CORS issue due to upgrade in api-pack

[jspizziri]

API Platform version(s) affected: 2.5.1

Description
The upgrade of nelmio/cors-bundle in the api-pack here broke CORS requests.

How to reproduce

cd api
composer update
cd ..
docker-compose build api
docker-compose up -d api

Then attempt to access a resource via admin, and you'll see a 405 on the OPTIONS request.

Possible Solution

Lock down the version of api-pack to require a version that depends on nelmio/cors-bundle:^1.5.

Additional Context

I ran composer update as part of upgrading a v2.4.5 installation to a v2.5.1. I went through the diff and couldn't identify any additional configuration that resolved this issue. I resolved the issue locally by forcing lower version of nelmio/cors-bundle. Ex:

cd api
composer require "nelmio/cors-bundle:^1.5"
cd ..
docker-compose build api
docker-compose up -d api

[jspizziri]

@dunglas I'd be happy to submit a PR on this if someone told me if you want the version lock in api-pack or in api-platform.

[soyuka]

We fixed that issue normally api-platform/core#3265

[jspizziri]

I've confirmed that api-platform/core >= 2.5.2 and above PR resolves the issue.