Skip to content

Release v3.5.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Sep 08:01
· 94 commits to main since this release
v3.5.0
20a41c2

Release v3.5.0

Changelog

Security

  • Webhook channel only POSTs to https:// public hosts (blocks http, localhost, private/reserved IPs).
  • Route CSV/JSON exports are capped by export.max_rows (default 5000, max 50000).

Changed

  • Doctrine ORM SortDirection: replace string 'ASC'/'DESC' in #[ORM\OrderBy] and QueryBuilder orderBy/addOrderBy with SortDirection::Ascending/Descending (doctrine/orm deprecation, doctrine/orm#11313); require doctrine/orm ^3.7 where applicable.

Commits

  • Release v3.5.0: SEC-004: export max_rows + webhook SSRF guard (20a41c2)
  • fix(tests): build DBAL Column with registered Type::getType. (8621723)
  • Use SortDirection enums in repositories (8f3d57f)
  • Fix deprecated sort direction enum in repository tests (613c2cb)
  • fix: refresh composer.lock content-hash after doctrine/orm ^3.7. (46877b2)
  • Apply PHP CS Fixer fixes [skip ci] (455d874)
  • fix: use SortDirection instead of ASC/DESC for Doctrine ORM 3.7 (7b54604)
Assets 2
Loading