Changelog (v6.0.0...v6.0.1)

• bug #44494 Remove FQCN type hints on properties (@fabpot)
• bug #44490 [DependencyInjection][Messenger] Add auto-registration for BatchHandlerInterface (@GaryPEGEOT)
• bug #44523 [Console] Fix polyfill-php73 requirement (@Seldaek)
• bug #44514 Don't access uninitialized typed property ChromePhpHandler::$response (@Philipp91)
• bug #44502 [HttpFoundation] do not call preg_match() on null (@xabbuh)
• bug #44475 [Console] Handle alias in completion script (@GromNaN)
• bug #44481 [FrameworkBundle] Fix loginUser() causing deprecation (@wouterj)
• bug #44416 [Translation] Make http requests synchronous when reading the Loco API (@Kocal)
• bug #44437 [HttpKernel] Fix wrong usage of SessionUtils::popSessionCookie (@simonchrz)
• bug #44350 [Translation] Fix TranslationTrait (@tomasz Kusy)
• bug #44460 [SecurityBundle] Fix ambiguous deprecation message on missing provider (@chalasr)
• bug #44467 [Console] Fix parameter types for ProcessHelper::mustRun() (@derrabus)
• bug #44427 [FrameworkBundle] Fix compatibility with symfony/security-core 6.x (deps=high tests) (@wouterj)
• bug #44424 [SecurityBundle] Don't rely on deprecated strategy constants (@derrabus)
• bug #44399 Prevent infinite nesting of lazy ObjectManager instances when ObjectManager is reset (@Ocramius)
• bug #44402 [HttpKernel] Fix using FileLinkFormatter after serialization (@derrabus)
• bug #44395 [HttpKernel] fix sending Vary: Accept-Language when appropriate (@nicolas-grekas)
• bug #44385 [DependencyInjection] Skip parameter attribute configurators in AttributeAutoconfigurationPass if we can't get the constructor reflector (@fancyweb)
• bug #44359 Avoid duplicated session listener registration in tests (@alexander-schranz)
• bug #44375 [DoctrineBridge] fix calling get_class on non-object (@kbond)
• bug #44378 [HttpFoundation] fix SessionHandlerFactory using connections (@dmaicher)
• bug #44365 [SecurityBundle]  Fix invalid reference with always_authenticate_before_granting (@chalasr)
• bug #44361 [HttpClient] Fix handling error info in MockResponse (@fancyweb)
• bug #44370 [Lock] create lock table if it does not exist (@martinssipenko)

[PR] #44528

Changelog (v5.4.0...v5.4.1)

• bug #44490 [DependencyInjection][Messenger] Add auto-registration for BatchHandlerInterface (@GaryPEGEOT)
• bug #44523 [Console] Fix polyfill-php73 requirement (@Seldaek)
• bug #44502 [HttpFoundation] do not call preg_match() on null (@xabbuh)
• bug #44475 [Console] Handle alias in completion script (@GromNaN)
• bug #44481 [FrameworkBundle] Fix loginUser() causing deprecation (@wouterj)
• bug #44416 [Translation] Make http requests synchronous when reading the Loco API (@Kocal)
• bug #44437 [HttpKernel] Fix wrong usage of SessionUtils::popSessionCookie (@simonchrz)
• bug #44350 [Translation] Fix TranslationTrait (@tomasz Kusy)
• bug #44460 [SecurityBundle] Fix ambiguous deprecation message on missing provider (@chalasr)
• bug #44467 [Console] Fix parameter types for ProcessHelper::mustRun() (@derrabus)
• bug #44427 [FrameworkBundle] Fix compatibility with symfony/security-core 6.x (deps=high tests) (@wouterj)
• bug #44424 [SecurityBundle] Don't rely on deprecated strategy constants (@derrabus)
• bug #44399 Prevent infinite nesting of lazy ObjectManager instances when ObjectManager is reset (@Ocramius)
• bug #44395 [HttpKernel] fix sending Vary: Accept-Language when appropriate (@nicolas-grekas)
• bug #44385 [DependencyInjection] Skip parameter attribute configurators in AttributeAutoconfigurationPass if we can't get the constructor reflector (@fancyweb)
• bug #44359 Avoid duplicated session listener registration in tests (@alexander-schranz)
• bug #44375 [DoctrineBridge] fix calling get_class on non-object (@kbond)
• bug #44378 [HttpFoundation] fix SessionHandlerFactory using connections (@dmaicher)
• bug #44365 [SecurityBundle]  Fix invalid reference with always_authenticate_before_granting (@chalasr)
• bug #44361 [HttpClient] Fix handling error info in MockResponse (@fancyweb)
• bug #44370 [Lock] create lock table if it does not exist (@martinssipenko)

