CHANGELOG for 6.2.x
===================

This changelog references the relevant changes (bug and security fixes) done
in 6.2 minor versions.

To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v6.2.0...v6.2.1

* 6.2.6 (2023-02-01)

 * bug #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (tristankretzer)
 * bug #49126 [DependencyInjection] Fix order of arguments when mixing positional and named ones (nicolas-grekas)
 * bug #49104 [HttpClient] Fix collecting data non-late for the profiler (nicolas-grekas)
 * bug #49103 [Security/Http] Fix compat of persistent remember-me with legacy tokens (nicolas-grekas)
 * security #cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (nicolas-grekas)
 * security #cve-2022-24894 [HttpKernel] Remove private headers before storing responses with HttpCache (nicolas-grekas)

* 6.2.5 (2023-01-24)

 * bug #49078 [Security/Http] Check tokens before loading users from providers (nicolas-grekas)
 * bug #49077 [DependencyInjection] Fix named arguments when using ContainerBuilder before compilation (nicolas-grekas)
 * bug #49031 [Cache] fix collecting cache stats when nesting computations (nicolas-grekas)
 * bug #49046 Fix for Windows when projects are deployed on junctions/symlinks (nerdgod)
 * bug #49025 [Notifier] [OvhCloud] handle invalid receiver (seferov)
 * bug #49034 [Security] Return default value instead of deferring to lower prio resolvers when using #[CurrentUser] and no user is found (Seldaek)
 * bug #48993 [VarDumper] Fix JS to expand / collapse (nicolas-grekas)
 * bug #48983 Fix BC user_identifier support after deprecation username (vtsykun)
 * bug #48986 [Validator] Fix Email validator logic (fabpot)
 * bug #48969 [PropertyInfo] Fixes constructor extractor for mixed type (michael.kubovic)
 * bug #48978 [Serializer] use method_exists() instead of catching reflection exceptions (xabbuh)
 * bug #48958 [DependencyInjection] fixes validation of non-scalar attribute values (ju1ius)
 * bug #48937 [SecurityBundle] Fix using same handler for multiple authenticators (RobertMe)
 * bug #48971 [DependencyInjection] Fix dump order of inlined deps (nicolas-grekas)
 * bug #48966 [HttpClient] Let curl handle content-length headers (nicolas-grekas)
 * bug #48968 [VarExporter] Fix exporting enums (nicolas-grekas)
 * bug #48933 [Validator] Fix bad handling of nulls when the 'fields' option of the Unique constraint is set (plfort)
 * bug #48926 [DependencyInjection] Fix support for named arguments on non-autowired services (nicolas-grekas)
 * bug #48943 [FrameworkBundle] Fix deprecation when accessing a "container.private" service from the test container (nicolas-grekas)
 * bug #48939 [VarExporter] Fix signature of `Lazy*Trait::createLazy*()` (nicolas-grekas)
 * bug #48931 [DependencyInjection] Fix dumping inlined withers (nicolas-grekas)
 * bug #48898 [HttpClient] Move Http clients data collecting at a late level (pforesi)
 * bug #48896 [DoctrineBridge] Fix detecting mapping with one line annotations (franmomu)
 * bug #48916 [FrameworkBundle] restore call to addGlobalIgnoredName (alexislefebvre)
 * bug #48917 [Config] Fix XML dump when node example is an array (alexandre-daubois)
 * bug #48904 [Validator] Allow egulias/email-validator v4 (chalasr)
 * bug #48830 [Translation] fix PhpAstExtractor also extracts messages if t() contains both unnamed and named arguments (gassan)
 * bug #48846 [Translation] Fix for resolving Constraint Validator FQCN defined as foo.bar.class parameters (gassan)
 * bug #48866 [Validator] fix: Case-insensitive extensions in File-Constraint (spackmat)
 * bug #48831 [Uid] Fix validating nil and max uuid (fancyweb)

* 6.2.4 (2022-12-29)

 * bug #48822 [WebProfilerBundle] Fix the usage of web fonts (javiereguiluz)
 * bug #48823 [Cache] Fix possibly null value passed to preg_match() in RedisTrait (chalasr)
 * bug #48816 [Cache] Fix for RedisAdapter without auth parameter (rikvdh)

* 6.2.3 (2022-12-28)

