworkBundle] Don’t collect CLI profiles if the profiler is disabled (MatTheCat)

• bug #61526 [Serializer] Don't fallback to default serializer if tags specify a named one (HypeMC)

• bug #60211 [Messenger] Fix Oracle errors 'ORA-00955: Name is already used by an existing object' with Doctrine transport (atgitwk)

• bug #61033 [Console] Restore SHELL_VERBOSITY after a command is ran (lyrixx)

• bug #61501 [Console] Fix testing multiline question (MatTheCat)

• bug #61503 [String] Fix nodes singular (ruudk)

• feature #61486 [Security] Ignore target route when exiting impersonation (MatTheCat)

• bug #61459 [String] Fix issues singular (ruudk)

• bug #61426 [Intl] Take timezoneTypes’ ianaMap into account (MatTheCat)

• bug #61422 [WebProfilerBundle] Hide WDT clearer when it is hidden (MatTheCat)

• bug #61381 [HttpKernel] #[MapUploadedFile] throws http exception on empty files array if argument not nullable nor has default value (hwawshy)

• bug #61453 [VarExporter] Fix serializing classes with __serialize() returning unprefixed private properties (nicolas-grekas)

• bug #61447 [String] specific fix to avoid 'outag' when inflecting 'outages' (PhilETaylor)

• bug #61115 [FrameworkBundle] Make cache:warmup warm up read-only caches (MatTheCat)

• bug #61411 [DependencyInjection] Don’t autowire excluded services (MatTheCat)

• bug #61401 [Process] Enhance hasSystemCallBeenInterrupted function for non-english locale (christianseel)

• bug #61405 Remove calls to no-op functions, deprecated in PHP 8.5 (nicolas-grekas)

• bug #61402 Remove calls to deprecated methods of SplObjectStorage (nicolas-grekas)

• bug #61375 [TypeInfo] Fix converting list to string (ruudk)

• bug #61310 [ObjectMapper] read source metadata before transform (soyuka, rvanlaak)

• bug #61355 [WebProfilerBundle] Fix toolbar not rendering after replacing it (aleho)

• bug #58547 [HtmlSanitizer] Fix force_attributes not replacing existing attribute in initial data (tgalopin)

• bug #61335 [Mailer] [Resend] Add friendly name in the to field (antalaron)

• bug #61351 [VarDumper] Fix dumping objects from the DOM extension (nicolas-grekas)

• bug #61291 [Messenger] Remove fix NoAutoAckStamp handling in Worker::flush() (wazum)

• bug #61307 [Scheduler] Fix scheduler.task tag arguments optionality (Jan Pintr)

• bug #61304 [PhpUnitBridge] Call Reflection*::setAccessible() only for PHP < 8.1 (W0rma)

• bug #61319 [Console] [Table] Don't split grapheme clusters (schlndh)

• 7.3.2 (2025-07-31)

• bug #61276 [DependencyInjection] Escape parameters before resolving env placeholders (MatTheCat)

• bug #61268 [Console] [Table] Fix unnecessary wrapping (schlndh)

• bug #61085 [Lock] Fix using fractional TTLs (manuelderuiter)

• bug #61271 [Messenger] disable detecting modified indexes with DBAL 4.3 (xabbuh)

• bug #61242 [Console] [Table] Fix invalid UTF-8 due to text wrapping (schlndh)

• bug #61234 [Cache] RedisTrait::doFetch should use pipeline with GET's instead of MGET for Relay\Cluster (dorrogeray)

• bug #61246 [VarDumper] Use unique identifier for RequestContextProvider (ToshY)

• bug #61261 [FrameworkBundle] Fix lint:container --resolve-env-vars (MatTheCat)

• bug #61080 [Console] Fix TreeHelper::addChild when providing a string (jtattevin)

• bug #60296 [Serializer] Handle invalid mapping type property type (KorvinSzanto)

• bug #58995 [Config] Do not generate unreachable configuration paths (bobvandevijver)

• bug #60867 [WebProfilerBundle] Fix missing indent on non php files opended in the profiler (phcorp)

• bug #61233 [ObjectMapper] skip reading uninitialized values (soyuka)

• bug #61199 [JsonPath] Fix parsing invalid Unicode codepoints (nicolas-grekas)

• bug #61223 [Mailer][Brevo] Update Webhook IPs (jarbey)

• bug #61201 [Console] Fix JSON description for negatable input flags (nicolas-grekas)

• bug #61220 [Cache] fix compatibility with different Relay versions (xabbuh)

• bug #61194 [Security] Fix added $token argument to UserCheckerInterface::checkPostAuth() (nicolas-grekas)

• bug #61146 [ObjectMapper] initialize lazy objects (soyuka)

• bug #61161 [Lock] Fallback to eval when LOAD fails due to missing script (santysisi)

