Symfony 5.4.26 has just been released.
Here is the list of the most important changes since 5.4.25:

bug #50933 [Serializer] Fix deserializing nested arrays of objects with mixed keys (@HypeMC)
bug #51078 [FrameworkBundle][Workflow] Throw exception is workflow.xxx.transitions is not an array (@lyrixx)
bug #51114 [Serializer] Fix denormalizing abstract part headers in MimeMessageNormalizer (@fancyweb)
bug #50788 [Validator] Fix regression with class metadatada on parent classes (@rmikalkenas)
bug #51017 [VarExporter] Fix exporting classes with __serialize() but not __unserialize() (@fancyweb)
bug #51031 Fix deprecations on PHP 8.3 (@nicolas-grekas)
bug #51000 [WebProfilerBundle] Fix error in case of ‚Content-Type‘ set null in dev environment with no debug (@alexbuyanow)
bug #50994 [ErrorHandler][Runtime] Don’t mess with ini_set(‚assert.warning‘) (@nicolas-grekas)
bug #50968 [PropertyAccess] Fix access to undefined „file“ key when checking stack frames (@nicolas-grekas)
bug #50552 [Security] Allow custom scheme to be used as redirection URIs (@Spomky)
bug #50945 [DebugBundle][FrameworkBundle] Fix using the framework without the Console component (@HypeMC)
bug #50913 [HttpKernel][WebProfilerBundle] Fix search feature (Cyril HERRERA)
bug #50937 [Form] fetch all known ChoiceType values at once (@xabbuh)
bug #50944 [FrameworkBundle] Add missing monolog channel tag to the messenger:failed:retry command (@HypeMC)
bug #49070 [RateLimiter] fix incorrect retryAfter of FixedWindow (@RobertMe)
bug #50960 [VarDumper] Fix dumping ArrayObject with DumpDataCollector (@lyrixx, @HypeMC)
bug #50943 [Intl] Taking into account bibliographic + overlong (@oleg-andreyev)
bug #50954 [PhpUnitBridge] Kill the last concurrent process when it stales for more than 60s (@nicolas-grekas)
bug #50475 [FrameworkBundle] Prevent cache:clear to lose files on subsequent runs (@Okhoshi)
bug #47252 [PhpUnitBridge] Use triggering class to generate baseline for deprecation messages from DebugClassLoader (@leongersen)
bug #50582 [Security/Http] Fix false-string handling in RememberMeAuthenticator (@ossinkine)
bug #50595 [DependencyInjection] Don’t ignore attributes on the actual decorator (@HypeMC)
bug #50804 [Serializer] Fix Normalizer not utilizing converted name for index variadic param (@DidierLmn)
bug #50813 [DoctrineBridge] Load refreshed user proxy (@MatTheCat)
bug #50905 [DepdencyInjection] Fix costly logic when checking errored definitions (@nicolas-grekas)
bug #50884 [Finder] Fix initial directory is opened twice (@mvorisek)
bug #50881 [Messenger] Fix passing options set via tags to handler descriptors (@nicolas-grekas)
bug #50837 [DependencyInjection] Fix autocasting null env values to empty string (@fancyweb)
bug #50810 [String] Fix Inflector for ’status‘ (@evertharmeling)

Want to upgrade to this new release? Because Symfony protects
backwards-compatibility very closely, this should be quite easy. Use
SymfonyInsight upgrade reports
to detect the code you will need to change in your project and
read our upgrade
documentation to learn more.

Want to be notified whenever a new Symfony release is published? Or when a
version is not maintained anymore? Or only when a security issue is fixed?
Consider subscribing to the Symfony Roadmap Notifications.

Symfony Blog

Read More