Commit Graph

53743 Commits

Author SHA1 Message Date
Alexander M. Turek 4bdc0f48cc Merge branch '4.4' into 5.2
* 4.4:
  Remove always-true requirement
2021-05-19 23:12:45 +02:00
Alexander M. Turek e955a1e2f0 minor #41297 Remove always-true requirement (jderusse)
This PR was merged into the 4.4 branch.

Discussion
----------

Remove always-true requirement

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| Tickets       | -
| License       | MIT
| Doc PR        | -

This requirement is always true for our version constraint

Commits
-------

5783800e8f Remove always-true requirement
2021-05-19 23:08:14 +02:00
Jérémy Derussé 5783800e8f
Remove always-true requirement 2021-05-19 22:55:56 +02:00
Nicolas Grekas 521fceb70e Merge branch '4.4' into 5.2
* 4.4:
  Add 5.3 in github PR template
  Bump Symfony version to 4.4.25
  Update VERSION for 4.4.24
  Update CONTRIBUTORS for 4.4.24
  Update CHANGELOG for 4.4.24
2021-05-19 17:01:13 +02:00
Fabien Potencier 36238a4134 minor #41281 Add 5.3 in github PR template (jderusse)
This PR was merged into the 4.4 branch.

Discussion
----------

Add 5.3 in github PR template

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| Tickets       | -
| License       | MIT
| Doc PR        | -

Right time now :)

Commits
-------

327014b104 Add 5.3 in github PR template
2021-05-19 15:46:28 +02:00
Jérémy Derussé 327014b104
Add 5.3 in github PR template 2021-05-19 14:57:42 +02:00
Fabien Potencier 998238a75d Bump Symfony version to 5.2.10 2021-05-19 14:28:17 +02:00
Fabien Potencier 3552d33cac
Merge pull request #41279 from fabpot/release-5.2.9
released v5.2.9
2021-05-19 14:23:59 +02:00
Fabien Potencier 07e52ce41a Update VERSION for 5.2.9 2021-05-19 14:23:45 +02:00
Fabien Potencier f83fb24062 Update CHANGELOG for 5.2.9 2021-05-19 14:23:40 +02:00
Fabien Potencier 4ce0b75ffa Bump Symfony version to 4.4.25 2021-05-19 14:20:36 +02:00
Fabien Potencier 854af7600a
Merge pull request #41278 from fabpot/release-4.4.24
released v4.4.24
2021-05-19 14:17:14 +02:00
Fabien Potencier 861b12724a Update VERSION for 4.4.24 2021-05-19 14:12:19 +02:00
Fabien Potencier 9df9107c70 Update CONTRIBUTORS for 4.4.24 2021-05-19 14:12:04 +02:00
Fabien Potencier 028cc4040a Update CHANGELOG for 4.4.24 2021-05-19 14:11:58 +02:00
Nicolas Grekas 309f36df6a Merge branch '4.4' into 5.2
* 4.4:
  [Security\Core] Fix user enumeration via response body on invalid credentials
  Update VERSION for 3.4.48
  Update CHANGELOG for 3.4.48
2021-05-19 14:08:15 +02:00
Nicolas Grekas cbdb66a1d1 Merge branch '3.4' into 4.4
* 3.4:
  [Security\Core] Fix user enumeration via response body on invalid credentials
  Update VERSION for 3.4.48
  Update CHANGELOG for 3.4.48
2021-05-19 14:06:31 +02:00
Nicolas Grekas 1ad13fec2e security #cve-2021-21424 [Security\Core] Fix user enumeration via response body on invalid credentials (chalasr)
This PR was merged into the 3.4 branch.
2021-05-19 14:03:21 +02:00
Robin Chalas e85070088e [Security\Core] Fix user enumeration via response body on invalid credentials 2021-05-19 14:03:21 +02:00
Fabien Potencier 0d514d16a9 Merge branch '4.4' into 5.2
* 4.4:
  minor #41065 [Security] Added missing translations for Serbian (sr_Cyrl)
  [Security] Added missing translations for Serbian (sr_Latn) #41066
2021-05-19 13:57:29 +02:00
Fabien Potencier 5f8035e121 minor #41261 [Security] Added missing translations for Serbian (sr_Latn) (AJ-computerrock)
This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Added missing translations for Serbian (sr_Latn)

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| Tickets       | Fix #41066
| License       | MIT
| Doc PR        |

Added 2 missing translations  for Serbian (sr_Latn).

Commits
-------

ce31fc3643 [Security] Added missing translations for Serbian (sr_Latn) #41066
2021-05-19 13:56:33 +02:00
Fabien Potencier 853b1dc57b minor #41263 [Security] Added missing translations for Serbian (sr_Cyrl) (ajakov)
This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Added missing translations for Serbian (sr_Cyrl)

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| Tickets       | Fix #41065
| License       | MIT
| Doc PR        |

Added 2 missing translations.

