Permalink
Commits on Aug 24, 2018
  1. minor #28258 [travis] fix composer.lock invalidation for deps=low (ni…

    nicolas-grekas committed Aug 24, 2018
    …colas-grekas)
    
    This PR was merged into the 2.8 branch.
    
    Discussion
    ----------
    
    [travis] fix composer.lock invalidation for deps=low
    
    | Q             | A
    | ------------- | ---
    | Branch?       | 2.8
    | Bug fix?      | no
    | New feature?  | no
    | BC breaks?    | no
    | Deprecations? | no
    | Tests pass?   | yes
    | Fixed tickets | -
    | License       | MIT
    | Doc PR        | -
    
    Commits
    -------
    
    41ffba1 [travis] fix composer.lock invalidation for deps=low
Commits on Aug 19, 2018
  1. [travis] fix composer.lock invalidation for PRs patching several comp…

    nicolas-grekas committed Aug 19, 2018
    …onents
  2. [travis] fix composer.lock invalidation for deps=low

    nicolas-grekas committed Aug 19, 2018
Commits on Aug 18, 2018
  1. minor #28199 [travis][appveyor] use symfony/flex to accelerate builds…

    fabpot authored and nicolas-grekas committed Aug 18, 2018
    … (nicolas-grekas)
    
    This PR was merged into the 2.8 branch.
    
    Discussion
    ----------
    
    [travis][appveyor] use symfony/flex to accelerate builds
    
    | Q             | A
    | ------------- | ---
    | Branch?       | 2.8
    | Bug fix?      | no
    | New feature?  | no
    | BC breaks?    | no
    | Deprecations? | no
    | Tests pass?   | yes
    | Fixed tickets | -
    | License       | MIT
    | Doc PR        | -
    
    Playing with symfony/flex#409
    
    The optimization is required because appveyor is transiently failing with OOM errors, see e.g.
    https://ci.appveyor.com/project/fabpot/symfony/build/1.0.39377
    
    Commits
    -------
    
    940ec8f [travis][appveyor] use symfony/flex to accelerate builds
Commits on Aug 7, 2018
  1. [travis] ignore ordering when validating composer.lock files for deps…

    nicolas-grekas committed Aug 7, 2018
    …=low
  2. minor #28146 [travis] cache composer.lock files for deps=low (nicolas…

    nicolas-grekas committed Aug 7, 2018
    …-grekas)
    
    This PR was merged into the 2.8 branch.
    
    Discussion
    ----------
    
    [travis] cache composer.lock files for deps=low
    
    | Q             | A
    | ------------- | ---
    | Branch?       | 2.8
    | Bug fix?      | no
    | New feature?  | no
    | BC breaks?    | no
    | Deprecations? | no
    | Tests pass?   | yes
    | Fixed tickets | -
    | License       | MIT
    | Doc PR        | -
    
    I just realized that the resolved package versions for lowest deps depends only on the root composer.json, and not on transitive deps.
    This means we can cache the lock files and save ~10 minutes required to resolve the lowest deps of the SecurityBundle.
    
    Commits
    -------
    
    caaa74c [travis] cache composer.lock files for deps=low
Commits on Aug 3, 2018
  1. [travis] fix requiring mongodb/mongodb before composer up

    nicolas-grekas committed Aug 3, 2018
  2. minor #28114 [travis] merge "same Symfony version" jobs in one (nicol…

    nicolas-grekas committed Aug 3, 2018
    …as-grekas)
    
    This PR was merged into the 2.8 branch.
    
    Discussion
    ----------
    
    [travis] merge "same Symfony version" jobs in one
    
    | Q             | A
    | ------------- | ---
    | Branch?       | 2.8
    | Bug fix?      | no
    | New feature?  |
    | BC breaks?    | no
    | Deprecations? | no
    | Tests pass?   | yes
    | Fixed tickets | -
    | License       | MIT
    | Doc PR        | -
    
    Allowing to consume fewer jobs and save the 1 to 2 minutes bootstrap time of workers.
    
    Commits
    -------
    
    9857ca0 [travis] merge "same Symfony version" jobs in one
Commits on Aug 1, 2018
  1. bumped Symfony version to 4.0.15

    fabpot committed Aug 1, 2018
  2. Merge pull request #28103 from fabpot/release-4.0.14

    fabpot committed Aug 1, 2018
    released v4.0.14
  3. updated VERSION for 4.0.14

    fabpot committed Aug 1, 2018
  4. updated CHANGELOG for 4.0.14

    fabpot committed Aug 1, 2018
  5. Merge branch '3.4' into 4.0

    nicolas-grekas committed Aug 1, 2018
    * 3.4:
      [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer
  6. Merge branch '2.8' into 3.4

    nicolas-grekas committed Aug 1, 2018
    * 2.8:
      [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer
  7. security #cve-2018-14774 [HttpKernel] fix trusted headers management …

    nicolas-grekas committed Aug 1, 2018
    …in HttpCache and InlineFragmentRenderer (nicolas-grekas)
    