• bug #61151 [ObjectMapper] update promoted properties w/ an object as target (soyuka)

• bug #61158 [FrameworkBundle] Add missing html5-allow-no-tld to XSD file (nicolas-grekas)

• bug #61144 [VarDumper] Fix dumping on systems that don't have a working iconv (nicolas-grekas)

• bug #60798 [JsonPath] Handle slice selector overflow (alexandre-daubois)

• bug #61138 [Console] fix profiler with overridden run() method (vinceAmstoutz)

• bug #61079 [Config] Fix support for attributes on class constants and enum cases (ruudk)

• bug #61131 [Validator] error if the fields option is missing for the Collection constraint (xabbuh)

• bug #61111 [Translation] fix support of TranslatableInterface in IdentityTranslator (VincentLanglet)

• bug #61117 [Validator] fix handling required options (xabbuh)

• bug #61121 [DependencyInjection] Fix proxying services defined with an abstract class and a factory (nicolas-grekas)

• bug #61120 [DoctrineBridge] Prevent idle connection listener from running on subrequest (a.dmitryuk, dmitryuk)

• bug #61106 Fix @var phpdoc (fabpot)

• bug #61091 [Lock] [MongoDB] Enforce readPreference=primary and writeConcern=majority (notrix)

• bug #61105 [FrameworkBundle] fix phpdoc in MicroKernelTrait (santysisi)

• bug #61014 [TypeInfo] Reuse CollectionType::mergeCollectionValueTypes for ConstFetchNode (norkunas)

• bug #61076 [ExpressionLanguage] Fix dumping of null safe operator (ivantsepp)

• bug #60856 [ObjectMapper] handle non existing property errors (soyuka)

• bug #60802 [JsonPath] Improve escape sequence validation in name selector (alexandre-daubois)

• bug #60741 [Scheduler] Fix #[AsCronTask] not passing arguments to command (Jan Pintr, jan-pintr)

• bug #61056 [Validator] Allow mixed root on CompoundConstraintTestCase validator (thePanz)

• bug #61028 [Serializer] Fix readonly property initialization from incorrect scope (santysisi)

• bug #61073 [VarExporter] Dump implicit-nullable types as explicit to prevent the corresponding deprecation (nicolas-grekas)

• bug #61062 [Brevo Mailer] Webhook IP Addresses have changed (richardhj)

• bug #61004 [TypeInfo] Fix imported-only alias resolving (mtarld)

• bug #60975 [Form] Fix precision loss when rounding large integers in NumberToLocalizedStringTransformer (OskarStark)

• bug #61001 [JsonStreamer] Fix nested generated foreach loops (mttsch)

• bug #61036 [ObjectMapper] Correctly manage constructor initialization (alanpoulain)

• bug #60953 [DoctrineBridge] Restore compatibility with Doctrine ODM (pepeh)

• bug #61020 [Doctrine][FrameworkBundle][Serializer][Validator] Increase minimum version of type-info component (mitelg)

• bug #61031 [HttpClient] return early if handle has been cleaned up before (xabbuh)

• bug #60998 [TwigBridge] fix command option mode (InputOption::VALUE_REQUIRED) (gharlan)

• bug #60961 [TypeInfo] Fix Type::fromValue with empty array (norkunas)

• bug #60956 [TypeInfo] Fix Type::fromValue incorrectly setting object type instead of enum (norkunas)

• bug #60958 [Serializer] remove return type from AbstractObjectNormalizer::getAllowedAttributes() (xabbuh)

• bug #60507 [Console][Messenger] Fix: Allow UnrecoverableExceptionInterface to bypass retry in RunCommandMessageHandler (santysisi)

• 7.3.1 (2025-06-28)

• bug #60044 [Console] Table counts wrong column width when using colspan and setColumnMaxWidth() (vladimir-vv)

• bug #60042 [Console] Table counts wrong number of padding symbols in renderCell() method when cell contain unicode variant selector (vladimir-vv)

• bug #60594 [Cache] Fix using a ChainAdapter as an adapter for a pool (IndraGunawan)

• bug #60483 [HttpKernel] Fix #[MapUploadedFile] handling for optional file uploads (santysisi)

• bug #60413 [Serializer] Fix collect_denormalization_errors flag in defaultContext (dmbrson)

• bug #60820 [TypeInfo] Fix handling ConstFetchNode (norkunas)

• bug #60908 [Uid] Improve entropy of the increment for UUIDv7 (nicolas-grekas)

• bug #60914 [Console] Fix command option mode (InputOption::VALUE_REQUIRED) (gharlan)

• bug #60919 [VarDumper] Avoid deprecated call in PgSqlCaster (vrana)

• bug #60909 [TypeInfo] use an EOL-agnostic approach to parse class uses (xabbuh)

