Symfony 6.4.46 has just been released.

Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in your project.

Tip

Want to be notified whenever a new Symfony release is published? Or when a version is not maintained anymore? Or only when a security issue is fixed? Consider subscribing to the Symfony Roadmap Notifications.

Changelog Since Symfony 6.4.45

  • data #66073 Release v6.4.46
  • minor #66070 [Security] Explain why a remember-me login counts as interactive (@nicolas-grekas)
  • minor #66060 [Form] Add the BoundsType compare message translation unit (@seb-jean)
  • bug #66048 [HttpFoundation] Remove the ambiguity that makes HeaderUtils::split() backtrack (@nicolas-grekas)
  • bug #66043 [TwigBridge] Compose form theme blocks with Twig's BlockChain when available (@fabpot)
  • bug #66041 [Form] Describe the options of a type extension registered on a type extension (@fabpot)
  • bug #66037 [Translation] Resolve Phrase locales by their code instead of by their name (@nicolas-grekas)
  • bug #66032 [Messenger] Drop the messages queued by a failed nested dispatch (@nicolas-grekas)
  • bug #66027 [AssetMapper][FrameworkBundle] Stop versioning the assets the mapper already resolved (@Amoifr)
  • bug #66023 [HttpFoundation] Fix IpUtils::anonymize() for non-canonical IPv4-mapped addresses (@GabeSilvaDev)
  • bug #65995 [String] Keep the case of a leading acronym in ByteString::camel() (@Amoifr)
  • bug #66003 [DoctrineBridge][FrameworkBundle][HttpKernel][TwigBundle] Escape percent signs in kernel path parameters (@nicolas-grekas)
  • bug #65976 [Console] Keep messages containing malformed UTF-8 when wrapping (@Meacue)
  • bug #65963 [Finder] Only treat a leading hash as a gitignore comment and strip trailing spaces only (@fabpot)
  • bug #65974 [FrameworkBundle] Fix the fatal when a cache pool cannot be cleared (@nicolas-grekas)
  • bug #65967 [Mailer] Reconnect when the server closed the transmission channel (@ousamabenyounes)
  • bug #65962 [Finder] Fix building the gitignore regex for files with many patterns (@fabpot)
  • bug #65961 [Finder] Fix ignoreVCSIgnored() when the search directory is reached through a symlink (@fabpot)
  • bug #65952 [Security] Do not follow redirects on the OIDC UserInfo endpoint (@nicolas-grekas)
  • minor #65926 [Form][Validator] Review Romanian (ro) translations (@robertiulianstoica)
  • bug #65914 [HttpClient] Suppress warnings from failed DNS lookups (@Toflar)
  • bug #65912 [Security] Read the OIDC verified claims as booleans (@nicolas-grekas)
  • bug #65904 [Messenger] Fix sub-second delays being ignored by the in-memory transport (@nicolas-grekas)
  • bug #65907 [Serializer] Don't reuse list items with deep_object_to_populate (@nicolas-grekas)
  • bug #65893 [Cache] Don't close lock handles that are still in use when evicting a slot (@nicolas-grekas)
  • bug #65889 [FrameworkBundle] Fix HTTP client request assertion matching (@X-Coder264)
  • bug #65888 [Validator] Drop unreachable territory keys from IBAN formats (@lazerg)
  • bug #65883 [FrameworkBundle] Fix the "framework.remote-event" config node being impossible to set (@nicolas-grekas)
  • minor #65876 [Validator] Add missing Arabic translation for validation units (@EmanFateen)
  • bug #65867 [Cache] Add support for relay 0.50 (@nicolas-grekas)
  • bug #65859 [Security] Reset the login rate limiter on successful login with a peekable limiter (@lazerg)
  • minor #65854 [Validator] Review Hungarian translations (@1ed)
  • minor #65856 Review Catalan validator translations (@Victor-369)
  • bug #65843 [HtmlSanitizer] Drop relative URLs whose first path segment contains a colon instead of throwing (@nicolas-grekas)
  • bug #65844 [Mime] Reject header names containing non-printable or non-ASCII characters (@nicolas-grekas)
  • bug #65837 [PropertyInfo] Do not prefer a method returning the declaring class as the property accessor (@lazerg)
  • minor #65836 [HttpFoundation] Fix hitting the PCRE size limit with many trusted host patterns (@nicolas-grekas)
  • minor #65832 [Validator] Complete Traditional Chinese translations (@HsukqiLee)
  • bug #65823 [String] Fix singularization of words ending in -ives (@dylanpulver)
  • bug #65822 [WebProfilerBundle] Fix a TypeError when the ajax toolbar panel is missing from the page (@lazerg)
  • bug #65818 [Console] Do not evaluate the command line in the zsh completion (@GromNaN, @nicolas-grekas)
  • minor #65815 [Console] Fix the bash completion of "--option=value" and of an aliased command (@GromNaN)
  • bug #65811 [Console] Fix the bash completion on macOS and cover more option modes (@GromNaN)
  • bug #65801 [Finder] Fix prune filters not applied to nested directories and with path excludes (@nicolas-grekas)
  • minor #65786 Review Italian validator translations (@JJordan0C)
  • bug #65780 [Form] Accept UTC-equivalent timezones for date and time model data (@ousamabenyounes)
  • bug #65784 [Process] Use an absolute path for the cmd.exe fallback on Windows (@nicolas-grekas)
  • bug #65783 [Console] Test the shell completion scripts and fix the escaping (@GromNaN)
  • minor #65782 [Validator] Review Bosnian (bs) translations (@ivanoviczeljko)
  • bug #65779 [Messenger] Fix a crash when a Redis stream entry is not a JSON object (@nicolas-grekas)
  • bug #65778 [Mime] Never emit a raw control character in a header (@Spomky)
  • bug #65776 [Notifier][Vonage] Verify the payload_hash claim of signed webhooks (@nicolas-grekas)
  • bug #65775 [HttpFoundation] Match paths with the DOTALL modifier (@nicolas-grekas)
  • bug #65773 [Mailer][Sendgrid] Verify the webhook signature before parsing the payload (@nicolas-grekas)
  • bug #65777 [Mime] Do not treat an "@" inside the domain as the addr-spec separator (@Spomky)
  • bug #65772 [Webhook] Reject a malformed request body with a 406 instead of a 500 (@nicolas-grekas)
  • bug #65768 [Notifier] Reject an empty secret in the Twilio webhook parser (@nicolas-grekas)
  • minor #65765 [Mailer] Mark the Sendgrid webhook secret as sensitive (@nicolas-grekas)
  • minor #65762 [FrameworkBundle] Describe the webhook routing secret in the config reference (@nicolas-grekas)
  • minor #65756 [Form] Stop capturing Options in the upload_max_size_message closure (@bendavies)
Published in #Releases