Update CHANGELOG for 7.3.4

Author: fabpot

CHANGELOG-7.3.md

@@ -7,6 +7,57 @@ in 7.3 minor versions.
 To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
 To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v7.3.0...v7.3.1
 
+* 7.3.4 (2025-09-27)
+
+ * bug #61830 [Security] Fix preload warning in `AuthorizationChecker` (MatTheCat)
+ * bug #61825 [DoctrineBridge] Make `EntityUserProvider`s pass attributes to their loader (MatTheCat)
+ * bug #61818 [Notifier] Rename LOX24RequestParser to Lox24RequestParser (nicolas-grekas)
+ * bug #61808 [Config] Fix incorrect serialized data mangling (aboks)
+ * bug #61793 [AssetMapper] Prevent duplicate entries in module preloads (xDeSwa)
+ * bug #61785 [ObjectMapper] Preserve non-promoted constructor parameters (rvanlaak)
+ * bug #60515 [Mailer] Fix memory leak with `mailer.message_logger_listener` (andrew-demb)
+ * bug #61757 [FrameworkBundle] Perform-no-deep-merging on workflow transitions' from/to configs (nicolas-grekas)
+ * bug #61766 Fix ord()-related PHP 8.5 deprecations (nicolas-grekas)
+ * bug #61368 [HttpKernel] Refine Vary header check to skip special handling of 'Accept-Language' when it's the only entry and '_vary_by_language' is `true` in `CacheAttributeListener` (santysisi)
+ * bug #61752 [PropertyInfo] Fix getting type from constructor of parent class in `PhpStanExtractor` (wuchen90)
+ * bug #61746 [Serializer] Fix unknown type in denormalization errors when union type used in constructor (d-mitrofanov-v)
+ * bug #61724 [Console] Fix handling of `\E` in Bash completion (HypeMC)
+ * bug #61518 [HttpKernel] Handle an array vary header in the http cache store for write (philpichet)
+ * bug #61736 [PhpUnitBridge] do not try to modify the result of a PhptTestCase (xabbuh)
+ * bug #61728 [TypeInfo] Fix issue with merging union type with a nullable union type (matijn-made)
+ * bug #61731 [PhpUnitBridge] Fix gathering deprecation in phpt (nicolas-grekas)
+ * bug #61729 [PhpUnitBridge] Silence deprecation of __sleep/wakeup() (nicolas-grekas)
+ * bug #61727 Replace __sleep/wakeup() by __(un)serialize() for throwing and internal usages (nicolas-grekas)
+ * bug #61714 [SecurityBundle] Fix semantic configuration for singulars/plurals in XML (nicolas-grekas)
+ * bug #61132 [JsonPath] Make the component RFC compliant (alexandre-daubois)
+ * bug #60055 [MonologBridge] Make `ConsoleHandler` not handle messages at SILENT verbosity (okhoshi)
+ * bug #61701 [SecurityBundle] Add missing `fixXmlConfig()` call for `issuer` (OskarStark)
+ * bug #61693 [Console] Don’t append a new line to test inputs ending with an EOT (MatTheCat)
+ * bug #61596 [FrameworkBundle] Normalize workflow places separately (KevinVanSonsbeek)
+ * bug #61690 [Console] Don’t automatically append EOT to multiline test inputs (MatTheCat)
+ * bug #61667 [Config] Fix `GlobResource` pattern with trailing slash (HypeMC)
+ * bug #61658 [Messenger] map legacy options to the "sentinel" key when parsing DSNs (xabbuh)
+ * bug #61659 [Security] Fix `HttpUtils::createRequest()` when the base request is forwarded (MatTheCat)
+ * bug #61653 [Routing] Don't rebuild cache when controller action body changes (HypeMC)
+ * bug #61645 Replace backtick operator, deprecated in PHP 8.5, with shell_exec() (iluuu1994)
+ * bug #61617 [Validator] fall back to legacy options handling if configured named arguments do not match (xabbuh)
+ * bug #61097 [Serializer] Fix normalizing objects with accessors having the same name as a property (RafaelKr)
+ * bug #61615 [DependencyInjection] Fix optimizing ClassExistenceResource (nicolas-grekas)
+ * bug #61614 [SecurityBundle] Prevent accessing the tracked token storage when collecting data (MatTheCat)
+ * bug #61607 [Config] Fix `ReflectionClassResource` hash validation (HypeMC)
+ * bug #61605 [Cache] Fix internal representation of non-static values (nicolas-grekas)
+ * bug #61599 [Cache] Make `TagAwareAdapter` registrable as a service (a.dmitryuk)
+ * bug #61595 [Security] Pass attributes to nested `ChainUserProvider`s (valtzu)
+ * bug #61580 [JsonStreamer] Fix encoding iterable lists (mtarld)
+ * bug #61232 [Messenger] Firebird Database - incompatibility with expected lowercase columns (DSsatwareAG)
+ * bug #61583 [DoctrineBridge] Fix exception catch when deleting temporary table in the sameDatabaseChecker (GromNaN)
+ * bug #61585 [HttpFoundation][SQLSRV] Change column type from `TEXT` to `STRING` (Matt-PMCT)
+ * bug #61571 [Serializer] Fix dealing with asymmetric visilibity for properties (santysisi)
+ * bug #60766 [DependencyInjection] Respect original service class when a proxy is defined (lyrixx)
+ * bug #61561 [JsonStreamer] Fix decoding iterable lists (mtarld)
+ * bug #61573 [Inflector][String] Fix edge cases (OskarStark)
+ * bug #61548 [Security] Fix attribute-based chained user providers (valtzu)
+
 * 7.3.3 (2025-08-29)
 
  * bug #61543 [TypeInfo] Prevent interfaces extending BackedEnum to be treated as BackedEnums (ettoredn)