• bug #60888 [Intl] Fix locale validator when canonicalize is true (rdavaillaud)

• bug #60885 [Notifier] Update fake SMS transports to use contracts event dispatcher (paulferrett)

• bug #60894 [FrameworkBundle] also deprecate the internal rate limiter factory alias (xabbuh)

• bug #60875 [HttpFoundation] Revert " Emit PHP warning when Response::sendHeaders() is called while output has already been sent" (nicolas-grekas)

• bug #60840 [Validator] Add missing HasNamedArguments to some constraints (jkgroupe)

• bug #60859 [TwigBundle] fix preload unlinked class BinaryOperatorExpressionParser (Grummfy)

• bug #60772 [Mailer] [Transport] Send clone of RawMessage instance in RoundRobinTransport (jnoordsij)

• bug #60842 [DependencyInjection] Fix generating adapters of functional interfaces (nicolas-grekas)

• bug #60809 [Serializer] Fix TraceableSerializer when called from a callable inside array_map (OrestisZag)

• bug #60831 [ObjectMapper] Fix parameter passed to class level transform (mttsch)

• bug #60511 [Serializer] Add support for discriminator map in property normalizer (ruudk)

• bug #60780 [FrameworkBundle] Fix argument not provided to add_bus_name_stamp_middleware (maxbaldanza)

• bug #60826 [DependencyInjection] Fix inlining when public services are involved (nicolas-grekas)

• bug #60806 [HttpClient] Limit curl's connection cache size (nicolas-grekas)

• bug #60699 [JsonPath] Improve compliance to the RFC test suite (alexandre-daubois)

• bug #60705 [FrameworkBundle] Fix allow loose as an email validation mode (rhel-eo)

• bug #60759 [Messenger] Fix float value for worker memory limit (ro0NL)

• bug #60785 [Security] Handle non-callable implementations of FirewallListenerInterface (MatTheCat)

• bug #60781 [DomCrawler] Allow selecting buttons by their value (MatTheCat)

• bug #60775 [Validator] flip excluded properties with keys with Doctrine-style constraint config (xabbuh)

• bug #60774 [FrameworkBundle] Fixes getting a type error when the secret you are trying to reveal could not be decrypted (jack-worman)

• bug #60504 [JsonPath] Fix subexpression evaluation in filters (alexandre-daubois)

• bug #60779 Silence E_DEPRECATED and E_USER_DEPRECATED (nicolas-grekas)

• bug #60502 [HttpCache] Hit the backend only once after waiting for the cache lock (mpdude)

• bug #60771 [Runtime] fix compatibility with Symfony 7.4 (xabbuh)

• bug #60719 [JsonPath] Fix support for comma separated indices (alexandre-daubois)

• bug #59910 [Form] Keep submitted values when keep_as_list option of collection type is enabled (kells)

• bug #60638 [Form] Fix keep_as_list when data is not an array (MatTheCat)

• bug #60691 [DependencyInjection] Fix ServiceLocatorTagPass indexes handling (MatTheCat)

• bug #60676 [Form] Fix handling the empty string in NumberToLocalizedStringTransformer (gnat42)

• bug #60694 [Intl] Add missing currency (NOK) localization (en_NO) (llupa)

• bug #60681 [JsonPath] Better handling of unicode chars in expressions (alexandre-daubois)

• bug #60711 [Intl] Ensure data consistency between alpha and numeric codes (llupa)

• bug #60724 [VarDumper] Fix dumping LazyObjectState when using VarExporter v8 (nicolas-grekas)

• bug #60693 [FrameworkBundle] ensureKernelShutdown in tearDownAfterClass (cquintana92)

• bug #60688 [Security] Keep roles when serializing tokens (nicolas-grekas)

• bug #60668 [JsonPath] Always use brackets notation with JsonPath::key() (alexandre-daubois)

• bug #60641 [TypeInfo] Fix type alias resolving (mtarld)

• bug #60564 [FrameworkBundle] ensureKernelShutdown in tearDownAfterClass (cquintana92)

• bug #60632 [TypeInfo] Fix merging collection value types with union types (mtarld)

• bug #60645 [PhpUnitBridge] Skip bootstrap for PHPUnit >=10 (HypeMC)

• bug #60646 [FrameworkBundle] don't register SchedulerTriggerNormalizer without symfony/serializer (xabbuh)

• bug #60655 [TypeInfo] Handle key-of and value-of types (mtarld)

• bug #60640 [Mailer] use STARTTLS for SMTP with MailerSend (xabbuh)

• bug #60648 [Yaml] fix support for years outside of the 32b range on x86 arch on PHP 8.4 (nicolas-grekas)

• bug #60626 [Ldap] Fix LdapUser::isEqualTo (MatTheCat)