 * bug #48805 [DependencyInjection] Fix resolving parameters when dumping lazy proxies (nicolas-grekas)
 * bug #48787 [PhpUnitBridge] Use verbose deprecation output for quiet types only when it reaches the threshold (ogizanagi)
 * bug #48784 [Console] Correctly overwrite progressbars with different line count per step (ncharalampidis)
 * bug #48801 [Form] Make `ButtonType` handle `form_attr` option (MatTheCat)
 * bug #48791 [DependencyInjection] Fix deduplicating service instances in circular graphs (nicolas-grekas)
 * bug #48790 [WebProfilerBundle] fix Mailer detail on click (Jean-Beru)
 * bug #48771 [CssSelector] Fix escape patterns (fancyweb)
 * bug #48774 [Translation] Fix undefined variable messages in ConstraintVisitor (alamirault)
 * bug #48727 [PropertyAccess] Fix nullsafe chain like x?.y (Vincz)
 * bug #48711 [Cache] RedisTrait::createConnection does not pass auth value from redis sentinel cluster DSN (evgkord)
 * bug #48724 [VarExporter] Fix exporting classes with __unserialize() but not __serialize() (fancyweb)
 * bug #48746 [Validator] Fix IBAN format for Tunisia and Mauritania (smelesh)
 * bug #48738 [Workflow] Allow spaces in place names so the PUML dump doesn't break (Kamil Musial)
 * bug #48742 [VarExporter] Generate proxies for static abstract methods (nicolas-grekas)
 * bug #48735 [SecurityBundle] Prevent RuntimeException on profiler (marphi)
 * bug #48718 Compatibility with doctrine/annotations 2 (derrabus)
 * bug #48688 [FrameworkBundle] Add MailPace definition (skmedix)

* 6.2.2 (2022-12-16)

 * bug #48661 [Serializer] fix context attribute with serializedName (nikophil)
 * bug #48681 [Console] Revert "bug #48089  Fix clear line with question in section (maxbeckers) (chalasr)
 * bug #48680 [Cache] fix lazyness of redis when using RedisTagAwareAdapter (nicolas-grekas)
 * bug #48651 [HttpKernel] AbstractSessionListener should not override the cache lifetime for private responses (rodmen)
 * bug #48591 [DependencyInjection] Shared private services becomes public after a public service is accessed (alexpott)
 * bug #48126 [Mailer] Include all transports' debug messages in RoundRobin transport exception  (mixdf)
 * bug #48644 [Validator] Allow opt-out of EmailValidator deprecation when using Validation::createValidatorBuilder() (nicolas-grekas)
 * bug #48606 [FrameworkBundle] container:debug CLI output improvements for excluded services (apfelbox)
 * bug #48089 [Console] Fix clear line with question in section (maxbeckers)
 * bug #48602 [HtmlSanitizer] Fix HtmlSanitizer default configuration behavior for allowed schemes (Titouan Galopin)
 * bug #48635 [HttpFoundation] Use relative timestamps with MemcachedSessionHandler (tvlooy)
 * bug #47979 [Cache] Fix dealing with ext-redis' multi/exec returning a bool (João Nogueira)
 * bug #48612 [Messenger] [Amqp] Added missing rpc_timeout option (lyrixx)
 * bug #48233 [Serializer] Prevent `GetSetMethodNormalizer` from creating invalid magic method call (klaussilveira)
 * bug #48628 [HttpFoundation] Fix dumping array cookies (nicolas-grekas)
 * bug #48559 [ExpressionLanguage] Fix BC of cached SerializedParsedExpression containing GetAttrNode (fancyweb)
 * bug #48524 [HttpKernel] Fix `CacheAttributeListener` priority (HypeMC)
 * bug #48451 [Translation] Fix extraction when dealing with VariadicPlaceholder parameters (Kocal)
 * bug #48601 [SecurityBundle] Fix authenticator existence check in `Security::login()` (chalasr)
 * bug #48587 [TwigBundle] Alias BodyRendererInterface (n3o77)
 * bug #48580 [Console] Fix missing command not matching namespace error message (Titouan Galopin)
 * bug #48449 [DependencyInjection] Fix bug when tag name is a text node (BrandonlinU)
 * bug #48048 [WebProfilerBundle] Fix dump header not being displayed (HypeMC)
 * bug #47836 [HttpClient] TraceableHttpClient: increase decorator's priority (adpeyre)
 * bug #48259 [FrameworkBundle] Allow configuring `framework.exceptions` with a config builder (MatTheCat)
 * bug #48314 [Mime] Fix MessagePart serialization (Amunak)
 * bug #48331 [Yaml] fix dumping top-level tagged values (xabbuh)
 * bug #48615 Fix getting the name of closures on PHP 8.1.11+ (nicolas-grekas)
 * bug #48624 [ErrorHandler][HttpKernel] Fix reading the SYMFONY_IDE env var (nicolas-grekas)
 * bug #48618 [ErrorHandler] [DebugClassLoader] Fix some new return types support (fancyweb)
 * bug #48605 [VarExporter] Fix adding a key to an uninitialized array (nicolas-grekas)
 * bug #48554 [Security] Fix invalid deprecation messages in Security constants (IonBazan)
 * bug #48538 [Clock] Fix `usleep` deprecation warning (victor-prdh)
 * bug #48421 [HttpFoundation] IPv4-mapped IPv6 addresses incorrectly rejected (bonroyage)
 * bug #48501 [RateLimiter] Add `int` to `Reservation::wait()` (DaRealFreak)
 * bug #48359 [VarDumper] Ignore \Error in __debugInfo() (fancyweb)
 * bug #48553 [VarExporter] Fix calling `parent::__wakeup()` when unserializing with LazyProxyTrait (azjezz)
 * bug #48489 [DoctrineBridge] Skip resolving entities when the corresponding request attribute is already an object (nicolas-grekas)
 * bug #48534 [FrameworkBundle] add `kernel.locale_aware` tag to `LocaleSwitcher` (kbond)
 * bug #48521 [FrameworkBundle] fix removing commands if console not available (kbond)
 * bug #48522 [DependencyInjection] Generate different classes for ghost objects and virtual proxies (nicolas-grekas)
 * bug #48482 [DependencyInjection] Revert "bug #48027 Don't autoconfigure tag when it's already set with attributes" (nicolas-grekas)