    * commit '725dee4cd8':
      [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer
  8. Merge branch '3.4' into 4.0

    nicolas-grekas committed Aug 1, 2018
    * 3.4:
      [HttpFoundation] Remove support for legacy and risky HTTP headers
  9. Merge branch '2.8' into 3.4

    nicolas-grekas committed Aug 1, 2018
    * 2.8:
      [HttpFoundation] Remove support for legacy and risky HTTP headers
  10. security #cve-2018-14773 [HttpFoundation] Remove support for legacy a…

    nicolas-grekas committed Aug 1, 2018
    …nd risky HTTP headers (nicolas-grekas)
    
    This PR was merged into the 2.8 branch.
    
    Discussion
    ----------
    
    [HttpFoundation] Remove support for legacy and risky HTTP headers
    
    | Q             | A
    | ------------- | ---
    | Branch?       | 2.8
    | Bug fix?      | yes
    | New feature?  | no
    | BC breaks?    | no
    | Deprecations? | no
    | Tests pass?   | yes
    | Fixed tickets | -
    | License       | MIT
    | Doc PR        | -
    
    Commits
    -------
    
    e447e8b [HttpFoundation] Remove support for legacy and risky HTTP headers
  11. Merge branch '3.4' into 4.0

    nicolas-grekas committed Aug 1, 2018
    * 3.4:
      [HttpKernel] Fixed invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet
      [FrameworkBundle] fixed guard event names for transitions
      [DI] Improve class named servics error message
      [HttpFoundation] fixed using _method parameter with invalid type
      [Intl] Replace svn with git in the icu data update script
      [HttpFoundation] Fix Cookie::isCleared
Commits on Jul 31, 2018
  1. Merge branch '2.8' into 3.4

    nicolas-grekas committed Jul 31, 2018
    * 2.8:
      [HttpKernel] Fixed invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet
      [HttpFoundation] fixed using _method parameter with invalid type
      [Intl] Replace svn with git in the icu data update script
      [HttpFoundation] Fix Cookie::isCleared
  2. bug #28003 [HttpKernel] Fixes invalid REMOTE_ADDR in inline subreques…

    nicolas-grekas committed Jul 31, 2018
    …t when configuring trusted proxy with subnet (netiul)
    
    This PR was merged into the 2.8 branch.
    
    Discussion
    ----------
    
    [HttpKernel] Fixes invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet
    
    | Q             | A
    | ------------- | ---
    | Branch?       | 2.8
    | Bug fix?      | yes
    | New feature?  | no
    | BC breaks?    | no
    | Deprecations? | no
    | Tests pass?   | yes
    | Fixed tickets | #28000    <!-- #-prefixed issue number(s), if any -->
    | License       | MIT
    | Doc PR        | n/a
    
    When trusted proxies are configured including a subnet a subrequest initiated by the InlineFragmentRenderer would contain an invalid REMOTE_ADDR server variable.
    
    Commits
    -------
    
    f657dd2 [HttpKernel] Fixed invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet
  3. [HttpKernel] Fixed invalid REMOTE_ADDR in inline subrequest when conf…

    netiul authored and nicolas-grekas committed Jul 19, 2018
    …iguring trusted proxy with subnet
Commits on Jul 29, 2018
  1. bug #28007 [FrameworkBundle] fixed guard event names for transitions …

    nicolas-grekas committed Jul 29, 2018
    …(destillat)
    
    This PR was submitted for the 3.3 branch but it was merged into the 3.4 branch instead (closes #28007).
    
    Discussion
    ----------
    
    [FrameworkBundle] fixed guard event names for transitions
    
    | Q             | A
    | ------------- | ---
    | Branch?       | 3.3|4
    | Bug fix?      | yes
    | New feature?  |no
    | BC breaks?    | no
    | Deprecations? | no
    | Tests pass?   | yes
    | Fixed tickets |
    | License       | MIT
    | Doc PR        |
    
    Framework yaml configuration support workflow transitions as both indexed and associative array e.g
    ```yaml
    transitions:
        -    name: test
             from: open
             to: test
        -
    ```
    ```yaml
    transitions:
        test:
             from: open
             to: test
    ```
    Then it's used in foreach loop to register guard event listeners https://github.com/symfony/symfony/blob/4b92b96796d381b225b6665b15160c4c9b06cf41/src/Symfony/Bundle/FrameworkBundle/DependencyInjection/FrameworkExtension.php#L609
    Array keys are used as transition names but it's wrong for indexed array so we get event names like these
    workflow.workflow_name.guard.transition_index instead of workflow.workflow_name.guard.tranision_name
    
    Commits
    -------
    
    9bbb1e5 [FrameworkBundle] fixed guard event names for transitions
  2. [FrameworkBundle] fixed guard event names for transitions

    destillat authored and nicolas-grekas committed Jul 19, 2018
  3. minor #28057 [DI] Improve class named servics error message (ro0NL)

    nicolas-grekas committed Jul 29, 2018
    This PR was squashed before being merged into the 3.4 branch (closes #28057).
    
