Merge pull request symfony#61864 from fabpot/release-6.4.26

released v6.4.26

Author: fabpot

CHANGELOG-6.4.md

@@ -7,6 +7,41 @@ in 6.4 minor versions.
 To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
 To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v6.4.0...v6.4.1
 
+* 6.4.26 (2025-09-27)
+
+ * bug #61856 [Console] do not pass the empty string to ord() (xabbuh)
+ * bug #61855 [DoctrineBridge][Yaml] don't cast strings exceeding the min/max int ranges (xabbuh)
+ * bug #61844 do not coerce NAN to other types (xabbuh)
+ * bug #61825 [DoctrineBridge] Make `EntityUserProvider`s pass attributes to their loader (MatTheCat)
+ * bug #61793 [AssetMapper] Prevent duplicate entries in module preloads (xDeSwa)
+ * bug #61757 [FrameworkBundle] Perform-no-deep-merging on workflow transitions' from/to configs (nicolas-grekas)
+ * bug #61766 Fix ord()-related PHP 8.5 deprecations (nicolas-grekas)
+ * bug #61368 [HttpKernel] Refine Vary header check to skip special handling of 'Accept-Language' when it's the only entry and '_vary_by_language' is `true` in `CacheAttributeListener` (santysisi)
+ * bug #61746 [Serializer] Fix unknown type in denormalization errors when union type used in constructor (d-mitrofanov-v)
+ * bug #61724 [Console] Fix handling of `\E` in Bash completion (HypeMC)
+ * bug #61518 [HttpKernel] Handle an array vary header in the http cache store for write (philpichet)
+ * bug #61736 [PhpUnitBridge] do not try to modify the result of a PhptTestCase (xabbuh)
+ * bug #61731 [PhpUnitBridge] Fix gathering deprecation in phpt (nicolas-grekas)
+ * bug #61729 [PhpUnitBridge] Silence deprecation of __sleep/wakeup() (nicolas-grekas)
+ * bug #61727 Replace __sleep/wakeup() by __(un)serialize() for throwing and internal usages (nicolas-grekas)
+ * bug #61693 [Console] Don’t append a new line to test inputs ending with an EOT (MatTheCat)
+ * bug #61596 [FrameworkBundle] Normalize workflow places separately (KevinVanSonsbeek)
+ * bug #61690 [Console] Don’t automatically append EOT to multiline test inputs (MatTheCat)
+ * bug #61667 [Config] Fix `GlobResource` pattern with trailing slash (HypeMC)
+ * bug #61659 [Security] Fix `HttpUtils::createRequest()` when the base request is forwarded (MatTheCat)
+ * bug #61645 Replace backtick operator, deprecated in PHP 8.5, with shell_exec() (iluuu1994)
+ * bug #61097 [Serializer] Fix normalizing objects with accessors having the same name as a property (RafaelKr)
+ * bug #61614 [SecurityBundle] Prevent accessing the tracked token storage when collecting data (MatTheCat)
+ * bug #61605 [Cache] Fix internal representation of non-static values (nicolas-grekas)
+ * bug #61599 [Cache] Make `TagAwareAdapter` registrable as a service (a.dmitryuk)
+ * bug #61595 [Security] Pass attributes to nested `ChainUserProvider`s (valtzu)
+ * bug #61232 [Messenger] Firebird Database - incompatibility with expected lowercase columns (DSsatwareAG)
+ * bug #61583 [DoctrineBridge] Fix exception catch when deleting temporary table in the sameDatabaseChecker (GromNaN)
+ * bug #61585 [HttpFoundation][SQLSRV] Change column type from `TEXT` to `STRING` (Matt-PMCT)
+ * bug #61571 [Serializer] Fix dealing with asymmetric visilibity for properties (santysisi)
+ * bug #61573 [Inflector][String] Fix edge cases (OskarStark)
+ * bug #61548 [Security] Fix attribute-based chained user providers (valtzu)
+
 * 6.4.25 (2025-08-29)
 
  * bug #61520 [Yaml] Fix scope resolution operator in flow mapping keys (MatTheCat)