This repository has been archived on 2023-08-20. You can view files and clone it, but cannot push or open issues or pull requests.
symfony/CHANGELOG-2.1.md

348 lines
15 KiB
Markdown
Raw Normal View History

2011-08-26 16:45:40 +01:00
CHANGELOG for 2.1.x
===================
This changelog references the relevant changes (bug and security fixes) done
in 2.1 minor versions.
To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v2.1.0...v2.1.1
2.1.0
-----
2011-08-26 16:45:40 +01:00
2011-12-29 16:29:56 +00:00
### DoctrineBridge
2011-10-07 13:12:01 +01:00
2011-10-15 02:39:16 +01:00
* added a default implementation of the ManagerRegistry
* added a session storage for Doctrine DBAL
2011-10-07 13:12:01 +01:00
### TwigBridge
2012-01-22 09:45:06 +00:00
* added a csrf_token function
* added a way to specify a default domain for a Twig template (via the 'trans_default_domain' tag)
2011-11-08 18:00:05 +00:00
### AbstractDoctrineBundle
2011-11-01 14:25:47 +00:00
* This bundle has been removed and the relevant code has been moved to the Doctrine bridge
2011-09-22 07:04:24 +01:00
### DoctrineBundle
2012-01-03 10:18:20 +00:00
* This bundle has been moved to the Doctrine organization
2011-11-01 14:25:47 +00:00
* added optional `group_by` property to `EntityType` that supports either a `PropertyPath` or a `\Closure` that is evaluated on the entity choices
2011-09-22 07:04:24 +01:00
* The `em` option for the `UniqueEntity` constraint is now optional (and should probably not be used anymore).
2011-09-14 08:06:29 +01:00
### FrameworkBundle
2011-10-24 08:11:18 +01:00
* added a router:match command
2011-09-30 05:58:54 +01:00
* added kernel.event_subscriber tag
2011-09-28 16:40:20 +01:00
* added a way to create relative symlinks when running assets:install command (--relative option)
2011-09-28 08:17:08 +01:00
* added Controller::getUser()
2011-09-19 17:03:40 +01:00
* [BC BREAK] assets_base_urls and base_urls merging strategy has changed
2011-09-16 17:49:11 +01:00
* changed the default profiler storage to use the filesystem instead of SQLite
* added support for placeholders in route defaults and requirements (replaced by the value set in the service container)
2011-12-22 19:04:58 +00:00
* added Filesystem component as a dependency
* [BC BREAK] changed `session.xml` service name `session.storage.native` to `session.storage.native_file`
* added new session storage drivers to session.xml: `session.storage.native_memcache`, `session.storage.native_memcached`,
`session.storage.native_sqlite`, `session.storage.null`, `session.storage.memcache`,
and `session.storage.memcached`. Added `session.storage.mock_file` service for functional session testing.
* removed `session.storage.filesystem` service.
2011-09-14 08:06:29 +01:00
### MonologBundle
* This bundle has been moved to its own repository (https://github.com/symfony/MonologBundle)
2011-09-22 08:44:58 +01:00
### SecurityBundle
2011-11-22 08:26:42 +00:00
* [BC BREAK] The custom factories for the firewall configuration are now
registered during the build method of bundles instead of being registered
by the end-user (you need to remove the 'factories' keys in your security
configuration).