* 6.2.1 (2022-12-06)

 * bug #48502 [DependencyInjection] Fix `ContainerBuilder` stats env usage with enum (alamirault)
 * bug #48509 [HttpKernel] Fix using entities with the `#[Cache()]` attribute (HypeMC)
 * bug #48505 [Mailer] Fix rendered templates for notifications (fabpot)
 * bug #48476 [WebProfilerBundle] Use same color as other icons for the close toolbar btn (ogizanagi)
 * bug #48483 [DependencyInjection] Remove refs that point to container.excluded services when allowed (nicolas-grekas)
 * bug #48346 [HttpKernel] In DateTimeValueResolver, convert previously defined date attribute to the expected class (GromNaN)
 * bug #48450 [WebProfilerBundle] Fix form panel expanders (MatTheCat)
 * bug #48459 [FrameworkBundle] [Framework] Fix Infobip Mailer transport factory import (gnito-org)
 * bug #48461 [VarExporter] Fix possible memory-leak when using lazy-objects (nicolas-grekas)
 * bug #48335 [TwigBridge] Amend `MoneyType` twig to include a space (mogilvie)
 * bug #48046 [WebProfilerBundle] Remove redundant code from logger template (HypeMC)
 * bug #48428 Fixed undefined variable error (Kevin Meijer)
 * bug #48416 [FrameworkBundle] don't register the MailerTestCommand symfony/console is not installed (xabbuh)

* 6.2.0 (2022-11-30)

 * bug #48395 [String] Fix AsciiSlugger with emojis (fancyweb)
 * bug #48385 [Security] Reuse `AbstractFactory`'s config tree in `AccessTokenFactory` (chalasr)
 * bug #48292 [Security] [LoginLink] Throw InvalidLoginLinkException on missing parameter (MatTheCat)

* 6.2.0-RC2 (2022-11-28)

 * bug #48366 [Mailer] Fix body renderer check (fabpot)
 * bug #48347 [Clock] Autowire PSR interface (wouterj)
 * bug #48341 [SecurityBundle] Fix `logout.csrf_token_generator` default value (MatTheCat)
 * bug #48333 [Yaml] parse unquoted digits in tag values as integers (xabbuh)
 * bug #48330 [FrameworkBundle] do not wire the MercureTransportFactory if the MercureBundle is not enabled (xabbuh)
 * bug #48320 [Clock] Implement PSR-20 (nicolas-grekas)

* 6.2.0-RC1 (2022-11-25)

