Symfony 4.4.40 has just been released. Here is the list of the most important changes since 4.4.39: bug #45910 [Messenger] reset connection on worker shutdown (@SanderHagen) bug #45909 [Form][TwigBundle] reset Twig form theme resources between requests (@xabbuh) bug #45906 [HttpClient] on redirections don't send content related request headers (@xabbuh) bug #45714 [Messenger] Fix cannot select FOR UPDATE from view on Oracle (@rjd22) bug #45888 [Messenger] Add mysql indexes back and work around deadlocks using soft-delete (@nicolas-grekas) bug #45891 [HttpClient] Fix exporting objects with readonly properties (@nicolas-grekas) bug #45875 [ExpressionLanguage] Fix matches when the regexp is not valid (@fabpot) bug #45870 [Validator] Fix File constraint invalid max size exception message (@fancyweb) bug #45851 [Console] Fix exit status on uncaught exception with negative code (@acoulton) bug #45838 [Serializer] Fix denormalizing union types (@T-bond) bug #45816 [Mailer] Preserve case of headers (@nicolas-grekas) bug #45814 [HttpClient] Let curl handle Content-Length headers (@nicolas-grekas) bug #45813 [HttpClient] Move Content-Type after Content-Length (@nicolas-grekas) bug #45737 [Lock] SemaphoreStore catching exception from sem_get (@Triplkrypl) bug #45690 [Mailer] Use recipients in sendmail transport (@HypeMC) bug #45720 [PropertyInfo] strip only leading when unknown docType (@EmilMassey) bug #44915 [Console] Fix compact table style to avoid outputting a leading space (@Seldaek) bug #45676 [Process] Don't return executable directories in PhpExecutableFinder (@fancyweb) bug #45702 [Form] Fix the usage of the Valid constraints in array-based forms (@stof) bug #45677 [DependencyInjection] fix ServiceSubscriberTrait bug where parent has __call() (@kbond) bug #45678 [HttpClient] Fix reading proxy settings from dotenv when curl is used (@nicolas-grekas) bug #45671 [FrameworkBundle] Ensure container is reset between tests (@nicolas-grekas) Want to upgrade to this new release? Because Symfony protects backwards-compatibility very closely, this should be quite easy. Use SymfonyInsight upgrade reports to detect the code you will need to change in your project and read our upgrade documentation to learn more. Want to be notified whenever a new Symfony release is published? Or when a version is not maintained anymore? Or only when a security issue is fixed? Consider subscribing to the Symfony Roadmap Notifications.
Sponsor the Symfony project.https://symfony.com/blog/symfony-4-4-40-released?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
Login to add comment
Other posts in this group
SymfonyLive Paris 2025, conference in French language only, will take place from March 27 to 28! The schedule is currently being revealed as we go along. More details are available here.
💻
Symfony has been active on X, Mastodon, and Bluesky for some time, but until recently, not all platforms received equal attention. Since Twitter (now X) was our first social network, all blog posts we
SymfonyLive Berlin 2025, conference held in English, will take place from April 1 to 4! The schedule is being revealed gradually. More details are available here.
As we are now unveiling th
Affected versions
Twig versions >=3.16.0,<3.19.0 are affected by this security issue.
The issue has been fixed in Twig 3.19.0.
Description
When using the null coalesce operator (??), output esc
Symfony 6.4.18 has just been released. Here is the list of the most important changes since 6.4.17:
bug #58889 [Serializer] Handle default context in Serializer (@Valmonzo)bug #59631 [HttpClient
Symfony 7.1.11 has just been released. Here is the list of the most important changes since 7.1.10:
bug #58889 [Serializer] Handle default context in Serializer (@Valmonzo)bug #59631 [HttpClient
Symfony 7.2.3 has just been released. Here is the list of the most important changes since 7.2.2:
bug #58889 [Serializer] Handle default context in Serializer (@Valmonzo)bug #59631 [HttpClient]