• bug #60625 [FrameworkBundle] set NamespacedPoolInterface alias to cache.app (IndraGunawan)

• bug #60607 [WebProfilerBundle] Fix toolbar with ajax requests not closing (HypeMC)

• bug #60606 [HttpKernel] Fix Symfony 7.3 end of maintenance date (axzx)

• bug #60616 skip interactive questions asked by Composer (xabbuh)

• bug #60617 [HttpKernel] pass log level instead of exception to resolve the logger (xabbuh)

• bug #60569 [HttpKernel] Do not superseed private cache-control when no-store is set (alexander-schranz)

• bug #60584 [DependencyInjection] Make YamlDumper quote resolved env vars if necessary (MatTheCat)

• bug #60588 [Notifier][Clicksend] Fix lack of recipient in case DSN does not have optional LIST_ID param (alifanau)

• bug #60547 [HttpFoundation] Fixed 'Via' header regex (thecaliskan)

• 7.3.0 (2025-05-29)

• bug #60549 [Translation] Add intl-icu fallback for MessageCatalogue metadata (pontus-mp)

• bug #60571 [ErrorHandler] Do not transform file to link if it does not exist (lyrixx)

• bug #60542 [Webhook] Fix controller service name (HypeMC)

• 7.3.0-RC1 (2025-05-25)

• bug #60529 [AssetMapper] Fix SequenceParser possible infinite loop (smnandre)

• bug #60532 [Routing] Fix inline default null (HypeMC)

• bug #60535 [DoctrineBridge] Fix resetting the manager when using native lazy objects (HypeMC)

• bug #60500 [PhpUnitBridge] Fix cleaning up mocked features with attributes (HypeMC)

• bug #60330 [FrameworkBundle] skip messenger deduplication middleware registration when no "default" lock is configured (lyrixx)

• bug #60494 [Messenger] fix: Add argument as integer (overexpOG)

• bug #60524 [Notifier] Fix Clicksend transport (BafS)

• bug #60479 [FrameworkBundle] object mapper service definition without form (soyuka)

• bug #60478 [Validator] add missing $extensions and $extensionsMessage to the Image constraint (xabbuh)

• bug #60491 [ObjectMapper] added earlier skip to allow if=false when using source mapping (maciekpaprocki)

• bug #60484 [PhpUnitBridge] Clean up mocked features only when @group is present (HypeMC)

• bug #60490 [PhpUnitBridge] set path to the PHPUnit autoload file (xabbuh)

• bug #60489 [FrameworkBundle] Fix activation strategy of traceable decorators (nicolas-grekas)

• feature #60475 [Validator] Revert Slug constraint (wouterj)

• feature #60105 [JsonPath] Add JsonPathAssertionsTrait and related constraints (alexandre-daubois)

• bug #60423 [DependencyInjection] Make DefinitionErrorExceptionPass consider IGNORE_ON_UNINITIALIZED_REFERENCE and RUNTIME_EXCEPTION_ON_INVALID_REFERENCE the same (MatTheCat)

• bug #60439 [FrameworkBundle] Fix declaring field-attr tags in xml config files (nicolas-grekas)

• bug #60428 [DependencyInjection] Fix missing binding for ServiceCollectionInterface when declaring a service subscriber (nicolas-grekas)

• bug #60426 [Validator] let the SlugValidator accept AsciiSlugger results (xabbuh)

• bug #60421 [VarExporter] Fixed lazy-loading ghost objects generation with property hooks (cheack)

• bug #60419 [SecurityBundle] normalize string values to a single ExposeSecurityLevel instance (xabbuh)

• bug #60266 [Security] Exclude remember_me from default login authenticators (santysisi)

• bug #60407 [Console] Invokable command #[Option] adjustments (kbond)

• bug #60400 [Config] Fix generated comment for multiline "info" (GromNaN)

• bug #60260 [Serializer] Prevent Cannot traverse an already closed generator error by materializing Traversable input (santysisi)

• bug #60292 [HttpFoundation] Encode path in X-Accel-Redirect header (Athorcis)

• bug #60401 Passing more than one Security attribute is not supported (santysisi)

• 7.3.0-BETA2 (2025-05-10)

• bug #58643 [SecurityBundle] Use Composer InstalledVersions to check if flex is installed (andyexeter)

• feature #54276 [Workflow] Add support for executing custom workflow definition validators during the container compilation (lyrixx)

• feature #52981 [FrameworkBundle] Make ValidatorCacheWarmer and SerializeCacheWarmer use kernel.build_dir instead of kernel.cache_dir (Okhoshi)

• feature #54384 [TwigBundle] Use kernel.build_dir to store the templates known at build time (Okhoshi)

• bug #60275 [DoctrineBridge] Fix UniqueEntityValidator Stringable identifiers (GiuseppeArcuti, wkania)

