CHANGELOG for 4.4.x =================== This changelog references the relevant changes (bug and security fixes) done in 4.4 minor versions. To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v4.4.0...v4.4.1 * 4.4.20 (2021-03-04) * bug #40318 [Translation] deal with indented heredoc/nowdoc tokens (xabbuh) * bug #40350 [DependencyInjection] fix parsing calls of methods named "method" (xabbuh) * bug #40316 [Serializer] zero parts can be omitted in date interval input (xabbuh) * bug #40239 MockResponse total_time should not be simulated when provided (Pierrick VIGNAND) * bug #40299 [Cache] Add server-commands support for Predis Replication Environments (DemigodCode) * bug #40231 [HttpKernel] Configure `session.cookie_secure` earlier (tamcy) * bug #40283 [Translation] Make `name` attribute optional in xliff2 (MarieMinasyan) * bug #39599 [Cache] Fix Redis TLS scheme `rediss` for Redis connection (misaert) * bug #40244 [Routing] fix conflict with param named class in attribute (nlhommet) * bug #40273 [Cache] fix setting items' metadata on commit() (nicolas-grekas) * bug #40258 [Form] Ignoring invalid forms from delete_empty behavior in CollectionType (yceruto) * bug #40162 [Intl] fix Locale::getFallback() throwing exception on long $locale (AmirHo3ein13) * bug #40208 [PropertyInfo] fix resolving self to name of the analyzed class (xabbuh) * bug #40209 [WebLink] Escape double quotes in attributes values (fancyweb) * bug #40192 [Console] fix QuestionHelper::getHiddenResponse() not working with space in project directory name (Yendric) * bug #40175 [PropertyInfo]  use the right context for properties defined in traits (xabbuh) * bug #40172 [Translation] Allow using dashes in locale when linting Xliff files (localheinz) * bug #40187 [Console] Fix PHP 8.1 null error for preg_match flag (kylekatarnls) * bug #39659 [Form] keep valid submitted choices when additional choices are submitted (xabbuh) * bug #40188 [HttpFoundation] Fix PHP 8.1 null values (kylekatarnls) * bug #40167 [DependencyInjection] Definition::removeMethodCall should remove all matching calls (ruudk) * bug #40160 [PropertyInfo] fix extracting mixed type-hinted property types (xabbuh) * bug #40040 [Finder] Use a lazyIterator to close files descriptors when no longer used (jderusse) * bug #40135 [FrameworkBundle] Fix freshness checks with boolean parameters on routes (HypeMC) * bug #40138 [FrameworkBundle] fix registering "annotations.cache" on the "container.hot_path" (nicolas-grekas) * bug #40116 [FrameworkBundle][Translator] scan directories for translations sequentially (xabbuh) * bug #40104 [HttpKernel] [Kernel] Silence failed deprecations logs writes (fancyweb) * bug #40098 [DependencyInjection] fix tracking of changes to vendor/ dirs (nicolas-grekas) * bug #39980 [Mailer][Mime] Update inline part names with newly generated ContentId (ddegentesh) * bug #40043 [HttpFoundation] Setting `REQUEST_TIME_FLOAT` when constructing a Request object (ctasada) * bug #40050 [FrameworkBundle][Translator] Fixed updating catalogue metadata from Intl domain (yceruto) * bug #40089 [SecurityBundle] role_names variable instead of roles (wickedOne) * bug #40042 [Doctrine] Restore priority for EventSubscribers (jderusse) * bug #40066 [ErrorHandler] fix parsing return types in DebugClassLoader (nicolas-grekas) * bug #40065 [ErrorHandler] fix handling messages with null bytes from anonymous classes (nicolas-grekas) * bug #40067 [PhpUnitBridge] fix reporting deprecations when they come from DebugClassLoader (nicolas-grekas) * bug #40060 fix validator when we have false returned by the current element of the iterator (FabienSalles) * bug #40062 [Mime] Fix case-sensitive handling of header names (piku235) * bug #40023 [Finder]  use proper keys to not override appended files (xabbuh) * bug #40019 [ErrorHandler] Fix strpos error when trying to call a method without a name (Deuchnord) * bug #40004 [Serializer] Prevent access to private properties without getters (julienfalque) * 4.4.19 (2021-01-27) * bug #38900 [Serializer] Exclude non-initialized properties accessed with getters (BoShurik) * bug #39887 [Translator] fix handling plural for floating numbers (kylekatarnls) * bug #39967 [Messenger] fix redis messenger options with dsn (Kleinast) * bug #39970 [Messenger] Fix transporting non-UTF8 payloads by encoding them using base 64 (nicolas-grekas) * bug #39909 [PhpUnitBridge] Allow relative path to composer cache (jderusse) * bug #39944 [HttpKernel] Configure the ErrorHandler even when it is overriden (nicolas-grekas) * bug #39932 [Console] [Command] Fix Closure code binding when it is a static anonymous function (fancyweb) * bug #39880 [DoctrineBridge] Add username to UserNameNotFoundException (qurben) * bug #39633 [HttpFoundation] Drop int return type from parseFilesize() (LukeTowers) * bug #39889 [HttpClient] Add check for constant in Curl client (pierredup) * bug #39886 [HttpFoundation] Revert #38614 and add assert to avoid regressions (BafS) * bug #39858 Fix problem when SYMFONY_PHPUNIT_VERSION is empty string value (alexander-schranz) * bug #39861 [DependencyInjection] Skip deprecated definitions in CheckTypeDeclarationsPass (chalasr) * bug #39862 [Security] Replace message data in JSON security error response (wouterj) * bug #39667 [DoctrineBridge] Take into account that indexBy="person_id" could be a db column name, for a referenced entity (victormacko) * bug #39799 [DoctrineBridge] Fix circular loop with EntityManager (jderusse) * bug #39821 [DependencyInjection] Don't trigger notice for deprecated aliases pointing to deprecated definitions (chalasr) * bug #39816 [HttpFoundation] use atomic writes in MockFileSessionStorage (nicolas-grekas) * bug #39735 [Serializer] Rename normalize param (VincentLanglet) * bug #39797 Dont allow unserializing classes with a destructor (jderusse) * bug #39743 [Mailer] Fix missing BCC recipients in SES bridge (jderusse) * bug #39764 [Config]  fix handling float-like key attribute values (xabbuh) * bug #39787 [Yaml] a colon followed by spaces exclusively separates mapping keys and values (xabbuh) * bug #39788 [Cache] fix possible collision when writing tmp file in filesystem adapter (nicolas-grekas) * bug #39794 Dont allow unserializing classes with a destructor - 4.4 (jderusse) * bug #39747 [DependencyInjection] Support PHP 8 builtin types in CheckTypeDeclarationsPass (derrabus) * bug #39738 [VarDumper] fix mutating $GLOBALS while cloning it (nicolas-grekas) * bug #39746 [DependencyInjection] Fix InvalidParameterTypeException for function parameters (derrabus) * bug #39681 [HttpFoundation] parse cookie values containing the equal sign (xabbuh) * bug #39716 [DependencyInjection] do not break when loading schemas from network paths on Windows (xabbuh) * bug #39703 [Finder] apply the sort callback on the whole search result (xabbuh) * bug #39717 [TwigBridge] Remove full head content in HTML to text converter (pupaxxo) * bug #39708 [WebProfilerBundle] take query and request parameters into account when matching routes (xabbuh) * bug #39683 [Yaml] keep trailing newlines when dumping multi-line strings (xabbuh) * bug #39670 [Form] disable error bubbling by default when inherit_data is configured (xabbuh) * bug #39686 [Lock] Fix config merging in lock (jderusse) * bug #39668 [Yaml] do not dump extra trailing newlines for multiline blocks (xabbuh) * bug #39653 [Form] fix passing null $pattern to IntlDateFormatter (nicolas-grekas) * bug #39598 [Messenger] Fix stopwach usage if it has been reset (lyrixx) * bug #39631 [VarDumper] Fix display of nullable union return types (derrabus) * bug #39629 [VarDumper] fixed displaying "mixed" as "?mixed" (nicolas-grekas) * bug #39597 [Mailer] Handle failure when sending DATA (jderusse) * bug #39610 [ProxyManagerBridge] fix PHP notice, switch to "friendsofphp/proxy-manager-lts" (nicolas-grekas) * 4.4.18 (2020-12-18) * bug #39531 [Mailer] Fix parsing Dsn with empty user/password (OskarStark) * bug #39518 [Ldap] Incorrect determination of RelativeDistinguishedName for the "move" operation (astepin) * bug #39476 [Lock] Prevent store exception break combined store (dzubchik) * bug #39433 [Cache] fix setting "read_timeout" when using Redis (nicolas-grekas) * bug #39420 [Cache] Prevent notice on case matching metadata trick (bastnic) * bug #39203 [DI] Fix not working if only "default_index_method" used (malteschlueter) * bug #39142 [Config] Stop treating multiline resources as globs (michaelKaefer) * bug #39341 [Form] Fixed StringUtil::trim() to trim ZERO WIDTH SPACE (U+200B) and SOFT HYPHEN (U+00AD) (pmishev) * bug #39334 [Config][TwigBundle] Fixed syntax error in config (Nyholm) * bug #39196 [DI] Fix Xdebug 3.0 detection (vertexvaar) * bug #39226 [PhpUnitBridge] Fix disabling DeprecationErrorHandler from PHPUnit configuration file (fancyweb) * bug #39357 [FrameworkBundle] fix preserving some special chars in the query string (nicolas-grekas) * bug #39271 [HttpFoundation] Fix TypeError: Argument 1 passed to JsonResponse::setJson() must be of the type string, object given (sidz) * bug #39251 [DependencyInjection] Fix container linter for union types (derrabus) * bug #39336 [Config] YamlReferenceDumper: No default value required for VariableNode with array example (Nyholm) * bug #39333 [Form] do not apply the Valid constraint on scalar form data (lchrusciel, xabbuh) * bug #39331 [PhpUnitBridge] Fixed PHPunit 9.5 compatibility (wouterj) * bug #39220 [HttpKernel] Fix bug with whitespace in Kernel::stripComments() (ausi) * bug #39252 [Mime] Leverage PHP 8's detection of CSV files (derrabus) * bug #39313 [FrameworkBundle] TextDescriptor::formatControllerLink checked method… (fjogeleit) * bug #39286 [HttpClient] throw clearer error when no scheme is provided (BackEndTea) * bug #39267 [Yaml] fix lexing backslashes in single quoted strings (xabbuh) * bug #39151 [DependencyInjection] Fixed incorrect report for private services if required service does not exist (Islam93) * bug #39274 [Yaml] fix lexing mapping values with trailing whitespaces (xabbuh) * bug #39270 [Inflector] Fix Notice when argument is empty string (moldman) * bug #39247 [Security] remove return type definition in order to avoid type juggling (adeptofvoltron) * bug #39223 [Console] Re-enable hyperlinks in Konsole/Yakuake (OndraM) * bug #39241 [Yaml] fix lexing inline sequences/mappings with trailing whitespaces (Nyholm, xabbuh) * bug #39243 [Filesystem] File existence check before calling unlink method (gechetspr) * 4.4.17 (2020-11-29) * bug #39166 [Messenger] Fix mssql compatibility for doctrine transport. (bill moll) * bug #39211 [HttpClient] fix binding to network interfaces (nicolas-grekas) * bug #39129 [DependencyInjection] Fix circular in DI with lazy + byContruct loop (jderusse) * bug #39068 [DependencyInjection][Translator] Silent deprecation triggered by libxml_disable_entity_loader (jderusse) * bug #39119 [Form] prevent duplicated error message for file upload limits (xabbuh) * bug #39099 [Form] ignore the pattern attribute for textareas (xabbuh) * bug #39154 [Yaml] fix lexing strings containing escaped quotation characters (xabbuh) * bug #38597 [PhpUnitBridge] Fix qualification of deprecations triggered by the debug class loader (fancyweb) * bug #39160 [Console] Use a partial buffer in SymfonyStyle (jderusse) * bug #39168 [Console] Fix console closing tag (jderusse) * bug #39155 [VarDumper] fix casting resources turned into objects on PHP 8 (nicolas-grekas) * bug #39115 [HttpClient] don't fallback to HTTP/1.1 when HTTP/2 streams break (nicolas-grekas) * bug #33763 [Yaml] fix lexing nested