v8.0.0-RC2

Changelog (v8.0.0-RC1...v8.0.0-RC2)

• bug symfony/symfony#62369 [Security] Set OIDC JWKS cache TTL from provider headers (@Ali-HENDA)

v7.4.0-RC2

Changelog (v7.4.0-RC1...v7.4.0-RC2)

• bug symfony/symfony#62369 [Security] Set OIDC JWKS cache TTL from provider headers (@Ali-HENDA)

v8.0.0-RC1

Changelog (v8.0.0-BETA2...v8.0.0-RC1)

• no significant changes

v7.4.0-RC1

Changelog (v7.4.0-BETA2...v7.4.0-RC1)

• no significant changes

v8.0.0-BETA1

Changelog (v7.3.4...v8.0.0-BETA1)

• feature symfony/symfony#62090 [Config] Deprecate setting a default value to a node that is required (@GromNaN)
• feature symfony/symfony#62043 [Security] Allow multiple OIDC discovery endpoints (@ruudk)
• feature symfony/symfony#61986 [DependencyInjection] remove getNamespace() and getXsdValidationBasePath() from ExtensionInterface (@xabbuh)
• feature symfony/symfony#60660 [Security] Add security:oidc-token:generate command (@Jean-Beru)
• feature symfony/symfony#61930 [DependencyInjection][Routing] Remove support for the XML configuration format (@nicolas-grekas)
• feature symfony/symfony#61919 [DependencyInjection] Deprecate ExtensionInterface::getXsdValidationBasePath() and getNamespace() (@nicolas-grekas)
• feature symfony/symfony#60568 [DependencyInjection][Routing] Deprecate XML configuration format (@MatTheCat)
• feature symfony/symfony#61860 [Config][DependencyInjection][Routing] Deprecate using $this or the internal scope of the loader from PHP config files (@nicolas-grekas)
• feature symfony/symfony#51273 [Config] Add ArrayNodeDefinition::acceptAndWrap() to list alternative types that should be accepted and wrapped in an array (@nicolas-grekas)
• feature symfony/symfony#61718 [Config] Add argument $singular to NodeBuilder::arrayNode() to decouple plurals/singulars from XML (@nicolas-grekas)
• feature symfony/symfony#61034 [Security][SecurityBundle] Dump role hierarchy as mermaid chart (@damienfern)
• feature symfony/symfony#61379 [Security][TwigBridge] Add access_decision() and access_decision_for_user() (@florentdestremau)
• feature symfony/symfony#61156 [FrameworkBundle][TwigBundle] Remove options session.sid_length session.sid_bits_per_character router.cache_dir validation.cache and base_template_class (@nicolas-grekas)
• feature symfony/symfony#61155 [FrameworkBundle][SecurityBundle] Remove autowiring aliases for RateLimiterFactory (@nicolas-grekas)
• feature symfony/symfony#61046 [SecurityBundle] configuration for the storage service for the login throttling rate limiter (@xabbuh)
• feature symfony/symfony#61012 [SecurityBundle] remove the deprecated security.authentication.hide_user_not_found parameter (@xabbuh)
• feature symfony/symfony#60929 [SecurityBundle] Remove deprecated OIDC token handler options algorithm and key (@OskarStark)
• feature symfony/symfony#60928 [SecurityBundle] Remove deprecated hide_user_not_found option (@OskarStark)
• feature symfony/symfony#60910 [DependencyInjection] Add argument $target to ContainerBuilder::registerAliasForArgument() (@nicolas-grekas)
• feature symfony/symfony#60874 [FrameworkBundle] Allow using their name without added suffix when using #[Target] for custom services (@Valmonzo)
• feature symfony/symfony#60879 [Security] Remove callable firewall listeners support (@MatTheCat)
• feature symfony/symfony#60614 [Security] Deprecate callable firewall listeners (@MatTheCat)
• feature symfony/symfony#60742 [Ldap][Security] Remove deprecated eraseCredentials() from (User|Token)Interface (@chalasr)
• feature symfony/symfony#60371 [SecurityBundle] register alias for argument for password hasher (@lyrixx, @chalasr)
• feature symfony/symfony#60639 Bump Symfony 8 to PHP >= 8.4 (@nicolas-grekas)

v7.4.0-BETA1

Changelog (v7.3.4...v7.4.0-BETA1)

• feature symfony/symfony#62090 [Config] Deprecate setting a default value to a node that is required (@GromNaN)
• feature symfony/symfony#62043 [Security] Allow multiple OIDC discovery endpoints (@ruudk)
• feature symfony/symfony#60660 [Security] Add security:oidc-token:generate command (@Jean-Beru)
• feature symfony/symfony#61919 [DependencyInjection] Deprecate ExtensionInterface::getXsdValidationBasePath() and getNamespace() (@nicolas-grekas)
• feature symfony/symfony#60568 [DependencyInjection][Routing] Deprecate XML configuration format (@MatTheCat)
• feature symfony/symfony#61860 [Config][DependencyInjection][Routing] Deprecate using $this or the internal scope of the loader from PHP config files (@nicolas-grekas)
• feature symfony/symfony#51273 [Config] Add ArrayNodeDefinition::acceptAndWrap() to list alternative types that should be accepted and wrapped in an array (@nicolas-grekas)
• feature symfony/symfony#61718 [Config] Add argument $singular to NodeBuilder::arrayNode() to decouple plurals/singulars from XML (@nicolas-grekas)
• feature symfony/symfony#61034 [Security][SecurityBundle] Dump role hierarchy as mermaid chart (@damienfern)
• feature symfony/symfony#61379 [Security][TwigBridge] Add access_decision() and access_decision_for_user() (@florentdestremau)
• feature symfony/symfony#61046 [SecurityBundle] configuration for the storage service for the login throttling rate limiter (@xabbuh)
• feature symfony/symfony#60910 [DependencyInjection] Add argument $target to ContainerBuilder::registerAliasForArgument() (@nicolas-grekas)
• feature symfony/symfony#60874 [FrameworkBundle] Allow using their name without added suffix when using #[Target] for custom services (@Valmonzo)
• feature symfony/symfony#60614 [Security] Deprecate callable firewall listeners (@MatTheCat)
• feature symfony/symfony#60371 [SecurityBundle] register alias for argument for password hasher (@lyrixx, @chalasr)

v7.3.4

Changelog (v7.3.3...v7.3.4)

• bug symfony/symfony#61714 [SecurityBundle] Fix semantic configuration for singulars/plurals in XML (@nicolas-grekas)
• bug symfony/symfony#61701 [SecurityBundle] Add missing fixXmlConfig() call for issuer (@OskarStark)
• bug symfony/symfony#61614 [SecurityBundle] Prevent accessing the tracked token storage when collecting data (@MatTheCat)

v6.4.26

Changelog (v6.4.25...v6.4.26)

• bug symfony/symfony#61614 [SecurityBundle] Prevent accessing the tracked token storage when collecting data (@MatTheCat)

v7.3.3

Changelog (v7.3.2...v7.3.3)

• no significant changes

v6.4.25

Changelog (v6.4.24...v6.4.25)

• no significant changes