Commits
-------

0e3165c67d minor #41065 [Security] Added missing translations for Serbian (sr_Cyrl)
2021-05-19 13:54:43 +02:00
Fabien Potencier ed92c99534 bug #41275 Fixes Undefined method call (faizanakram99)
This PR was submitted for the 5.x branch but it was merged into the 5.2 branch instead.

Discussion
----------

Fixes Undefined method call

Psalm reported this

```
ERROR: UndefinedMethod - vendor/symfony/framework-bundle/Kernel/MicroKernelTrait.php:185:148 - Method ReflectionType::isBuiltin does not exist (see https://psalm.dev/022)
        $configuratorClass = $configureRoutes->getNumberOfParameters() > 0 && ($type = $configureRoutes->getParameters()[0]->getType()) && !$type->isBuiltin() ? $type->getName() : null;
```

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | Fix #... <!-- prefix each issue number with "Fix #", no need to create an issue if none exist, explain below instead -->
| License       | MIT
| Doc PR        |
<!--
Replace this notice by a short README for your feature/bugfix. This will help people
understand your PR and can be used as a start for the documentation.

Additionally (see https://symfony.com/releases):
 - Always add tests and ensure they pass.
 - Never break backward compatibility (see https://symfony.com/bc).
 - Bug fixes must be submitted against the lowest maintained branch where they apply
   (lowest branches are regularly merged to upper ones so they get the fixes too.)
 - Features and deprecations must be submitted against branch 5.x.
 - Changelog entry should follow https://symfony.com/doc/current/contributing/code/conventions.html#writing-a-changelog-entry
-->

Commits
-------

6dba988629 Fixes Undefined method call
2021-05-19 13:52:24 +02:00
Faizan Akram Dar 6dba988629 Fixes Undefined method call
Psalm reported this

```
ERROR: UndefinedMethod - vendor/symfony/framework-bundle/Kernel/MicroKernelTrait.php:185:148 - Method ReflectionType::isBuiltin does not exist (see https://psalm.dev/022)
        $configuratorClass = $configureRoutes->getNumberOfParameters() > 0 && ($type = $configureRoutes->getParameters()[0]->getType()) && !$type->isBuiltin() ? $type->getName() : null;
```
2021-05-19 13:52:18 +02:00
Nicolas Grekas d1d83c29b9 [SecurityBundle] add missing type-hint 2021-05-19 12:09:09 +02:00
Nicolas Grekas a660c1c68f Merge branch '4.4' into 5.2
* 4.4:
  add chinese translation
2021-05-19 11:59:29 +02:00
Fabien Potencier 8ff65422b2 bug #41269 [SecurityBundle] Remove invalid unused service (chalasr)
This PR was merged into the 5.2 branch.

Discussion
----------

[SecurityBundle] Remove invalid unused service

| Q             | A
| ------------- | ---
| Branch?       | 5.2
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | -
| License       | MIT
| Doc PR        | -

Leftover of a revisited experimental feature (the class defined on the service does not exist).

Commits
-------

1e6588a848 [SecurityBundle] Remove invalid unused service
2021-05-19 08:38:01 +02:00
Fabien Potencier 3ae7e0a60d minor #41246 [Security] Missing translations for Chinese (zh_TW & zh_CN) (fd6130)
This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Missing translations for Chinese (zh_TW & zh_CN)

| Q             | A
| ------------- | ---
| Branch?       | 4.4 <!-- see below -->
| Bug fix?      | no
| New feature?  | no <!-- please update src/**/CHANGELOG.md files -->
| Deprecations? | no <!-- please update UPGRADE-*.md and src/**/CHANGELOG.md files -->
| Tickets       | Fix #41037 , Fix #41038 <!-- prefix each issue number with "Fix #", no need to create an issue if none exist, explain below instead -->
| License       | MIT
| Doc PR        | no <!-- required for new features -->
<!--
Replace this notice by a short README for your feature/bugfix. This will help people
understand your PR and can be used as a start for the documentation.

Additionally (see https://symfony.com/releases):
 - Always add tests and ensure they pass.
 - Never break backward compatibility (see https://symfony.com/bc).
 - Bug fixes must be submitted against the lowest maintained branch where they apply
   (lowest branches are regularly merged to upper ones so they get the fixes too.)
 - Features and deprecations must be submitted against branch 5.x.
 - Changelog entry should follow https://symfony.com/doc/current/contributing/code/conventions.html#writing-a-changelog-entry
-->

Added missing translation for Chinese (zh_TW & zh_CN).

