Symfony News

A Week of Symfony #750 (10-16 May 2021)

This week, Symfony 3.4.48, 4.4.23 and 5.2.8 maintenance versions were released to mitigate the CVE-2021-21424 security issue. In addition, the fourth beta of Symfony 5.3 was published and the first speakers of the SymfonyWorld 2021 conference were announced.

Symfony development highlights

This week, 61 pull requests were merged (56 in code and 5 in docs) and 37 issues were closed (30 in code and 7 in docs). Excluding merges, 25 authors made 397,998 additions and 353,391 deletions. See details for code and docs.

4.4 changelog:

• 132e09f: [HttpClient] don't prepare the request in ScopingHttpClient
• 21bf85f: [Console] fixes for PHP 8.1 deprecations
• 89c1be8: [WebProfilerBundle] only load Sfjs if it is not present already
• 9a53e6a: [DependencyInjection] fix dumping service-closure-arguments
• 2a581d2: [Security, Guard] prevent user enumeration
• 49dd6ef: [Console] fix Windows code page support
• 3b0c6f9: [HttpClient] fix adding query string to relative URLs with scoped clients
• a0f8fc5: [Security] update Finnish translations
• 9066677: [Security] update Lithuanian translations
• 4289ab9: [Security] update Bulgarian translations
• a7d3533: [Security] update Ukrainian translations

5.2 changelog:

• 7c43648: [Security] reset limiters on successful login
• 3348c63: [Security] make Login Rate Limiter also case insensitive for non-ascii user identifiers

5.x changelog:

• 2a87821: [Translation] improve CrowdinProvider
• c151f76: [Runtime] fix defining $_SERVER[APP_ENV]
• af19b6b: [Translation] add PoEditor provider
• 0b66008: [Translation] add Lokalise Provider
• 90ab9ed: [Translation] improve Translation providers
• 8ef49cf: [HttpClient] add DecoratorTrait to ease writing simple decorators
• c2ce15d: [Translation] remove credentials from PoEditorProvider
• 18997ab: [FrameworkBundle] fix debug:event-dispatcher and debug:firewall
• 33bfb3d: [Mailer, Notifier, Translation] add tests for UnsupportedSchemeException
• 649d115: [Messenger] ability to distinguish retry and delay actions
• 1bf384a: [DependencyInjection] don't try to load YamlFileLoader if it's not actually needed
• 1921c78, fef1099: [FrameworkBundle] improve AbstractController::handleForm()
• b14d769: [DependencyInjection] allow PHP-DSL files to be env-conditional
• 854226b, 2ac23c6: [FrameworkBundle] introduce AbstractController::renderForm() instead of handleForm()
• 35dbf8c: [Notifier] add missing charset to content-type for Slack notifier
• c61617e: [Console] fix registering command aliases when using the new "cmd|alias" syntax for names

Symfony CLI

Symfony CLI is a must-have tool when developing Symfony applications on your local machine. It includes the Symfony Local Server, the best way to run local Symfony applications. This week Symfony CLI released its new 4.24.1 version with the following changes:

• Fix fuzzy command name algorithm when there is an exact match

Newest issues and pull requests

• LoginLinkHandler options should be able to be overridden programmatically
• [Serializer] Allow max depth of 0
• Allow to Group Form Items
• Define alias with an attribute
• [Serializer] set context for property by Property Info Extractor

They talked about us

• Batching Symfony Messenger messages
• Custom Doctrine profiling system
• Vue.js and Symfony — nested menu
• Introducing ECS Prefixed and Downgraded to PHP 7.1
• #Symfony — découpler la gestion des formulaires

Call to Action

• Follow Symfony on Twitter and retweet this article.
• Subscribe to the Symfony blog RSS and never miss a Symfony story again.