Releases: symfony/symfony

Changelog (v6.2.5...v6.2.6)

• bug #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (@tristankretzer)
• bug #49126 [DependencyInjection] Fix order of arguments when mixing positional and named ones (@nicolas-grekas)
• bug #49104 [HttpClient] Fix collecting data non-late for the profiler (@nicolas-grekas)
• bug #49103 [Security/Http] Fix compat of persistent remember-me with legacy tokens (@nicolas-grekas)
• security #cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (@nicolas-grekas)
• security #cve-2022-24894 [HttpKernel] Remove private headers before storing responses with HttpCache (@nicolas-grekas)

[PR] #49182
[SECURITY] Security release

Changelog (v6.1.11...v6.1.12)

• bug #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (@tristankretzer)
• bug #49126 [DependencyInjection] Fix order of arguments when mixing positional and named ones (@nicolas-grekas)
• bug #49104 [HttpClient] Fix collecting data non-late for the profiler (@nicolas-grekas)
• bug #49103 [Security/Http] Fix compat of persistent remember-me with legacy tokens (@nicolas-grekas)
• security #cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (@nicolas-grekas)
• security #cve-2022-24894 [HttpKernel] Remove private headers before storing responses with HttpCache (@nicolas-grekas)

[PR] #49181
[EOM] End of maintenance release for branch 6.1
[SECURITY] Security release

Changelog (v6.0.19...v6.0.20)

• bug #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (@tristankretzer)
• bug #49126 [DependencyInjection] Fix order of arguments when mixing positional and named ones (@nicolas-grekas)
• bug #49104 [HttpClient] Fix collecting data non-late for the profiler (@nicolas-grekas)
• bug #49103 [Security/Http] Fix compat of persistent remember-me with legacy tokens (@nicolas-grekas)
• security #cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (@nicolas-grekas)
• security #cve-2022-24894 [HttpKernel] Remove private headers before storing responses with HttpCache (@nicolas-grekas)

[PR] #49180
[EOM] End of maintenance release for branch 6.0
[SECURITY] Security release

Changelog (v5.4.19...v5.4.20)

• bug #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (@tristankretzer)
• bug #49126 [DependencyInjection] Fix order of arguments when mixing positional and named ones (@nicolas-grekas)
• bug #49104 [HttpClient] Fix collecting data non-late for the profiler (@nicolas-grekas)
• bug #49103 [Security/Http] Fix compat of persistent remember-me with legacy tokens (@nicolas-grekas)
• security #cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (@nicolas-grekas)
• security #cve-2022-24894 [HttpKernel] Remove private headers before storing responses with HttpCache (@nicolas-grekas)

[PR] #49179

Changelog (v4.4.49...v4.4.50)

• security #cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (@nicolas-grekas)
• security #cve-2022-24894 [HttpKernel] Remove private headers before storing responses with HttpCache (@nicolas-grekas)

[PR] #49178

Changelog (v6.2.4...v6.2.5)

• bug #49078 [Security/Http] Check tokens before loading users from providers (@nicolas-grekas)
• bug #49077 [DependencyInjection] Fix named arguments when using ContainerBuilder before compilation (@nicolas-grekas)
• bug #49031 [Cache] fix collecting cache stats when nesting computations (@nicolas-grekas)
• bug #49046 Fix for Windows when projects are deployed on junctions/symlinks (@nerdgod)
• bug #49025 [Notifier] [OvhCloud] handle invalid receiver (@seferov)
• bug #49034 [Security] Return default value instead of deferring to lower prio resolvers when using #[CurrentUser] and no user is found (@Seldaek)
• bug #48993 [VarDumper] Fix JS to expand / collapse (@nicolas-grekas)
• bug #48983 Fix BC user_identifier support after deprecation username (@vtsykun)
• bug #48986 [Validator] Fix Email validator logic (@fabpot)
• bug #48969 [PropertyInfo] Fixes constructor extractor for mixed type (@michael.kubovic)
• bug #48978 [Serializer] use method_exists() instead of catching reflection exceptions (@xabbuh)
• bug #48958 [DependencyInjection] fixes validation of non-scalar attribute values (@ju1ius)
• bug #48937 [SecurityBundle] Fix using same handler for multiple authenticators (@RobertMe)
• bug #48971 [DependencyInjection] Fix dump order of inlined deps (@nicolas-grekas)
• bug #48966 [HttpClient] Let curl handle content-length headers (@nicolas-grekas)
• bug #48968 [VarExporter] Fix exporting enums (@nicolas-grekas)
• bug #48933 [Validator] Fix bad handling of nulls when the 'fields' option of the Unique constraint is set (@plfort)
• bug #48926 [DependencyInjection] Fix support for named arguments on non-autowired services (@nicolas-grekas)
• bug #48943 [FrameworkBundle] Fix deprecation when accessing a "container.private" service from the test container (@nicolas-grekas)
• bug #48939 [VarExporter] Fix signature of Lazy*Trait::createLazy*() (@nicolas-grekas)
• bug #48931 [DependencyInjection] Fix dumping inlined withers (@nicolas-grekas)
• bug #48898 [HttpClient] Move Http clients data collecting at a late level (@pforesi)
• bug #48896 [DoctrineBridge] Fix detecting mapping with one line annotations (@franmomu)
• bug #48916 [FrameworkBundle] restore call to addGlobalIgnoredName (@alexislefebvre)
• bug #48917 [Config] Fix XML dump when node example is an array (@alexandre-daubois)
• bug #48904 [Validator] Allow egulias/email-validator v4 (@chalasr)
• bug #48830 [Translation] fix PhpAstExtractor also extracts messages if t() contains both unnamed and named arguments (@gassan)
• bug #48846 [Translation] Fix for resolving Constraint Validator FQCN defined as foo.bar.class parameters (@gassan)
• bug #48866 [Validator] fix: Case-insensitive extensions in File-Constraint (@spackmat)
• bug #48831 [Uid] Fix validating nil and max uuid (@fancyweb)

