This week, Symfony 3.4.48, 4.4.23 and 5.2.8 maintenance versions were released to mitigate the CVE-2021-21424 security issue. In addition, the fourth beta of Symfony 5.3 was published and the first speakers of the SymfonyWorld 2021 conference were announced.

Symfony development highlights

This week, 61 pull requests were merged (56 in code and 5 in docs) and 37 issues were closed (30 in code and 7 in docs). Excluding merges, 25 authors made 397,998 additions and 353,391 deletions. See details for code and docs.

4.4 changelog:

  • 132e09f: [HttpClient] don't prepare the request in ScopingHttpClient
  • 21bf85f: [Console] fixes for PHP 8.1 deprecations
  • 89c1be8: [WebProfilerBundle] only load Sfjs if it is not present already
  • 9a53e6a: [DependencyInjection] fix dumping service-closure-arguments
  • 2a581d2: [Security, Guard] prevent user enumeration
  • 49dd6ef: [Console] fix Windows code page support
  • 3b0c6f9: [HttpClient] fix adding query string to relative URLs with scoped clients
  • a0f8fc5: [Security] update Finnish translations
  • 9066677: [Security] update Lithuanian translations
  • 4289ab9: [Security] update Bulgarian translations
  • a7d3533: [Security] update Ukrainian translations

5.2 changelog:

  • 7c43648: [Security] reset limiters on successful login
  • 3348c63: [Security] make Login Rate Limiter also case insensitive for non-ascii user identifiers

5.x changelog:

  • 2a87821: [Translation] improve CrowdinProvider
  • c151f76: [Runtime] fix defining $_SERVER[APP_ENV]
  • af19b6b: [Translation] add PoEditor provider
  • 0b66008: [Translation] add Lokalise Provider
  • 90ab9ed: [Translation] improve Translation providers
  • 8ef49cf: [HttpClient] add DecoratorTrait to ease writing simple decorators
  • c2ce15d: [Translation] remove credentials from PoEditorProvider
  • 18997ab: [FrameworkBundle] fix debug:event-dispatcher and debug:firewall
  • 33bfb3d: [Mailer, Notifier, Translation] add tests for UnsupportedSchemeException
  • 649d115: [Messenger] ability to distinguish retry and delay actions
  • 1bf384a: [DependencyInjection] don't try to load YamlFileLoader if it's not actually needed
  • 1921c78, fef1099: [FrameworkBundle] improve AbstractController::handleForm()
  • b14d769: [DependencyInjection] allow PHP-DSL files to be env-conditional
  • 854226b, 2ac23c6: [FrameworkBundle] introduce AbstractController::renderForm() instead of handleForm()
  • 35dbf8c: [Notifier] add missing charset to content-type for Slack notifier
  • c61617e: [Console] fix registering command aliases when using the new "cmd|alias" syntax for names

Symfony CLI

Symfony CLI is a must-have tool when developing Symfony applications on your local machine. It includes the Symfony Local Server, the best way to run local Symfony applications. This week Symfony CLI released its new 4.24.1 version with the following changes:

  • Fix fuzzy command name algorithm when there is an exact match

Newest issues and pull requests

They talked about us

Call to Action

Published in #A week of symfony