2011-11-22 08:26:42 +00:00
* [BC BREAK] The Firewall listener is now registered after the Router one. It
means that specific Firewall URLs (like /login_check and /logout must now
have proper route defined in your routing configuration)
merged branch stof/security_providers (PR #2454) Commits ------- d2195cc Fixed phpdoc and updated the changelog 9e41ff4 [SecurityBundle] Added a validation rule b107a3f [SecurityBundle] Refactored the configuration 633f0e9 [DoctrineBundle] Moved the entity provider service to DoctrineBundle 74732dc [SecurityBundle] Added a way to extend the providers section of the config Discussion ---------- [WIP][SecurityBundle] Added a way to extend the providers section of the config Bug fix: no Feature addition: yes BC break: <del>no (for now)</del> yes Tests pass: yes This adds a way to extend the ``providers`` section of the security config so that other bundles can hook their stuff into it. An example is available in DoctrineBundle which is now responsible to handle the entity provider (<del>needs some cleanup as the service definition is still in SecurityBundle currently</del>). This will allow PropelBundle to provide a ``propel:`` provider for instance. In order to keep BC with the existing configuration for the in-memory and the chain providers, I had to allow using a prototyped node instead of forcing using an array node with childrens. This introduces some issues: - impossible to validate easily that a provider uses only one setup as prototyped node always have a default value (the empty array) - the ``getFixableKey`` method is needed in the interface to support the XML format by pluralizing the name. Here is my non-BC proposal for the configuration to clean this: ```yaml security: providers: first: memory: # BC break here by adding a level before the users users: joe: { password: foobar, roles: ROLE_USER } john: { password: foobarbaz, roles: ROLE_USER } second: entity: # this one is BC class: Acme\DemoBundle\Entity\User third: id: my_custom_provider # also BC fourth: chain: # BC break by adding a level before the providers providers: [first, second, third] ``` What do you think about it ? Do we need to keep the BC in the config of the bundle or no ? Btw note that the way to register the factories used by the firewall section should be refactored using the new way to provide extension points in the extensions (as done here) instead of relying on the end user to register factories, which would probably mean a BC break anyway. --------------------------------------------------------------------------- by lsmith77 at 2011/10/23 09:19:23 -0700 i don't think we should keep BC. the security config is complex as is .. having BC stuff in there will just make it even harder and confusing. --------------------------------------------------------------------------- by willdurand at 2011/10/23 09:41:25 -0700 Is the security component tagged with `@api` ? So basically, we just have to create a factory (`ModelFactory` for instance) and to register it in the `security` extension, right ? Seems quite simple to extend and much better than the hardcoded version… Why did you call the method to pluralize a key `getFixableKey` ? --------------------------------------------------------------------------- by beberlei at 2011/10/23 14:48:26 -0700 Changing security config will introduce risk for users. We should avoid that --------------------------------------------------------------------------- by stof at 2011/10/23 15:34:47 -0700 @beberlei as the config is validated, it will simply give them an exception during the loading of the config if they don't update their config. --------------------------------------------------------------------------- by stof at 2011/10/24 01:01:42 -0700 @schmittjoh @fabpot Could you give your mind about it ? --------------------------------------------------------------------------- by stof at 2011/10/31 17:08:12 -0700 @fabpot @schmittjoh ping --------------------------------------------------------------------------- by stof at 2011/11/11 14:08:18 -0800 I updated the PR by implementing my proposal as the latest IRC meeting agreed that we don't need to keep the BC for this change. This allows to add the validation rule now. --------------------------------------------------------------------------- by stof at 2011/11/16 11:16:06 -0800 @fabpot ping --------------------------------------------------------------------------- by fabpot at 2011/11/16 22:29:05 -0800 @stof: Before merging, you must also add information about how to upgrade in the CHANGELOG-2.1.md file. --------------------------------------------------------------------------- by stof at 2011/11/17 00:01:23 -0800 @fabpot done
2011-11-17 15:00:33 +00:00
2011-11-22 08:26:42 +00:00
* [BC BREAK] refactored the user provider configuration. The configuration
changed for the chain provider and the memory provider:
2011-11-17 07:59:41 +00:00
2012-01-17 00:44:51 +00:00
Before:
``` yaml
security:
providers:
my_chain_provider:
providers: [my_memory_provider, my_doctrine_provider]
my_memory_provider:
users:
toto: { password: foobar, roles: [ROLE_USER] }
foo: { password: bar, roles: [ROLE_USER, ROLE_ADMIN] }
```
After:
``` yaml
security:
providers:
my_chain_provider:
chain:
providers: [my_memory_provider, my_doctrine_provider]
my_memory_provider:
memory:
users:
toto: { password: foobar, roles: [ROLE_USER] }
foo: { password: bar, roles: [ROLE_USER, ROLE_ADMIN] }
```
2011-11-17 07:59:41 +00:00
* [BC BREAK] Method `equals` was removed from `UserInterface` to its own new
`EquatableInterface`, now user class can implement this interface to override
the default implementation of users equality test.
2011-09-22 08:44:58 +01:00
* added a validator for the user password
2011-11-22 08:23:52 +00:00
* added 'erase_credentials' as a configuration key (true by default)
* added new events: `security.authentication.success` and `security.authentication.failure`
fired on authentication success/failure, regardless of authentication method,
events are defined in new event class: `Symfony\Component\Security\Core\AuthenticationEvents`.