• feature #59602 [Console] #[Option] rules & restrictions (kbond)

• feature #60389 [Console] Add support for SignalableCommandInterface with invokable commands (HypeMC)

• bug #60293 [Messenger] fix asking users to select an option if --force option is used in messenger:failed:retry command (W0rma)

• bug #60392 [DependencyInjection][FrameworkBundle] Fix precedence of App\Kernel alias and ignore container.excluded tag on synthetic services (nicolas-grekas)

• bug #60379 [Security] Avoid failing when PersistentRememberMeHandler handles a malformed cookie (Seldaek)

• bug #60308 [Messenger] Fix integration with newer versions of Pheanstalk (HypeMC)

• bug #60373 [FrameworkBundle] Ensure Email class exists before using it (Kocal)

• bug #60365 [FrameworkBundle] ensure that all supported e-mail validation modes can be configured (xabbuh)

• bug #60350 [Security][LoginLink] Throw InvalidLoginLinkException on invalid parameters (davidszkiba)

• bug #60366 [Console] Set description as first parameter to Argument and Option attributes (alamirault)

• bug #60361 [Console] Ensure overriding Command::execute() keeps priority over __invoke() (GromNaN)

• feature #60028 [ObjectMapper] Condition to target a specific class (soyuka)

• feature #60344 [Console] Use kebab-case for auto-guessed input arguments/options names (chalasr)

• bug #60340 [String] fix EmojiTransliterator return type compatibility with PHP 8.5 (xabbuh)

• bug #60322 [FrameworkBundle] drop the limiters option for non-compound rater limiters (xabbuh)

• 7.3.0-BETA1 (2025-05-02)

• feature #60232 Add PHP config support for routing (fabpot)

• feature #60102 [HttpFoundation] Add UriSigner::verify() that throws named exceptions (kbond)

• feature #60222 [FrameworkBundle][HttpFoundation] Add Clock support for UriSigner (kbond)

• feature #60226 [Uid] Add component-specific exception classes (rela589n)

• feature #60163 [TwigBridge] Allow attachment name to be set for inline images (aleho)

• feature #60186 [DependencyInjection] Add "when" argument to #[AsAlias] (Zuruuh)

• feature #60195 [Workflow] Deprecate Event::getWorkflow() method (lyrixx)

• feature #60193 [Workflow] Add a link to mermaid.live from the profiler (lyrixx)

• feature #60188 [JsonPath] Add two utils methods to JsonPath builder (alexandre-daubois)

• feature #60018 [Messenger] Reset peak memory usage for each message (TimWolla)

• feature #60155 [FrameworkBundle][RateLimiter] compound rate limiter config (kbond)

• feature #60171 [FrameworkBundle][RateLimiter] deprecate RateLimiterFactory alias (kbond)

• feature #60139 [Runtime] Support extra dot-env files (natepage)

• feature #60140 Notifier mercure7.3 (ernie76)

• feature #59762 [Config] Add NodeDefinition::docUrl() (alexandre-daubois)

• feature #60099 [FrameworkBundle][RateLimiter] default lock_factory to auto (kbond)

• feature #60112 [DoctrineBridge] Improve exception message when EntityValueResolver gets no mapping information (MatTheCat)

• feature #60103 [Console] Mark AsCommand attribute as @final (Somrlik, GromNaN)

• feature #60069 [FrameworkBundle] Deprecate setting the collect_serializer_data to false (mtarld)

• feature #60087 [TypeInfo] add TypeFactoryTrait::arrayKey() (xabbuh)

• feature #42124 [Messenger] Add $stamps parameter to HandleTrait::handle (alexander-schranz)

• feature #58200 [Notifier] Deprecate sms77 Notifier bridge (MrYamous)

• feature #58380 [WebProfilerBundle] Update the logic that minimizes the toolbar (javiereguiluz)

• feature #60039 [TwigBridge] Collect all deprecations with lint:twig command (Fan2Shrek)

• feature #60081 [FrameworkBundle] Enable controller service with #[Route] attribute (GromNaN)

• feature #60076 [Console] Deprecate returning a non-int value from a \Closure function set via Command::setCode() (yceruto)

• feature #59655 [JsonPath] Add the component (alexandre-daubois)

• feature #58805 [TwigBridge][Validator] Add the Twig constraint and its validator (sfmok)

• feature #54275 [Messenger] [Amqp] Add default exchange support (ilyachase)

• feature #60052 [Mailer][TwigBridge] Revert "Add support for translatable objects" (kbond)

• feature #59967 [Mailer][TwigBridge] Add support for translatable subject (norkunas)

• feature #58654 [FrameworkBundle] Binding for Object Mapper component (soyuka)

• feature #60040 [Messenger] Use newer version of Beanstalkd bridge library (HypeMC)

