Skip to content

Release v1.7.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Oct 10:27
· 41 commits to main since this release
v1.7.0
286a740

Release v1.7.0: CSRF delete feedback, accurate allowlist docs, Symfony >=7.4.

Changelog

Changed

  • Requirements: Symfony floor raised from ^7.0 to ^7.4 (^7.4 || ^8.0), matching what CI actually tests; the redundant Symfony 7.0 CI matrix cell (which resolved to the latest 7.x anyway) was removed.

Fixed

  • Admin CRUD: deleting a profile with an invalid CSRF token now shows an Invalid CSRF token. error flash (same as the YAML import action) instead of silently redirecting to the list.
  • Docs: QrUrlPolicy constructor docblock no longer claims an empty allowlist restricts URLs to public hosts; it allows any http(s) URL with a host (no public/private host or IP check).
Assets 2
Loading