Changelog (v6.4.38...v6.4.39)

• bug [SecurityBundle] Allow defining security provider factories without config #64198 [SecurityBundle] Allow defining security provider factories without config (@hockdudu)
• bug [FrameworkBundle] Bump Request/Session value resolver priority above EntityValueResolver #64189 [FrameworkBundle] Bump Request/Session value resolver priority above EntityValueResolver (@ousamabenyounes)
• bug [Security] Remove the legacy nested unserialize() call from token and exception classes #64195 [Security] Remove the legacy nested unserialize() call from token and exception classes (@nicolas-grekas)
• bug [Yaml] Reject non-stringables when using "!!binary" #64196 [Yaml] Reject non-stringables when using "!!binary" (@nicolas-grekas)
• bug [Inflector][String] Fixed singularize traces > trace #64191 [Inflector][String] Fixed singularize traces > trace (@ruudk)
• bug [Notifier] Use hash_equals() to compare webhook signatures for Vonage #64193 [Notifier] Use hash_equals() to compare webhook signatures for Vonage (@alexandre-daubois)
• bug [Messenger][Amqp] Fix support for RabbitMQ v4 by adding delayed quorum queues #64180 [Messenger][Amqp] Fix support for RabbitMQ v4 by adding delayed quorum queues (@Jean85)
• bug [AssetMapper] Warn on missing bare CSS and JSON imports #64187 [AssetMapper] Warn on missing bare CSS and JSON imports (@ousamabenyounes)
• bug [Console] Fix signal handler scoping #64182 [Console] Fix signal handler scoping (@jpollard3)
• bug [Security] Preserve webserver base URL in HttpUtils::createRequest() #64181 [Security] Preserve webserver base URL in HttpUtils::createRequest() (@ousamabenyounes)
• bug [Process] Ignore array env values before proc_open #64058 [Process] Ignore array env values before proc_open (@dionisvl)
• bug [Filesystem] preserve source mode when copying files #64179 [Filesystem] preserve source mode when copying files (@nicolas-grekas)
• bug [Console] Make ConsoleSectionOutput::overwrite() atomic to fix sections + ProgressIndicator clear #64176 [Console] Make ConsoleSectionOutput::overwrite() atomic to fix sections + ProgressIndicator clear (@Amoifr)
• bug [Scheduler] Use stored checkpoint as base date for debug:scheduler #64174 [Scheduler] Use stored checkpoint as base date for debug:scheduler (@ousamabenyounes)
• bug [Messenger] Drop trace args from FlattenException normalization #64153 [Messenger] Drop trace args from FlattenException normalization (@ousamabenyounes)
• bug [HttpKernel] Use backend-handled request for terminate listeners in HttpCache #64150 [HttpKernel] Use backend-handled request for terminate listeners in HttpCache (@Toflar)
• bug [WebProfilerBundle] Don’t try to access RawMessage::$headers #64172 [WebProfilerBundle] Don’t try to access RawMessage::$headers (@MatTheCat)
• bug [Dotenv] Don't truncate OS env vars containing $ when $_ENV is unpopulated #64148 [Dotenv] Don't truncate OS env vars containing $ when $_ENV is unpopulated (@HMAZonderland)