[PR] #44527

Changelog (v6.0.0-RC1...v6.0.0)

• bug #44309 [Messenger] Leverage DBAL's getNativeConnection() method (@derrabus)
• bug #44300 [FrameworkBundle] Fix property-info phpstan extractor discovery (@1ed)
• feature #44271 [Notifier] add Vonage bridge to replace the Nexmo one (@nicolas-grekas)
• bug #44187 [Translation] [Loco] Fix idempotency of LocoProvider write method (@welcoMattic)
• bug #43992 [Security] Do not overwrite already stored tokens for REMOTE_USER authentication (@stlrnz)
• bug #43876 [Validator] Fix validation for single level domains (@HypeMC)
• bug #44327 [Debug][ErrorHandler] Increased the reserved memory from 10k to 32k (@sakalys)
• bug #44261 [Process] intersect with getenv() in case-insensitive manner to get default envs (@stable-staple)
• bug #44295 [Serializer] fix support for lazy/unset properties (@nicolas-grekas)
• bug #44277 [Notifier] Fix AllMySms bridge body content (@afiocre)
• bug #44269 [DoctrineBridge] Revert " add support for the JSON type" (@dunglas)

[PR] #44336

Changelog (v5.4.0-RC1...v5.4.0)

• bug #44309 [Messenger] Leverage DBAL's getNativeConnection() method (@derrabus)
• bug #44300 [FrameworkBundle] Fix property-info phpstan extractor discovery (@1ed)
• feature #44271 [Notifier] add Vonage bridge to replace the Nexmo one (@nicolas-grekas)
• bug #44187 [Translation] [Loco] Fix idempotency of LocoProvider write method (@welcoMattic)
• bug #43992 [Security] Do not overwrite already stored tokens for REMOTE_USER authentication (@stlrnz)
• bug #43876 [Validator] Fix validation for single level domains (@HypeMC)
• bug #44327 [Debug][ErrorHandler] Increased the reserved memory from 10k to 32k (@sakalys)
• bug #44261 [Process] intersect with getenv() in case-insensitive manner to get default envs (@stable-staple)
• bug #44295 [Serializer] fix support for lazy/unset properties (@nicolas-grekas)
• bug #44277 [Notifier] Fix AllMySms bridge body content (@afiocre)
• bug #44269 [DoctrineBridge] Revert " add support for the JSON type" (@dunglas)

[PR] #44335

Changelog (v6.0.0-BETA3...v6.0.0-RC1)

• security #cve-2021-41268 [SecurityBundle] Default signature_properties to the previous behavior (@wouterj)
• security #cve-2021-41267 [HttpKernel] Fix missing extra trusted header in sub-request (@jderusse)
• security #cve-2021-41270 [Serializer] Use single quote to escape formulas (@jderusse)
• bug #44230 [Console] Add Suggestion class for more advanced completion suggestion (@wouterj)
• bug #44232 [Cache] fix connecting to local Redis sockets (@nicolas-grekas)
• bug #44204 [HttpClient] fix closing curl multi handle when destructing client (@nicolas-grekas)
• bug #44208 [Process] exclude argv/argc from possible default env vars (@nicolas-grekas)
• bug #44188 [VarExporter] fix exporting declared but unset properties when __sleep() is implemented (@nicolas-grekas)
• bug #44176 [Console] Default ansi option to null (@jderusse)
• bug #44179 [WebProfilerBundle] Fix JS error when toolbar is reloaded (@jderusse)
• bug #44177 [SecurityBundle] Remove Guard (@derrabus)
• bug #44172 [Security] Guard is incompatible with Symfony 6 (@derrabus)
• bug #44119 [HttpClient][Mime] Add correct IDN flags for IDNA2008 compliance (@j-bernard)
• bug #44139 [WebProfilerBundle] Prevent installation of incompatible mailer component versions (@Anne-Julia Seitz)
• bug #43917 Allow autodetecting mapping type for any object (@franmomu)
• bug #44130 [SecurityBundle] Remove outdated conditions based on authenticatorManagerEnabled (@chalasr)
• bug #44131 [Yaml] properly parse quoted strings tagged with !!str (@xabbuh)
• bug #42323 [TwigBridge] do not merge label classes into expanded choice labels (@xabbuh)

[PR] #44245

Changelog (v5.4.0-BETA3...v5.4.0-RC1)

