PHP - Symfony

Changelog (https://github.com/symfony/symfony/compare/v6.4.45...v6.4.46)

• data #66073 Release v6.4.46
• minor #66070 [Security] Explain why a remember-me login counts as interactive (@nicolas-grekas)
• minor #66060 [Form] Add the BoundsType compare message translation unit (@seb-jean)
• bug #66048 [HttpFoundation] Remove the ambiguity that makes HeaderUtils::split() backtrack (@nicolas-grekas)
• bug #66043 [TwigBridge] Compose form theme blocks with Twig's BlockChain when available (@fabpot)
• bug #66041 [Form] Describe the options of a type extension registered on a type extension (@fabpot)
• bug #66037 [Translation] Resolve Phrase locales by their code instead of by their name (@nicolas-grekas)
• bug #66032 [Messenger] Drop the messages queued by a failed nested dispatch (@nicolas-grekas)
• bug #66027 [AssetMapper][FrameworkBundle] Stop versioning the assets the mapper already resolved (@Amoifr)
• bug #66023 [HttpFoundation] Fix IpUtils::anonymize() for non-canonical IPv4-mapped addresses (@GabeSilvaDev)
• bug #65995 [String] Keep the case of a leading acronym in ByteString::camel() (@Amoifr)
• bug #66003 [DoctrineBridge][FrameworkBundle][HttpKernel][TwigBundle] Escape percent signs in kernel path parameters (@nicolas-grekas)
• bug #65976 [Console] Keep messages containing malformed UTF-8 when wrapping (@Meacue)
• bug #65963 [Finder] Only treat a leading hash as a gitignore comment and strip trailing spaces only (@fabpot)
• bug #65974 [FrameworkBundle] Fix the fatal when a cache pool cannot be cleared (@nicolas-grekas)
• bug #65967 [Mailer] Reconnect when the server closed the transmission channel (@ousamabenyounes)
• bug #65962 [Finder] Fix building the gitignore regex for files with many patterns (@fabpot)
• bug #65961 [Finder] Fix ignoreVCSIgnored() when the search directory is reached through a symlink (@fabpot)
• bug #65952 [Security] Do not follow redirects on the OIDC UserInfo endpoint (@nicolas-grekas)
• minor #65926 [Form][Validator] Review Romanian (ro) translations (@robertiulianstoica)
• bug #65914 [HttpClient] Suppress warnings from failed DNS lookups (@Toflar)
• bug #65912 [Security] Read the OIDC verified claims as booleans (@nicolas-grekas)
• bug #65904 [Messenger] Fix sub-second delays being ignored by the in-memory transport (@nicolas-grekas)
• bug #65907 [Serializer] Don't reuse list items with deep_object_to_populate (@nicolas-grekas)
• bug #65893 [Cache] Don't close lock handles that are still in use when evicting a slot (@nicolas-grekas)
• bug #65889 [FrameworkBundle] Fix HTTP client request assertion matching (@X-Coder264)
• bug #65888 [Validator] Drop unreachable territory keys from IBAN formats (@lazerg)
• bug #65883 [FrameworkBundle] Fix the "framework.remote-event" config node being impossible to set (@nicolas-grekas)
• minor #65876 [Validator] Add missing Arabic translation for validation units (@EmanFateen)
• bug #65867 [Cache] Add support for relay 0.50 (@nicolas-grekas)
• bug #65859 [Security] Reset the login rate limiter on successful login with a peekable limiter (@lazerg)
• minor #65854 [Validator] Review Hungarian translations (@1ed)
• minor #65856 Review Catalan validator translations (@Victor-369)
• bug #65843 [HtmlSanitizer] Drop relative URLs whose first path segment contains a colon instead of throwing (@nicolas-grekas)
• bug #65844 [Mime] Reject header names containing non-printable or non-ASCII characters (@nicolas-grekas)
• bug #65837 [PropertyInfo] Do not prefer a method returning the declaring class as the property accessor (@lazerg)
• minor #65836 [HttpFoundation] Fix hitting the PCRE size limit with many trusted host patterns (@nicolas-grekas)
• minor #65832 [Validator] Complete Traditional Chinese translations (@HsukqiLee)
• bug #65823 [String] Fix singularization of words ending in -ives (@dylanpulver)
• bug #65822 [WebProfilerBundle] Fix a TypeError when the ajax toolbar panel is missing from the page (@lazerg)
• bug #65818 [Console] Do not evaluate the command line in the zsh completion (@GromNaN, @nicolas-grekas)
• minor #65815 [Console] Fix the bash completion of "--option=value" and of an aliased command (@GromNaN)
• bug #65811 [Console] Fix the bash completion on macOS and cover more option modes (@GromNaN)
• bug #65801 [Finder] Fix prune filters not applied to nested directories and with path excludes (@nicolas-grekas)
• minor #65786 Review Italian validator translations (@JJordan0C)
• bug #65780 [Form] Accept UTC-equivalent timezones for date and time model data (@ousamabenyounes)
• bug #65784 [Process] Use an absolute path for the cmd.exe fallback on Windows (@nicolas-grekas)
• bug #65783 [Console] Test the shell completion scripts and fix the escaping (@GromNaN)
• minor #65782 [Validator] Review Bosnian (bs) translations (@ivanoviczeljko)
• bug #65779 [Messenger] Fix a crash when a Redis stream entry is not a JSON object (@nicolas-grekas)
• bug #65778 [Mime] Never emit a raw control character in a header (@Spomky)
• bug #65776 [Notifier][Vonage] Verify the payload_hash claim of signed webhooks (@nicolas-grekas)
• bug #65775 [HttpFoundation] Match paths with the DOTALL modifier (@nicolas-grekas)
• bug #65773 [Mailer][Sendgrid] Verify the webhook signature before parsing the payload (@nicolas-grekas)
• bug #65777 [Mime] Do not treat an "@" inside the domain as the addr-spec separator (@Spomky)
• bug #65772 [Webhook] Reject a malformed request body with a 406 instead of a 500 (@nicolas-grekas)
• bug #65768 [Notifier] Reject an empty secret in the Twilio webhook parser (@nicolas-grekas)
• minor #65765 [Mailer] Mark the Sendgrid webhook secret as sensitive (@nicolas-grekas)
• minor #65762 [FrameworkBundle] Describe the webhook routing secret in the config reference (@nicolas-grekas)
• minor #65756 [Form] Stop capturing Options in the upload_max_size_message closure (@bendavies)