Software-update: Symfony 4.2.1 / 4.1.9 / 4.0.15 / 3.4.20 / 2.8.49 / 2.7.50

Symfony is een php-webapplicatieframework en is beschikbaar onder de mit-licentie. Naast een framework en herbruikbare componenten biedt Symfony een filosofie, methodiek en community, ondersteund door SensioLabs. Op ons Forum zijn er ook verschillende topics over terug te vinden. De ontwikkelaars hebben enkele dagen geleden versies 4.2.1, 4.1.9, 4.0.15, 3.4.20, 2.8.49 en 2.7.50 uitgebracht met de volgende aankondigingen:

Symfony 4.2.1 released

Symfony 4.2.1 has just been released. Here is a list of the most important changes:

• security #cve-2018-19790 [SecurityHttp] detect bad redirect targets using backslashes
• security #cve-2018-19789 [Form] Filter file uploads out of regular form types
• bug #29481 [TwigBridge] Deprecating legacy Twig paths in DebugCommand and simplifications
• bug #29436 [Cache] Fixed Memcached adapter doClear()to call flush()
• bug #29482 Fixes sprintf(): Too few arguments in MessageFormatter::choiceFormat
• bug #29461 [Contracts] extract LocaleAwareInterface out of TranslatorInterface
• bug #29446 [VarExporter] fix dumping private properties from abstract classes
• bug #29441 [Routing] ignore trailing slash for non-GET requests
• bug #29445 [FrameworkBundle] Fix empty output for debug:autowiring when reflection-docblock is not installed
• bug #29444 [Workflow] Fixed BC break for Workflow metadata
• bug #29432 [DI] dont inline when lazy edges are found
• bug #29413 [Serializer] fixed DateTimeNormalizer to maintain microseconds when a different timezone required
• bug #29424 [Routing] fix taking verb into account when redirecting
• bug #29418 [VarExporter] fix dumping protected property from abstract classes
• bug #29414 [DI] Fix dumping expressions accessing single-use private services
• bug #28853 [LDAP] Add TIMEOUT Option to LDAP Connection Options
• bug #29399 [FrameworkBundle] define doctrine as defaul _pd _provider only if the package is installed
• bug #29375 [Validator] Allow ConstraintViolation::toString() to expose codes that are not null or emtpy strings
• bug #29376 [EventDispatcher] Fix eventListener wrapper loop in TraceableEventDispatcher
• bug #29386 undeprecate the single-colon notation for controllers
• bug #29393 [DI] fix edge case in InlineServiceDefinitionsPass
• bug #29394 [Config] fix path exclusion during glob discovery
• bug #29395 [FrameworkBundle][Messenger] Restore check for messenger serializer default id
• bug #29380 [Routing] fix greediness of trailing slash
• security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer
• security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers

Symfony 4.1.9 released

Symfony 4.1.9 has just been released. Here is a list of the most important changes:

• security #cve-2018-19790 [SecurityHttp] detect bad redirect targets using backslashes
• security #cve-2018-19789 [Form] Filter file uploads out of regular form types
• bug #29436 [Cache] Fixed Memcached adapter doClear()to call flush()
• bug #29441 [Routing] ignore trailing slash for non-GET requests
• bug #29444 [Workflow] Fixed BC break for Workflow metadata
• bug #29432 [DI] dont inline when lazy edges are found
• bug #29413 [Serializer] fixed DateTimeNormalizer to maintain microseconds when a different timezone required
• bug #29424 [Routing] fix taking verb into account when redirecting
• bug #29414 [DI] Fix dumping expressions accessing single-use private services
• bug #29375 [Validator] Allow ConstraintViolation::toString() to expose codes that are not null or emtpy strings
• bug #29376 [EventDispatcher] Fix eventListener wrapper loop in TraceableEventDispatcher
• bug #29386 undeprecate the single-colon notation for controllers
• bug #29393 [DI] fix edge case in InlineServiceDefinitionsPass
• bug #29380 [Routing] fix greediness of trailing slash
• bug #29343 [Form] Handle all case variants of "nan" when parsing a number
• bug #29373 [Routing] fix trailing slash redirection
• bug #29355 [PropertyAccess] calculate cache keys for property setters depending on the value
• bug #29369 [DI] fix combinatorial explosion when analyzing the service graph
• bug #29349 [Debug] workaround opcache bug mutating "$this" !?!

