@@ -7,6 +7,63 @@ in 7.4 minor versions.
77To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
88To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v7.4.0...v7.4.1
99
10+ * 7.4.9 (2026-05-01)
11+
12+ * bug #64090 [ DependencyInjection] Reject circular references through a factory builder's setup (nicolas-grekas)
13+ * bug #64088 [ Uid] Fix compat with ext-ds v2 (nicolas-grekas)
14+ * bug #64083 [ Messenger] Alias the AMQP "user" connection option to "login" (lacatoire)
15+ * bug #64084 [ Messenger] Do not sleep after worker is stopped during idle cycle (Toflar)
16+ * bug #63653 Fix default boolean values ` SweegoTransportFactory ` (qdequippe)
17+ * bug #64043 [ Form] Preserve collection children added by PRE_SET_DATA listeners (dargor980)
18+ * bug #64042 [ Config] Fix array-shape generator dropping alternative types on nested PrototypedArrayNode (Amoifr)
19+ * bug #64025 [ DoctrineBridge] Catch any driver exception in the same-database check (lacatoire)
20+ * bug #64023 [ FrameworkBundle] Fix mailer package check for bridges whose composer name does not match the service id (lacatoire)
21+ * bug #63992 [ Messenger] Keep deduplication lock when handler throws (ousamabenyounes)
22+ * bug #63993 [ Mailer] [ Postmark ] Handle alternate error payload shapes for Payload Too Large (ousamabenyounes)
23+ * bug #64067 [ Serializer] Move type-mismatch and uninitialized-property handling into concrete normalizers (ousamabenyounes)
24+ * bug #64065 [ Notifier] [ Ntfy ] Fix Basic auth header by keeping base64 padding (ousamabenyounes)
25+ * bug #64045 [ Config] Allow env placeholders in NumericNode min/max checks (ousamabenyounes)
26+ * bug #64047 [ Mime] Preserve inline part filename instead of overwriting it with the Content-ID (ousamabenyounes)
27+ * bug #64044 [ FrameworkBundle] Apply tagged MIME type guessers in File::getMimeType() (ousamabenyounes)
28+ * bug #64030 [ MonologBridge] Guard against re-entrant calls in AbstractTokenProcessor (ousamabenyounes)
29+ * bug #64060 [ Cache] Normalize default_lifetime for pools wrapped by ChainAdapter (ostrolucky)
30+ * bug #63996 [ RateLimiter] Keep token bucket alive while reservation debt is unpaid (ousamabenyounes)
31+ * bug #63975 [ Lock] Avoid aborting outer PostgreSQL transaction on lock contention (lacatoire)
32+ * bug #64046 [ HttpClient] Don't share CURL_LOCK_DATA_CONNECT to honor max_host_connections (ousamabenyounes)
33+ * bug #64036 [ Validator] fix mapping properties using property hooks (mrossard)
34+ * bug #64024 [ AssetMapper] Allow spaces in version constraints (MatTheCat)
35+ * bug #64020 [ Dotenv] Strip NUL byte placeholder from values passed to ` putenv() ` (alexandre-daubois)
36+ * bug #63991 [ FrameworkBundle] Strip --no-fill marker from every translation domain (ousamabenyounes)
37+ * bug #63982 [ Messenger] Respect SentToFailureTransportStamp when failure transports are configured (ousamabenyounes)
38+ * bug #63990 [ Messenger] Do not apply --max to --stats unless explicitly set (ousamabenyounes)
39+ * bug #63979 [ Serializer] Capture constructor TypeError when collecting denormalization errors (lacatoire)
40+ * bug #64006 [ DependencyInjection] Fix hidden dependency on symfony/config in PhpDumper (GromNaN)
41+ * bug #63983 [ Security] Throw BadCredentialsException on empty JSON login username/password (ousamabenyounes)
42+ * bug #63981 [ Routing] Honor the Request's method in UrlMatcher::matchRequest() (ousamabenyounes)
43+ * bug #63980 [ DependencyInjection] Log every build parameter removed during compilation (ousamabenyounes)
44+ * bug #63974 [ Serializer] Make ` BackedEnumNormalizer ` unconditionally return ` null ` on invalid value if ` allow_invalid_values ` is set (MatTheCat)
45+ * bug #63964 [ Cache] Ensure internal state is cleared in TagAwareAdapter::reset() … (KevinMartinsDev)
46+ * bug #63955 [ Dotenv] Fix variable corruption when loading env more than once (nicolas-grekas)
47+ * bug #63959 [ VarExporter] Don't warn for __ sleep()-listed uninitialized declared properties (nicolas-grekas)
48+ * bug #63918 [ TypeInfo] Fix collectUses() to support grouped use imports (Amoifr)
49+ * bug #63952 [ Scheduler] Respect ` console.command ` DI tag ` command ` attribute (nicolas-grekas)
50+ * bug #63951 [ DependencyInjection] Fix autowiring nullable intersection types (HypeMC)
51+ * bug #63948 [ Scheduler] Support command aliases (ambroisemaupate)
52+ * bug #63923 [ CssSelector] Fix : is () and : where () combining conditions with parent selector (lacatoire)
53+ * bug #63938 [ Workflow] Fix HTML escaping in ` GraphvizDumper ` labels (alexandre-daubois)
54+ * bug #63930 [ WebProfilerBundle] Fix toolbar toggle button accessibility (Nitram1123)
55+ * bug #63889 [ ObjectMapper] Auto-inject ObjectMapper into ObjectMapperAwareInterface transforms (Amoifr)
56+ * bug #63915 [ Mailer] Fix handling of webhook.test verification event from MailerSend webhook (mwansinck)
57+ * bug #63909 [ Filesystem] Fix Path methods replacing backslashes on UNIX (Amoifr)
58+ * bug #63922 [ DependencyInjection] Fix excludeSelf not applied when using AutowireLocator (GromNaN)
59+ * bug #63894 [ Dotenv] Fix self-referencing variable resolution with suffix/prefix (Amoifr)
60+ * bug #63883 [ Serializer] Fix getAllowedAttributes() when groups contain wildcard '* ' (takashiraki)
61+ * bug #63876 [ DependencyInjection] Fix instanceof autoconfiguration for anonymous classes (jlabedo)
62+ * bug #63860 [ Cache] Fix Psr16Cache::getMultiple() returning wrapper values when using TTL (nicolas-grekas)
63+ * bug #63859 [ Console] Fix shell completion when SHELL_VERBOSITY=-1 (nicolas-grekas)
64+ * bug #63847 [ EventDispatcher] Fix TraceableEventDispatcher when reset during dispatch (aschempp)
65+ * data #63849 Remove needs-review flag for Afrikaans (af) (payene)
66+
1067* 7.4.8 (2026-03-31)
1168
1269 * bug #63812 [ DependencyInjection] Fix tagged_iterator/tagged_locator in array PHP config (javiereguiluz)
0 commit comments