Symfony 7.4.14 has just been released.
Read the Symfony upgrade guide to learn more about upgrading Symfony
and use the SymfonyInsight upgrade reports to detect the code you will
need to change in your project.
Tip
Want to be notified whenever a new Symfony release is published? Or when a
version is not maintained anymore? Or only when a security issue is fixed?
Consider subscribing to the Symfony Roadmap Notifications.
Changelog Since Symfony 7.4.13
- data #64729 Release v7.4.14
- bug #64718 [Serializer] Fix GetSetMethodNormalizer denormalization of constructor only objects (@mtarld)
- minor #64721 [Finder] Update tests to pass on Windows (@MatTheCat)
- minor #64717 Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (@dependabot[bot])
- minor #64715 Bump the github-actions group across 1 directory with 2 updates (@dependabot[bot])
- data #64692 [Validator] Remove needs-review-translation state from Spanish cron e… (@salvador-castro)
- data #64698 [Validator] reviewed Polish translation unit 146 (@thunderer)
- data #64711 [Validator] Ukrainian translation update (@VladyslavChernyshov)
- minor #64694 [FrameworkBundle] Fix service _instanceof type (@philbates35)
- minor #64690 Replace Python script with PHP in the sync translations skill (@fabpot)
- minor #64676 Add symfony-sync-translations skill (@fabpot)
- data #64675 [Validator] Add translated messages for the Cron constraint (@fabpot)
- minor #64663 [Security] Fix PHPDoc of OidcTokenGenerateCommand::addGenerator (@dfinchenko)
- bug #64120 [Serializer] honor csv_headers context when no_headers is true (@ousamabenyounes)
- bug #64648 [Cache] Ensure RelayProxy compatibility with Relay extension 0.30.0 (@nicolas-grekas)
- bug #64225 [Serializer] Fix #[Ignore] on a getter ignoring a same-name property (@eyupcanakman)
- bug #64645 [Cache] Ensure RelayClusterProxy compatibility with Relay extension 0.30.0 (@Amoifr)
- bug #64236 [Finder] Fix recursion into stream wrapper subdirectories on Windows (@eyupcanakman)
- minor #64647 [FrameworkBundle][TwigBridge] Relax test assertions for generated _fragment URI (@nicolas-grekas)
- bug #49137 [Validator] Avoid TypeError and improve DX when null groups (@alamirault)
- bug #64635 [AssetMapper] Fix stale dev asset cache in long-running runtimes (@adrianrudnik)
- bug #64576 [Serializer] Fix denormalization of already-instantiated nested objects (@pokki-deploy)
- bug #63791 [ObjectMapper] Fix mapping of private properties from parent classes (@Amoifr)
- bug #64404 [SecurityBundle] Fix state leak in LogoutUrlGenerator in async environments (@KevinMartinsDev, @nicolas-grekas)
- data #64602 [Form][Validator] Review Hungarian translations (@antalaron)
- data #64626 [Form][Validator] Ukrainian translation review and update (@VladyslavChernyshov)
- bug #64617 [Cache][DoctrineBridge][HttpFoundation][Lock][Messenger] Restore compat with DBAL 4.5 (@nicolas-grekas)
- bug #63800 [FrameworkBundle] Detect env placeholders in resolved route parameter values (@Amoifr)
- minor #64616 Add skill to help with targetting PRs to their appropriate branch (@nicolas-grekas)
- bug #64596 [EventSourceHttpClient] Prevent re-yielding of the first chunk after reconnect (@nacorp)
- data #64597 Review Indonesian (id) translations (@sawirricardo)
- bug #64605 [Mailer] Register MicrosoftGraphTransportFactory in Transport::FACTORY_CLASSES (@Amoifr)
- data #64607 [Translation] Verify Tagalog (tl) validator strings and remove needs-… (@Jerdon07)
- minor #64614 [Console] use mb_convert_encoding() instead of mb_convert_variables() (@Girgias)
- minor #64556 Add contributor skills for security review, hardening rules and triage (@nicolas-grekas)
- bug #64588 Migrate table definitions to DBAL’s TableEditor API (@nicolas-grekas)
- bug #64577 [ObjectMapper] Make existing-object mapping behavior consistent (@kbond)
- bug #64583 [Mailer][Bridge][MicrosoftGraphApi] Set recipients from $envelope instead of the $email headers (@Pelagoss)
