This week, Symfony 2.7.32, 2.8.25, 3.2.12 and 3.3.5 security releases were published. Meanwhile, we continued optimizing the performance of the service container. Lastly, the Symfony Core Team added two new members.

Symfony development highlights

2.7 changelog:

  • d76171e: [HttpFoundation] set meta refresh time to 0 in RedirectResponse content
  • 559ccb2: [Security] validate empty passwords again
  • 910a8de: [DependencyInjection] resolve aliases earlier
  • 2040770: [VarDumper] moved locale sniffing to dump() time
  • f4172b0: [Security] fixed login redirect when referer contains a query string
  • f4fffc0: [Security] check that the 'route' attribute is set before using it
  • ee58cfc: [Validator] fixed IbanValidator for ukrainian IBANs

2.8 changelog:

  • a187a32: [DependencyInjection] disabled inlining deprecated services

3.2 changelog:

  • 0ccd2ed: [DependencyInjection] mark Container::$privates as internal
  • 1375601: [FrameworkBundle] fix ValidatorCacheWarmer use serializing ArrayAdapter
  • e33beda: [PropertyInfo] use rawurlencode to escape PSR-6 keys
  • 68582c0: [HttpFoundation] fixed case sensitive sameSite cookie

3.3 changelog:

  • c75d0c5: [WebServerBundle] made server commands work out of the box with the public/ root dir
  • 7beac82: [FrameworkBundle] set default public directory on install assets
  • 547185f: [Config] made ClassExistenceResource throw on invalid parents
  • cb65cf6: [WebProfilerBundle] fixed infinite js loop on exception pages
  • 34d5f9e: [TwigBundle] fixed the design of the profiler exceptions when there is no message
  • adeab15: [DependencyInjection] fixed autowiring thinks optional args on core PHP classes are required
  • 4e25a61: [Routing] allowed HEAD method to be defined first

3.4 changelog:

  • a6232a4, 719465c: [VarDumper] added setMinDepth to VarCloner
  • aa27974: [WebProfilerBundle] used new DataCollector::getCasters() method in ValidatorDataCollector
  • 2fa948d: [Console] application is not responsible for setting the name of lazy commands
  • 5a521bf: [FrameworkBundle] made RouterCacheWarmer implement ServiceSubscriberInterface
  • e02ba32: [Console] fixed registering lazy command services with autoconfigure enabled
  • 04f3e60: [VarDumper] added time zone caster
  • 68d9df6: [TwigBundle] tranformed commands into services
  • 44d1162: [Cache] added (filesystem|phpfiles) cache (adapter|simple) prune method and prune command

Master changelog:

  • dd6fc4b: [TwigBridge] deprecate TwigRenderer
  • aac9273: [TwigBridge] removed deprecated features
  • 1cac0a0: [DependencyInjection] optimized use of private and pre-defined services
  • b9cc089: [Console] made SymfonyQuestionHelper::ask optional by default

Newest issues and pull requests

Twig development highlights

Master changelog:

  • d632fd3: throw exception on circular reference detection

They talked about us

Published in #A week of symfony