Symfony 6.4.26 has just been released.
Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in your project.
Tip
Want to be notified whenever a new Symfony release is published? Or when a version is not maintained anymore? Or only when a security issue is fixed? Consider subscribing to the Symfony Roadmap Notifications.
Changelog Since Symfony 6.4.25
- bug #61856 [Console] do not pass the empty string to ord() (@xabbuh)
- bug #61855 [DoctrineBridge][Yaml] don't cast strings exceeding the min/max int ranges (@xabbuh)
- bug #61844 do not coerce NAN to other types (@xabbuh)
- bug #61825 [DoctrineBridge] Make EntityUserProviders pass attributes to their loader (@MatTheCat)
- bug #61793 [AssetMapper] Prevent duplicate entries in module preloads (@xDeSwa)
- bug #61757 [FrameworkBundle] Perform-no-deep-merging on workflow transitions' from/to configs (@nicolas-grekas)
- bug #61766 Fix ord()-related PHP 8.5 deprecations (@nicolas-grekas)
- bug #61368 [HttpKernel] Refine Vary header check to skip special handling of 'Accept-Language' when it's the only entry and '_vary_by_language' is true in CacheAttributeListener (@santysisi)
- bug #61746 [Serializer] Fix unknown type in denormalization errors when union type used in constructor (@d-mitrofanov-v)
- bug #61724 [Console] Fix handling of \E in Bash completion (@HypeMC)
- bug #61518 [HttpKernel] Handle an array vary header in the http cache store for write (@philpichet)
- bug #61736 [PhpUnitBridge] do not try to modify the result of a PhptTestCase (@xabbuh)
- bug #61731 [PhpUnitBridge] Fix gathering deprecation in phpt (@nicolas-grekas)
- bug #61729 [PhpUnitBridge] Silence deprecation of __sleep/wakeup() (@nicolas-grekas)
- bug #61727 Replace __sleep/wakeup() by __(un)serialize() for throwing and internal usages (@nicolas-grekas)
- bug #61693 [Console] Don’t append a new line to test inputs ending with an EOT (@MatTheCat)
- bug #61596 [FrameworkBundle] Normalize workflow places separately (@KevinVanSonsbeek)
- bug #61690 [Console] Don’t automatically append EOT to multiline test inputs (@MatTheCat)
- bug #61667 [Config] Fix GlobResource pattern with trailing slash (@HypeMC)
- bug #61659 [Security] Fix HttpUtils::createRequest() when the base request is forwarded (@MatTheCat)
- bug #61645 Replace backtick operator, deprecated in PHP 8.5, with shell_exec() (@iluuu1994)
- bug #61097 [Serializer] Fix normalizing objects with accessors having the same name as a property (@RafaelKr)
- bug #61614 [SecurityBundle] Prevent accessing the tracked token storage when collecting data (@MatTheCat)
- bug #61605 [Cache] Fix internal representation of non-static values (@nicolas-grekas)
- bug #61599 [Cache] Make TagAwareAdapter registrable as a service (@a.dmitryuk)
- bug #61595 [Security] Pass attributes to nested ChainUserProviders (@valtzu)
- bug #61232 [Messenger] Firebird Database - incompatibility with expected lowercase columns (@DSsatwareAG)
- bug #61583 [DoctrineBridge] Fix exception catch when deleting temporary table in the sameDatabaseChecker (@GromNaN)
- bug #61585 [HttpFoundation][SQLSRV] Change column type from TEXT to STRING (@Matt-PMCT)
- bug #61571 [Serializer] Fix dealing with asymmetric visilibity for properties (@santysisi)
- bug #61573 [Inflector][String] Fix edge cases (@OskarStark)
- bug #61548 [Security] Fix attribute-based chained user providers (@valtzu)