[PR] #49090

Changelog (v6.1.10...v6.1.11)

• bug #49078 [Security/Http] Check tokens before loading users from providers (@nicolas-grekas)
• bug #49077 [DependencyInjection] Fix named arguments when using ContainerBuilder before compilation (@nicolas-grekas)
• bug #49031 [Cache] fix collecting cache stats when nesting computations (@nicolas-grekas)
• bug #49046 Fix for Windows when projects are deployed on junctions/symlinks (@nerdgod)
• bug #49025 [Notifier] [OvhCloud] handle invalid receiver (@seferov)
• bug #48993 [VarDumper] Fix JS to expand / collapse (@nicolas-grekas)
• bug #48983 Fix BC user_identifier support after deprecation username (@vtsykun)
• bug #48986 [Validator] Fix Email validator logic (@fabpot)
• bug #48969 [PropertyInfo] Fixes constructor extractor for mixed type (@michael.kubovic)
• bug #48978 [Serializer] use method_exists() instead of catching reflection exceptions (@xabbuh)
• bug #48937 [SecurityBundle] Fix using same handler for multiple authenticators (@RobertMe)
• bug #48971 [DependencyInjection] Fix dump order of inlined deps (@nicolas-grekas)
• bug #48966 [HttpClient] Let curl handle content-length headers (@nicolas-grekas)
• bug #48968 [VarExporter] Fix exporting enums (@nicolas-grekas)
• bug #48933 [Validator] Fix bad handling of nulls when the 'fields' option of the Unique constraint is set (@plfort)
• bug #48926 [DependencyInjection] Fix support for named arguments on non-autowired services (@nicolas-grekas)
• bug #48943 [FrameworkBundle] Fix deprecation when accessing a "container.private" service from the test container (@nicolas-grekas)
• bug #48931 [DependencyInjection] Fix dumping inlined withers (@nicolas-grekas)
• bug #48898 [HttpClient] Move Http clients data collecting at a late level (@pforesi)
• bug #48896 [DoctrineBridge] Fix detecting mapping with one line annotations (@franmomu)
• bug #48916 [FrameworkBundle] restore call to addGlobalIgnoredName (@alexislefebvre)
• bug #48917 [Config] Fix XML dump when node example is an array (@alexandre-daubois)
• bug #48904 [Validator] Allow egulias/email-validator v4 (@chalasr)
• bug #48831 [Uid] Fix validating nil and max uuid (@fancyweb)

[PR] #49089

Changelog (v6.0.18...v6.0.19)