sequences/mappings (xabbuh) * bug #39083 [Dotenv] Check if method inheritEnvironmentVariables exists (Chi-teck) * bug #39094 [Ldap] Fix undefined variable $con (derrabus) * bug #39091 [Config] Recheck glob brace support after GlobResource was serialized (wouterj) * bug #39092 Fix critical extension when reseting paged control (jderusse) * bug #38614 [HttpFoundation] Fix for virtualhosts based on URL path (mvorisek) * bug #38387 [Validator] prevent hash collisions caused by reused object hashes (fancyweb, xabbuh) * bug #38999 [DependencyInjection] autoconfigure behavior describing tags on decorators (xabbuh) * bug #39058 [DependencyInjection] Fix circular detection with multiple paths (jderusse) * bug #39059 [Filesystem] fix cleaning up tmp files when dumpFile() fails (nicolas-grekas) * bug #38628 [DoctrineBridge] indexBy could reference to association columns (juanmiguelbesada) * bug #39021 [DependencyInjection] Optimize circular collection by removing flattening (jderusse) * bug #39031 [Ldap] Fix pagination (jderusse) * bug #39038 [DoctrineBridge] also reset id readers (xabbuh) * bug #39025 [DoctrineBridge] Fix DBAL deprecations in middlewares (derrabus) * bug #38991 [Console] Fix ANSI when stdErr is not a tty (jderusse) * bug #38980 [DependencyInjection] Fix circular reference with Factory + Lazy Iterrator (jderusse) * bug #38971 [PhpUnitBridge] fix replaying skipped tests (nicolas-grekas) * bug #38910 [HttpKernel] Fix session initialized several times (jderusse) * bug #38882 [DependencyInjection] Improve performances in CircualReference detection (jderusse) * bug #38950 [Process] Dont test TTY if there is no TTY support (Nyholm) * bug #38921 [PHPUnitBridge] Fixed crash on Windows with PHP 8 (villfa) * bug #38869 [SecurityBundle] inject only compatible token storage implementations for usage tracking (xabbuh) * bug #38894 [HttpKernel] Remove Symfony 3 compatibility code (derrabus) * bug #38895 [PhpUnitBridge] Fix wrong check for exporter in ConstraintTrait (alcaeus) * bug #38879 [Cache] Fixed expiry could be int in ChainAdapter due to race conditions (phamviet) * bug #38856 [Cache] Add missing use statement (fabpot) * 4.4.16 (2020-10-28) * bug #38713 [DI] Fix Preloader exception when preloading a class with an unknown parent/interface (rgeraads) * bug #38647 [HttpClient] relax auth bearer format requirements (xabbuh) * bug #38699 [DependencyInjection] Preload classes with union types correctly (derrabus) * bug #38669 [Serializer] fix decoding float XML attributes starting with 0 (Marcin Kruk) * bug #38680 [PhpUnitBridge] Support new expect methods in test case polyfill (alcaeus) * bug #38681 [PHPUnitBridge] Support PHPUnit 8 and PHPUnit 9 in constraint compatibility trait (alcaeus) * bug #38679 [PhpUnitBridge] Add missing exporter function for PHPUnit 7 (alcaeus) * bug #38595 [TwigBridge] do not translate null placeholders or titles (xabbuh) * bug #38635 [Cache] Use correct expiry in ChainAdapter (Nyholm) * bug #38652 [Filesystem] Check if failed unlink was caused by permission denied (Nyholm) * bug #38645 [PropertyAccess] forward the caught exception (xabbuh) * bug #38604 [DoctrineBridge] indexBy does not refer to attributes, but to column names (xabbuh) * bug #38606 [WebProfilerBundle] Hide debug toolbar in print view (jt2k) * bug #38582 [DI] Fix Reflection file name with eval()\'d code (maxime-aknin) * bug #38516 [HttpFoundation] Fix Range Requests (BattleRattle) * bug #38553 [Lock] Reset Key lifetime time before we acquire it (Nyholm) * bug #38551 Remove content-type check on toArray methods (jderusse) * bug #38544 [DI] fix dumping env vars (nicolas-grekas) * bug #38530 [HttpClient] fix reading the body after a ClientException (nicolas-grekas) * bug #38510 [PropertyInfo] Support for the mixed type (derrabus) * bug #38493 [HttpClient] Fix CurlHttpClient memory leak (HypeMC) * bug #38456 [Cache] skip igbinary < 3.1.6 (nicolas-grekas) * bug #38392 [Ldap] Bypass the use of `ldap_control_paged_result` on PHP >= 7.3 (lucasaba) * bug #38444 [PhpUnitBridge] fix running parallel tests with phpunit 9 (nicolas-grekas) * bug #38442 [VarDumper] fix truncating big arrays (nicolas-grekas) * bug #38433 [Mime] Fix serialization of RawMessage (gilbertsoft) * 4.4.15 (2020-10-04) * bug #36291 [Lock] Fix StoreFactory to accept same DSN syntax as AbstractAdapter (Jontsa) * bug #38390 [Serializer][Minor] Fix circular reference exception message (bad limit displayed) (l-vo) * bug #38388 [HttpClient] Always "buffer" empty responses (nicolas-grekas) * bug #38380 [Form] propagate validation groups to subforms (johanderuijter, xabbuh) * bug #38377 Ignore more deprecations for Mockery mocks (fancyweb) * bug #38375 [HttpClient] fix using proxies with NativeHttpClient (nicolas-grekas) * bug #38372 [Routing] fix using !important and defaults/reqs in inline route definitions (nicolas-grekas) * bug #38373 [ErrorHandler][DebugClassLoader] Do not check Mockery mocks classes (fancyweb) * bug #38368 [HttpClient] Fix using https with proxies (bohanyang) * bug #38350 [TwigBundle] Only remove kernel exception listener if twig is used (dmolineus) * bug #38360 [BrowserKit] Cookie expiration at current timestamp (iquito) * bug #38358 [Messenger] Fix redis connection error message (alexander-schranz) * bug #38343 Revert "bug #38063 [FrameworkBundle] generate preload.php in src/ to make opcache.preload predictable" (nicolas-grekas) * bug #38336 [PhpUnitBridge] Fixed class_alias() for PHPUnit\Framework\Error\Error (stevegrunwell) * 4.4.14 (2020-09-27) * bug #38248 [HttpClient] Allow bearer token with colon (stephanvierkant) * bug #37837 [Form] Fix custom formats deprecation with HTML5 widgets (fancyweb) * bug #38285 [Contracts][Translation] Optional Intl dependency (ro0NL) * bug #38283 [Translator] Optional Intl dependency (ro0NL) * bug #38271 [ErrorHandler] Escape JSON encoded log context (ro0NL) * bug #38284 [Cache][Lock][Messenger] fix compatibility with Doctrine DBAL 3 (xabbuh) * bug #38228 [Yaml Parser] Fix edge cases when parsing multiple documents (digilist) * bug #38229 [Yaml] fix parsing comments not prefixed by a space (xabbuh) * bug #38127 [Translator] Make sure a null locale is handled properly (jschaedl) * bug #38221 [Cache] Allow cache tags to be objects implementing __toString() (lstrojny) * bug #38212 [HttpKernel] Do not override max_redirects option in HttpClientKernel (dmolineus) * bug #38215 [HttpClient] Support for CURLOPT_LOCALPORT (derrabus) * bug #38202 [FrameworkBundle] Fix xsd definition which prevent to add more than one workflow metadata (l-vo) * bug #38166 [Console] work around disabled putenv() (SenTisso) * bug #38173 [HttpClient][HttpClientTrait] don't calculate alternatives if option is auth_ntlm (ybenhssaien) * bug #38169 [PhpUnitBridge] Internal classes are not legacy (derrabus) * bug #38156 [Cache] fix ProxyAdapter not persisting items with infinite expiration (dmaicher) * bug #38148 [HttpClient] fail properly when the server replies with HTTP/0.9 (nicolas-grekas) * bug #38131 [Validator] allow consumers to mock all methods (xabbuh) * bug #38139 [DI] dump OS-indepent paths in the compiled container (nicolas-grekas) * bug #38126 [Cache] Limit cache version character range (lstrojny) * bug #38142 [FrameworkBundle] adopt src/.preload.php (nicolas-grekas) * bug #38108 [Cache] Fix key encoding issue in Memcached adapter (lstrojny) * bug #38122 [HttpClient] Fix Array to string conversion notice when parsing JSON error body with non-scalar detail property (emarref) * bug #37097 DateTime validator support for trailing data (stefankleff) * bug #38116 [Console] Silence warnings on sapi_windows_cp_set() call (chalasr) * bug #38114 [Console] guard $argv + $token against null, preventing unnecessary exceptions (bilogic) * bug #38094 [PhpUnitBridge] Skip internal classes in CoverageListenerTrait (sanmai) * bug #38101 [VarExporter] unserialize() might throw an Exception on php 8 (derrabus) * bug #38100 [ErrorHandler] Parse "x not found" errors correctly on php 8 (derrabus) * bug #38099 Prevent parsing invalid octal digits as octal numbers (julienfalque) * bug #38095 [Mailer] Remove unnecessary check for existing request (jschaedl) * bug #38091 [DI] fix ContainerBuilder on PHP8 (nicolas-grekas) * bug #38086 [HttpClient] with "bindto" with NativeHttpClient (nicolas-grekas) * bug #38063 [FrameworkBundle] generate preload.php in src/ to make opcache.preload predictable (nicolas-grekas) * bug #38080 [Console] Make sure $maxAttempts is an int or null (derrabus) * bug #38075 esmtp error not being thrown properly (Anton Zagorskii) * bug #38040 [Yaml Parser] fixed Parser to skip comments when inlining sequences (korve) * bug #38073 [VarDumper] Fix caster for invalid SplFileInfo objects on php 8 (derrabus) * bug #38071 [PhpUnitBridge] Adjust output parsing of CoverageListenerTrait for PHPUnit 9.3 (sanmai, derrabus) * bug #38062 [DI] fix generating preload file when cache_dir is outside project_dir (nicolas-grekas) * bug #38059 [Cache] Fix CacheCollectorPass with decorated cache pools (shyim) * bug #38054 [PhpUnitBridge] CoverageListenerTrait update for PHPUnit 8.5/9.x (sanmai) * bug #38049 [Debug] Parse "x not found" errors correctly on php 8 (derrabus) * bug #38041 [PropertyInfo] Fix typed collections in PHP 7.4 (ndench) * bug #37959 [PhpunitBridge] Fix deprecation type detection (when several autoload files are used) (l-vo) * 4.4.13 (2020-09-02) * security #cve-2020-15094 Remove headers with internal meaning from HttpClient responses (mpdude) * bug #38024 [Console] Fix undefined index for inconsistent command name definition (chalasr) * bug #38023 [DI] fix inlining of non-shared services (nicolas-grekas) * bug #38020 [PhpUnitBridge] swallow deprecations (xabbuh) * bug #38010 [Cache] Psr16Cache does not handle Proxy cache items (alex-dev) * bug #37937 [Serializer] fixed fix encoding of cache keys with anonymous classes (michaelzangerle) * 4.4.12 (2020-08-31) * bug #37966 [HttpClient][MockHttpClient][DX] Throw when the response factory callable does not return a valid response (fancyweb) * bug #37971 [PropertyInfo] Backport support for typed properties (PHP 7.4) (dunglas) * bug #37970 [PhpUnitBridge] Polyfill new phpunit 9.1 assertions (phpfour) * bug #37960 [PhpUnit] Add polyfill for assertMatchesRegularExpression() (dunglas) * bug #37949 [Yaml] fix more numeric cases changing in PHP 8 (xabbuh) * bug #37921 [Yaml] account for is_numeric() behavior changes in PHP 8 (xabbuh) * bug #37912 [ExpressionLanguage] fix passing arguments to call_user_func_array() on PHP 8 (xabbuh) * bug #37907 [Messenger] stop using the deprecated schema synchronizer API (xabbuh) * bug #37900 [Mailer] Fixed mandrill api header structure (wulff) * bug #37888 [Mailer] Reorder headers used to determine Sender (cvmiert) * bug #37872 [Sendgrid-Mailer] Fixed envelope recipients on sendgridApiTransport (arendjantetteroo) * bug #37860 [Serializer][ClassDiscriminatorMapping] Fix getMappedObjectType() when a discriminator child extends another one (fancyweb) * bug #37853 [Validator] ensure that the validator is a mock object for backwards-compatibility (xabbuh) * bug #36340 [Serializer] Fix configuration of the cache key (dunglas) * bug #36810 [Messenger] Do not stack retry stamp (jderusse) * bug #37849 [FrameworkBundle] Add missing mailer transports in xsd (l-vo) * bug #37586 [ErrorHandler][DebugClassLoader] Add mixed and static return types support (fancyweb) * bug #37845 [Serializer] Fix variadic support when using type hints (fabpot) * bug #37841 [VarDumper] Backport handler lock when using VAR_DUMPER_FORMAT (ogizanagi) * bug #37725 [Form] Fix Guess phpdoc return type (franmomu) * bug #37771 Use PHPUnit 9.3 on php 8 (derrabus) * bug #36140 [Validator] Add BC layer for notInRangeMessage when min and max are set (l-vo) * bug #35843 [Validator] Add target guards for Composite nested constraints (ogizanagi) * bug #37803 Fix for issue #37681 (Rav) * bug #37744 [Yaml] Fix for #36624; Allow PHP constant as first key in block (jnye) * bug #37767 [Form] fix mapping errors from unmapped forms (xabbuh) * bug #37731 [Console] Table: support cells with newlines after a cell with colspan >= 2 (GMTA) * bug #37791 Fix redis connect with empty password (alexander-schranz) * bug #37790 Fix deprecated libxml_disable_entity_loader (fabpot) * bug #37763 Fix deprecated libxml_disable_entity_loader (jderusse) * bug #37774 [Console] Make sure we pass a numeric array of arguments to call_user_func_array() (derrabus) * bug #37729 [FrameworkBundle] fail properly when the required service is not defined (xabbuh) * bug #37701 [Serializer] Fix that it will never reach DOMNode (TNAJanssen) * bug #37671 [Cache] fix saving no-expiry items with ArrayAdapter (philipp-kolesnikov) * bug #37102 [WebProfilerBundle] Fix error with custom function and web profiler routing tab (JakeFr) * bug #37560 [Finder] Fix GitIgnore parser when dealing with (sub)directories and take order of lines into account (Jeroeny) * bug #37700 [VarDumper] Improve previous fix on light array coloration (l-vo) * bug #37705 [Mailer] Added the missing reset tag to mailer.logger_message_listener (vudaltsov) * bug #37697 [Messenger] reduce column length for MySQL 5.6 compatibility (xabbuh) * 4.4.11 (2020-07-24) * bug #37590 Allows RedisClusterProxy instance in Lock RedisStore (jderusse) * bug #37583 [Mime] Fix EmailHeaderSame to make use of decoded value (evertharmeling) * bug #37569 [Messenger] Allow same middleware to be used multiple times with different arguments (HypeMC) * bug #37624 [Cache] Connect to RedisCluster with password auth (mforbak) * bug #37635 [Cache] fix catching auth errors (nicolas-grekas) * bug #37628 [Serializer] Support multiple levels of discriminator mapping (jeroennoten) * bug #37572 [FrameworkBundle] set default session.handler alias if handler_id is not provided (Youssef BENHSSAIEN) * bug #37607 Fix checks for phpunit releases on Composer 2 (colinodell) * bug #37594 Use hexadecimal numerals instead of hexadecimals in strings to repres… (arekzb) * bug #37576 [WebProfilerBundle] modified url generation to use absolute urls (smatyas) * bug #36888 [Mailer] Fix mandrill raw http request setting from email/name (JohJohan) * bug #37527 [Mailer] Fix reply-to functionality in the SendgridApiTransport (jt2k) * bug #37581 [Mime] Fix compat with HTTP requests (fabpot) * bug #37580 [Mime] Keep Sender full address when used by non-SMTP transports (fabpot) * bug #37511 [DependencyInjection][Config] Use several placeholder unique prefixes for dynamic placeholder values (fancyweb) * bug #37562 [Cache] Use the default expiry when saving (not when creating) items (philipp-kolesnikov) * bug #37563 Fix DBAL deprecation (nicolas-grekas) * bug #37521 [Form] Fix ChoiceType translation domain (VincentLanglet) * bug #37550 [OptionsResolver] Fix force prepend normalizer (hason) * bug #37520 [Form] silently ignore uninitialized properties when mapping data to forms (ph-fritsche) * bug #37526 [Cache][Config] ensure compatibility with PHP 8 stack traces (xabbuh) * bug #37513 [PhpUnitBridge] ExcludeList usage for PHPUnit 9.4 (gennadigennadigennadi) * bug #37461 [Process] Fix Permission Denied error when writing sf_proc_00 lock files on Windows (JasonStephensTAMU) * bug #37505 [Form] fix handling null as empty data (xabbuh) * bug #37385 [Console] Fixes question input encoding on Windows (YaFou) * bug #37491 [HttpClient] Fix promise behavior in HttplugClient (brentybh) * bug #37469 [Console] always use stty when possible to ask hidden questions (nicolas-grekas) * bug #37486 [HttpClient] fix parsing response headers in CurlResponse (nicolas-grekas) * bug #37484 [HttpClient][CurlHttpClient] Fix http_version option usage (fancyweb) * bug #37447 [Validator] fix validating lazy properties that evaluate to null (xabbuh) * bug #37464 [ErrorHandler] fix throwing from __toString() (nicolas-grekas) * bug #37449 [Translation] Fix caching of parent locales file in translator (jvasseur) * bug #37418 [PhpUnitBridge] Fix compatibility with phpunit 9.3 (Gennadi Janzen) * bug #37441 [DoctrineBridge] work around Connection::ping() deprecation (nicolas-grekas) * bug #37291 [MimeType] Duplicated MimeType due to PHP Bug (juanmrad) * bug #37429 [DI] fix parsing of argument type=binary in xml (Tobion) * bug #37425 [Form] fix guessing form types for DateTime types (xabbuh) * bug #37392 [Validator] fix handling typed properties as constraint options (xabbuh) * bug #37358 Directly use the driverConnection executeUpdate method (TristanPouliquen) * bug #37389 [HttpFondation] Change file extension of "audio/mpeg" from "mpga" to "mp3" (YaFou) * bug #37379 [HttpClient] Support for cURL handler objects (derrabus) * bug #37383 [VarDumper] Support for cURL handler objects (derrabus) * bug #37395 add .body wrapper element (Nemo64) * bug #37400 [HttpClient] unset activity list when creating CurlResponse (nicolas-grekas) * bug #36304 Check whether path is file in DataPart::fromPath() (freiondrej) * bug #37345 [Form] collect all transformation failures (xabbuh) * bug #37362 [SecurityBundle] Drop cache.security_expression_language service if invalid (chalasr) * bug #37353 [DI] disable preload.php on the CLI (nicolas-grekas) * bug #37268 [Messenger] Fix precedence of DSN options for 4.4 (jderusse) * bug #37341 Fix support for PHP8 union types (nicolas-grekas) * bug #37271 [FrameworkBundle] preserve dots in query-string when redirecting (nicolas-grekas) * bug #37340 Fix support for PHP8 union types (nicolas-grekas) * bug #37275 [DI] tighten detection of local dirs to prevent false positives (nicolas-grekas) * bug #37090 [PhpUnitBridge] Streamline ansi/no-ansi of composer according to phpunit --colors option (kick-the-bucket) * bug #36230 [VarDumper] Fix CliDumper coloration on light arrays (l-vo) * bug #37270 [FrameworkBundle] preserve dots in query-string when redirecting (nicolas-grekas) * bug #37319 [HttpClient] Convert CurlHttpClient::handlePush() to instance method (mpesari) * bug #37342 [Cache] fix compat with DBAL v3 (nicolas-grekas) * bug #37286 [Console] Reset question validator attempts only for actual stdin (bis) (nicolas-grekas) * bug #37160 Reset question validator attempts only for actual stdin (ostrolucky) * bug #36975 [PropertyInfo] Make PhpDocExtractor compatible with phpDocumentor v5 (DerManoMann) * 4.4.10 (2020-06-12) * bug #37227 [DependencyInjection][CheckTypeDeclarationsPass] Handle unresolved parameters pointing to environment variables (fancyweb) * bug #37103 [Form] switch the context when validating nested forms (xabbuh) * bug #37182 [HttpKernel] Fix regression where Store does not return response body correctly (mpdude) * bug #37193 [DependencyInjection][CheckTypeDeclarationsPass] Always resolve parameters (fancyweb) * bug #37191 [HttpClient] fix offset computation for data chunks (nicolas-grekas) * bug #37177 [Ldap] fix refreshUser() ignoring extra_fields (arkste) * bug #37181 [Mailer] Remove an internal annot (fabpot) * bug #36913 [FrameworkBundle] fix type annotation on ControllerTrait::addFlash() (ThomasLandauer) * bug #37162 [Mailer] added the reply-to addresses to the API SES transport request. (ribeiropaulor) * bug #37167 [Mime] use fromString when creating a new Address (fabpot) * bug #37169 [Cache] fix forward compatibility with Doctrine DBAL 3 (xabbuh) * bug #37159 [Mailer] Fixed generator bug when creating multiple transports using Transport::fromDsn (atailouloute) * bug #37048 [HttpClient] fix monitoring timeouts when other streams are active (nicolas-grekas) * bug #37085 [Form] properly cascade validation to child forms (xabbuh) * bug #37095 [PhpUnitBridge] Fix undefined index when output of "composer show" cannot be parsed (nicolas-grekas) * bug #37092 [PhpUnitBridge] fix undefined var on version 3.4 (nicolas-grekas) * bug #37065 [HttpClient] Throw JsonException instead of TransportException on empty response in Response::toArray() (jeroennoten) * bug #37077 [WebProfilerBundle] Move ajax clear event listener initialization on loadToolbar (Bruno BOUTAREL) * bug #37049 [Serializer] take into account the context when preserving empty array objects (xabbuh) * 4.4.9 (2020-05-31) * bug #37008 [Security] Fixed AbstractToken::hasUserChanged() (wouterj) * bug #36894 [Validator] never directly validate Existence (Required/Optional) constraints (xabbuh) * bug #37007 [Console] Fix QuestionHelper::disableStty() (chalasr) * bug #36865 [Form] validate subforms in all validation groups (xabbuh) * bug #36907 Fixes sprintf(): Too few arguments in form transformer (pedrocasado) * bug #36868 [Validator] Use Mime component to determine mime type for file validator (pierredup) * bug #37000 Add meaningful message when using ProcessHelper and Process is not installed (l-vo) * bug #36995 [TwigBridge] fix fallback html-to-txt body converter (nicolas-grekas) * bug #36993 [ErrorHandler] fix setting $trace to null in FatalError (nicolas-grekas) * bug #36987 Handle fetch mode deprecation of DBAL 2.11. (derrabus) * bug #36974 [Security] Fixed handling of CSRF logout error (wouterj) * bug #36947 [Mime] Allow email message to have "To", "Cc", or "Bcc" header to be valid (Ernest Hymel) * bug #36914 Parse and render anonymous classes correctly on php 8 (derrabus) * bug #36921 [OptionsResolver][Serializer] Remove calls to deprecated ReflectionParameter::getClass() (derrabus) * bug #36920 [VarDumper] fix PHP 8 support (nicolas-grekas) * bug #36917 [Cache] Accessing undefined constants raises an Error in php8 (derrabus) * bug #36891 Address deprecation of ReflectionType::getClass() (derrabus) * bug #36899 [VarDumper] ReflectionFunction::isDisabled() is deprecated (derrabus) * bug #36905 [Validator] Catch expected ValueError (derrabus) * bug #36915 [DomCrawler] Catch expected ValueError (derrabus) * bug #36908 [Cache][HttpClient] Made method signatures compatible with their corresponding traits (derrabus) * bug #36906 [DomCrawler] Catch expected ValueError (derrabus) * bug #36904 [PropertyAccess] Parse php 8 TypeErrors correctly (derrabus) * bug #36839 [BrowserKit] Raw body with custom Content-Type header (azhurb) * bug #36896 [Config] Removed implicit cast of ReflectionProperty to string (derrabus) * bug #35944 [Security/Core] Fix wrong roles comparison (thlbaut) * bug #36882 [PhpUnitBridge] fix installing under PHP >= 8 (nicolas-grekas) * bug #36833 [HttpKernel] Fix that the `Store` would not save responses with the X-Content-Digest header present (mpdude) * bug #36867 [PhpUnitBridge] fix bad detection of unsilenced deprecations (nicolas-grekas) * bug #36862 [Security] Unserialize $parentData, if needed, to avoid errors (rfaivre) * bug #36855 [HttpKernel] Fix error logger when stderr is redirected to /dev/null (fabpot) * bug #36838 [HttpKernel] Bring back the debug toolbar (derrabus) * bug #36592 [BrowserKit] Allow Referer set by history to be overridden (Slamdunk) * bug #36823 [HttpClient] fix PHP warning + accept status code >= 600 (nicolas-grekas) * bug #36824 [Security/Core] fix compat of `NativePasswordEncoder` with pre-PHP74 values of `PASSWORD_*` consts (nicolas-grekas) * bug #36811 [DependencyInjection] Fix register event listeners compiler pass (X-Coder264) * bug #36789 Change