This week, Symfony 4.4.50, 5.4.20, 6.0.20, 6.1.12, and 6.2.6 were released to address some security issues related to CSRF tokens and cookie headers in HTTP Cache. Moreover, we celebrated the companies that back Symfony 6.2 development and announced the SymfonyLive Paris 2023 conference workshops.

Symfony development highlights

This week, 60 pull requests were merged (32 in code and 28 in docs) and 18 issues were closed (10 in code and 8 in docs). Excluding merges, 25 authors made 3,261 additions and 1,550 deletions. See details for code and docs.

5.4 changelog:

  • 393c603: [DependencyInjection] fix combinatory explosion when autowiring union and intersection types
  • 69f113a: [Ldap] allow multiple values on extra_fields
  • bf3e2cd: [String] remove duplicates in fold maps
  • d0b723e: [PropertyInfo] fail with a meaningful error when a needed package is missing
  • 81de559: [Tests] new iteration of removing $this occurrences in future static data providers
  • 00676bc: [WebProfilerBundle] fix some minor HTML issues
  • 9a11bbd: [WebProfilerBundle] disable Turbo for debug toolbar links
  • e53785b: [Validator] make ConstraintValidatorTestCase compatible with PHPUnit 10
  • 1db371f: [PropertyInfo] add meaningful message when phpstan/phpdoc-parser is not installed when using PhpStanExtractor
  • 29d73d7: [Response] getMaxAge() returns non-negative integer

6.2 changelog:

  • 6cc1e5a: [Translation] add Crowdin and Prisma Media as backers of some Symfony 6.2 components
  • c2f0bd9: [Mailer] fix undefined key in error response in MailPace bridge
  • ad14daf: [Form] fix PasswordHasherListener to work with empty data

6.3 changelog:

  • 22a2729: [Workflow] remove unused parameter transitionId in MermaidDumper
  • c24cf10: [HttpFoundation] fix defining expiry index in PdoSessionHandler::configureSchema()
  • 33dac94: [Console] add ReStructuredText descriptor
  • 6d00b0c: [Yaml] allow milliseconds and microseconds in dates
  • 1655d17: [Config] allow enum values in EnumNode

Newest issues and pull requests

SymfonyCasts Updates

SymfonyCasts is the official way to learn Symfony. Select a track for a guided path through 100+ video tutorial courses about Symfony, PHP and JavaScript.

These were some of the most relevant SymfonyCasts updates of the week:

They talked about us

Call to Action

Published in #A week of symfony