2011-09-22 08:44:58 +01:00
### SwiftmailerBundle
* This bundle has been moved to its own repository (https://github.com/symfony/SwiftmailerBundle)
* moved the data collector to the bridge
* replaced MessageLogger class with the one from Swiftmailer 4.1.3
### TwigBundle
* added the real template name when an error occurs in a Twig template
2011-09-22 07:28:07 +01:00
### WebProfilerBundle
2011-12-13 13:18:21 +00:00
[BC BREAK] You must clear old profiles after upgrading to 2.1 (don't forget to
remove the table if you are using a DB)
* added support for the request method
2011-10-24 08:11:18 +01:00
* added a routing panel
2011-10-23 11:00:47 +01:00
* added a timeline panel
2011-09-22 07:28:07 +01:00
* The toolbar position can now be configured via the `position` option (can be `top` or `bottom`)
### BrowserKit
* [BC BREAK] The CookieJar internals have changed to allow cookies with the same name on different sub-domains/sub-paths
2011-11-01 14:30:43 +00:00
### Config
2011-12-13 11:23:37 +00:00
* added a way to add documentation on configuration
2011-11-01 14:30:43 +00:00
* implemented `Serializable` on resources
* LoaderResolverInterface is now used instead of LoaderResolver for type hinting
2011-11-01 14:30:43 +00:00
2011-09-29 13:52:52 +01:00
### Console
2011-12-18 13:33:08 +00:00
* added a --raw option to the list command
2011-12-18 11:39:06 +00:00
* added support for STDERR in the console output class (errors are now sent to STDERR)
* made the defaults (helper set, commands, input definition) in Application more easily customizable
2011-09-29 13:52:52 +01:00
* added support for the shell even if readline is not available
* added support for process isolation in Symfony shell via `--process-isolation` switch
2011-09-29 13:52:52 +01:00
2011-08-29 14:38:12 +01:00
### ClassLoader
2012-02-06 16:45:32 +00:00
* added a class map generator
2011-08-29 14:38:12 +01:00
* added support for loading globally-installed PEAR packages
### DependencyInjection
* component exceptions that inherit base SPL classes are now used exclusively (this includes dumped containers)
### DomCrawler
* refactor the Form class internals to support multi-dimensional fields (the public API is backward compatible)
* added a way to get parsing errors for Crawler::addHtmlContent() and Crawler::addXmlContent() via libxml functions
* added support for submitting a form without a submit button
2011-11-22 08:42:16 +00:00
### EventDispatcher
* added a reference to the EventDispatcher on the Event
2011-11-22 08:52:31 +00:00
* added a reference to the Event name on the event
2011-11-22 08:42:16 +00:00
2011-12-22 19:04:58 +00:00
### Filesystem
* created this new component
### Finder
2011-08-29 13:45:37 +01:00
* Finder::exclude() now supports an array of directories as an argument
2011-08-29 13:45:37 +01:00
2011-09-24 14:29:19 +01:00
### Form
* [BC BREAK] ``read_only`` field attribute now renders as ``readonly="readonly"``, use ``disabled`` instead
2012-01-16 20:55:17 +00:00
* [BC BREAK] child forms now aren't validated anymore by default
* made validation of form children configurable (new option: cascade_validation)
2011-11-08 08:06:23 +00:00
* added support for validation groups as callbacks
2011-10-10 18:47:28 +01:00
* made the translation catalogue configurable via the "translation_domain" option
2011-09-27 09:12:54 +01:00
* added Form::getErrorsAsString() to help debugging forms
2011-09-24 14:29:19 +01:00
* allowed setting different options for RepeatedType fields (like the label)
2012-01-03 09:28:35 +00:00
* added support for empty form name at root level, this enables rendering forms
without form name prefix in field names
* [BC BREAK] form and field names must start with a letter, digit or underscore
and only contain letters, digits, underscores, hyphens and colons
* [BC BREAK] changed default name of the prototype in the "collection" type
from "$$name$$" to "__name__". No dollars are appended/prepended to custom
names anymore.
2012-02-02 09:02:49 +00:00
* [BC BREAK] improved ChoiceListInterface
* [BC BREAK] added SimpleChoiceList and LazyChoiceList as replacement of
ArrayChoiceList
* added ChoiceList and ObjectChoiceList to use objects as choices
* [BC BREAK] removed EntitiesToArrayTransformer and EntityToIdTransformer.
The former has been replaced by CollectionToArrayTransformer in combination
with EntityChoiceList, the latter is not required in the core anymore.
* [BC BREAK] renamed
* ArrayToBooleanChoicesTransformer to ChoicesToBooleanArrayTransformer
* ScalarToBooleanChoicesTransformer to ChoiceToBooleanArrayTransformer
* ArrayToChoicesTransformer to ChoicesToValuesTransformer
* ScalarToChoiceTransformer to ChoiceToValueTransformer
to be consistent with the naming in ChoiceListInterface.
* [BC BREAK] removed FormUtil::toArrayKey() and FormUtil::toArrayKeys().