- bug #64584 [ObjectMapper] Fix fatal errors on unreadable source properties (@nicolas-grekas)
- data #64578 [Form][Validator] Review Bulgarian (bg) translations (@moynzzz)
- data #64564 Remove review state from Serbian translations (@Trysha-rbrn)
- data #64565 Remove review state from Russian translations #64512 (@centaur-vova)
- bug #64566 Harden __toString trampolines via __unserialize() (@nicolas-grekas)
- bug #64561 [VarExporter] Fix exporting objects that cannot be instantiated empty (@nicolas-grekas)
- bug #64557 [Translation] Create Crowdin files before uploading translations (@MatTheCat)
- data #64550 [Validator] reviewed Polish translation units 143-145 (@thunderer)
- data #64551 [Form] reviewed Polish translation unit 129 (@thunderer)
- bug #64549 [TwigBridge] Reject __toString trampolines in TemplatedEmail::__unserialize() (@nicolas-grekas)
- minor #64546 [GHA] Add PHPStan rules to spot non-constant-time comparisons to hash_hmac() and __toString-based trampolines (@nicolas-grekas)
- data #64544 [Validator] Review French (fr) translations for XML constraints (@lacatoire)
- minor #64476 Unsafe unserialize phpstan rule (@jack-worman)
- bug #64532 [HttpKernel] Restore null-on-invalid for nullable #[Autowire(service:)] controller args (@ousamabenyounes, @pokki-deploy)
- bug #64533 [Console] Render formatter tags in ChoiceQuestion default value (@ousamabenyounes)
- data #64542 [Form][Validator] Update Spanish translations (@ThiagoMirandaLiotto)
- data #64543 [Form][Validator] Review Croatian translations (@HypeMC)
- minor #64537 [CI] Make the PHPStan job report only new errors (@nicolas-grekas)
- data #64526 [Form][Validator] Review and correct Arabic translation (@ayyoub-afwallah)
- minor #64524 Make tests compatible with PHPUnit 13.2 and Twig 3.28 (@nicolas-grekas)
- bug #64477 [Serializer] Keep collection value type for iterable constructor parameters (@ousamabenyounes)
- bug #64475 [AssetMapper] Render an empty import map as a JSON object (@ousamabenyounes)
- minor #64473 [Translation] Fix test failing without the intl extension (@nicolas-grekas)
- minor #64472 [Mailer][Mailchimp] Fix tests on low-deps (@nicolas-grekas)
- bug #64458 [Webhook] Fix Content-Type key in createRequest method (@MarijnDoeve)
- bug #64468 [HttpFoundation] Add RFC6598 Shared Address Space to IpUtils::PRIVATE_SUBNETS (@derflocki)
- bug #64452 [Translation] Copy domains metadata when moving messages to intl ones (@MatTheCat)
- bug #64424 [Form] Translate TranslatableInterface label in violation messages (@Amoifr)
- minor #64453 Remove review state from Serbian translations (@Trysha-rbrn)
- bug #64359 [Validator] Support SVG dimensions with units (@Will-thom)
- bug #64419 [HttpKernel][Security] Add allowed_classes => false to unserialize() in CacheWarmerAggregate, LoggerDataCollector, and HttpCache Store (@XananasX7)
- minor #64435 Update installation command for Stopwatch component (@abdounikarim)
- data #64451 [Form] Add missing translation for invalid UUID (@jmsche)
- data #64440 [Validator] fix sr-Latn validation messages and video constraint translations (@Trysha-rbrn)
- data #64446 [Validator] Add translated messages for the XML constraint (@nicolas-grekas)
- bug #64375 [Notifier] Send message to MS-Teams via Workflow (@gassan)
- bug #64429 [Mailer] Fix inline images in MandrillApiTransport by using the Content-ID as image name (@ibrambe)
- bug #64394 Fix XMLHttpRequest URL handling in toolbar JS (Mudassar Ali)
- bug #64376 [Translation] Fix XLIFF 2 catalog metadata (@MatTheCat)
- bug #64386 [Dotenv] Don’t truncate external env vars containing $ when referenced via ${…} indirection (@nicolas-grekas)
- bug #64388 [Yaml] Fix parsing inline anchored values (@nicolas-grekas)
- bug #64358 [ObjectMapper] Fix TargetClass generic type in ConditionCallableInterface (Mudassar Ali)
- bug #64389 Migrate configureSchema() to DBAL’s editor API (@nicolas-grekas)
- bug #64102 Remove usage of Kernel::VERSION (@fabpot)
- data #64371 Release v6.4.41
Sponsor the Symfony project.



