@@ -7,6 +7,44 @@ in 6.4 minor versions.
77To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
88To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v6.4.0...v6.4.1
99
10+ * 6.4.0-BETA3 (2023-11-10)
11+
12+ * bug #51666 [ RateLimiter] CompoundLimiter was accepting requests even when some limiters already consumed all tokens (10n)
13+ * bug #52524 [ AssetMapper] Only download a CSS file if it is explicitly advertised (weaverryan)
14+ * bug #52523 [ AssetMapper] avoid caching MappedAsset inside JavaScript Import (weaverryan)
15+ * bug #52519 [ AssetMapper] If assets are served from a subdirectory or CDN, also adjust importmap keys (weaverryan)
16+ * bug #52508 [ AssetMapper] Fix jsdelivr import parsing with no imported value (weaverryan)
17+ * security #cve-2023 -46734 [ TwigBridge] Ensure CodeExtension's filters properly escape their input (nicolas-grekas, GromNaN)
18+ * security #cve-2023 -46735 [ Webhook] Remove user-submitted type from HTTP response (nicolas-grekas)
19+ * security #cve-2023 -46733 [ Security] Fix possible session fixation when only the * token* changes (RobertMe)
20+ * bug #52514 [ FrameworkBundle] Don't reference SYMFONY_IDE env var in non-debug mode (nicolas-grekas)
21+ * bug #52506 [ SecurityBundle] wire the secret for Symfony 6.4 compatibility (xabbuh)
22+ * bug #52496 [ VarDumper] Accept mixed key on ` DsPairStub ` (marc-mabe)
23+ * bug #52502 [ Config] Prefixing ` FileExistenceResource::__toString() ` to avoid conflict with ` FileResource ` (weaverryan)
24+ * bug #52491 [ String] Method toByteString conversion using iconv is unreachable (Vincentv92)
25+ * bug #52488 [ HttpKernel] Fix PHP deprecation (nicolas-grekas)
26+ * bug #52469 Check whether secrets are empty and mark them all as sensitive (nicolas-grekas)
27+ * feature #52471 [ HttpKernel] Add ` ControllerResolver::allowControllers() ` to define which callables are legit controllers when the ` _check_controller_is_allowed ` request attribute is set (nicolas-grekas)
28+ * bug #52476 [ Messenger] fix compatibility with Doctrine DBAL 4 (xabbuh)
29+ * bug #52434 [ Console] [ FrameworkBundle ] Fix missing ` profile ` option for console commands (keulinho)
30+ * bug #52474 [ HttpFoundation] ensure string type with mbstring func overloading enabled (xabbuh)
31+ * bug #52472 [ HttpClient] [ WebProfilerBundle ] Do not generate cURL command when files are uploaded (MatTheCat)
32+ * bug #52457 [ Cache] [ HttpFoundation ] [ Lock] Fix empty username/password for PDO PostgreSQL (HypeMC)
33+ * bug #52443 [ Yaml] Fix uid binary parsing (mRoca)
34+ * feature #52449 [ TwigBridge] Mark CodeExtension as ` @internal ` (fabpot)
35+ * bug #52429 [ HttpClient] Replace ` escapeshellarg ` to prevent overpassing ` ARG_MAX ` (alexandre-daubois)
36+ * bug #52442 Disable the "Copy as cURL" button when the debug info are disabled (stof)
37+ * bug #52444 Remove full DSNs from exception messages (nicolas-grekas)
38+ * feature #52336 [ HttpFoundation] [ Lock ] Makes MongoDB adapters usable with ` ext-mongodb ` only (GromNaN)
39+ * bug #52428 [ HttpKernel] Preventing error 500 when function putenv is disabled (ShaiMagal)
40+ * bug #52427 [ Console] [ Process ] do not let context classes extend the message classes (xabbuh)
41+ * bug #52408 [ Yaml] Fix block scalar array parsing (NickSdot)
42+ * bug #52132 [ Console] Fix horizontal table top border is incorrectly rendered (OskarStark)
43+ * bug #52368 [ AssetMapper] Fixing bug where JSCompiler used non-absolute importmap entry path (weaverryan)
44+ * bug #52367 [ Uid] Fix UuidV7 collisions within the same ms (nicolas-grekas)
45+ * bug #52287 [ FrameworkBundle] Fix deprecation layer for "enable_annotations" in validation and serializer configuration (lyrixx)
46+ * bug #52222 [ MonologBridge] Fix support for monolog 3.0 (louismariegaborit)
47+
1048* 6.4.0-BETA2 (2023-10-29)
1149
1250 * bug #52329 [ HttpClient] Psr18Client: parse HTTP Reason Phrase for Response (Hanmac)
0 commit comments