• bug #49078 [Security/Http] Check tokens before loading users from providers (@nicolas-grekas)
• bug #49077 [DependencyInjection] Fix named arguments when using ContainerBuilder before compilation (@nicolas-grekas)
• bug #49031 [Cache] fix collecting cache stats when nesting computations (@nicolas-grekas)
• bug #49046 Fix for Windows when projects are deployed on junctions/symlinks (@nerdgod)
• bug #49025 [Notifier] [OvhCloud] handle invalid receiver (@seferov)
• bug #48993 [VarDumper] Fix JS to expand / collapse (@nicolas-grekas)
• bug #48983 Fix BC user_identifier support after deprecation username (@vtsykun)
• bug #48986 [Validator] Fix Email validator logic (@fabpot)
• bug #48969 [PropertyInfo] Fixes constructor extractor for mixed type (@michael.kubovic)
• bug #48978 [Serializer] use method_exists() instead of catching reflection exceptions (@xabbuh)
• bug #48937 [SecurityBundle] Fix using same handler for multiple authenticators (@RobertMe)
• bug #48971 [DependencyInjection] Fix dump order of inlined deps (@nicolas-grekas)
• bug #48966 [HttpClient] Let curl handle content-length headers (@nicolas-grekas)
• bug #48968 [VarExporter] Fix exporting enums (@nicolas-grekas)
• bug #48926 [DependencyInjection] Fix support for named arguments on non-autowired services (@nicolas-grekas)
• bug #48943 [FrameworkBundle] Fix deprecation when accessing a "container.private" service from the test container (@nicolas-grekas)
• bug #48931 [DependencyInjection] Fix dumping inlined withers (@nicolas-grekas)
• bug #48898 [HttpClient] Move Http clients data collecting at a late level (@pforesi)
• bug #48896 [DoctrineBridge] Fix detecting mapping with one line annotations (@franmomu)
• bug #48916 [FrameworkBundle] restore call to addGlobalIgnoredName (@alexislefebvre)
• bug #48917 [Config] Fix XML dump when node example is an array (@alexandre-daubois)
• bug #48904 [Validator] Allow egulias/email-validator v4 (@chalasr)
• bug #48831 [Uid] Fix validating nil and max uuid (@fancyweb)

[PR] #49087

Changelog (v5.4.18...v5.4.19)

• bug #49078 [Security/Http] Check tokens before loading users from providers (@nicolas-grekas)
• bug #49077 [DependencyInjection] Fix named arguments when using ContainerBuilder before compilation (@nicolas-grekas)
• bug #49031 [Cache] fix collecting cache stats when nesting computations (@nicolas-grekas)
• bug #49046 Fix for Windows when projects are deployed on junctions/symlinks (@nerdgod)
• bug #49025 [Notifier] [OvhCloud] handle invalid receiver (@seferov)
• bug #48993 [VarDumper] Fix JS to expand / collapse (@nicolas-grekas)
• bug #48983 Fix BC user_identifier support after deprecation username (@vtsykun)
• bug #48986 [Validator] Fix Email validator logic (@fabpot)
• bug #48969 [PropertyInfo] Fixes constructor extractor for mixed type (@michael.kubovic)
• bug #48978 [Serializer] use method_exists() instead of catching reflection exceptions (@xabbuh)
• bug #48937 [SecurityBundle] Fix using same handler for multiple authenticators (@RobertMe)
• bug #48971 [DependencyInjection] Fix dump order of inlined deps (@nicolas-grekas)
• bug #48966 [HttpClient] Let curl handle content-length headers (@nicolas-grekas)
• bug #48968 [VarExporter] Fix exporting enums (@nicolas-grekas)
• bug #48926 [DependencyInjection] Fix support for named arguments on non-autowired services (@nicolas-grekas)
• bug #48943 [FrameworkBundle] Fix deprecation when accessing a "container.private" service from the test container (@nicolas-grekas)
• bug #48931 [DependencyInjection] Fix dumping inlined withers (@nicolas-grekas)
• bug #48898 [HttpClient] Move Http clients data collecting at a late level (@pforesi)
• bug #48896 [DoctrineBridge] Fix detecting mapping with one line annotations (@franmomu)
• bug #48916 [FrameworkBundle] restore call to addGlobalIgnoredName (@alexislefebvre)
• bug #48917 [Config] Fix XML dump when node example is an array (@alexandre-daubois)
• bug #48904 [Validator] Allow egulias/email-validator v4 (@chalasr)
• bug #48831 [Uid] Fix validating nil and max uuid (@fancyweb)

[PR] #49086

Changelog (v6.2.3...v6.2.4)

• bug #48822 [WebProfilerBundle] Fix the usage of web fonts (@javiereguiluz)
• bug #48823 [Cache] Fix possibly null value passed to preg_match() in RedisTrait (@chalasr)
• bug #48816 [Cache] Fix for RedisAdapter without auth parameter (@rikvdh)

[PR] #48829