• feature #52748 [TwigBundle] Enable #[AsTwigFilter], #[AsTwigFunction] and #[AsTwigTest] attributes to configure runtime extensions (GromNaN)

• feature #59831 [Mailer][Mime] Refactor S/MIME encryption handling in SMimeEncryptionListener (Spomky)

• feature #59981 [TypeInfo] Add ArrayShapeType::$sealed (mtarld)

• feature #51741 [ObjectMapper] Object to Object mapper component (soyuka)

• feature #57309 [FrameworkBundle][HttpKernel] Allow configuring the logging channel per type of exceptions (Arkalo2)

• feature #60007 [Security] Add methods param in IsCsrfTokenValid attribute (Oviglo)

• feature #59900 [DoctrineBridge] add new DatePointType Doctrine type (garak)

• feature #59904 [Routing] Add alias in {foo:bar} syntax in route parameter (eltharin)

• feature #59978 [Messenger] Add --class-filter option to the messenger:failed:remove command (arnaud-deabreu)

• feature #60024 [Console] Add support for invokable commands in LockableTrait (yceruto)

• feature #59813 [Cache] Enable namespace-based invalidation by prefixing keys with backend-native namespace separators (nicolas-grekas)

• feature #59902 [PropertyInfo] Deprecate Type (mtarld, chalasr)

• feature #59890 [VarExporter] Leverage native lazy objects (nicolas-grekas)

• feature #54545 [DoctrineBridge] Add argument to EntityValueResolver to set type aliases (NanoSector)

• feature #60011 [DependencyInjection] Enable multiple attribute autoconfiguration callbacks on the same class (GromNaN)

• feature #60020 [FrameworkBundle] Make ServicesResetter autowirable (lyrixx)

• feature #59929 [RateLimiter] Add CompoundRateLimiterFactory (kbond)

• feature #59993 [Form] Add input with string value in MoneyType (StevenRenaux)

• feature #59987 [FrameworkBundle] Auto-exclude DI extensions, test cases, entities and messenger messages (nicolas-grekas)

• feature #59827 [TypeInfo] Add ArrayShapeType class (mtarld)

• feature #59909 [FrameworkBundle] Add --method option to debug:router command (santysisi)

• feature #59913 [DependencyInjection] Leverage native lazy objects for lazy services (nicolas-grekas)

• feature #53425 [Translation] Allow default parameters (Jean-Beru)

• feature #59464 [AssetMapper] Add --dry-run option on importmap:require command (chadyred)

• feature #59880 [Yaml] Add the Yaml::DUMP_FORCE_DOUBLE_QUOTES_ON_VALUES flag to enforce double quotes around string values (dkarlovi)

• feature #59922 [Routing] Add MONGODB_ID to requirement patterns (GromNaN)

• feature #59842 [TwigBridge] Add Twig field_id() form helper (Legendary4226)

• feature #59869 [Cache] Add support for valkey: / valkeys: schemes (nicolas-grekas)

• feature #59862 [Messenger] Allow to close the transport connection (andrew-demb)

• feature #59857 [Cache] Add \Relay\Cluster support (dorrogeray)

• feature #59863 [JsonEncoder] Rename the component to JsonStreamer (mtarld)

• feature #52749 [Serializer] Add discriminator map to debug commmand output (jschaedl)

• feature #59871 [Form] Add support for displaying nested options in DebugCommand (yceruto)

• feature #58769 [ErrorHandler] Add a command to dump static error pages (pyrech)

• feature #54932 [Security][SecurityBundle] OIDC discovery (vincentchalamon)

• feature #58485 [Validator] Add filenameCharset and filenameCountUnit options to File constraint (IssamRaouf)

• feature #59828 [Serializer] Add defaultType to DiscriminatorMap (alanpoulain)

• feature #59570 [Notifier][Webhook] Add Smsbox support (alanzarli)

• feature #50027 [Security] OAuth2 Introspection Endpoint (RFC7662) (Spomky)

• feature #57686 [Config] Allow using an enum FQCN with EnumNode (alexandre-daubois)

• feature #59588 [Console] Add a Tree Helper + multiple Styles (smnandre)

• feature #59618 [OptionsResolver] Deprecate defining nested options via setDefault() use setOptions() instead (yceruto)

• feature #59805 [Security] Improve DX of recent additions (nicolas-grekas)

• feature #59822 [Messenger] Add options to specify SQS queue attributes and tags (TrePe0)

• feature #59290 [JsonEncoder] Replace normalizers by value transformers (mtarld)

• feature #59800 [Validator] Add support for closures in When (alexandre-daubois)

• feature #59814 [Framework] Deprecate the framework.validation.cache config option (alexandre-daubois)

• feature #59804 [TypeInfo] Add type alias support (mtarld)

