From e4086eb954dcc12258e48c5c19384ac47c259286 Mon Sep 17 00:00:00 2001 From: Fabien Potencier Date: Wed, 6 Nov 2024 11:00:38 +0100 Subject: [PATCH 1/2] Update CHANGELOG for 7.2.0-BETA2 --- CHANGELOG-7.2.md | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/CHANGELOG-7.2.md b/CHANGELOG-7.2.md index 8e6f644edb3eb..f0c94ba85d911 100644 --- a/CHANGELOG-7.2.md +++ b/CHANGELOG-7.2.md @@ -7,6 +7,32 @@ in 7.2 minor versions. To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v7.2.0...v7.2.1 +* 7.2.0-BETA2 (2024-11-06) + + * bug #58776 [DependencyInjection][HttpClient][Routing] Reject URIs that contain invalid characters (nicolas-grekas) + * bug #58772 [DoctrineBridge] Backport detection fix of Xml/Yaml driver in DoctrineExtension (MatTheCat) + * bug #58706 [TwigBridge] use reproducible variable names in the default domain node visitor (xabbuh) + * security #cve-2024-51736 [Process] Use PATH before CD to load the shell on Windows (nicolas-grekas) + * security #cve-2024-50342 [HttpClient] Filter private IPs before connecting when Host == IP (nicolas-grekas) + * security #cve-2024-50345 [HttpFoundation] Reject URIs that contain invalid characters (nicolas-grekas) + * security #cve-2024-50340 [Runtime] Do not read from argv on non-CLI SAPIs (wouterj) + * bug #58765 [VarDumper] fix detecting anonymous exception classes on Windows and PHP 7 (xabbuh) + * bug #58757 [RateLimiter] Fix DateInterval normalization (danydev) + * bug #58764 [Mime] Don't require passing the encoder name to `TextPart` (javiereguiluz) + * bug #58712 [HttpFoundation] Fix support for `\SplTempFileObject` in `BinaryFileResponse` (elementaire) + * bug #58762 [WebProfilerBundle] re-add missing profiler shortcuts on profiler homepage (xabbuh) + * bug #58754 [Security] Store original token in token storage when implicitly exiting impersonation (wouterj) + * bug #58753 [Cache] Fix clear() when using Predis (nicolas-grekas) + * bug #58713 [Config] Handle Phar absolute path in `FileLocator` (alexandre-daubois) + * bug #58728 [WebProfilerBundle] Re-add missing Profiler shortcuts on Profiler homepage (welcoMattic) + * bug #58739 [WebProfilerBoundle] form data collector check passed and resolved options are defined (vltrof) + * bug #58752 [Process] Fix escaping /X arguments on Windows (nicolas-grekas) + * bug #58735 [Process] Return built-in cmd.exe commands directly in ExecutableFinder (Seldaek) + * bug #58723 [Process] Properly deal with not-found executables on Windows (nicolas-grekas) + * bug #58711 [Process] Fix handling empty path found in the PATH env var with ExecutableFinder (nicolas-grekas) + * bug #58704 [HttpClient] fix for HttpClientDataCollector fails if proc_open is disabled via php.ini (ZaneCEO) + * bug #58703 [TwigBridge] Use INTERNAL_VAR_NAME instead of getVarName (pan93412) + * 7.2.0-BETA1 (2024-10-27) * feature #58467 [PhpUnitBridge] support `ClockMock` and `DnsMock` with PHPUnit 10+ (xabbuh) From e266552392559eeef3293e0ad4f3490ab091a9ff Mon Sep 17 00:00:00 2001 From: Fabien Potencier Date: Wed, 6 Nov 2024 11:00:45 +0100 Subject: [PATCH 2/2] Update VERSION for 7.2.0-BETA2 --- src/Symfony/Component/HttpKernel/Kernel.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Symfony/Component/HttpKernel/Kernel.php b/src/Symfony/Component/HttpKernel/Kernel.php index 7e8b002079c10..603df6a83ac01 100644 --- a/src/Symfony/Component/HttpKernel/Kernel.php +++ b/src/Symfony/Component/HttpKernel/Kernel.php @@ -73,12 +73,12 @@ abstract class Kernel implements KernelInterface, RebootableInterface, Terminabl */ private static array $freshCache = []; - public const VERSION = '7.2.0-DEV'; + public const VERSION = '7.2.0-BETA2'; public const VERSION_ID = 70200; public const MAJOR_VERSION = 7; public const MINOR_VERSION = 2; public const RELEASE_VERSION = 0; - public const EXTRA_VERSION = 'DEV'; + public const EXTRA_VERSION = 'BETA2'; public const END_OF_MAINTENANCE = '07/2025'; public const END_OF_LIFE = '07/2025';