• security #cve-2021-41268 [SecurityBundle] Default signature_properties to the previous behavior (@wouterj)
• security #cve-2021-41267 [HttpKernel] Fix missing extra trusted header in sub-request (@jderusse)
• security #cve-2021-41270 [Serializer] Use single quote to escape formulas (@jderusse)
• bug #44230 [Console] Add Suggestion class for more advanced completion suggestion (@wouterj)
• bug #44232 [Cache] fix connecting to local Redis sockets (@nicolas-grekas)
• bug #44204 [HttpClient] fix closing curl multi handle when destructing client (@nicolas-grekas)
• bug #44208 [Process] exclude argv/argc from possible default env vars (@nicolas-grekas)
• bug #44188 [VarExporter] fix exporting declared but unset properties when __sleep() is implemented (@nicolas-grekas)
• bug #44176 [Console] Default ansi option to null (@jderusse)
• bug #44179 [WebProfilerBundle] Fix JS error when toolbar is reloaded (@jderusse)
• bug #44172 [Security] Guard is incompatible with Symfony 6 (@derrabus)
• bug #44119 [HttpClient][Mime] Add correct IDN flags for IDNA2008 compliance (@j-bernard)
• bug #44139 [WebProfilerBundle] Prevent installation of incompatible mailer component versions (@Anne-Julia Seitz)
• bug #43917 Allow autodetecting mapping type for any object (@franmomu)
• bug #44131 [Yaml] properly parse quoted strings tagged with !!str (@xabbuh)
• bug #42323 [TwigBridge] do not merge label classes into expanded choice labels (@xabbuh)

[PR] #44244

Changelog (v5.3.11...v5.3.12)

• security #cve-2021-41268 [SecurityBundle] Default signature_properties to the previous behavior (@wouterj)
• security #cve-2021-41267 [HttpKernel] Fix missing extra trusted header in sub-request (@jderusse)
• security #cve-2021-41270 [Serializer] Use single quote to escape formulas (@jderusse)
• bug #44232 [Cache] fix connecting to local Redis sockets (@nicolas-grekas)
• bug #44204 [HttpClient] fix closing curl multi handle when destructing client (@nicolas-grekas)
• bug #44208 [Process] exclude argv/argc from possible default env vars (@nicolas-grekas)

[PR] #44243
[SECURITY] Security release

Changelog (v4.4.34...v4.4.35)

• security #cve-2021-41270 [Serializer] Use single quote to escape formulas (@jderusse)
• bug #44232 [Cache] fix connecting to local Redis sockets (@nicolas-grekas)
• bug #44204 [HttpClient] fix closing curl multi handle when destructing client (@nicolas-grekas)
• bug #44208 [Process] exclude argv/argc from possible default env vars (@nicolas-grekas)

[PR] #44242
[SECURITY] Security release

Changelog (v5.3.10...v5.3.11)

• bug #44188 [VarExporter] fix exporting declared but unset properties when __sleep() is implemented (@nicolas-grekas)
• bug #44176 [Console] Default ansi option to null (@jderusse)
• bug #44119 [HttpClient][Mime] Add correct IDN flags for IDNA2008 compliance (@j-bernard)
• bug #44131 [Yaml] properly parse quoted strings tagged with !!str (@xabbuh)
• bug #42323 [TwigBridge] do not merge label classes into expanded choice labels (@xabbuh)
• bug #44110 [FrameworkBundle] Fix default PHP attributes support in validation and serializer configuration when doctrine/annotations is not installed with PHP 8 (@fancyweb)
• bug #44121 [Serializer] fix support for lazy properties (@nicolas-grekas)
• bug #44108 [FrameworkBundle][Messenger] remove FlattenExceptionNormalizer definition if serializer not available (@kbond)
• bug #44111 [Serializer] fix support for unset properties on PHP < 7.4 (@nicolas-grekas)
• bug #44070 [Process] intersect with getenv() to populate default envs (@nicolas-grekas)
• bug #43990 [Translation] [Loco] Generate id parameter instead of letting Loco do it (@welcoMattic)
• bug #44043 [Cache] fix dbindex Redis (@a1812)
• bug #44050 [Notifier] Fix package names (@fabpot)
• bug #44042 Fix DateIntervalToStringTransformer::transform() doc (@BenMorel)
• bug #44034 [Yaml] don't try to replace references in quoted strings (@xabbuh)
• bug #44028 [ErrorHandler] Fix FlattenException::setPrevious argument typing (@welcoMattic)
• bug #44012 [DependencyInjection] fix inlining when non-shared services are involved (@nicolas-grekas)
• bug #44002 [Cache] Fix Memory leak (@a1812)
• bug #43981 [FrameworkBundle] fix registering late resettable services (@nicolas-grekas)
• bug #43988 [DoctrineBridge] add support for the JSON type (@dunglas)
• bug #43987 [PhpUnitBridge] Fix Uncaught ValueError (@dunglas)
• bug #43961 [HttpClient] Curl http client has to reinit curl multi handle on reset (@rmikalkenas)
• bug #43948 [Asset][Security] Fixed leftover deprecations PHP 8.1 (@michaljusiega)
• bug #43945 [Runtime] fix defining APP_DEBUG when Dotenv is not enabled (@nicolas-grekas)
• bug #43922 [DependencyInjection] only allow ReflectionNamedType for ServiceSubscriberTrait (@kbond)
• bug #43814 [Intl] Update the ICU data to 70.1 - 5.3 (@jderusse)
• bug #43915 [Messenger] Fix tests (@jderusse)
• bug #43901 [SecurityBundle] Default access_decision_manager.strategy option with merge (@biozshock)
• bug #43909 [VarExporter] escape unicode chars involved in directionality (@nicolas-grekas)
• bug #43900 [Security] Fix TypeError message in ChainUserProvider (@derrabus)
• bug #43884 [Console] Runtime conflict for psr/log >= 3.0 instead of composer conflict (@fancyweb)
• bug #43867 [VarDumper] Make dumping DateInterval instances timezone-independent (@derrabus)
• bug #43096 [Messenger] Use TransportMessageIdStamp in InMemoryTransport allows retrying (@alexndlm)
• bug #42168 [RateLimiter] Fix wait duration for fixed window policy (@jlekowski)
• bug #43501 [HttpKernel] fix ErrorException in CacheWarmerAggregate (@Ahummeling)
• bug #42361 [Translation] correctly handle intl domains with TargetOperation (@acran)
• bug #43833 [Runtime] Consider also $_ENV when resolving APP_RUNTIME and APP_RUNTIME_OPTIONS (@peter Simoncic)
• bug #43834 [Inflector] Fix inflector for "zombies" (@acodispo)
• bug #43267 [Config] Fix signature generation with nested attributes on PHP 8.1 (@agustingomes)

