Symfony 7.3.4 has just been released.

Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in your project.

Tip

Want to be notified whenever a new Symfony release is published? Or when a version is not maintained anymore? Or only when a security issue is fixed? Consider subscribing to the Symfony Roadmap Notifications.

Changelog Since Symfony 7.3.3

  • bug #61830 [Security] Fix preload warning in AuthorizationChecker (@MatTheCat)
  • bug #61825 [DoctrineBridge] Make EntityUserProviders pass attributes to their loader (@MatTheCat)
  • bug #61818 [Notifier] Rename LOX24RequestParser to Lox24RequestParser (@nicolas-grekas)
  • bug #61808 [Config] Fix incorrect serialized data mangling (@aboks)
  • bug #61793 [AssetMapper] Prevent duplicate entries in module preloads (@xDeSwa)
  • bug #61785 [ObjectMapper] Preserve non-promoted constructor parameters (@rvanlaak)
  • bug #60515 [Mailer] Fix memory leak with mailer.message_logger_listener (@andrew-demb)
  • bug #61757 [FrameworkBundle] Perform-no-deep-merging on workflow transitions' from/to configs (@nicolas-grekas)
  • bug #61766 Fix ord()-related PHP 8.5 deprecations (@nicolas-grekas)
  • bug #61368 [HttpKernel] Refine Vary header check to skip special handling of 'Accept-Language' when it's the only entry and '_vary_by_language' is true in CacheAttributeListener (@santysisi)
  • bug #61752 [PropertyInfo] Fix getting type from constructor of parent class in PhpStanExtractor (@wuchen90)
  • bug #61746 [Serializer] Fix unknown type in denormalization errors when union type used in constructor (@d-mitrofanov-v)
  • bug #61724 [Console] Fix handling of \E in Bash completion (@HypeMC)
  • bug #61518 [HttpKernel] Handle an array vary header in the http cache store for write (@philpichet)
  • bug #61736 [PhpUnitBridge] do not try to modify the result of a PhptTestCase (@xabbuh)
  • bug #61728 [TypeInfo] Fix issue with merging union type with a nullable union type (@matijn-made)
  • bug #61731 [PhpUnitBridge] Fix gathering deprecation in phpt (@nicolas-grekas)
  • bug #61729 [PhpUnitBridge] Silence deprecation of __sleep/wakeup() (@nicolas-grekas)
  • bug #61727 Replace __sleep/wakeup() by __(un)serialize() for throwing and internal usages (@nicolas-grekas)
  • bug #61714 [SecurityBundle] Fix semantic configuration for singulars/plurals in XML (@nicolas-grekas)
  • bug #61132 [JsonPath] Make the component RFC compliant (@alexandre-daubois)
  • bug #60055 [MonologBridge] Make ConsoleHandler not handle messages at SILENT verbosity (@okhoshi)
  • bug #61701 [SecurityBundle] Add missing fixXmlConfig() call for issuer (@OskarStark)
  • bug #61693 [Console] Don’t append a new line to test inputs ending with an EOT (@MatTheCat)
  • bug #61596 [FrameworkBundle] Normalize workflow places separately (@KevinVanSonsbeek)
  • bug #61690 [Console] Don’t automatically append EOT to multiline test inputs (@MatTheCat)
  • bug #61667 [Config] Fix GlobResource pattern with trailing slash (@HypeMC)
  • bug #61658 [Messenger] map legacy options to the "sentinel" key when parsing DSNs (@xabbuh)
  • bug #61659 [Security] Fix HttpUtils::createRequest() when the base request is forwarded (@MatTheCat)
  • bug #61653 [Routing] Don't rebuild cache when controller action body changes (@HypeMC)
  • bug #61645 Replace backtick operator, deprecated in PHP 8.5, with shell_exec() (@iluuu1994)
  • bug #61617 [Validator] fall back to legacy options handling if configured named arguments do not match (@xabbuh)
  • bug #61097 [Serializer] Fix normalizing objects with accessors having the same name as a property (@RafaelKr)
  • bug #61615 [DependencyInjection] Fix optimizing ClassExistenceResource (@nicolas-grekas)
  • bug #61614 [SecurityBundle] Prevent accessing the tracked token storage when collecting data (@MatTheCat)
  • bug #61607 [Config] Fix ReflectionClassResource hash validation (@HypeMC)
  • bug #61605 [Cache] Fix internal representation of non-static values (@nicolas-grekas)
  • bug #61599 [Cache] Make TagAwareAdapter registrable as a service (@a.dmitryuk)
  • bug #61595 [Security] Pass attributes to nested ChainUserProviders (@valtzu)
  • bug #61580 [JsonStreamer] Fix encoding iterable lists (@mtarld)
  • bug #61232 [Messenger] Firebird Database - incompatibility with expected lowercase columns (@DSsatwareAG)
  • bug #61583 [DoctrineBridge] Fix exception catch when deleting temporary table in the sameDatabaseChecker (@GromNaN)
  • bug #61585 [HttpFoundation][SQLSRV] Change column type from TEXT to STRING (@Matt-PMCT)
  • bug #61571 [Serializer] Fix dealing with asymmetric visilibity for properties (@santysisi)
  • bug #60766 [DependencyInjection] Respect original service class when a proxy is defined (@lyrixx)
  • bug #61561 [JsonStreamer] Fix decoding iterable lists (@mtarld)
  • bug #61573 [Inflector][String] Fix edge cases (@OskarStark)
  • bug #61548 [Security] Fix attribute-based chained user providers (@valtzu)
Published in #Releases