Symfony 4.4.43 has just been released. Here is the list of the most important changes since 4.4.42:
- bug #46765 [Serializer] Fix denormalization union types with constructor (@Gwemox)
- bug #46769 [HttpKernel] Fix a PHP 8.1 deprecation notice in HttpCache (@mpdude)
- bug #46747 Fix global state pollution between tests run with ApplicationTester (@Seldaek)
- bug #46730 [Intl] Fix the IntlDateFormatter::formatObject signature (@damienalexandre)
- bug #46668 [FrameworkBundle] Lower JsonSerializableNormalizer priority (@aprat84)
- bug #46678 [HttpFoundation] Update "[Session] Overwrite invalid session id" to only validate when files session storage is used (@alexpott)
- bug #45861 [Serializer] Try all possible denormalization route with union types when ALLOW_EXTRA_ATTRIBUTES=false (@T-bond)
- bug #46676 [DoctrineBridge] Extend type guessing on enum fields (@Gigino Chianese)
- bug #46699 [Cache] Respect $save option in all adapters (@jrjohnson)
- bug #46697 [HttpKernel] Disable session tracking while collecting profiler data (@nicolas-grekas)
- bug #46684 [MonologBridge] Fixed support of elasticsearch 7.+ in ElasticsearchLogstashHandler (@lyrixx)
- bug #46368 [Mailer] Fix for missing sender name in case with usage of the EnvelopeListener (@bobahvas)
- bug #46548 [Mime] Allow url as a path in the DataPart::fromPath (@wkania)
- bug #46594 [FrameworkBundle] Fix XML cache config (@HeahDude)
- bug #46595 [Console] Escape in command name & description from getDefaultName() (@ogizanagi)
- bug #46565 [WebProfilerBundle] Fix dark theme selected line highlight color & reuse css vars (@ogizanagi)
- bug #46535 [Mime] Check that the path is a file in the DataPart::fromPath (@wkania)
- bug #46543 [Cache] do not pass null to strlen() (@xabbuh)
- bug #46478 [Contracts] remove static cache from ServiceSubscriberTrait (@kbond)
Want to upgrade to this new release? Because Symfony protects backwards-compatibility very closely, this should be quite easy. Use SymfonyInsight upgrade reports to detect the code you will need to change in your project and read our upgrade documentation to learn more.
Want to be notified whenever a new Symfony release is published? Or when a version is not maintained anymore? Or only when a security issue is fixed? Consider subscribing to the Symfony Roadmap Notifications.
Login to add comment
Other posts in this group
We were absolutely thrilled to gather with the incredible Symfony community for the first time in Vienna, Austria, from December 5th to 6th, surrounded by the warm and festive atmosphere of the
SymfonyLive Paris 2025, conference in French language only, will take place from March 27 to 28! The schedule is currently being revealed as we go along. More details are available here.
💻
Symfony has been active on X, Mastodon, and Bluesky for some time, but until recently, not all platforms received equal attention. Since Twitter (now X) was our first social network, all blog posts we
SymfonyLive Berlin 2025, conference held in English, will take place from April 1 to 4! The schedule is being revealed gradually. More details are available here.
As we are now unveiling th
Affected versions
Twig versions >=3.16.0,<3.19.0 are affected by this security issue.
The issue has been fixed in Twig 3.19.0.
Description
When using the null coalesce operator (??), output esc
Symfony 6.4.18 has just been released. Here is the list of the most important changes since 6.4.17:
bug #58889 [Serializer] Handle default context in Serializer (@Valmonzo)bug #59631 [HttpClient
Symfony 7.1.11 has just been released. Here is the list of the most important changes since 7.1.10:
bug #58889 [Serializer] Handle default context in Serializer (@Valmonzo)bug #59631 [HttpClient