    Discussion
    ----------
    
    [DI] Improve class named servics error message
    
    | Q             | A
    | ------------- | ---
    | Branch?       | 3.4
    | Bug fix?      | no
    | New feature?  | no
    | BC breaks?    | no     <!-- see https://symfony.com/bc -->
    | Deprecations? | no
    | Tests pass?   | yes    <!-- please add some, will be required by reviewers -->
    | Fixed tickets | #28006
    | License       | MIT
    | Doc PR        | symfony/symfony-docs#... <!-- required for new features -->
    
    Commits
    -------
    
    61de060 [DI] Improve class named servics error message
  4. [DI] Improve class named servics error message

    ro0NL authored and nicolas-grekas committed Jul 25, 2018
  5. bug #28045 [HttpFoundation] Fix Cookie::isCleared (ro0NL)

    nicolas-grekas committed Jul 29, 2018
    This PR was merged into the 2.8 branch.
    
    Discussion
    ----------
    
    [HttpFoundation] Fix Cookie::isCleared
    
    | Q             | A
    | ------------- | ---
    | Branch?       | 2.8
    | Bug fix?      | yes
    | New feature?  | no
    | BC breaks?    | no     <!-- see https://symfony.com/bc -->
    | Deprecations? | no
    | Tests pass?   | yes    <!-- please add some, will be required by reviewers -->
    | Fixed tickets | #27946
    | License       | MIT
    | Doc PR        | symfony/symfony-docs#... <!-- required for new features -->
    
    <!--
    Write a short README entry for your feature/bugfix here (replace this comment block.)
    This will help people understand your PR and can be used as a start of the Doc PR.
    Additionally:
     - Bug fixes must be submitted against the lowest branch where they apply
       (lowest branches are regularly merged to upper ones so they get the fixes too).
     - Features and deprecations must be submitted against the master branch.
    -->
    
    Commits
    -------
    
    d3d7766 [HttpFoundation] Fix Cookie::isCleared
  6. minor #28067 [Intl] Replace svn with git in the icu data update scrip…

    nicolas-grekas committed Jul 29, 2018
    …t (jakzal)
    
    This PR was merged into the 2.8 branch.
    
    Discussion
    ----------
    
    [Intl] Replace svn with git in the icu data update script
    
    | Q             | A
    | ------------- | ---
    | Branch?       | 2.8
    | Bug fix?      | no
    | New feature?  | no
    | BC breaks?    | no
    | Deprecations? | no
    | Tests pass?   | yes
    | Fixed tickets | -
    | License       | MIT
    | Doc PR        | -
    
    Quoting http://site.icu-project.org/repository:
    
    > Announcement 07/16/2018: The ICU source code repository has been migrated from Subversion to Git, and is now hosted on GitHub at the following location: https://github.com/unicode-org/icu.
    
    The icu update script will from now on:
    * use git
    * fetch the latest release tag (no need to maintain the list anymore)
    
    I rebuilt the data files, but since no new ICU releases has been made, none of files were actually updated.
    
    Commits
    -------
    
    ebdf972 [Intl] Replace svn with git in the icu data update script
  7. bug #28080 [HttpFoundation] fixed using _method parameter with invali…

    nicolas-grekas committed Jul 29, 2018
    …d type (Phobetor)
    
    This PR was squashed before being merged into the 2.8 branch (closes #28080).
    
    Discussion
    ----------
    
    [HttpFoundation] fixed using _method parameter with invalid type
    
    | Q             | A
    | ------------- | ---
    | Branch?       | 2.8
    | Bug fix?      | yes
    | New feature?  | no
    | BC breaks?    | no
    | Deprecations? | no
    | Tests pass?   | yes
    | Fixed tickets | #28079
    | License       | MIT
    | Doc PR        | -
    
    This change makes sure that an incoming `_method` parameter is only used when it is a string value.
    
    Commits
    -------
    
    63583de [HttpFoundation] fixed using _method parameter with invalid type
  8. [HttpFoundation] fixed using _method parameter with invalid type

    Phobetor authored and nicolas-grekas committed Jul 27, 2018
Commits on Jul 26, 2018
  1. [Intl] Replace svn with git in the icu data update script

    jakzal committed Jul 26, 2018
  2. Merge branch '3.4' into 4.0

    nicolas-grekas committed Jul 26, 2018
    * 3.4:
      Fix tests for legacy phpunit versions