Symfony 4.0.15 released

Symfony 4.0.15 has just been released. Here is a list of the most important changes:

• security #cve-2018-19790 [SecurityHttp] detect bad redirect targets using backslashes
• security #cve-2018-19789 [Form] Filter file uploads out of regular form types

Symfony 3.4.20 released

Symfony 3.4.20 has just been released. Here is a list of the most important changes:

• security #cve-2018-19790 [SecurityHttp] detect bad redirect targets using backslashes
• security #cve-2018-19789 [Form] Filter file uploads out of regular form types
• bug #29436 [Cache] Fixed Memcached adapter doClear()to call flush()
• bug #29441 [Routing] ignore trailing slash for non-GET requests
• bug #29432 [DI] dont inline when lazy edges are found
• bug #29413 [Serializer] fixed DateTimeNormalizer to maintain microseconds when a different timezone required
• bug #29424 [Routing] fix taking verb into account when redirecting
• bug #29414 [DI] Fix dumping expressions accessing single-use private services
• bug #29375 [Validator] Allow ConstraintViolation::toString() to expose codes that are not null or emtpy strings
• bug #29376 [EventDispatcher] Fix eventListener wrapper loop in TraceableEventDispatcher
• bug #29343 [Form] Handle all case variants of "nan" when parsing a number
• bug #29355 [PropertyAccess] calculate cache keys for property setters depending on the value
• bug #29369 [DI] fix combinatorial explosion when analyzing the service graph
• bug #29349 [Debug] workaround opcache bug mutating "$this" !?!

Symfony 2.8.49 released

Symfony 2.8.49 has just been released. Here is a list of the most important changes:

• security #cve-2018-19790 [SecurityHttp] detect bad redirect targets using backslashes
• security #cve-2018-19789 [Form] Filter file uploads out of regular form types

Symfony 2.7.50 released

Symfony 2.7.50 has just been released. Here is a list of the most important changes:

• security #cve-2018-19790 [SecurityHttp] detect bad redirect targets using backslashes
• security #cve-2018-19789 [Form] Filter file uploads out of regular form types

Versienummer	4.2.1 / 4.1.9 / 4.0.15
Releasestatus	Final
Besturingssystemen	Scripttaal
Website	Symfony
Download	https://symfony.com/download
Licentietype	Voorwaarden (GNU/BSD/etc.)

Reacties (5)

Fantastisch framework omdat het zo flexibel is. Je kunt een volledig framework voor webapps installeren, of alleen de componenten die je nodig hebt. Het is wel lastig om een applicatie te upgraden naar een nieuwe release. Vooral versie 4 is heel anders dan versie 3.

Ik heb een gigantisch project omgebouwd naar S4.1. 2 dagen bezig geweest. Hebben ze met 4.2 weer grote wijzigingen doorgevoerd. Ik wacht wel even tot ze zeker weten wat ze met S4 willen.

Upgraden van je deps kost nou eenmaal tijd en moeite. Het hoort bij je werk.

AFAIK houdt het Symfony project aan semver. Dus de changes zouden non-breaking moeten zijn, waardoor je met niet veel moeite kan upgraden van minor versie naar minor versie.

Maar vanaf waaruit begon je naar Sf4.1 toe als ik het vragen mag? 4.0? 3.0? Een ander framework of Vanilla PHP?

[Reactie gewijzigd door RoestVrijStaal op 15 december 2018 00:52]

4.2 is backwards compatible met 4.1 dus je zou geen extra dingen hoeven doen ervoor. Mocht je wel iets gevonden hebben dan moet je t rapporteren als bug.

Hoe is Symfony 3 anders dan 4? 3.4 is identiek aan 4.0 behalve de deprecations. Ik heb n app van 2.7 geüpgraded naar 4.0 in n paar dagen tijd en de upgrade naar 4.1 en vervolgens 4.2 was slechts het draaien van n composer update.