[PR] #44194

Changelog (v4.4.33...v4.4.34)

• bug #44188 [VarExporter] fix exporting declared but unset properties when __sleep() is implemented (@nicolas-grekas)
• bug #44119 [HttpClient][Mime] Add correct IDN flags for IDNA2008 compliance (@j-bernard)
• bug #44131 [Yaml] properly parse quoted strings tagged with !!str (@xabbuh)
• bug #42323 [TwigBridge] do not merge label classes into expanded choice labels (@xabbuh)
• bug #44121 [Serializer] fix support for lazy properties (@nicolas-grekas)
• bug #44111 [Serializer] fix support for unset properties on PHP < 7.4 (@nicolas-grekas)
• bug #44070 [Process] intersect with getenv() to populate default envs (@nicolas-grekas)
• bug #44043 [Cache] fix dbindex Redis (@a1812)
• bug #44042 Fix DateIntervalToStringTransformer::transform() doc (@BenMorel)
• bug #44034 [Yaml] don't try to replace references in quoted strings (@xabbuh)
• bug #44028 [ErrorHandler] Fix FlattenException::setPrevious argument typing (@welcoMattic)
• bug #44012 [DependencyInjection] fix inlining when non-shared services are involved (@nicolas-grekas)
• bug #44002 [Cache] Fix Memory leak (@a1812)
• bug #43981 [FrameworkBundle] fix registering late resettable services (@nicolas-grekas)
• bug #43988 [DoctrineBridge] add support for the JSON type (@dunglas)
• bug #43987 [PhpUnitBridge] Fix Uncaught ValueError (@dunglas)
• bug #43961 [HttpClient] Curl http client has to reinit curl multi handle on reset (@rmikalkenas)
• bug #43922 [DependencyInjection] only allow ReflectionNamedType for ServiceSubscriberTrait (@kbond)
• bug #43901 [SecurityBundle] Default access_decision_manager.strategy option with merge (@biozshock)
• bug #43909 [VarExporter] escape unicode chars involved in directionality (@nicolas-grekas)
• bug #43867 [VarDumper] Make dumping DateInterval instances timezone-independent (@derrabus)
• bug #43096 [Messenger] Use TransportMessageIdStamp in InMemoryTransport allows retrying (@alexndlm)
• bug #43501 [HttpKernel] fix ErrorException in CacheWarmerAggregate (@Ahummeling)
• bug #42361 [Translation] correctly handle intl domains with TargetOperation (@acran)
• bug #43834 [Inflector] Fix inflector for "zombies" (@acodispo)
• bug #43267 [Config] Fix signature generation with nested attributes on PHP 8.1 (@agustingomes)

[PR] #44193