Commits
-------

26d156f17f add chinese translation
2021-05-19 08:29:58 +02:00
Robin Chalas 1e6588a848
[SecurityBundle] Remove invalid unused service 2021-05-19 01:02:18 +02:00
Wouter de Jong e83c9927af bug #41139 [Security] [DataCollector] Remove allows anonymous information in datacollector (ismail1432)
This PR was submitted for the 5.x branch but it was squashed and merged into the 5.2 branch instead.

Discussion
----------

[Security] [DataCollector] Remove allows anonymous information in datacollector

| Q             | A
| ------------- | ---
| Branch?       | 5.2
| Bug fix?      | no
| New feature?  | yes/no <!-- please update src/**/CHANGELOG.md files -->
| Deprecations? | yes/no <!-- please update UPGRADE-*.md and src/**/CHANGELOG.md files -->
| Tickets       | Fix #40907
| License       | MIT
| Doc PR        | symfony/symfony-docs#... <!-- required for new features -->

As mentioned In https://github.com/symfony/symfony/issues/40907 there is no longer anonymous users no longer in the new authentication system. This PR remove this information **if the new system is used** as it always a red cross

With  `enable_authenticator_manager` at `false`
![image](https://user-images.githubusercontent.com/13260307/117574692-34c8d900-b0d6-11eb-9bef-a6c9abdfad2f.png)

With  `enable_authenticator_manager` at `true`
![image](https://user-images.githubusercontent.com/13260307/117574619-f3382e00-b0d5-11eb-945a-3613425ccdbe.png)

Commits
-------

92cd096763 [Security] [DataCollector] Remove allows anonymous information in datacollector
2021-05-18 15:25:32 +02:00
Smaine Milianni 92cd096763 [Security] [DataCollector] Remove allows anonymous information in datacollector 2021-05-18 15:25:25 +02:00
ajakov 0e3165c67d minor #41065 [Security] Added missing translations for Serbian (sr_Cyrl) 2021-05-18 10:51:58 +02:00
Aleksandar Jakovljevic ce31fc3643 [Security] Added missing translations for Serbian (sr_Latn) #41066 2021-05-18 10:13:34 +02:00
Robin Chalas 2e047c9cfa
minor #41258 [Workflow] Remove useless call to `Definition#addTag()` (chalasr)
This PR was merged into the 5.2 branch.

Discussion
----------

[Workflow] Remove useless call to `Definition#addTag()`

| Q             | A
| ------------- | ---
| Branch?       | 5.2
| Bug fix?      |  no
| New feature?  | no
| Deprecations? | no
| Tickets       | -
| License       | MIT
| Doc PR        | -

Commits
-------

324dc750de [Workflow] Remove dead call to `Defnition#addTag()`
2021-05-18 00:56:52 +02:00
Robin Chalas 324dc750de
[Workflow] Remove dead call to `Defnition#addTag()` 2021-05-17 23:23:45 +02:00
Alexander M. Turek 65e1226fa4 Fix merge 2021-05-17 22:21:27 +02:00
Alexander M. Turek 0c8234b50c Merge branch '4.4' into 5.2
* 4.4:
  Fix deprecations from Doctrine Annotations+Cache
2021-05-17 21:35:40 +02:00
Alexander M. Turek 373528fce2 bug #41230 [FrameworkBundle][Validator] Fix deprecations from Doctrine Annotations+Cache (derrabus)
This PR was merged into the 4.4 branch.

Discussion
----------

[FrameworkBundle][Validator] Fix deprecations from Doctrine Annotations+Cache

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | N/A
| License       | MIT
| Doc PR        | N/A

* Doctrine Annotations' `CachedReader` is deprecated. Let's not use it if we don't have to.
* Doctrine Cache 2 has been released. Since we're mostly only using the interfaces, we can indicate compatibility.

Paslm is going to complain about missing classes, which is kind-of expected here. 🙂

Commits
-------

ec51c21a9d Fix deprecations from Doctrine Annotations+Cache
2021-05-17 21:13:41 +02:00
Alexander M. Turek ec51c21a9d Fix deprecations from Doctrine Annotations+Cache 2021-05-16 23:41:25 +02:00
fd6130 26d156f17f add chinese translation 2021-05-16 22:49:50 +08:00
Fabien Potencier e7692c50bd Merge branch '4.4' into 5.2
* 4.4:
  [Finder] Fix gitignore regex build with "**"
  Fixed deprecation warnings about passing null as parameter
  [Security] Keep Bulgarian wording consistent across all texts.
  Migrate configuration file for PHP CS Fixer 2.19/3.0
  [Form] Replace broken ServerParams mock
2021-05-16 15:07:46 +02:00
Fabien Potencier 907f1033ad minor #41244 [Security] Keep Bulgarian wording consistent across all texts (Warxcell)
This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Keep Bulgarian wording consistent across all texts

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| Tickets       |
| License       | MIT
| Doc PR        |

Keep wording consistent across all texts in translations:

Trans unit id=17:
Too many === Твърде много
Trans unit id=19:
Too many === Прекалено много

I put word "Твърде", because it was used before.