 * bug #48312 [VarExporter] Improve partial-initialization API for ghost objects (nicolas-grekas)
 * bug #48285 [Security] Support loading UserBadge directly from accessToken (Jeroeny)
 * bug #48262 [Notifier] [SMSBiuras] `true`/`false` mismatch for `test_mode` option (StaffNowa)
 * bug #48273 [HttpKernel] Fix message for unresovable arguments of invokable controllers (fancyweb)
 * bug #48251 [PropertyInfo] ignore const expressions read by phpdocumentor (xabbuh)
 * bug #48224 [DependencyInjection] Process bindings in `ServiceLocatorTagPass` (MatTheCat)
 * bug #48271 [WebProfilerBundle] Fix form panel when there are no view vars (nicolas-grekas)
 * bug #48274 Add more #[\SensitiveParameter] (fancyweb)
 * bug #48179 [Console] Support completion for bash functions (Chi-teck)

* 6.2.0-BETA3 (2022-11-19)

 * bug #48217 [Console] Improve error message when shell is not detected in completion command (GromNaN)
 * bug #48222 [Translation] [Lokalize] Configure `replace_breaks` to prevent issues with multilines translations (Kocal)
 * bug #48210 [Console]  Fix signal handlers called after event listeners and skip exit (GromNaN)
 * bug #48198 [Messenger] Fix time-limit check exception (alamirault)
 * feature #48189 [Clock] Provide `modify()` in MockClock (dbrumann)
 * bug #48207 [Yaml] Restore deprecated php/const: syntax in YAML key (GromNaN)
 * bug #48209 [VarExporter] Use `array<property-name,Closure>` for partial initialization of lazy ghost objects (nicolas-grekas)
 * bug #48186 [WebProfilerBundle] Minor tweaks in profiler redesign (javiereguiluz)
 * bug #48122 [PhpUnitBridge] Fix language deprecations incorrectly marked as direct (wouterj)
 * bug #47998 [Console] Fix console `ProgressBar::override()` after manual `ProgressBar::cleanup()` (maxbeckers)
 * bug #48041 [FrameworkBundle] Split loggers debug compiler pass (MatTheCat)
 * bug #48032 [SecurityBundle] Set `UserValueResolver`'s priority higher than `EntityValueResolver` (kbond)
 * bug #48156 [Mime] When serializing File parts convert to string to allow proper unserialization (ovrflo)
 * bug #48170 [Routing] Fix PSR-4 directory loader for abstract classes (derrabus)
 * bug #48173 [HttpClient] Handle Amp HTTP client v5 incompatibility gracefully (fancyweb)
 * bug #48172 [HttpKernel] Don’t try to wire Response argument with controller.service_arguments (MatTheCat)
 * bug #48160 Adding missing argument to sprintf (weaverryan)
 * bug #48085 [Messenger] Tell about messenger:consume invalid limit options (MatTheCat)
 * bug #48120 [Messenger] Do not throw 'no handlers' exception when skipping handlers due to duplicate handling (wouterj)
 * bug #48112 [HttpFoundation] Compare cookie with null value as empty string in ResponseCookieValueSame (fancyweb)
 * bug #48119 [FrameworkBundle][Lock] Allow to disable lock without defining a resource (MatTheCat)
 * bug #48110 [HttpKernel] Fix deprecation for DateTimeValueResolver with null on non-nullable argument (GromNaN)
 * bug #48093 [DependencyInjection] don't move locator tag for service subscriber (RobertMe)
 * bug #48075 [Mailer] Stream timeout not detected fgets returns false (Sezil)
 * bug #48092 Fix the notification email theme for asynchronously dispatched emails (krisbuist)
 * bug #48097 Fix search scope when performing fallback mapping driver detection (spideyfusion)
 * bug #48103 [HttpClient] Do not set http_version instead of setting it to null (Tetragramat)
 * bug #48077 [FrameworkBundle] Allow UUID v7 in uid configuration (achterin)
 * bug #48027 [DependencyInjection] Don't autoconfigure tag when it's already set with attributes (nicolas-grekas)
 * feature #48045 [DependencyInjection] Allow enum as service parameter in php config files (alexndlm)
 * bug #48062 [Notifier] Mark tokens with #[SensitiveParameter] (nicolas-grekas)
 * bug #48050 [HttpFoundation] Check IPv6 is valid before comparing it (PhilETaylor)

* 6.2.0-BETA2 (2022-10-28)