They were merged into ChoiceList and have no public equivalent anymore.
* choice fields now throw a FormException if neither the "choices" nor the
"choice_list" option is set
2012-02-02 09:02:49 +00:00
* the radio type is now a child of the checkbox type
* the collection, choice (with multiple selection) and entity (with multiple
selection) types now make use of addXxx() and removeXxx() methods in your
model
* added options "add_method" and "remove_method" to collection and choice type
* forms now don't create an empty object anymore if they are completely
empty and not required. The empty value for such forms is null.
* added constant Guess::VERY_HIGH_CONFIDENCE
* FormType::getDefaultOptions() now sees default options defined by parent types
* [BC BREAK] FormType::getParent() does not see default options anymore
2011-09-24 14:29:19 +01:00
### HttpFoundation
2011-08-29 13:45:37 +01:00
* added a getTargetUrl method to RedirectResponse
[HttpFoundation] added support for streamed responses To stream a Response, use the StreamedResponse class instead of the standard Response class: $response = new StreamedResponse(function () { echo 'FOO'; }); $response = new StreamedResponse(function () { echo 'FOO'; }, 200, array('Content-Type' => 'text/plain')); As you can see, a StreamedResponse instance takes a PHP callback instead of a string for the Response content. It's up to the developer to stream the response content from the callback with standard PHP functions like echo. You can also use flush() if needed. From a controller, do something like this: $twig = $this->get('templating'); return new StreamedResponse(function () use ($templating) { $templating->stream('BlogBundle:Annot:streamed.html.twig'); }, 200, array('Content-Type' => 'text/html')); If you are using the base controller, you can use the stream() method instead: return $this->stream('BlogBundle:Annot:streamed.html.twig'); You can stream an existing file by using the PHP built-in readfile() function: new StreamedResponse(function () use ($file) { readfile($file); }, 200, array('Content-Type' => 'image/png'); Read http://php.net/flush for more information about output buffering in PHP. Note that you should do your best to move all expensive operations to be "activated/evaluated/called" during template evaluation. Templates --------- If you are using Twig as a template engine, everything should work as usual, even if are using template inheritance! However, note that streaming is not supported for PHP templates. Support is impossible by design (as the layout is rendered after the main content). Exceptions ---------- Exceptions thrown during rendering will be rendered as usual except that some content might have been rendered already. Limitations ----------- As the getContent() method always returns false for streamed Responses, some event listeners won't work at all: * Web debug toolbar is not available for such Responses (but the profiler works fine); * ESI is not supported. Also note that streamed responses cannot benefit from HTTP caching for obvious reasons.
2011-10-17 16:17:34 +01:00
* added support for streamed responses
* made Response::prepare() method the place to enforce HTTP specification
* [BC BREAK] moved management of the locale from the Session class to the Request class
2011-09-28 07:18:50 +01:00
* added a generic access to the PHP built-in filter mechanism: ParameterBag::filter()
* made FileBinaryMimeTypeGuesser command configurable
2011-09-13 07:48:32 +01:00
* added Request::getUser() and Request::getPassword()
* added support for the PATCH method in Request
* removed the ContentTypeMimeTypeGuesser class as it is deprecated and never used on PHP 5.3
* added ResponseHeaderBag::makeDisposition() (implements RFC 6266)
2011-09-06 07:59:53 +01:00
* made mimetype to extension conversion configurable
* Flashes are now stored as a bucket of messages per `$type` so there can be multiple messages per type.
There are four interface constants for type, `FlashBagInterface::INFO`, `FlashBagInterface::NOTICE`,
`FlashBagInterface::WARNING` and `FlashBagInterface::ERROR`.
* Added `FlashBag` (default). Flashes expire when retrieved by `popFlashes()`.
This makes the implementation ESI compatible.
* Added `AutoExpireFlashBag` to replicate Symfony 2.0.x auto expire behaviour of messages auto expiring
after one page page load. Messages must be retrived by `popFlashes()` but will expire regardless of
being retrieved or not, which retains th old behaviour.
* [BC BREAK] Removed the following methods from the Session class: `close()`, `setFlash()`, `hasFlash()`,
and `removeFlash()` and added new methods. Use `addFlashes()` to add new flash messages.
`getFlashes()` now returns and array of flash messages.
* `Session->clear()` now only clears session attributes as before it cleared flash messages and
attributes. `Session->clearAllFlashes()` clears flashes now.
* Added `AbstractSessionStorage` base class for session storage drivers.
* Added `SessionSaveHandler` interface which storage drivers should implement after inheriting from
`AbstractSessionStorage` when writing custom session save handlers.