Commits
-------

4f1b4f993e [Security] Keep Bulgarian wording consistent across all texts.
2021-05-16 15:01:26 +02:00
Fabien Potencier 518badd980 minor #41243 Migrate configuration file for PHP CS Fixer 2.19/3.0 (derrabus)
This PR was merged into the 4.4 branch.

Discussion
----------

Migrate configuration file for PHP CS Fixer 2.19/3.0

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| Tickets       | N/A
| License       | MIT
| Doc PR        | N/A

This PR suggests to rename the PHP CS Fixer configuration file as expected by version 2.19 and 3.0. I don't know what version Fabbot is currently running, but as soon as it is updated to 2.19, we can merge this PR.

Commits
-------

1462a3215e Migrate configuration file for PHP CS Fixer 2.19/3.0
2021-05-16 14:39:59 +02:00
Fabien Potencier 21b8cb7d4f bug #41206 [Mailer] Fix SES API call with UTF-8 Addresses (jderusse)
This PR was merged into the 5.2 branch.

Discussion
----------

[Mailer] Fix SES API call with UTF-8 Addresses

| Q             | A
| ------------- | ---
| Branch?       | 5.2
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | -
| License       | MIT
| Doc PR        | -

The address (including email and name) used in Amazon SES API (`ses+api://`) must not contain unicode chars  (https://docs.aws.amazon.com/ses/latest/APIReference-V2/API_Destination.html)

This PR encodes name with base64 as suggested by issues in Official AWS SDKs (https://github.com/aws/aws-sdk-php/issues/1196, https://github.com/aws/aws-sdk-js/issues/1585)

note: I did not use the Base64Encoder, because the address could not be chunked (API Call failed) and it looks like addresses wider than 64 chars are allowed.

Commits
-------

05a9497230 [Mailer] Fix SES API call with UTF-8 Addresses
2021-05-16 14:29:02 +02:00
Fabien Potencier eb3a3c1c0a bug #41240 Fixed deprecation warnings about passing null as parameter (derrabus)
This PR was merged into the 4.4 branch.

Discussion
----------

Fixed deprecation warnings about passing null as parameter

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | N/A
| License       | MIT
| Doc PR        | N/A

Various built-in PHP functions will trigger a deprecation warning if `null` is passed as parameter. This PR attempts to fix all warnings that our test suite currently picks up.

Commits
-------

7d9bdf5734 Fixed deprecation warnings about passing null as parameter
2021-05-16 14:27:45 +02:00
Fabien Potencier 03519d40b8 bug #41241 [Finder] Fix gitignore regex build with "**" (mvorisek)
This PR was squashed before being merged into the 4.4 branch.

Discussion
----------

[Finder] Fix gitignore regex build with "**"

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | Fix #41223
| License       | MIT
| Doc PR        | no

covered with tests, also faster, we do not have to explode the rule at all :)

ping `@lindelius` `@OskarStark`

Commits
-------

ce22d5ddd7 [Finder] Fix gitignore regex build with "**"
2021-05-16 14:25:11 +02:00
Michael Voříšek ce22d5ddd7 [Finder] Fix gitignore regex build with "**" 2021-05-16 14:25:02 +02:00
Alexander M. Turek 7d9bdf5734 Fixed deprecation warnings about passing null as parameter 2021-05-16 11:52:47 +02:00
Nicolas Grekas d3ebc5fd53 minor #41238 [Form] Replace broken ServerParams mock (derrabus)
This PR was merged into the 4.4 branch.

Discussion
----------

[Form] Replace broken ServerParams mock

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | N/A
| License       | MIT
| Doc PR        | N/A

`AbstractRequestHandlerTest` creates a mocked version of the `ServerParams` class. Since `getNormalizedIniPostMaxSize()` does not have a return type declaration, PHPUnit will by default create an implementation that always returns `null`. However, the real implementation of that method guarantees to always return a string.

This becomes problematic in PHP 8.1 because the return value is sometimes passed as-is into functions like `strtolower()` which trigger a deprecation warning on `null` now.

This PR proposes to replace the mock with a dummy implementation that returns an empty string by default.

Commits
-------

77c2d69f19 [Form] Replace broken ServerParams mock
2021-05-16 10:57:09 +02:00
Warxcell 4f1b4f993e [Security] Keep Bulgarian wording consistent across all texts. 2021-05-16 11:22:39 +03:00