This week, Symfony 3.4.48, 4.4.23 and 5.2.8 maintenance versions were released to mitigate the CVE-2021-21424 security issue. In addition, the fourth beta of Symfony 5.3 was published and the first speakers of the SymfonyWorld 2021 conference were announced.

Symfony development highlights

This week, 61 pull requests were merged (56 in code and 5 in docs) and 37 issues were closed (30 in code and 7 in docs). Excluding merges, 25 authors made 397,998 additions and 353,391 deletions. See details for code and docs.

4.4 changelog:

132e09f: [HttpClient] don’t prepare the request in ScopingHttpClient
21bf85f: [Console] fixes for PHP 8.1 deprecations
89c1be8: [WebProfilerBundle] only load Sfjs if it is not present already
9a53e6a: [DependencyInjection] fix dumping service-closure-arguments
2a581d2: [Security, Guard] prevent user enumeration
49dd6ef: [Console] fix Windows code page support
3b0c6f9: [HttpClient] fix adding query string to relative URLs with scoped clients
a0f8fc5: [Security] update Finnish translations
9066677: [Security] update Lithuanian translations
4289ab9: [Security] update Bulgarian translations
a7d3533: [Security] update Ukrainian translations

5.2 changelog:

7c43648: [Security] reset limiters on successful login
3348c63: [Security] make Login Rate Limiter also case insensitive for non-ascii user identifiers

5.x changelog:

2a87821: [Translation] improve CrowdinProvider
c151f76: [Runtime] fix defining $_SERVER[APP_ENV]
af19b6b: [Translation] add PoEditor provider
0b66008: [Translation] add Lokalise Provider
90ab9ed: [Translation] improve Translation providers
8ef49cf: [HttpClient] add DecoratorTrait to ease writing simple decorators
c2ce15d: [Translation] remove credentials from PoEditorProvider
18997ab: [FrameworkBundle] fix debug:event-dispatcher and debug:firewall
33bfb3d: [Mailer, Notifier, Translation] add tests for UnsupportedSchemeException
649d115: [Messenger] ability to distinguish retry and delay actions
1bf384a: [DependencyInjection] don’t try to load YamlFileLoader if it’s not actually needed
1921c78, fef1099: [FrameworkBundle] improve AbstractController::handleForm()
b14d769: [DependencyInjection] allow PHP-DSL files to be env-conditional
854226b, 2ac23c6: [FrameworkBundle] introduce AbstractController::renderForm() instead of handleForm()
35dbf8c: [Notifier] add missing charset to content-type for Slack notifier
c61617e: [Console] fix registering command aliases when using the new „cmd|alias“ syntax for names

Symfony CLI

Symfony CLI is a must-have tool when developing
Symfony applications on your local machine. It includes the
Symfony Local Server,
the best way to run local Symfony applications. This week Symfony CLI released
its new 4.24.1 version
with the following changes:

Fix fuzzy command name algorithm when there is an exact match

Newest issues and pull requests

LoginLinkHandler options should be able to be overridden programmatically
[Serializer] Allow max depth of 0
Allow to Group Form Items
Define alias with an attribute
[Serializer] set context for property by Property Info Extractor

They talked about us

Batching Symfony Messenger messages
Custom Doctrine profiling system
Vue.js and Symfony — nested menu
Introducing ECS Prefixed and Downgraded to PHP 7.1
#Symfony — découpler la gestion des formulaires

Call to Action

Follow Symfony on Twitter and retweet this article.
Subscribe to the Symfony blog RSS and never miss a Symfony story again.

Symfony Blog
Read More