* [BC BREAK] `SessionStorageInterface` methods removed: `write()`, `read()` and `remove()`. Added
`getAttributes()`, `getFlashes()`.
* Moved attribute storage to `AttributeBagInterface`.
* Added `AttributeBag` to replicate attributes storage behaviour from 2.0.x (default).
* Added `NamespacedAttributeBag` for namespace session attributes.
* Session now implements `SessionInterface` making implementation customizable and portable.
* [BC BREAK] Removed `NativeSessionStorage` and replaced with `NativeFileSessionStorage`.
* Added session storage drivers for PHP native Memcache, Memcached and SQLite session save handlers.
* Added session storage drivers for custom Memcache, Memcached and Null session save handlers.
* Removed `FilesystemSessionStorage`, use `MockFileSessionStorage` for functional testing instead.
2011-08-29 13:45:37 +01:00
2011-09-06 06:47:18 +01:00
### HttpKernel
2011-12-19 18:52:36 +00:00
* added CacheClearerInterface
2011-12-15 16:54:17 +00:00
* added a kernel.terminate event
2011-10-23 11:00:47 +01:00
* added a Stopwatch class
* added WarmableInterface
2011-10-15 02:38:40 +01:00
* improved extensibility between bundles
2011-09-06 06:47:18 +01:00
* added a File-based profiler storage
2011-09-06 06:54:13 +01:00
* added a MongoDB-based profiler storage
2011-12-22 19:04:58 +00:00
* moved Filesystem class to its own component
2011-09-06 06:47:18 +01:00
2011-11-09 20:55:11 +00:00
### Locale
* added Locale::getIcuVersion() and Locale::getIcuDataVersion()
### Process
* added ProcessBuilder
### Routing
2011-10-24 08:11:18 +01:00
* added a TraceableUrlMatcher
* added the possibility to define default values and requirements for placeholders in prefix, including imported routes
* added RouterInterface::getRouteCollection
2011-11-07 22:28:28 +00:00
### Security
2011-11-17 06:47:06 +00:00
* after login, the user is now redirected to `default_target_path` if `use_referer` is true and the referrer is the `login_path`.
2011-11-07 22:28:28 +00:00
* added a way to remove a token from a session
* [BC BREAK] changed `MutableAclInterface::setParentAcl` to accept `null`, review your implementation to reflect this change.
2011-11-07 22:28:28 +00:00
### Serializer
* [BC BREAK] changed `GetSetMethodNormalizer`'s key names from all lowercased to camelCased (e.g. `mypropertyvalue` to `myPropertyValue`)
* [BC BREAK] convert the `item` XML tag to an array
2011-11-25 08:46:40 +00:00
2012-01-17 00:44:51 +00:00
``` xml
<?xml version="1.0"?>
<response>
<item><title><![CDATA[title1]]></title></item><item><title><![CDATA[title2]]></title></item>
</response>
```
Before:
Array()
After:
Array(
[item] => Array(
[0] => Array(
[title] => title1
)
[1] => Array(
[title] => title2
)
)
)
2011-11-25 08:46:40 +00:00
### Translation
2011-08-29 13:45:37 +01:00
* changed the default extension for XLIFF files from .xliff to .xlf
2011-11-09 21:02:31 +00:00
* added support for gettext
* added support for more than one fallback locale
2011-09-13 07:49:25 +01:00
* added support for translations in ResourceBundles
2011-09-13 07:46:58 +01:00
* added support for extracting translation messages from templates (Twig and PHP)
* added dumpers for translation catalogs
2011-09-06 07:02:25 +01:00
* added support for QT translations
2011-09-02 08:25:13 +01:00
### Validator
2011-11-01 14:30:43 +00:00
* added support for `ctype_*` assertions in `TypeValidator`
2011-09-29 14:56:37 +01:00
* added a Size validator
* added a SizeLength validator
2011-09-06 07:19:05 +01:00
* improved the ImageValidator with min width, max width, min height, and max height constraints
2011-09-02 08:25:13 +01:00
* added support for MIME with wildcard in FileValidator
* changed Collection validator to add "missing" and "extra" errors to
individual fields
* changed default value for `extraFieldsMessage` and `missingFieldsMessage`
in Collection constraint
* made ExecutionContext immutable
* deprecated Constraint methods `setMessage`, `getMessageTemplate` and
`getMessageParameters`
* added support for dynamic group sequences with the GroupSequenceProvider pattern
### Yaml
* Yaml::parse() does not evaluate loaded files as PHP files by default anymore (call Yaml::enablePhpParsing() to get back the old behavior)