• feature #59150 [Security] Allow using a callable with #[IsGranted] (alexandre-daubois)

• feature #59789 [Notifier] [Bluesky] Return the record CID as additional info (javiereguiluz)

• feature #59526 [Messenger] [AMQP] Add TransportMessageIdStamp logic for AMQP (AurelienPillevesse)

• feature #59771 [Security] Add ability for voters to explain their vote (nicolas-grekas)

• feature #59768 [Messenger][Process] add fromShellCommandline to RunProcessMessage (Staormin)

• feature #59377 [Notifier] Add Matrix bridge (chii0815)

• feature #58488 [Serializer] Fix deserializing XML Attributes into string properties (Hanmac)

• feature #59657 [Console] Add markdown format to Table (amenk)

• feature #59274 [Validator] Allow Unique constraint validation on all elements (Jean-Beru)

• feature #59704 [DependencyInjection] Add Definition::addExcludedTag() and ContainerBuilder::findExcludedServiceIds() for auto-discovering value-objects (GromNaN)

• feature #49750 [FrameworkBundle] Allow to pass signals to StopWorkerOnSignalsListener in XML config and as plain strings (alexandre-daubois)

• feature #59479 [Mailer] [Smtp] Add DSN param to enforce TLS/STARTTLS (ssddanbrown)

• feature #59562 [Security] Support hashing the hashed password using crc32c when putting the user in the session (nicolas-grekas)

• feature #58501 [Mailer] Add configuration for dkim and smime signers (elias-playfinder, eliasfernandez)

• feature #52181 [Security] Ability to add roles in form_login_ldap by ldap group (Spomky)

• feature #59712 [DependencyInjection] Don't skip classes with private constructor when autodiscovering (nicolas-grekas)

• feature #50797 [FrameworkBundle][Validator] Add framework.validation.disable_translation option (alexandre-daubois)

• feature #49652 [Messenger] Add bury_on_reject option to Beanstalkd bridge (HypeMC)

• feature #51744 [Security] Add a normalization step for the user-identifier in firewalls (Spomky)

• feature #54141 [Messenger] Introduce DeduplicateMiddleware (VincentLanglet)

• feature #58546 [Scheduler] Add MessageHandler result to the PostRunEvent (bartholdbos)

• feature #58743 [HttpFoundation] Streamlining server event streaming (yceruto)

• feature #58939 [RateLimiter] Add RateLimiterFactoryInterface (alexandre-daubois)

• feature #58717 [HttpKernel] Support Uid in #[MapQueryParameter] (seb-jean)

• feature #59634 [Validator] Add support for the otherwise option in the When constraint (alexandre-daubois)

• feature #59670 [Serializer] Add NumberNormalizer (valtzu)

• feature #59679 [Scheduler] Normalize TriggerInterface as string (valtzu)

• feature #59641 [Serializer] register named normalizer & denormalizer aliases (mathroc)

• feature #59682 [Security] Deprecate UserInterface & TokenInterface's eraseCredentials() (chalasr, nicolas-grekas)

• feature #59667 [Notifier] [Bluesky] Allow to attach website preview card (ppoulpe)

• feature #58300 [Security][SecurityBundle] Show user account status errors (core23)

• feature #59630 [FrameworkBundle] Add support for info on ArrayNodeDefinition::canBeEnabled() and ArrayNodeDefinition::canBeDisabled() (alexandre-daubois)

• feature #59612 [Mailer] Add attachments support for Sweego Mailer Bridge (welcoMattic)

• feature #59302 [TypeInfo] Deprecate CollectionType as list and not as array (mtarld)

• feature #59481 [Notifier] Add SentMessage additional info (mRoca)

• feature #58819 [Routing] Allow aliases in #[Route] attribute (damienfern)

• feature #59004 [AssetMapper] Detect import with a sequence parser (smnandre)

• feature #59601 [Messenger] Add keepalive support (silasjoisten)

• feature #59536 [JsonEncoder] Allow to warm up object and list (mtarld)

• feature #59565 [Console] Deprecating Command getDefaultName and getDefaultDescription methods (yceruto)

• feature #59473 [Console] Add broader support for command "help" definition (yceruto)

• feature #54744 [Validator] deprecate the use of option arrays to configure validation constraints (xabbuh)

• feature #59493 [Console] Invokable command adjustments (yceruto)

• feature #59482 [Mailer] [Smtp] Add DSN option to make SocketStream bind to IPv4 (quilius)

• feature #57721 [Security][SecurityBundle] Add encryption support to OIDC tokens (Spomky)

• feature #58599 [Serializer] Add xml context option to ignore empty attributes (qdequippe)

• feature #59368 [TypeInfo] Add TypeFactoryTrait::fromValue method (mtarld)

• feature #59401 [JsonEncoder] Add JsonEncodable attribute (mtarld)