 * bug #48020 [FrameworkBundle] add router cache directory option to XML schema (xabbuh)
 * feature #47976 Add padding to HIBP check (rullzer)
 * bug #47990 [HttpClient] Fix retrying requests when the content is used by the strategy (nicolas-grekas)
 * bug #48005 [ErrorHandler] s/\</br\>/\<br\> (PhilETaylor)
 * bug #47907 [Console] Update Application.php (aleksandr-shevchenko)
 * bug #47992 [Mailer] Fix BC breaking event name change (chalasr)

* 6.2.0-BETA1 (2022-10-24)

 * feature #47364 [DependencyInjection] Allow array attributes for service tags (aschempp)
 * feature #44166 [Config] Use better typehint in PHP Configuration (jderusse)
 * feature #47956 [Notifier] Add support for editing Telegram messages (chr-hertel)
 * feature #43534 [Serializer] Add `SerializedPath` annotation to flatten nested attributes (boenner)
 * feature #47943 [Config][Routing] Nicer config syntax for PSR-4 route loading (derrabus)
 * feature #46224 [Form] Add `hash_property_path` option to `PasswordType` (Seb33300)
 * feature #47950 [HttpClient] Add support for "friendsofphp/well-known-implementations" (nicolas-grekas)
 * feature #47936 [HttpClient] Add `withOptions()` to `HttplugClient` and `Psr18Client` (nicolas-grekas)
 * feature #46053 [Messenger] Add option `allow_no_senders` to enable throwing when a message doesn't have a sender (babeuloula)
 * feature #45907 [SecurityBundle] Allow specifying attributes for `RequestMatcher` (freiondrej-lmc)
 * feature #47483 [HttpKernel] Make Logger implement DebugLoggerInterface (MatTheCat)
 * feature #46161 [Translation] Add `PhpAstExtractor` (welcoMattic)
 * feature #47872 [Validator] new email validation option to match with w3c official specification (guillemfondin)
 * feature #47916 [Routing] PSR-4 directory loader (derrabus)
 * feature #47890 [SecurityBundle] Deprecate the `enable_authenticator_manager` option (chalasr)
 * feature #47906 [DependencyInjection] Allow injecting the current env into php config closures (HypeMC)
 * feature #47902 [DependencyInjection] Add support for tagged iterators/locators exclude option to xml and yaml (HypeMC)
 * feature #47801 [DependencyInjection] Allow array for the value of Autowire attribute (willemverspyck)
 * feature #47864 [DoctrineBridge] Deprecate calling `ContainerAwareEventManager::getListeners()` without event name (derrabus)
 * feature #47711 [Mime] deprecate attach/embed methods in favor of Email::addPart() (fabpot)
 * feature #47832 [HttpClient] Make HttplugClient implement PSR-17 factories instead of Httplug's (nicolas-grekas)
 * feature #47817 [Security] TraceableAccessDecisionManager: fix inspecting voters of custom access decision managers (sarbanha)
 * feature #47750 [Console] Show available commands in namespace when running namespace as command (wouterj)
 * feature #47730 Ban DateTime from the codebase (WebMamba)
 * feature #47496 [FrameworkBundle] Make the Router `cache_dir` configurable (mpdude)
 * feature #47511 [Form][PropertyAccess] Allow optional property accesses (fsoedjede)
 * feature #47068 [Messenger] Deprecate MessageHandlerInterface and MessageSubscriberInterface (alamirault)
 * feature #47460 [Messenger] add dedicated method for disabling instead of passing boolean flags (xabbuh)
 * feature #47643 [WebProfilerBundle] Update the mailer panel (javiereguiluz)
 * feature #47710 [Validator] File: add option to check extension (dunglas)
 * feature #47734 [Validator] add the getCause() to the ConstraintViolationInterface (xabbuh)
 * feature #47308 [Console] Allow limiting the height of a console section (wouterj)
 * feature #47243 Add context option to configure the indentation of nested nodes for `YamlEncoder` (dbu)
 * feature #47462 [Mime] Simplify adding Parts to an Email (fabpot)
 * feature #47683 [DependencyInjection] Deprecate numeric parameter names (HeahDude)
 * feature #47377 [HttpKernel] Use Accept-Language header even if there are no enabled locales (MatTheCat)
 * feature #47588 Add warning for possibly truncated inputs in QuestionHelper (#47586) (pbek)
