Symfony v7.0.0-BETA3 and v6.4.0-BETA3 released!

[NewsBot]

Symfony v7.0.0-BETA3 and v6.4.0-BETA3 has been released.

Changelog (Comparing v7.0.0-BETA2...v7.0.0-BETA3 · symfony/symfony · GitHub)

• bug #51666 [RateLimiter] CompoundLimiter was accepting requests even when some limiters already consumed all tokens (@10n)
• bug #52524 [AssetMapper] Only download a CSS file if it is explicitly advertised (@weaverryan)
• bug #52523 [AssetMapper] avoid caching MappedAsset inside JavaScript Import (@weaverryan)
• bug #52519 [AssetMapper] If assets are served from a subdirectory or CDN, also adjust importmap keys (@weaverryan)
• bug #52508 [AssetMapper] Fix jsdelivr import parsing with no imported value (@weaverryan)
• security #cve-2023-46734 [TwigBridge] Ensure CodeExtension’s filters properly escape their input (@nicolas-grekas, @GromNaN)
• security #cve-2023-46735 [Webhook] Remove user-submitted type from HTTP response (@nicolas-grekas)
• security #cve-2023-46733 [Security] Fix possible session fixation when only the token changes (@RobertMe)
• bug #52514 [FrameworkBundle] Don’t re…

Link: Release v7.0.0-BETA3 · symfony/symfony · GitHub

Changelog (Comparing v6.4.0-BETA2...v6.4.0-BETA3 · symfony/symfony · GitHub)

• bug #51666 [RateLimiter] CompoundLimiter was accepting requests even when some limiters already consumed all tokens (@10n)
• bug #52524 [AssetMapper] Only download a CSS file if it is explicitly advertised (@weaverryan)
• bug #52523 [AssetMapper] avoid caching MappedAsset inside JavaScript Import (@weaverryan)
• bug #52519 [AssetMapper] If assets are served from a subdirectory or CDN, also adjust importmap keys (@weaverryan)
• bug #52508 [AssetMapper] Fix jsdelivr import parsing with no imported value (@weaverryan)
• security #cve-2023-46734 [TwigBridge] Ensure CodeExtension’s filters properly escape their input (@nicolas-grekas, @GromNaN)
• security #cve-2023-46735 [Webhook] Remove user-submitted type from HTTP response (@nicolas-grekas)
• security #cve-2023-46733 [Security] Fix possible session fixation when only the token changes (@RobertMe)
• bug #52514 [FrameworkBundle] Don’t re…

Link: Release v6.4.0-BETA3 · symfony/symfony · GitHub