priority of KernelEvents::RESPONSE subscriber (marcw) * bug #36794 [Serializer] fix issue with PHP 8 (nicolas-grekas) * bug #36786 [WebProfiler] Remove 'none' when appending CSP tokens (ndench) * bug #36743 [Yaml] Fix escaped quotes in quoted multi-line string (ossinkine) * bug #36777 [TwigBundle] FormExtension does not have a constructor anymore since sf 4.0 (Tobion) * bug #36716 [Mime] handle passing custom mime types as string (mcneely) * bug #36747 Queue name is a required parameter (theravel) * bug #36751 [Mime] fix bad method call on `EmailAddressContains` (Kocal) * bug #36696 [Console] don't check tty on stdin, it breaks with "data lost during stream conversion" (nicolas-grekas) * bug #36569 [PhpUnitBridge] Mark parent class also covered in CoverageListener (lyrixx) * bug #36690 [Yaml] prevent notice for invalid octal numbers on PHP 7.4 (xabbuh) * bug #36590 [Console] Default hidden question to 1 attempt for non-tty session (ostrolucky) * bug #36497 [Filesystem] Handle paths on different drives (crishoj) * bug #36678 [WebProfiler] Do not add src-elem CSP directives if they do not exist (ndench) * bug #36501 [DX] Show the ParseException message in all YAML file loaders (fancyweb) * bug #36683 [Yaml] fix parse error when unindented collections contain a comment (wdiesveld) * bug #36672 [Validator] Skip validation when email is an empty object (acrobat) * bug #36673 [PhpUnitBridge] fix PHP 5.3 compat again (nicolas-grekas) * bug #36505 [Translation] Fix for translation:update command updating ICU messages (artemoliynyk) * bug #36627 [Validator] fix lazy property usage. (bendavies) * bug #36601 [Serializer] do not transform empty \Traversable to Array (soyuka) * bug #36606 [Cache] Fixed not supported Redis eviction policies (SerheyDolgushev) * bug #36625 [PhpUnitBridge] fix compat with PHP 5.3 (nicolas-grekas) * 4.4.8 (2020-04-28) * bug #36536 [Cache] Allow invalidateTags calls to be traced by data collector (l-vo) * bug #36566 [PhpUnitBridge] Use COMPOSER_BINARY env var if available (fancyweb) * bug #36560 [YAML] escape DEL(\x7f) (sdkawata) * bug #36539 [PhpUnitBridge] fix compatibility with phpunit 9 (garak) * bug #36555 [Cache] skip APCu in chains when the backend is disabled (nicolas-grekas) * bug #36523 [Form] apply automatically step=1 for datetime-local input (ottaviano) * bug #36519 [FrameworkBundle] debug:autowiring: Fix wrong display when using class_alias (weaverryan) * bug #36454 [DependencyInjection][ServiceSubscriber] Support late aliases (fancyweb) * bug #36498 [Security/Core] fix escape for username in LdapBindAuthenticationProvider.php (stoccc) * bug #36506 [FrameworkBundle] Fix session.attribute_bag service definition (fancyweb) * bug #36500 [Routing][PrefixTrait] Add the _locale requirement (fancyweb) * bug #36457 [Cache] CacheItem with tag is never a hit after expired (alexander-schranz, nicolas-grekas) * bug #36490 [HttpFoundation] workaround PHP bug in the session module (nicolas-grekas) * bug #36483 [SecurityBundle] fix accepting env vars in remember-me configurations (zek) * bug #36343 [Form] Fixed handling groups sequence validation (HeahDude) * bug #36460 [Cache] Avoid memory leak in TraceableAdapter::reset() (lyrixx) * bug #36467 Mailer from sender fixes (fabpot) * bug #36408 [PhpUnitBridge] add PolyfillTestCaseTrait::expectExceptionMessageMatches to provide FC with recent phpunit versions (soyuka) * bug #36447 Remove return type for Twig function workflow_metadata() (gisostallenberg) * bug #36449 [Messenger] Make sure redis transports are initialized correctly (Seldaek) * bug #36411 [Form] RepeatedType should always have inner types mapped (biozshock) * bug #36441 [DI] fix loading defaults when using the PHP-DSL (nicolas-grekas) * bug #36434 [HttpKernel] silence E_NOTICE triggered since PHP 7.4 (xabbuh) * bug #36365 [Validator] Fixed default group for nested composite constraints (HeahDude) * bug #36422 [HttpClient] fix HTTP/2 support on non-SSL connections - CurlHttpClient only (nicolas-grekas) * bug #36417 Force ping after transport exception (oesteve) * bug #35591 [Validator] do not merge constraints within interfaces (greedyivan) * bug #36377 [HttpClient] Fix scoped client without query option configuration (X-Coder264) * bug #36387 [DI] fix detecting short service syntax in yaml (nicolas-grekas) * bug #36392 [DI] add missing property declarations in InlineServiceConfigurator (nicolas-grekas) * bug #36400 Allowing empty secrets to be set (weaverryan) * bug #36380 [Process] Fixed input/output error on PHP 7.4 (mbardelmeijer) * bug #36376 [Workflow] Use a strict comparison when retrieving raw marking in MarkingStore (lyrixx) * bug #36375 [Workflow] Use a strict comparison when retrieving raw marking in MarkingStore (lyrixx) * bug #36305 [PropertyInfo][ReflectionExtractor] Check the array mutator prefixes last when the property is singular (fancyweb) * bug #35656 [HttpFoundation] Fixed session migration with custom cookie lifetime (Guite) * bug #36342 [HttpKernel][FrameworkBundle] fix compat with Debug component (nicolas-grekas) * bug #36315 [WebProfilerBundle] Support for Content Security Policy style-src-elem and script-src-elem in WebProfiler (ampaze) * bug #36286 [Validator] Allow URL-encoded special characters in basic auth part of URLs (cweiske) * bug #36335 [Security] Track session usage whenever a new token is set (wouterj) * bug #36332 [Serializer] Fix unitialized properties (from PHP 7.4.2) when serializing context for the cache key (alanpoulain) * bug #36337 [MonologBridge] Fix $level type (fancyweb) * bug #36223 [Security][Http][SwitchUserListener] Ignore all non existent username protection errors (fancyweb) * bug #36239 [HttpKernel][LoggerDataCollector] Prevent keys collisions in the sanitized logs processing (fancyweb) * bug #36245 [Validator] Fixed calling getters before resolving groups (HeahDude) * bug #36265 Fix the reporting of deprecations in twig:lint (stof) * bug #36283 [Security] forward multiple attributes voting flag (xabbuh) * 4.4.7 (2020-03-30) * security #cve-2020-5255 [HttpFoundation] Do not set the default Content-Type based on the Accept header (yceruto) * security #cve-2020-5275 [Security] Fix access_control behavior with unanimous decision strategy (chalasr) * bug #36262 [DI] fix generating TypedReference from PriorityTaggedServiceTrait (nicolas-grekas) * bug #36252 [Security/Http] Allow setting cookie security settings for delete_cookies (wouterj) * bug #36261 [FrameworkBundle] revert to legacy wiring of the session when circular refs are detected (nicolas-grekas) * bug #36259 [DomCrawler] Fix BC break in assertions breaking Panther (dunglas) * bug #36181 [BrowserKit] fixed missing post request parameters in file uploads (codebay) * bug #36216 [Validator] Assert Valid with many groups (phucwan91) * bug #36222 [Console] Fix OutputStream for PHP 7.4 (guillbdx) * 4.4.6 (2020-03-27) * bug #36169 [HttpKernel] fix locking for PHP 7.4+ (nicolas-grekas) * bug #36175 [Security/Http] Remember me: allow to set the samesite cookie flag (dunglas) * bug #36173 [Http Foundation] Fix clear cookie samesite (guillbdx) * bug #36176 [Security] Check if firewall is stateless before checking for session/previous session (koenreiniers) * bug #36149 [Form] Support customized intl php.ini settings (jorrit) * bug #36172 [Debug] fix for PHP 7.3.16+/7.4.4+ (nicolas-grekas) * bug #36151 [Security] Fixed hardcoded value of SODIUM_CRYPTO_PWHASH_MEMLIMIT_INTERACTIVE (lyrixx) * bug #36141 Prevent warning in proc_open() (BenMorel) * bug #36143 [FrameworkBundle] Fix Router Cache (guillbdx) * bug #36103 [DI] fix preloading script generation (nicolas-grekas) * bug #36118 [Security/Http] don't require the session to be started when tracking its id (nicolas-grekas) * bug #36108 [DI] Fix CheckTypeDeclarationPass (guillbdx) * bug #36121 [VarDumper] fix side-effect by not using mt_rand() (nicolas-grekas) * bug #36073 [PropertyAccess][DX] Improved errors when reading uninitialized properties (HeahDude) * bug #36063 [FrameworkBundle] start session on flashbag injection (William Arslett) * bug #36031 [Console] Fallback to default answers when unable to read input (ostrolucky) * bug #36083 [DI][Form] Fixed test suite (TimeType changes & unresolved merge conflict) (wouterj) * bug #36026 [Mime] Fix boundary header (guillbdx) * bug #36020 [Form] ignore microseconds submitted by Edge (xabbuh) * bug #36038 [HttpClient] disable debug log with curl 7.64.0 (nicolas-grekas) * bug #36041 fix import from config file using type: glob (Tobion) * bug #35987 [DoctrineBridge][DoctrineExtractor] Fix wrong guessed type for "json" type (fancyweb) * bug #35949 [DI] Fix container lint command when a synthetic service is used in an expression (HypeMC) * bug #36023 [HttpClient] fix requests to hosts that idn_to_ascii() cannot handle (nicolas-grekas) * bug #35938 [Form] Handle false as empty value on expanded choices (fancyweb) * bug #36030 [SecurityBundle] Minor fix in LDAP config tree builder (HeahDude) * bug #35993 Remove int return type from FlattenException::getCode (wucdbm) * bug #36004 [Yaml] fix dumping strings containing CRs (xabbuh) * bug #35982 [DI] Fix XmlFileLoader bad error message (przemyslaw-bogusz) * bug #35957 [DI] ignore extra tags added by autoconfiguration in PriorityTaggedServiceTrait (nicolas-grekas) * bug #35937 Revert "bug symfony#28179 [DomCrawler] Skip disabled fields processing in Form" (dmaicher) * bug #35928 [Routing] Prevent localized routes _locale default & requirement from being overridden (fancyweb) * bug #35912 [FrameworkBundle] register only existing transport factories (xabbuh) * bug #35899 [DomCrawler] prevent deprecation being triggered from assertion (xabbuh) * bug #35910 [SecurityBundle] Minor fixes in configuration tree builder (HeahDude) * 4.4.5 (2020-02-29) * bug #35781 [Form] NumberToLocalizedStringTransformer return int if scale = 0 (VincentLanglet) * bug #35846 [Serializer] prevent method calls on null values (xabbuh) * bug #35897 [FrameworkBundle] add missing Messenger options to XML schema definition (xabbuh) * bug #35870 [ErrorHandler] fix parsing static return type on interface method annotation (alekitto) * bug #35839 [Security] Allow switching to another user when already switched (chalasr) * bug #35851 [DoctrineBridge] Use new Types::* constants and support new json types (fancyweb) * bug #35716 [PhpUnitBridge] Fix compatibility to PHPUnit 9 (Benjamin) * bug #35803 [Cache] Fix versioned namespace atomic clears (trvrnrth) * bug #35817 [DoctrineBridge] Use new Types::* constants and support new json type (fancyweb) * bug #35832 [Debug][ErrorHandler] improved deprecation notices for methods new args and return type (HeahDude) * bug #35827 [BrowserKit] Nested file array prevents uploading file (afilina) * bug #35707 [ExpressionLanguage] Fixed collisions of character operators with object properties (Andrej-in-ua) * bug #35794 [DoctrineBridge][DoctrineExtractor] Fix indexBy with custom and some core types (fancyweb) * bug #35787 [PhpUnitBridge] Use trait instead of extending deprecated class (marcello-moenkemeyer) * bug #35792 [Security] Prevent TypeError in case RememberMetoken has no attached user (nikophil) * bug #35735 [Routing] Add locale requirement for localized routes (mtarld) * bug #35772 [Config] don't throw on missing excluded paths (nicolas-grekas) * bug #35774 [Ldap] force default network timeout (nicolas-grekas) * bug #35702 [VarDumper] fixed DateCaster not displaying additional fields (Makdessi Alex) * bug #35722 [HttpKernel] Set previous exception when rethrown from controller resolver (danut007ro) * bug #35714 [HttpClient] Correctly remove trace level options for HttpCache (aschempp) * bug #35718 [HttpKernel] fix registering DebugHandlersListener regardless of the PHP_SAPI (nicolas-grekas) * bug #35728 Add missing autoload calls (greg0ire) * bug #35693 [Finder] Fix unix root dir issue (chr-hertel) * bug #35709 [HttpFoundation] fix not sending Content-Type header for 204 responses (Tobion) * bug #35710 [ErrorHandler] silence warning when zend.assertions=-1 (nicolas-grekas) * bug #35676 [Console] Handle zero row count in appendRow() for Table (Adam Prickett) * bug #35696 [Console] Don't load same-namespace alternatives on exact match (chalasr) * bug #35674 [HttpClient] fix getting response content after its destructor throwed an HttpExceptionInterface (nicolas-grekas) * bug #35672 [HttpClient] fix HttpClientDataCollector when handling canceled responses (thematchless) * bug #35641 [Process] throw when PhpProcess::fromShellCommandLine() is used (Guikingone) * bug #35645 [ErrorHandler] Never throw on warnings triggered by assert() and set assert.exception=1 in Debug::enable() (nicolas-grekas) * bug #35633 [Mailer] Do not ping the SMTP server before sending every message (micheh) * bug #33897 [Console] Consider STDIN interactive (ostrolucky) * bug #35605 [HttpFoundation][FrameworkBundle] fix support for samesite in session cookies (fabpot) * bug #35609 [DoctrineBridge] Fixed submitting ids with query limit or offset (HeahDude) * bug #35597 [PHPunit bridge] Provide current file as file path (greg0ire) * bug #33960 [DI] Unknown env prefix not recognized as such (ro0NL) * bug #35342 [DI] Fix support for multiple tags for locators and iterators (Alexandre Parent) * bug #33820 [PhpUnitBridge] Fix some errors when using serialized deprecations (l-vo) * bug #35553 Fix HTTP client config handling (julienfalque) * bug #35588 [ErrorHandler] Escape variable in Exception template (jderusse) * bug #35583 Add missing use statements (fabpot) * bug #35582 Missing use statement 4.4 (fabpot) * bug #34123 [Form] Fix handling of empty_data's \Closure value in Date/Time form types (yceruto) * bug #35537 [Config][XmlReferenceDumper] Prevent potential \TypeError (fancyweb) * bug #35227 [Mailer] Fix broken mandrill http send for recipients with names (vilius-g) * bug #35430 [Translation] prefer intl domain when adding messages to catalogue (Guite) * bug #35497 Fail on empty password verification (without warning on any implementation) (Stefan Kruppa) * bug #35546 [Validator] check for __get method existence if property is uninitialized (alekitto) * bug #35332 [Yaml][Inline] Fail properly on empty object tag and empty const tag (fancyweb) * bug #35489 [PhpUnitBridge] Fix running skipped tests expecting only deprecations (chalasr) * bug #35161 [FrameworkBundle] Check non-null type for numeric type (Arman-Hosseini) * bug #34059 [DomCrawler] Skip disabled fields processing in Form (sbogx) * bug #34114 [Console] SymonfyStyle - Check value isset to avoid PHP notice (leevigraham) * bug #35557 [Config] dont catch instances of Error (nicolas-grekas) * bug #35562 [HttpClient] fix HttpClientDataCollector when handling canceled responses (nicolas-grekas) * 4.4.4 (2020-01-31) * bug #35530 [HttpClient] Fix regex bearer (noniagriconomie) * bug #35532 [Validator] fix access to uninitialized property when getting value (greedyivan) * bug #35486 [Translator] Default value for 'sort' option in translation:update should be 'asc' (versgui) * bug #35305 [HttpKernel] Fix stale-if-error behavior, add tests (mpdude) * bug #34808 [PhpUnitBridge] Properly handle phpunit arguments for configuration file (biozshock) * bug #35517 [Intl] Provide more locale translations (ro0NL) * bug #35518 [Mailer] Fix STARTTLS support for Postmark and Mandrill (fabpot) * bug #35480 [Messenger] Check for all serialization exceptions during message dec… (Patrick Berenschot) * bug #35502 [Messenger] Fix bug when using single route with XML config (Nyholm) * bug #35438 [SecurityBundle] fix ldap_bind service arguments (Ioni14) * bug #35429 [DI] CheckTypeDeclarationsPass now checks if value is type of parameter type (pfazzi) * bug #35464 [ErrorHandler] Add debug argument to decide whether debug page is shown or not (yceruto) * bug #35423 Fixes a runtime error when accessing the cache panel (DamienHarper) * bug #35428 [Cache] fix checking for igbinary availability (nicolas-grekas) * bug #35424 [HttpKernel] Check if lock can be released (sjadema) * 4.4.3 (2020-01-21) * bug #35364 [Yaml] Throw on unquoted exclamation mark (fancyweb) * bug #35065 [Security] Use supportsClass in addition to UnsupportedUserException (linaori) * bug #35351 Revert #34797 "Fixed translations file dumper behavior" and fix #34713 (yceruto) * bug #35355 [DI] Fix EnvVar not loaded when Loader requires an env var (jderusse) * bug #35343 [Security] Fix RememberMe with null password (jderusse) * bug #34223 [DI] Suggest typed argument when binding fails with untyped argument (gudfar) * bug #35323 [FrameworkBundle] Set booted flag to false when test kernel is unset (thiagocordeiro) * bug #35324 [HttpClient] Fix strict parsing of response status codes (Armando-Walmeric) * bug #35318 [Yaml] fix PHP const mapping keys using the inline notation (xabbuh) * bug #35306 [FrameworkBundle] Make sure one can use fragments.hinclude_default_template (Nyholm) * bug #35304 [HttpKernel] Fix that no-cache MUST revalidate with the origin (mpdude) * bug #35299 Avoid `stale-if-error` in FrameworkBundle's HttpCache if kernel.debug = true (mpdude) * bug #35240 [SecurityBundle] Fix collecting traceable listeners info on lazy firewalls (chalasr) * bug #35151 [DI] deferred exceptions in ResolveParameterPlaceHoldersPass (Islam93) * bug #35290 [Filesystem][FilesystemCommonTrait] Use a dedicated directory when there are no namespace (fancyweb) * bug #35099 [FrameworkBundle] Do not throw exception on value generate key (jderusse) * bug #35278 [EventDispatcher] expand listener in place (xabbuh) * bug #35269 [HttpKernel][FileLocator] Fix deprecation message (fancyweb) * bug #35254 [PHPUnit-Bridge] Fail-fast in simple-phpunit if one of the passthru() commands fails (mpdude) * bug #35261 [Routing] Fix using a custom matcher & generator dumper class (fancyweb) * bug #34643 [Dotenv] Fixed infinite loop with missing quote followed by quoted value (naitsirch) * bug #35239 [Security\Http] Prevent canceled remember-me cookie from being accepted (chalasr) * bug #35267 [Debug] fix ClassNotFoundFatalErrorHandler (nicolas-grekas) * bug #35252 [Serializer] Fix cache in MetadataAwareNameConverter (bastnic) * bug #35200 [TwigBridge] do not render preferred choices as selected (xabbuh) * bug #35243 [HttpKernel] release lock explicitly (nicolas-grekas) * bug #35193 [TwigBridge] button_widget now has its title attr translated even if its label = null or false (stephen-lewis) * bug #35219 [PhpUnitBridge] When using phpenv + phpenv-composer plugin, composer executable is wrapped into a bash script (oleg-andreyev) * bug #35150 [Messenger] Added check if json_encode succeeded (toooni) * bug #35137 [Messenger] Added check if json_encode succeeded (toooni) * bug #35170 [FrameworkBundle][TranslationUpdateCommand] Do not output positive feedback on stderr (fancyweb) * bug #35245 [HttpClient] fix exception in case of PSR17 discovery failure (nicolas-grekas) * bug #35244 [Cache] fix processing chain adapter based cache pool (xabbuh) * bug #35247 [FrameworkBundle][ContainerLintCommand] Only skip .errored. services (fancyweb) * bug #35225 [DependencyInjection] Handle ServiceClosureArgument for callable in container linting (shieldo) * bug #35223 [HttpClient] Don't read from the network faster than the CPU can deal with (nicolas-grekas) * bug #35214 [DI] DecoratorServicePass should keep container.service_locator on the decorated definition (malarzm) * bug #35209 [HttpClient] fix support for non-blocking resource streams (nicolas-grekas) * bug #35210 [HttpClient] NativeHttpClient should not send >1.1 protocol version (nicolas-grekas) * bug #35162 [Mailer] Make sure you can pass custom headers to Mailgun (Nyholm) * bug #33672 [Mailer] Remove line breaks in email attachment content (Stuart Fyfe) * bug #35101 [Routing] Fix i18n routing when the url contains the locale (fancyweb) * bug #35124 [TwigBridge][Form] Added missing help messages in form themes (cmen) * bug #35195 [HttpClient] fix casting responses to PHP streams (nicolas-grekas) * bug #35168 [HttpClient] fix capturing SSL certificates with NativeHttpClient (nicolas-grekas) * bug #35134 [PropertyInfo] Fix BC issue in phpDoc Reflection library (jaapio) * bug #35184 [Mailer] Payload sent to Sendgrid doesn't include names (versgui) * bug #35173 [Mailer][MailchimpBridge] Fix missing attachments when sending via Mandrill API (vilius-g) * bug #35172 [Mailer][MailchimpBridge] Fix incorrect sender address when sender has name (vilius-g) * bug #35125 [Translator] fix performance issue in MessageCatalogue and catalogue operations (ArtemBrovko) * bug #35120 [HttpClient] fix scheduling pending NativeResponse (nicolas-grekas) * bug #35117 [Cache] do not overwrite variable value (xabbuh) * bug #35113 [VarDumper] Fix "Undefined index: argv" when using CliContextProvider (xepozz) * bug #34673 Migrate server:log command away from WebServerBundle (jderusse) * bug #35103 [Translation] Use `locale_parse` for computing fallback locales (alanpoulain) * bug #35060 [Security] Fix missing defaults for auto-migrating encoders (chalasr) * bug #35067 [DependencyInjection][CheckTypeDeclarationsPass] Handle \Closure for callable (fancyweb) * bug #35094 [Console] Fix filtering out identical alternatives when there is a command loader (fancyweb) * 4.4.2 (2019-12-19) * bug #35051 [DependencyInjection] Fix binding tagged services to containers (nicolas-grekas) * bug #35039 [DI] skip looking for config class when the extension class is anonymous (nicolas-grekas) * bug #35049 [ProxyManager] fix generating proxies for root-namespaced classes (nicolas-grekas) * bug #35022 [Dotenv] FIX missing getenv (mccullagh) * bug #35023 [HttpKernel] ignore failures generated by opcache.restrict_api (nicolas-grekas) * bug #35024 [HttpFoundation] fix pdo session handler for sqlsrv (azjezz) * bug #35025 [HttpClient][Psr18Client] Remove Psr18ExceptionTrait (fancyweb) * bug #35015 [Config] fix perf of glob discovery when GLOB_BRACE is not available (nicolas-grekas) * bug #35014 [HttpClient] make pushed responses retry-able (nicolas-grekas) * bug #35010 [VarDumper] ignore failing __debugInfo() (nicolas-grekas) * bug #34998 [DI] fix auto-binding service providers to their service subscribers (nicolas-grekas) * bug #34954 [Mailer] Fixed undefined index when sending via Mandrill API (wulff) * bug #33670 [DI] Service locators can't be decorated (malarzm) * bug #35000 [Console][SymfonyQuestionHelper] Handle multibytes question choices keys and custom prompt (fancyweb) * bug #35005 [HttpClient] force HTTP/1.1 when NTLM auth is used (nicolas-grekas) * bug #34707 [Validation][FrameworkBundle] Allow EnableAutoMapping to work without auto-mapping namespaces (ogizanagi) * bug #34996 Fix displaying anonymous classes on PHP 7.4 (nicolas-grekas) * bug #29839 [Validator] fix comparisons with null values at property paths (xabbuh) * bug #34900 [DoctrineBridge] Fixed submitting invalid ids when using queries with limit (HeahDude) * bug #34791 [Serializer] Skip uninitialized (PHP 7.4) properties in PropertyNormalizer and ObjectNormalizer (vudaltsov) * bug #34956 [Messenger][AMQP] Use delivery_mode=2 by default (lyrixx) * bug #34915 [FrameworkBundle] Fix invalid Windows path normalization in TemplateNameParser (mvorisek) * bug #34981 stop using deprecated Doctrine persistence classes (xabbuh) * bug #34904 [Validator][ConstraintValidator] Safe fail on invalid timezones (fancyweb) * bug #34935 [FrameworkBundle][DependencyInjection] Skip removed ids in the lint container command and its associated pass (fancyweb) * bug #34957 [Security] Revert "AbstractAuthenticationListener.php error instead info" (larzuk91) * bug #34922 [FrameworkBundle][Secrets] Hook configured local dotenv file (fancyweb) * bug #34967 [HttpFoundation] fix redis multi host dsn not recognized (Jan Christoph Beyer) * bug #34963 [Lock] fix constructor argument type declaration (xabbuh) * bug #34955 Require doctrine/persistence ^1.3 (nicolas-grekas) * bug #34923 [DI] Fix support for immutable setters in CallTrait (Lctrs) * bug #34878 [TwigBundle] fix broken FilesystemLoader::exists() with Twig 3 (dpesch) * bug #34921 [HttpFoundation] Removed "Content-Type" from the preferred format guessing mechanism (yceruto) * bug #34886 [HttpKernel] fix triggering deprecation in file locator (xabbuh) * bug #34918 [Translation] fix memoryleak in PhpFileLoader (nicolas-grekas) * bug #34920 [Routing] fix memoryleak when loading compiled routes (nicolas-grekas) * bug #34787 [Cache] Propagate expiry when syncing items in ChainAdapter (trvrnrth) * bug #34694 [Validator] Fix auto-mapping constraints should not be validated (ogizanagi) * bug #34848 [Process] change the syntax of portable command lines (nicolas-grekas) * bug #34862 [FrameworkBundle][ContainerLintCommand] Reinitialize bundles when the container is reprepared (fancyweb) * bug #34896 [Cache] fix memory leak when using PhpFilesAdapter (nicolas-grekas) * bug #34438 [HttpFoundation] Use `Cache-Control: must-revalidate` only if explicit lifetime has been given (mpdude) * bug #34449 [Yaml] Implement multiline string as scalar block for tagged values (natepage) * bug #34601 [MonologBridge] Fix debug processor datetime type (mRoca) * bug #34842 [ExpressionLanguage] Process division by zero (tigr1991) * bug #34902 [PropertyAccess] forward caught exception (xabbuh) * bug #34903 Fixing bad order of operations with null coalescing operator (weaverryan) * bug #34888 [TwigBundle] add tags before processing them (xabbuh) * bug #34760 [Mailer] Fix SMTP Authentication when using STARTTLS (DjLeChuck) * bug #34762 [Config] never try loading failed classes twice with ClassExistenceResource (nicolas-grekas) * bug #34783 [DependencyInjection] Handle env var placeholders in CheckTypeDeclarationsPass (fancyweb) * bug #34839 [Cache] fix memory leak when using PhpArrayAdapter (nicolas-grekas) * bug #34812 [Yaml] fix parsing negative octal numbers (xabbuh) * bug #34854 [Messenger] gracefully handle missing event dispatchers (xabbuh) * bug #34802 [Security] Check UserInterface::getPassword is not null before calling needsRehash (dbrekelmans) * bug #34788 [SecurityBundle] Properly escape regex in AddSessionDomainConstraintPass (fancyweb) * bug #34859 [SecurityBundle] Fix TokenStorage::reset not called in stateless firewall (jderusse) * bug #34827 [HttpFoundation] get currently session.gc_maxlifetime if ttl doesnt exists (rafaeltovar) * bug #34755 [FrameworkBundle] resolve service locators in `debug:*` commands (nicolas-grekas) * bug #34832 [Validator] Allow underscore character "_" in URL username and password (romainneutron) * bug #34811 [TwigBridge] Update bootstrap_4_layout.html.twig missing switch-custom label (sabruss) * bug #34820 [FrameworkBundle][SodiumVault] Create secrets directory only when it is used (fancyweb) * bug #34776 [DI] fix resolving bindings for named TypedReference (nicolas-grekas) * bug #34794 [DependencyInjection] Resolve expressions in CheckTypeDeclarationsPass (fancyweb) * bug #34797 [Translation] Fix FileDumper behavior (yceruto) * bug #34738 [SecurityBundle] Passwords are not encoded when algorithm set to "true" (nieuwenhuisen) * bug #34759 [SecurityBundle] Fix switch_user provider configuration handling (fancyweb) * bug #34779 [Security] do not validate passwords when the hash is null (xabbuh) * bug #34786 [SecurityBundle] Use config variable in AnonymousFactory (martijnboers) * bug #34784 [FrameworkBundle] Set the parameter bag as resolved in ContainerLintCommand (fancyweb) * bug #34763 [Security/Core] Fix checking for SHA256/SHA512 passwords (David Brooks) * bug #34757 [DI] Fix making the container path-independent when the app is in /app (nicolas-grekas) * 4.4.1 (2019-12-01) * bug #34732 [DependencyInjection][Xml] Fix the attribute 'tag' is not allowed in 'bind' tag (tienvx) * bug #34729 [DI] auto-register singly implemented interfaces by default (nicolas-grekas) * bug #34728 [DI] fix overriding existing services with aliases for singly-implemented interfaces (nicolas-grekas) * bug #34649 more robust initialization from request (dbu) * bug #34715 [TwigBundle] remove service when base class is missing (xabbuh) * bug #34600 [DoctrineBridge] do not depend on the QueryBuilder from the ORM (xabbuh) * bug #34627 [Security/Http] call auth listeners/guards eagerly when they "support" the request (nicolas-grekas) * bug #34671 [Security] Fix clearing remember-me cookie after deauthentication (chalasr) * bug #34711 Fix the translation commands when a template contains a syntax error (fabpot) * bug #34032 [Mime] Fixing multidimensional array structure with FormDataPart (jvahldick) * bug #34560 [Config][ReflectionClassResource] Handle parameters with undefined constant as their default values (fancyweb) * bug #34695 [Config] don't break on virtual stack frames in ClassExistenceResource (nicolas-grekas) * bug #34716 [DependencyInjection] fix dumping number-like string parameters (xabbuh) * bug #34558 [Console] Fix autocomplete multibyte input support (fancyweb) * bug #34130 [Console] Fix commands description with numeric namespaces (fancyweb) * bug #34562 [DI] Skip unknown method calls for factories in check types pass (fancyweb) * bug #34677 [EventDispatcher] Better error reporting when arguments to dispatch() are swapped (rimas-kudelis) * bug #33573 [TwigBridge] Add row_attr to all form themes (fancyweb) * bug #34019 [Serializer] CsvEncoder::NO_HEADERS_KEY ignored when used in constructor (Dario Savella) * bug #34083 [Form] Keep preferred_choices order for choice groups (vilius-g) * bug #34091 [Debug] work around failing chdir() on Darwin (mary2501) * bug #34305 [PhpUnitBridge] Read configuration CLI directive (ro0NL) * bug #34490 [Serializer] Fix MetadataAwareNameConverter usage with string group (antograssiot) * bug #34632 [Console] Fix trying to access array offset on value of type int (Tavafi) * bug #34669 [HttpClient] turn exception into log when the request has no content-type (nicolas-grekas) * bug #34662 [HttpKernel] Support typehint to deprecated FlattenException in controller (andrew-demb) * bug #34619 Restores preview mode support for Html and Serializer error renderers (yceruto) * bug #34636 [VarDumper] notice on potential undefined index (sylvainmetayer) * bug #34668 [Cache] Make sure we get the correct number of values from redis::mget() (thePanz) * bug #34621 [Routing] Continue supporting single colon in object route loaders (fancyweb) * bug #34554 [HttpClient] Fix early cleanup of pushed HTTP/2 responses (lyrixx) * bug #34607 [HttpKernel] Ability to define multiple kernel.reset tags (rmikalkenas) * bug #34599 [Mailer][Mailchimp Bridge] Throwing undefined index _id when setting message id (monteiro) * bug #34569 [Workflow] Apply the same logic of precedence between the apply() and the buildTransitionBlockerList() method (lyrixx) * bug #34580 [HttpKernel] Don't cache "not-fresh" state (nicolas-grekas) * bug #34577 [FrameworkBundle][Cache] Don't deep-merge cache pools configuration (alxndrbauer) * bug #34515 [DependencyInjection] definitions are valid objects (xabbuh) * bug #34536 [SecurityBundle] Don't require a user provider for the anonymous listener (chalasr) * bug #34533 [Monolog Bridge] Fixed accessing static property as non static. (Sander-Toonen) * bug #34502 [FrameworkBundle][ContainerLint] Keep "removing" compiler passes (fancyweb) * bug #34552 [Dotenv] don't fail when referenced env var does not exist (xabbuh) * bug #34546 [Serializer] Add DateTimeZoneNormalizer into Dependency Injection (jewome62) * bug #34547 [Messenger] Error when specified default bus is not among the configured (vudaltsov) * bug #34513 [Validator] remove return type declaration from __sleep() (xabbuh) * bug #34551 [Security] SwitchUser is broken when the User Provider always returns a valid user (tucksaun) * bug #34385 Avoid empty "If-Modified-Since" header in validation request (mpdude) * bug #34458 [Validator] ConstraintValidatorTestCase: add missing return value to mocked validate method calls (ogizanagi) * bug #34516 [HttpKernel] drop return type declaration (xabbuh) * bug #34474 [Messenger] Ignore stamps in in-memory transport (tienvx) * 4.4.0 (2019-11-21) * bug #34464 [Form] group constraints when calling the validator (nicolas-grekas) * bug #34451 [DependencyInjection] Fix dumping multiple deprecated aliases (shyim) * bug #34448 [Form] allow button names to start with uppercase letter (xabbuh) * bug #34428 [Security] Fix best encoder not wired using migrate_from (chalasr) * 4.4.0-RC1 (2019-11-17) * bug #34419 [Cache] Disable igbinary on PHP >= 7.4 (nicolas-grekas) * bug #34347 [Messenger] Perform no deep merging of bus middleware (vudaltsov) * bug #34366 [HttpFoundation] Allow redirecting to URLs that contain a semicolon (JayBizzle) * feature #34405 [HttpFoundation] Added possibility to configure expiration time in redis session handler (mantulo) * bug #34397 [FrameworkBundle] Remove project dir from Translator cache vary scanned directories (fancyweb) * bug #34384 [DoctrineBridge] Improve queries parameters display in Profiler (fancyweb) * bug #34408 [Cache] catch exceptions when using PDO directly (xabbuh) * bug #34411 [HttpKernel] Flatten "exception" controller argument if not typed (chalasr) * bug #34410 [HttpFoundation] Fix MySQL column type definition. (jbroutier) * bug #34403 [Cache] Redis Tag Aware warn on wrong eviction policy (andrerom) * bug #34400 [HttpKernel] collect bundle classes, not paths (nicolas-grekas) * bug #34398 [Config] fix id-generation for GlobResource (nicolas-grekas) * bug #34404 [HttpClient] fix HttpClientDataCollector (nicolas-grekas) * bug #34396 [Finder] Allow ssh2 stream wrapper for sftp (damienalexandre) * bug #34383 [DI] Use reproducible entropy to generate env placeholders (nicolas-grekas) * bug #34389 [WebProfilerBundle] add FrameworkBundle requirement (xabbuh) * bug #34381 [WebProfilerBundle] Require symfony/twig-bundle (fancyweb) * bug #34358 [Security] always check the token on non-lazy firewalls (nicolas-grekas, lyrixx) * bug #34390 [FrameworkBundle] fix wiring of httplug client (nicolas-grekas) * bug #34369 [FrameworkBundle] Disallow WebProfilerBundle < 4.4 (derrabus) * bug #34370 [DI] fix detecting singly implemented interfaces (nicolas-grekas) * 4.4.0-BETA2 (2019-11-13) * bug #34344 [Console] Constant STDOUT might be undefined (nicolas-grekas) * security #cve-2019-18886 [Security\Core] throw AccessDeniedException when switch user fails (nicolas-grekas) * security #cve-2019-18888 [Mime] fix guessing mime-types of files with leading dash (nicolas-grekas) * security #cve-2019-11325 [VarExporter] fix exporting some strings (nicolas-grekas) * security #cve-2019-18889 [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances (nicolas-grekas) * security #cve-2019-18888 [HttpFoundation] fix guessing mime-types of files with leading dash (nicolas-grekas) * security #cve-2019-18887 [HttpKernel] Use constant time comparison in UriSigner (stof) * 4.4.0-BETA1 (2019-11-12) * feature #34333 Revert "feature #34329 [ExpressionLanguage] add XOR operator (ottaviano)" (nicolas-grekas) * feature #34332 Allow \Throwable $previous everywhere (fancyweb) * feature #34329 [ExpressionLanguage] add XOR operator (ottaviano) * feature #34312 [ErrorHandler] merge and remove the ErrorRenderer component (nicolas-grekas, yceruto) * feature #34309 [HttpKernel] make ExceptionEvent able to propagate any throwable (nicolas-grekas) * feature #34139 [Security] Add migrating encoder configuration (chalasr) * feature #32194 [HttpFoundation] Add a way to anonymize IPs (Seldaek) * feature #34252 [Console] Add support for NO_COLOR env var (Seldaek) * feature #34295 [DI][FrameworkBundle] add EnvVarLoaderInterface - remove SecretEnvVarProcessor (nicolas-grekas) * feature #31310 [DependencyInjection] Added option `ignore_errors: not_found` for imported config files (pulzarraider) * feature #34216 [HttpClient] allow arbitrary JSON values in requests (pschultz) * feature #31977 Add handling for delayed message to redis transport (alexander-schranz) * feature #34217 [Messenger] use events consistently in worker (Tobion) * feature #33065 Deprecate things that prevent \Throwable from bubbling down (fancyweb) * feature #34184 [VarDumper] display the method we're in when dumping stack traces (nicolas-grekas) * feature #33732 [Console] Rename some methods related to redraw frequency (javiereguiluz) * feature #31587 [Routing][Config] Allow patterns of resources to be excluded from config loading (tristanbes) * feature #32256 [DI] Add compiler pass and command to check that services wiring matches type declarations (alcalyn, GuilhemN, nicolas-grekas) * feature #32061 Add new Form WeekType (dFayet) * feature #33954 Form theme: support Bootstrap 4 custom switches (romaricdrigon) * feature #33854 [DI] Add ability to choose behavior of decorations on non existent decorated services (mtarld) * feature #34185 [Messenger] extract worker logic to listener and get rid of SendersLocatorInterface::getSenderByAlias (Tobion) * feature #34156 Adding DoctrineClearEntityManagerWorkerSubscriber to reset EM in worker (weaverryan) * feature #34133 [Cache] add DeflateMarshaller - remove phpredis compression (nicolas-grekas) * feature #34177 [HttpFoundation][FrameworkBundle] allow configuring the session handler with a DSN (nicolas-grekas) * feature #32107 [Validator] Add AutoMapping constraint to enable or disable auto-validation (dunglas) * feature #34170 Re-allow to use "tagged" in service definitions (dunglas) * feature #34043 [Lock] Add missing lock connection string in FrameworkExtension (jderusse) * feature #34057 [Lock][Cache] Allows URL DSN in PDO adapters (jderusse) * feature #34151 [DomCrawler] normalizeWhitespace should be true by default (dunglas) * feature #34020 [Security] Allow to stick to a specific password hashing algorithm (chalasr) * feature #34131 [FrameworkBundle] Remove suffix convention when using env vars to override secrets from the vault (nicolas-grekas) * feature #34051 [HttpClient] allow option "buffer" to be a stream resource (nicolas-grekas) * feature #34028 [ExpressionLanguage][Lexer] Exponential format for number (tigr1991) * feature #34069 [Messenger] Removing "sync" transport and replacing it with config trick (weaverryan) * feature #34014 [DI] made the `env(base64:...)` processor able to decode base64url (nicolas-grekas) * feature #34044 [HttpClient] Add a canceled state to the ResponseInterface (Toflar) * feature #33997 [FrameworkBundle] Add `secrets:*` commands and `env(secret:...)` processor to deal with secrets seamlessly (Tobion, jderusse, nicolas-grekas) * feature #34013 [DI] add `LazyString` for lazy computation of string values injected into services (nicolas-grekas) * feature #33961 [TwigBridge] Add show-deprecations option to the lint:twig command (yceruto) * feature #33973 [HttpClient] add HttpClient::createForBaseUri() (nicolas-grekas) * feature #33980 [HttpClient] try using php-http/discovery when nyholm/psr7 is not installed (nicolas-grekas) * feature #33967 [Mailer] Add Message-Id to SentMessage when sending an email (fabpot) * feature #33896 [Serializer][CSV] Add context options to handle BOM (malarzm) * feature #33883 [Mailer] added ReplyTo option for PostmarkApiTransport (pierregaste) * feature #33053 [ErrorHandler] Rework fatal errors (fancyweb) * feature #33939 [Cache] add TagAwareMarshaller to optimize data storage when using AbstractTagAwareAdapter (nicolas-grekas) * feature #33941 Keeping backward compatibility with legacy FlattenException usage (yceruto) * feature #33851 [EventDispatcher] Allow to omit the event name when registering listeners (derrabus) * feature #33461 [Cache] Improve RedisTagAwareAdapter invalidation logic & requirements (andrerom) * feature #33779 [DI] enable improved syntax for defining method calls in Yaml (nicolas-grekas) * feature #33743 [HttpClient] Async HTTPlug client (Nyholm) * feature #33856 [Messenger] Allow to configure the db index on Redis transport (chalasr) * feature #33881 [VarDumper] Added a support for casting Ramsey/Uuid (lyrixx) * feature #33861 [CssSelector] Support *:only-of-type (jakzal) * feature #33793 [EventDispatcher] A compiler pass for aliased userland events (derrabus) * feature #33791 [Form] Added CountryType option for using alpha3 country codes (creiner) * feature #33628 [DependencyInjection] added Ability to define a priority method for tagged service (lyrixx) * feature #33775 [Console] Add deprecation message for non-int statusCode (jschaedl) * feature #33783 [WebProfilerBundle] Try to display the most useful panel by default (fancyweb) * feature #33701 [HttpKernel] wrap compilation of the container in an opportunistic lock (nicolas-grekas) * feature #33789 [Serializer] Deprecate the XmlEncoder::TYPE_CASE_ATTRIBUTES constant (pierredup) * feature #33776 Copy phpunit.xsd to a predictable path (julienfalque) * feature #31446 [VarDumper] Output the location of calls to dump() (ktherage) * feature #33412 [Console] Do not leak hidden console commands (m-vo) * feature #33676 [Security] add "anonymous: lazy" mode to firewalls (nicolas-grekas) * feature #32440 [DomCrawler] add a normalizeWhitespace argument to text() method (Simperfit) * feature #33148 [Intl] Excludes locale from language codes (split localized language names) (ro0NL) * feature #31202 [FrameworkBundle] WebTestCase KernelBrowser::getContainer null return type (Simperfit) * feature #33038 [ErrorHandler] Forward \Throwable (fancyweb) * feature #33574 [Http][DI] Replace REMOTE_ADDR in trusted proxies with the current REMOTE_ADDR (mcfedr) * feature #33113 [Messenger][DX] Display real handler if handler is wrapped (DavidBadura) * feature #33128 [FrameworkBundle] Sort tagged services (krome162504) * feature #33658 [Yaml] fix parsing inline YAML spanning multiple lines (xabbuh) * feature #33698 [HttpKernel] compress files generated by the profiler (nicolas-grekas) * feature #33317 [Messenger] Added support for `from_transport` attribute on `messenger.message_handler` tag (ruudk) * feature #33584 [Security] Deprecate isGranted()/decide() on more than one attribute (wouterj) * feature #33663 [Security] Make stateful firewalls turn responses private only when needed (nicolas-grekas) * feature #33609 [Form][SubmitType] Add "validate" option (fancyweb) * feature #33621 Revert "feature #33507 [WebProfiler] Deprecated intercept_redirects in 4.4 (dorumd)" (lyrixx) * feature #33605 [Twig] Add NotificationEmail (fabpot) * feature #33623 [DependencyInjection] Allow binding iterable and tagged services (lyrixx) * feature #33507 [WebProfiler] Deprecated intercept_redirects in 4.4 (dorumd) * feature #33579 Adding .gitattributes to remove Tests directory from "dist" (Nyholm) * feature #33562 [Mailer] rename SmtpEnvelope to Envelope (xabbuh) * feature #33565 [Mailer] Rename an exception class (fabpot) * feature #33516 [Cache] Added reserved characters constant for CacheItem (andyexeter) * feature #33503 [SecurityBundle] Move Anonymous DI integration to new AnonymousFactory (wouterj) * feature #33535 [WebProfilerBundle] Assign automatic colors to custom Stopwatch categories (javiereguiluz) * feature #32565 [HttpClient] Allow enabling buffering conditionally with a Closure (rjwebdev) * feature #32032 [DI] generate preload.php file for PHP 7.4 in cache folder (nicolas-grekas) * feature #33117 [FrameworkBundle] Added --sort option for TranslationUpdateCommand (k0d3r1s) * feature #32832 [Serializer] Allow multi-dimenstion object array in AbstractObjectNormalizer (alediator) * feature #33189 New welcome page on startup for 4.4 LTS & 5.0 (yceruto) * feature #33295 [OptionsResolver] Display full nested option hierarchy in exceptions (fancyweb) * feature #33486 [VarDumper] Display fully qualified title (pavinthan, nicolas-grekas) * feature #33496 Deprecated not passing dash symbol (-) to STDIN commands (yceruto) * feature #32742 [Console] Added support for definition list and horizontal table (lyrixx) * feature #33494 [Mailer] Change DSN syntax (fabpot) * feature #33471 [Mailer] Check email validity before opening an SMTP connection (fabpot) * feature #31177 #21571 Comparing roles to detected that users has changed (oleg-andreyev) * feature #33459 [Validator] Deprecated CacheInterface in favor of PSR-6 (derrabus) * feature #33271 Added new ErrorController + Preview and enabling there the error renderer mechanism (yceruto) * feature #33454 [Mailer] Improve an exception when trying to send a RawMessage without an Envelope (fabpot) * feature #33327 [ErrorHandler] Registering basic exception handler for late failures (yceruto) * feature #33446 [TwigBridge] lint all templates from configured Twig paths if no argument was provided (yceruto) * feature #33409 [Mailer] Add support for multiple mailers (fabpot) * feature #33424 [Mailer] Change the DSN semantics (fabpot) * feature #33319 Allow configuring class names through methods instead of class parameters in Doctrine extensions (alcaeus) * feature #33283 [ErrorHandler] make DebugClassLoader able to add return type declarations (nicolas-grekas) * feature #33323 [TwigBridge] Throw an exception when one uses email as a context variable in a TemplatedEmail (fabpot) * feature #33308 [SecurityGuard] Deprecate returning non-boolean values from checkCredentials() (derrabus) * feature #33217 [FrameworkBundle][DX] Improving the redirect config when using RedirectController (yceruto) * feature #33015 [HttpClient] Added TraceableHttpClient and WebProfiler panel (jeremyFreeAgent) * feature #33091 [Mime] Add Address::fromString (gisostallenberg) * feature #33144 [DomCrawler] Added Crawler::matches(), ::closest(), ::outerHtml() (lyrixx) * feature #33152 Mark all dispatched event classes as final (Tobion) * feature #33258 [HttpKernel] deprecate global dir to load resources from (Tobion) * feature #33272 [Translation] deprecate support for null locales (xabbuh) * feature #33269 [TwigBridge] Mark all classes extending twig as @final (fabpot) * feature #33270 [Mime] Remove NamedAddress (fabpot) * feature #33169 [HttpFoundation] Precalculate session expiry timestamp (azjezz) * feature #33237 [Mailer] Remove the auth mode DSN option and support in the eSMTP transport (fabpot) * feature #33233 [Mailer] Simplify the way TLS/SSL/STARTTLS work (fabpot) * feature #32360 [Monolog] Added ElasticsearchLogstashHandler (lyrixx) * feature #32489 [Messenger] Allow exchange type headers binding (CedrickOka) * feature #32783 [Messenger] InMemoryTransport handle acknowledged and rejected messages (tienvx) * feature #33155 [ErrorHandler] Added call() method utility to turns any PHP error into \ErrorException (yceruto) * feature #33203 [Mailer] Add support for the queued flag in the EmailCount assertion (fabpot) * feature #30323 [ErrorHandler] trigger deprecation in DebugClassLoader when child class misses a return type (fancyweb, nicolas-grekas) * feature #33137 [DI] deprecate support for non-object services (nicolas-grekas) * feature #32845 [HttpKernel][FrameworkBundle] Add alternative convention for bundle directories (yceruto) * feature #32548 [Translation] XliffLintCommand: allow .xliff file extension (codegain) * feature #28363 [Serializer] Encode empty objects as objects, not arrays (mcfedr) * feature #33122 [WebLink] implement PSR-13 directly (nicolas-grekas) * feature #33078 Add compatibility trait for PHPUnit constraint classes (alcaeus) * feature #32988 [Intl] Support ISO 3166-1 Alpha-3 country codes (terjebraten-certua) * feature #32598 [FrameworkBundle][Routing] Private service route loaders (fancyweb) * feature #32486 [DoctrineBridge] Invokable event listeners (fancyweb) * feature #31083 [Validator] Allow objects implementing __toString() to be used as violation messages (mdlutz24) * feature #32122 [HttpFoundation] deprecate HeaderBag::get() returning an array and add all($key) instead (Simperfit) * feature #32807 [HttpClient] add "max_duration" option (fancyweb) * feature #31546 [Dotenv] Use default value when referenced variable is not set (j92) * feature #32930 [Mailer][Mime] Add PHPUnit constraints and assertions for the Mailer (fabpot) * feature #32912 [Mailer] Add support for the profiler (fabpot) * feature #32940 [PhpUnitBridge] Add polyfill for PhpUnit namespace (jderusse) * feature #31843 [Security] add support for opportunistic password migrations (nicolas-grekas) * feature #32824 [Ldap] Add security LdapUser and provider (chalasr) * feature #32922 [PhpUnitBridge] make the bridge act as a polyfill for newest PHPUnit features (nicolas-grekas) * feature #32927 [Mailer] Add message events logger (fabpot) * feature #32916 [Mailer] Add a name to the transports (fabpot) * feature #32917 [Mime] Add AbstractPart::asDebugString() (fabpot) * feature #32543 [FrameworkBundle] add config translator cache_dir (Raulnet) * feature #32669 [Yaml] Add flag to dump NULL as ~ (OskarStark) * feature #32896 [Mailer] added debug info to TransportExceptionInterface (fabpot) * feature #32817 [DoctrineBridge] Deprecate RegistryInterface (Koc) * feature #32504 [ErrorRenderer] Add DebugCommand for easy debugging and testing (yceruto) * feature #32581 [DI] Allow dumping the container in one file instead of many files (nicolas-grekas) * feature #32762 [Form][DX] derive default timezone from reference_date option when possible (yceruto) * feature #32745 [Messenger][Profiler] Attempt to give more useful source info when using HandleTrait (ogizanagi) * feature #32680 [Messenger][Profiler] Collect the stamps at the end of dispatch (ogizanagi) * feature #32683 [VarDumper] added support for Imagine/Image (lyrixx) * feature #32749 [Mailer] Make transport factory test case public (Koc) * feature #32718 [Form] use a reference date to handle times during DST (xabbuh) * feature #32637 [ErrorHandler] Decouple from ErrorRenderer component (yceruto) * feature #32609 [Mailer][DX][RFC] Rename mailer bridge transport classes (Koc) * feature #32587 [Form][Validator] Generate accept attribute with file constraint and mime types option (Coosos) * feature #32658 [Form] repeat preferred choices in list of all choices (Seb33300, xabbuh) * feature #32698 [WebProfilerBundle] mark all classes as internal (Tobion) * feature #32695 [WebProfilerBundle] Decoupling TwigBundle and using the new ErrorRenderer mechanism (yceruto) * feature #31398 [TwigBundle] Deprecating error templates for non-html formats and using ErrorRenderer as fallback (yceruto) * feature #32582 [Routing] Deprecate ServiceRouterLoader and ObjectRouteLoader in favor of ContainerLoader and ObjectLoader (fancyweb) * feature #32661 [ErrorRenderer] Improving the exception page provided by HtmlErrorRenderer (yceruto) * feature #32332 [DI] Move non removing compiler passes to after removing passes (alexpott) * feature #32475 [Process] Deprecate Process::inheritEnvironmentVariables() (ogizanagi) * feature #32583 [Mailer] Logger vs debug mailer (fabpot) * feature #32471 Add a new ErrorHandler component (mirror of the Debug component) (yceruto) * feature #32463 [VarDumper] Allow to configure VarDumperTestTrait casters & flags (ogizanagi) * feature #31946 [Mailer] Extract transport factory and allow create custom transports (Koc) * feature #31194 [PropertyAccess] Improve errors when trying to find a writable property (pierredup) * feature #32435 [Validator] Add a new constraint message when there is both min and max (Lctrs) * feature #32470 Rename ErrorCatcher to ErrorRenderer (rendering part only) (yceruto) * feature #32462 [WebProfilerBundle] Deprecating templateExists method (yceruto) * feature #32446 [Lock] rename and deprecate Factory into LockFactory (Simperfit) * feature #31975 Dynamic bundle assets (garak) * feature #32429 [VarDumper] Let browsers trigger their own search on double CMD/CTRL + F (ogizanagi) * feature #32198 [Lock] Split "StoreInterface" into multiple interfaces with less responsability (Simperfit) * feature #31511 [Validator] Allow to use property paths to get limits in range constraint (Lctrs) * feature #32424 [Console] don't redraw progress bar more than every 100ms by default (nicolas-grekas) * feature #32418 [Console] Added Application::reset() (lyrixx) * feature #31217 [WebserverBundle] Deprecate the bundle in favor of symfony local server (Simperfit) * feature #31554 [SECURITY] AbstractAuthenticationListener.php error instead info. Rebase of #28462 (berezuev) * feature #32284 [Cache] Add argument $prefix to AdapterInterface::clear() (nicolas-grekas) * feature #32423 [ServerBundle] Display all logs by default (lyrixx) * feature #26339 [Console] Add ProgressBar::preventRedrawFasterThan() and forceRedrawSlowerThan() methods (ostrolucky) * feature #31269 [Translator] Dump native plural formats to po files (Stadly) * feature #31560 [Ldap][Security] LdapBindAuthenticationProvider does not bind before search query (Simperfit) * feature #31626 [Console] allow answer to be trimmed by adding a flag (Simperfit) * feature #31876 [WebProfilerBundle] Add clear button to ajax tab (Matts) * feature #32415 [Translation] deprecate passing a null locale (Simperfit) * feature #32290 [HttpClient] Add $response->toStream() to cast responses to regular PHP streams (nicolas-grekas) * feature #32402 [Intl] Exclude root language (ro0NL) * feature #32295 [FrameworkBundle] Add autowiring alias for PSR-14 (nicolas-grekas) * feature #32390 [DependencyInjection] Deprecated passing Parameter instances as class name to Definition (derrabus) * feature #32106 [FrameworkBundle] Use default_locale as default value for translator.fallbacks (dunglas) * feature #32294 [FrameworkBundle] Allow creating chained cache pools by providing several adapters (nicolas-grekas) * feature #32207 [FrameworkBundle] Allow to use the BrowserKit assertions with Panther and API Platform's test client (dunglas) * feature #32344 [HttpFoundation][HttpKernel] Improving the request/response format autodetection (yceruto) * feature #32231 [HttpClient] Add support for NTLM authentication (nicolas-grekas) * feature #32265 [Validator] deprecate non-string constraint violation codes (xabbuh) * feature #31528 [Validator] Add a Length::$allowEmptyString option to reject empty strings (ogizanagi) * feature #32081 [WIP][Mailer] Overwrite envelope sender and recipients from config (Devristo) * feature #32255 [HttpFoundation] Drop support for ApacheRequest (lyrixx) * feature #31825 [Messenger] Added support for auto trimming of redis streams (Toflar) * feature #32277 Remove @experimental annotations (fabpot) * feature #30981 [Mime] S/MIME Support (sstok) * feature #32180 [Lock] add an InvalidTTLException to be more accurate (Simperfit) * feature #32241 [PropertyAccess] Deprecate null as allowed value for defaultLifetime argument in createCache method (jschaedl) * feature #32221 [ErrorCatcher] Make IDEs and static analysis tools happy (fabpot) * feature #32227 Rename the ErrorHandler component to ErrorCatcher (fabpot) * feature #31065 Add ErrorHandler component (yceruto) * feature #32126 [Process] Allow writing portable "prepared" command lines (Simperfit) * feature #31532 [Ldap] Add users extraFields in ldap component (Simperfit) * feature #32104 Add autowiring for HTTPlug (nicolas-grekas) * feature #32130 [Form] deprecate int/float for string input in NumberType (xabbuh) * feature #31547 [Ldap] Add exception for mapping ldap errors (Simperfit) * feature #31764 [FrameworkBundle] add attribute stamps (walidboughdiri) * feature #32059 [PhpUnitBridge] Bump PHPUnit 7+8 (ro0NL) * feature #32041 [Validator] Deprecate unused arg in ExpressionValidator (ogizanagi) * feature #31287 [Config] Introduce find method in ArrayNodeDefinition to ease configuration tree manipulation (jschaedl) * feature #31959 [DomCrawler][Feature][DX] Add Form::getName() method (JustBlackBird) * feature #32026 [VarDumper] caster for HttpClient's response dumps all info (nicolas-grekas) * feature #31976 [HttpClient] add HttplugClient for compat with libs that need httplug v1 or v2 (nicolas-grekas) * feature #31956 [Mailer] Changed EventDispatcherInterface dependency from Component to Contracts (Koc) * feature #31980 [HttpClient] make Psr18Client implement relevant PSR-17 factories (nicolas-grekas) * feature #31919 [WebProfilerBundle] Select default theme based on user preferences (javiereguiluz) * feature #31451 [FrameworkBundle] Allow dots in translation domains (jschaedl) * feature #31321 [DI] deprecates tag !tagged in favor of !tagged_iterator (jschaedl) * feature #31658 [HTTP Foundation] Deprecate passing argument to method Request::isMethodSafe() (dFayet) * feature #31597 [Security] add MigratingPasswordEncoder (nicolas-grekas) * feature #31351 [Validator] Improve TypeValidator to handle array of types (jschaedl) * feature #31526 [Validator] Add compared value path to violation parameters (ogizanagi) * feature #31514 Add exception as HTML comment to beginning and end of `exception_full.html.twig` (ruudk) * feature #31739 [FrameworkBundle] Add missing BC layer for deprecated ControllerNameParser injections (chalasr) * feature #31831 [HttpClient] add $response->cancel() (nicolas-grekas) * feature #31334 [Messenger] Add clear Entity Manager middleware (Koc) * feature #31594 [Security] add PasswordEncoderInterface::needsRehash() (nicolas-grekas) * feature #31821 [FrameworkBundle][TwigBundle] Add missing deprecations for PHP templating layer (yceruto) * feature #31509 [Monolog] Setup the LoggerProcessor after all other processor (lyrixx) * feature #31785 [Messenger] Deprecate passing a bus locator to ConsumeMessagesCommand's constructor (chalasr) * feature #31700 [MonologBridge] RouteProcessor class is now final to ease the the removal of deprecated event (Simperfit) * feature #31732 [HttpKernel] Make DebugHandlersListener internal (chalasr) * feature #31539 [HttpKernel] Add lts config (noniagriconomie) * feature #31437 [Cache] Add Redis Sentinel support (StephenClouse) * feature #31543 [DI] deprecate short callables in yaml (nicolas-grekas)