 * feature #47665 [WebProfilerBundle] [WebProfilerPanel] Update the configuration panel (javiereguiluz)
 * feature #47630 [FrameworkBundle] Add semantic config for new terminate_on_cache_hit HttpCache option (wouterj)
 * feature #47595 [HttpFoundation] Extract request matchers for better reusability (fabpot)
 * feature #47535 [TwigBridge] Expose current route in `AppVariable` (HeahDude)
 * feature #47536 [TwigBundle] add option for configuring custom HTML to text converter services (xabbuh)
 * feature #46064 [Security] Add a `ChainUserChecker` to allow calling multiple user checkers for a firewall (mbabker)
 * feature #47445 [FrameworkBundle] Allow secrets vaults to be used directly outside Symfony (AndreasA)
 * feature #47148 [WebProfilerBundle] Profiler redesign (javiereguiluz)
 * feature #38996 Remove the default values from setters with a nullable parameter (derrabus, nicolas-grekas)
 * feature #42593 [Validator] Add the `When` constraint and validator (wuchen90)
 * feature #47525 [Uid] Add UuidV7 and UuidV8 (nicolas-grekas)
 * feature #47515 [Uid] Add MaxUuid and MaxUlid (nicolas-grekas)
 * feature #47407 [Console] Terminal Color Mode refactoring and force Color Mode (julien-boudry)
 * feature #47507 [Uid] Add interface for `getDateTime()` and apply to relevant UIDs (shrikeh)
 * feature #47236 [DependencyInjection][VarExporter] Generate lazy-loading virtual proxies for non-ghostable lazy services (nicolas-grekas)
 * feature #39622 [Messenger] Be able to get raw data when a message in not decodable by the PHP Serializer (lyrixx)
 * feature #47311 [FrameworkBundle] Update ContainerDebugCommand to add parial search for tags (vshevelev, BOB41K1987)
 * feature #47367 [DependencyInjection] Handle INI arrays (MatTheCat)
 * feature #47373 [Notifier] Add Chatwork Notifier Bridge (Ippey)
 * feature #47363 [HttpKernel] Replace ArgumentValueResolverInterface by ValueResolverInterface (nicolas-grekas)
 * feature #47101 [DependencyInjection] Allow service subscribers to return `SubscribedService[]` (kbond)
 * feature #40152 [Messenger] Pass sender details to SendMessageToTransportsEvent (Jeroeny)
 * feature #41171 [Messenger] Add simple transport based rate limiter to Messenger (bobvandevijver)
 * feature #47295 [PhpUnitBridge] add ability to mock the hrtime() function (xabbuh)
 * feature #47264 [String] Add support for emoji in AsciiSlugger (lyrixx)
 * feature #47263 [Intl] Update EmojiTransliterator to translate emoji to github and slack short code (lyrixx)
 * feature #45418 [Messenger] Add HandlerArgumentsStamp (enumag)
 * feature #47094 [HttpKernel] Use xxh128 algorithm instead of sha256 for http cache store key (Pascal Woerde)
 * feature #46000 [Workflow] Mark registry as internal and deprecate the service (lyrixx)
 * feature #46428 [Security] Access Token Authenticator (Spomky)
 * feature #47225 [Mime] Re-allow addIdHeader to be used for 'In-Reply-To' and 'References' headers (AlbinoDrought)
 * feature #47190 [Mailer] Add a way to change the Bus transport dynamically (fabpot)
 * feature #47201 [Mime] Add a way to control the HTML to text conversion (fabpot)
 * feature #47202 [Serializer] enable JSON_PRESERVE_ZERO_FRACTION by default (dbu)
 * feature #39306 [Messenger] Add `TransportNamesStamp` to change the transport while dispatching a message (asilelik, fabpot)
 * feature #47196 Allow extending `#[When]` attribute (ruudk)
 * feature #47191 [Mailer] Add a way to inject Stamps when sending an email via Messenger (fabpot)
 * feature #47170 [Mailer] Use better error code when auth fails (fabpot)
 * feature #46978 [Security] Allow using expressions with the #[IsGranted] attribute (HypeMC)
 * feature #46571 [Messenger] Add new `messenger:count` command that return a list of transports with their "to be processed" message count. (ktherage, ogizanagi, EXT - THERAGE Kevin)
 * feature #43865 [TwigBridge] Add support for toggle buttons in Bootstrap 5 form theme (ker0x)
