Symfony v7.3.4 and v6.4.26 released!

NewsBot · 27 September 2025 15:21

Symfony v7.3.4 and v6.4.26 has been released.

Changelog (Comparing v7.3.3...v7.3.4 · symfony/symfony · GitHub)

bug #61830 [Security] Fix preload warning in AuthorizationChecker (@MatTheCat)

bug #61825 [DoctrineBridge] Make EntityUserProviders pass attributes to their loader (@MatTheCat)

bug #61818 [Notifier] Rename LOX24RequestParser to Lox24RequestParser (@nicolas-grekas)

bug #61808 [Config] Fix incorrect serialized data mangling (@aboks)

bug #61793 [AssetMapper] Prevent duplicate entries in module preloads (@xDeSwa)

bug #61785 [ObjectMapper] Preserve non-promoted constructor parameters (@rvanlaak)

bug #60515 [Mailer] Fix memory leak with mailer.message_logger_listener (@andrew-demb)

bug #61757 [FrameworkBundle] Perform-no-deep-merging on workflow transitions’ from/to configs (@nicolas-grekas)

bug #61766 Fix ord()-related PHP 8.5 deprecations (@nicolas-grekas)

bug #61368 [HttpKernel] Refine Vary header check to skip special handling of ‘Accept-Language’ when it’s the only entry and ‘_vary_by_language’ is true in CacheAttributeListener (@santysisi)

bug #61752 [PropertyInfo] Fix getting type from constructor of parent class in PhpStanExtractor (@wuchen90)

bug #61746 [Serializer] Fix unknown type in denormalization errors when union type used in constructor (@d-mitrofanov-v)

bug #61724 [Console] Fix handling of \E in Bash completion (@HypeMC)

bug #61518 [HttpKernel] Handle an array vary header in the http cache store for write (@philpichet)

bug #61736 [PhpUnitBridge] do not try to modify the result of a PhptTestCase (@xabbuh)

bug #61728 [TypeInfo] Fix issue with merging union type with a nullable union type (@matijn-made)

bug #61731 [PhpUnitBridge] Fix gathering deprecation in phpt (@nicolas-grekas)

bug #61729 [PhpUnitBridge] Silence deprecation of __sleep/wakeup() (@nicolas-grekas)

bug #61727 Replace __sleep/wakeup() by __(un)serialize() for throwing and internal usages (@nicolas-grekas)

bug #61714 [SecurityBundle] Fix se…

Link: Release v7.3.4 · symfony/symfony · GitHub

Changelog (Comparing v6.4.25...v6.4.26 · symfony/symfony · GitHub)

bug #61856 [Console] do not pass the empty string to ord() (@xabbuh)

bug #61855 [DoctrineBridge][Yaml] don’t cast strings exceeding the min/max int ranges (@xabbuh)

bug #61844 do not coerce NAN to other types (@xabbuh)

bug #61825 [DoctrineBridge] Make EntityUserProviders pass attributes to their loader (@MatTheCat)

bug #61793 [AssetMapper] Prevent duplicate entries in module preloads (@xDeSwa)

bug #61757 [FrameworkBundle] Perform-no-deep-merging on workflow transitions’ from/to configs (@nicolas-grekas)

bug #61766 Fix ord()-related PHP 8.5 deprecations (@nicolas-grekas)

bug #61368 [HttpKernel] Refine Vary header check to skip special handling of ‘Accept-Language’ when it’s the only entry and ‘_vary_by_language’ is true in CacheAttributeListener (@santysisi)

bug #61746 [Serializer] Fix unknown type in denormalization errors when union type used in constructor (@d-mitrofanov-v)

bug #61724 [Console] Fix handling of \E in Bash completion (@HypeMC)

bug #61518 [HttpKernel] Handle an array vary header in the http cache store for write (@philpichet)

bug #61736 [PhpUnitBridge] do not try to modify the result of a PhptTestCase (@xabbuh)

bug #61731 [PhpUnitBridge] Fix gathering deprecation in phpt (@nicolas-grekas)

bug #61729 [PhpUnitBridge] Silence deprecation of __sleep/wakeup() (@nicolas-grekas)

bug #61727 Replace __sleep/wakeup() by __(un)serialize() for throwing and internal usages (@nicolas-grekas)

bug #61693 [Console] Don’t append a new line to test inputs ending with an EOT (@MatTheCat)

bug #61596 [FrameworkBundle] Normalize workflow places separately (@KevinVanSonsbeek)

bug #61690 [Console] Don’t automatically append EOT to multiline test inputs (@MatTheCat)

bug #61667 [Config] Fix GlobResource pattern with trailing slash (@HypeMC)

bug #61659 [Security] Fix HttpUtils::createRequest() when the base request is forw…

Link: Release v6.4.26 · symfony/symfony · GitHub