Symfony 6.3.0 has just been released.

Check the Living on the Edge category on this blog to learn about the main features of this new stable release; or check the release announcement of BETA1 to get the list of all new features.

Here is the list of the most important changes since 6.3.0-RC2:

  • bug #50432 [Security] Validate aud and iss claims on OidcTokenHandler (@vincentchalamon)
  • bug #50477 [Security] Add clock dependency to OidcTokenHandler (@nicolas-grekas)
  • bug #50437 [Filesystem] Follow symlinks when dumping files (@ausi)
  • bug #50478 [DependencyInjection] Escape from parameter-like default values (@MatTheCat)
  • bug #50476 [FrameworkBundle] remove support for preloading ESM using headers (@dunglas)
  • bug #50453 [SecurityBundle] add missing xsd definition for OIDC (@aegypius)
  • bug #50468 [FrameworkBundle][PhpUnitBridge] Configure doctrine/deprecations as expected (@nicolas-grekas)
  • bug #50473 [Notifier] Fix ContactEveryoneOptions (@nicolas-grekas)
  • bug #50470 [SecurityBundle] Fix configuring OIDC user info token handler client (@vincentchalamon)
  • bug #50456 [AssetMapper] Fix unable to use asset mapper with CSP (@vtsykun)
  • bug #50458 [HttpKernel] Fix default value ignored with pinned resolvers (@HypeMC)
  • bug #50452 Hide definitions bearing the container.excluded tag (@Myks92)

Want to upgrade to this new release? Because Symfony protects backwards-compatibility very closely, this should be quite easy. Use SymfonyInsight upgrade reports to detect the code you will need to change in your project and read our upgrade documentation to learn more.

Want to be notified whenever a new Symfony release is published? Or when a version is not maintained anymore? Or only when a security issue is fixed? Consider subscribing to the Symfony Roadmap Notifications.

Published in #Releases