 * feature #46683 [Ldap] Deprecate '{username}' parameter use in favour of '{user_identifier}' in LDAP configuration (EXT - THERAGE Kevin)
 * feature #46514 [HttpKernel] Add option to render Surrogate fragment with absolute URIs (Kern046)
 * feature #46715 [Clock] A new component to decouple applications from the system clock (nicolas-grekas)
 * feature #42355 [HttpKernel] Bugfix/last modified response strategy (aschempp)
 * feature #47080 [Mailer] Add new events (fabpot)
 * feature #47075 [Mime] Change the way we avoid rendering an email twice (fabpot)
 * feature #46755 [Intl] Add `EmojiTransliterator` to translate emoji to many locales (lyrixx, nicolas-grekas)
 * feature #47062 [Console] Don't cut Urls wrapped in SymfonyStyle block (fchris82, GromNaN)
 * feature #45987 [Notifier] Add `from` in `SmsMessage` (alamirault)
 * feature #46142 [ExpressionLanguage] Add support for null coalescing syntax (mytuny)
 * feature #47050 [Form] Allow TranslatableInterface to the FormType help option (alamirault)
 * feature #46110 [RateLimiter][Security] Improve performance of login/request rate limiter (Seldaek, wouterj)
 * feature #46895 [Notifier] Introduce PHPUnit constraints and assertions for the Notifier (ismail1432)
 * feature #47049 [Mailer] Throw a more specific exception when a BodyRendererInterface is needed but not configured (fabpot)
 * feature #47040 Add a mailer:test command (fabpot)
 * feature #46242 [Console] Add support for resuming a ProgressBar (yivi)
 * feature #46962 [Mime] Add DataPart::setContentId() (fabpot)
 * feature #47038 [Notifier] Add Notification::exception() (fabpot)
 * feature #46944 [Console] Add Ansi8 (256 color) support, improve true color (Ansi24) support detection (julien-boudry)
 * feature #47034 [Mime] Simplify code (fabpot)
 * feature #47018 [Console] Zsh shell autocompletion (adhocore, GromNaN)
 * feature #46591 [Finder] Add methods to sort by extension & size  (sandoba)
 * feature #46126 [Finder] Case insensitive file sort (hmoreau)
 * feature #45034 [HttpFoundation] Rename Request::getContentType to getContentTypeFormat (MarkPedron)
 * feature #46806 [Cache][WebProfilerBundle] Add adapter class to Cache `DataCollector` (Jean-Beru)
 * feature #44902 Add visibility context option in PropertyNormalizer (alamirault)
 * feature #46567 [Security] [LoginLink] Set custom lifetime for login link (mbrodala, fabpot)
 * feature #46599 Add "negate" option to Expression constraint (fmata)
 * feature #46821 [FrameworkBundle] Add `resolve-env` option to debug:config command (alexandre-daubois)
 * feature #46580 [SecurityBundle] Add shortcut option to enable logout CSRF protection (wouterj)
 * feature #46814 [FrameworkBundle] Add service and alias deprecation message to debug:container <name> output (94noni)
 * feature #47008 [Messenger] Add options to `FailedMessagesShowCommand` (Florian Guimier, fabpot)
 * feature #45977 [Validator] Add the match option to the Choice constraint (fancyweb)
 * feature #46338 [Security] Allow configuring a target url when switching user (94noni)
 * feature #46326 SMTP Transport to provide the (final) Message-ID if available (Raphaël Droz)
 * feature #43854 [DoctrineBridge] Add an Entity Argument Resolver (jderusse, nicolas-grekas)
 * feature #46315 [Mailer] `max_per_second` option configurable via DSN (gassan)
 * feature #46118 [Security] Don't allow empty username or empty password (bikalbasnet)
 * feature #46229 [Messenger] Make Redis messages countable (Jean-Beru)
 * feature #41406 [Security] Add a method in the security helper to ease programmatic logout (johnkrovitch, chalasr)
 * feature #45404 [Mailer] allow custom hosts for ses+smtp with amazon mailer (jrushlow)
 * feature #45945 [Uid] Added toHexString method to AbstractUid class (aurimasniekis)
 * feature #46642 [DoctrineBridge] Add `NAME` const for UID types (marcelsiegert)
 * feature #46502 [Dotenv] Variable filter added to debug command (rmikalkenas)
 * feature #46211 [Mailer] Add Infobip bridge (B-Galati)