• feature #59123 [WebProfilerBundle] Extend web profiler listener & config for replace on ajax requests (chr-hertel)

• feature #59477 [Mailer][Notifier] Add and use Dsn::getBooleanOption() (OskarStark)

• feature #59474 [Console] Invokable command deprecations (yceruto)

• feature #59340 [Console] Add support for invokable commands and input attributes (yceruto)

• feature #59035 [VarDumper] Add casters for object-converted resources (alexandre-daubois)

• feature #59225 [FrameworkBundle] Always display service arguments & deprecate --show-arguments option for debug:container (Florian-Merle)

• feature #59384 [PhpUnitBridge] Enable configuring mock namespaces with attributes (HypeMC)

• feature #59370 [HttpClient] Allow using HTTP/3 with the CurlHttpClient (MatTheCat)

• feature #50334 [FrameworkBundle][PropertyInfo] Wire the ConstructorExtractor class (HypeMC)

• feature #59354 [OptionsResolver] Support union of types (VincentLanglet)

• feature #58542 [Validator] Add Slug constraint (raffaelecarelle)

• feature #59286 [Serializer] Deprecate the CompiledClassMetadataFactory (mtarld)

• feature #59257 [DependencyInjection] Support @> as a shorthand for !service_closure in YamlFileLoader (chx)

• feature #58545 [String] Add AbstractString::pascal() method (raffaelecarelle)

• feature #58559 [Validator] [DateTime] Add format to error messages (sauliusnord)

• feature #58564 [HttpKernel] Let Monolog handle the creation of log folder for improved readonly containers handling (shyim)

• feature #59360 [Messenger] Implement KeepaliveReceiverInterface in Redis bridge (HypeMC)

• feature #58698 [Mailer] Add AhaSend Bridge (farhadhf)

• feature #57632 [PropertyInfo] Add PropertyDescriptionExtractorInterface to PhpStanExtractor (mtarld)

• feature #58786 [Notifier] [Brevo][SMS] Brevo sms notifier add options (ikerib)

• feature #59273 [Messenger] Add BeanstalkdPriorityStamp to Beanstalkd bridge (HypeMC)

• feature #58761 [Mailer] [Amazon] Add support for custom headers in ses+api (StudioMaX)

• feature #54939 [Mailer] Add retry_period option for email transport (Sébastien Despont, fabpot)

• feature #59068 [HttpClient] Add IPv6 support to NativeHttpClient (dmitrii-baranov-tg)

• feature #59088 [DependencyInjection] Make #[AsTaggedItem] repeatable (alexandre-daubois)

• feature #59301 [Cache][HttpKernel] Add a noStore argument to the # attribute (smnandre)

• feature #59315 [Yaml] Add compact nested mapping support to Dumper (gr8b)

• feature #59325 [Config] Add ifFalse() (OskarStark)

• feature #58243 [Yaml] Add support for dumping null as an empty value by using the Yaml::DUMP_NULL_AS_EMPTY flag (alexandre-daubois)

• feature #59291 [TypeInfo] Add accepts method (mtarld)

• feature #59265 [Validator] Validate SVG ratio in Image validator (maximecolin)

• feature #59129 [SecurityBundle][TwigBridge] Add is_granted_for_user() function (natewiebe13)

• feature #59254 [JsonEncoder] Remove chunk size definition (mtarld)

• feature #59022 [HttpFoundation] Generate url-safe hashes for signed urls (valtzu)

• feature #59177 [JsonEncoder] Add native lazyghost support (mtarld)

• feature #59192 [PropertyInfo] Add non-*-int missing types for PhpStanExtractor (wuchen90)

• feature #58515 [FrameworkBundle][JsonEncoder] Wire services (mtarld)

• feature #59157 [HttpKernel] [MapQueryString] added key argument to MapQueryString attribute (feymo)

• feature #59154 [HttpFoundation] Support iterable of string in StreamedResponse (mtarld)

• feature #51718 [Serializer] [JsonEncoder] Introducing the component (mtarld)

• feature #58946 [Console] Add support of millisecondes for formatTime (SebLevDev)

• feature #48142 [Security][SecurityBundle] User authorization checker (natewiebe13)

• feature #59075 [Uid] Add ``@return non-empty-string annotations to `AbstractUid` and relevant functions (niravpateljoin)

• feature #59114 [ErrorHandler] support non-empty-string/non-empty-list when patching return types (xabbuh)

• feature #59020 [AssetMapper] add support for assets pre-compression (dunglas)

• feature #58651 [Mailer][Notifier] Add webhooks signature verification on Sweego bridges (welcoMattic)

• feature #59026 [VarDumper] Add caster for Socket instances (nicolas-grekas)

• feature #58989 [VarDumper] Add caster for AddressInfo objects (nicolas-grekas)