 * feature #46773 [VarDumper] Add `FFI\CData` and `FFI\CType` types (SerafimArts)
 * feature #46946 [Form] ChoiceType choices must support TranslatableInterface (alamirault)
 * feature #38903 [FrameworkBundle] Add "Usages" to debug:container output (Bert ter Heide, bertterheide)
 * feature #46901 [Console] Be explicit about the completion API version (wouterj)
 * feature #46752 [DependencyInjection] Use lazy-loading ghost object proxies out of the box (nicolas-grekas)
 * feature #46880 [HttpKernel] Add `#[Cache()]` to describe the default HTTP cache headers on controllers (nicolas-grekas)
 * feature #46751 [VarExporter] Add trait to help implement lazy loading ghost objects (nicolas-grekas)
 * feature #46906 [TwigBridge] Add `#[Template()]` to describe how to render arrays returned by controllers (nicolas-grekas)
 * feature #46907 [Security] Add `#[IsGranted()]` (nicolas-grekas)
 * feature #46183 Hide sensitive information with `SensitiveParameter` attribute (GromNaN)
 * feature #46896 Console/SymfonyStyle: Add Multiselect to choice() (julien-boudry)
 * feature #46883 [DependencyInjection] Add `shuffle` env processor (ostrolucky)
 * feature #46846 [Notifier] Add Zendesk Notifier Bridge (stloyd)
 * feature #46001 [HttpKernel] Add `ControllerEvent::getAttributes()` to handle attributes on controllers (nicolas-grekas)
 * feature #46854 [FrameworkBundle] Make `AbstractController::render()` able to deal with forms and deprecate `renderForm()` (nicolas-grekas)
 * feature #41274 [Security] Add a method in the security helper to ease programmatic login (#40662) (johnkrovitch, chalasr)
 * feature #46831 Add deprecation when the session is not FlashBagAware (VincentLanglet)
 * feature #46491 Introduce FlashBagAwareSessionInterface (VincentLanglet)
 * feature #46813 [Form] Provide string keys when iterating on a form (VincentLanglet)
 * feature #46680 [Serializer] Provide context information from attribute for promoted properties (DanielBadura)
 * feature #46564 [DependencyInjection] Add Enum Env Var Processor (jack-worman)
 * feature #46763 [HttpCache] Do not call terminate() on cache hit (Toflar)
 * feature #45997 [FrameworkBundle][HttpKernel] Add deprecation warning to show `HttpKernel::handle()` will catch throwables (Nyholm)
 * feature #46714 [Mailer] Deprecate OhMySmtp Transport, Create MailPace transport (Holicz)
 * feature #46771 [Yaml] Add support for `!php/enum *->value` syntax (nicolas-grekas)
 * feature #46395 [Notifier] Add Contact Everyone Bridge (franckranaivo)
 * feature #46724 [Notifier] Add SMSFactor bridge (Gwemox)
 * feature #46741 [DependencyInjection] Allow using ghost objects for lazy loading services (nicolas-grekas)
 * feature #46675 [Serializer] Add support of true built-in type (from PHP 8.2) (bobahvas, alexandre-daubois)
 * feature #46663 [Serializer] Deprecate autowiring aliases pointing to concrete normalizers (chalasr)
 * feature #46584 [Security] Enforce maximum username length in UserBadge (wouterj)
 * feature #46066 [Security] Add an easier way to get the current firewall configuration (Kocal)
 * feature #46614 Remove Debug component leftovers (chalasr)
 * feature #46566 [Serializer][WebProfilerBundle] Show serializer collector info in toolbar (ogizanagi)
 * feature #46569 [Serializer][WebProfilerBundle] Collect & show caller source code (ogizanagi)
 * feature #46094 [Security][SecurityBundle] Move the `Security` helper to SecurityBundle (chalasr)
 * feature #46518 [Validator] deprecate the loose e-mail validation mode (xabbuh)
 * feature #45985 [TwigBridge] Add form_label_content and form_help_content block to form_div_layout (alexander-schranz)
 * feature #46430 [Routing] Add `Requirement::POSITIVE_INT` for common ids and pagination (HeahDude)
 * feature #46279 [DependencyInjection] Optimize autowiring logic by telling it about excluded symbols (nicolas-grekas)
 * feature #46452 [DependencyInjection] Add Hydrator::hydrate() and preserve PHP references when using it (nicolas-grekas)

