Commit ad56e47

* 8.1.2 (2026-07-29)

* bug #65029 [JsonPath] Add limits for filter expression length and depth in JsonCrawler (alexandre-daubois)

* bug #65028 [HttpClient] Fail when an https proxy is configured but libcurl cannot use it (nicolas-grekas)

* bug #65026 [JsonStreamer] Drop the unbounded process-global key cache in Splitter (nicolas-grekas)

* bug #65025 [Serializer] Check the denormalized class is a Mime part in MimeMessageNormalizer (nicolas-grekas)

* bug #65024 [SecurityBundle] Always constrain redirect targets to the current host, even without sessions (nicolas-grekas)

* bug #65023 [HttpFoundation] Validate the characters allowed in a cookie path and domain (nicolas-grekas)

* bug #65022 [HttpFoundation] Don't crash on a non-string signature in UriSigner (nicolas-grekas)

* bug #65020 [HttpFoundation] Fix newline handling in server event fields (nicolas-grekas)

* bug #65019 [HttpClient] Strip Proxy-Authorization on cross-authority redirects (nicolas-grekas)

* bug #65011 [Cache] Add support for relay 0.40 (nicolas-grekas)

* bug #65005 [JsonPath] Reject non-singular queries in filter comparisons (nicolas-grekas)

* bug #65002 [JsonPath] Fix evaluating filter expressions wrapped in several parentheses (nicolas-grekas)

* bug #65001 [HttpFoundation] Fix retry field being dropped across server event streams (nicolas-grekas)

* bug #64999 [DependencyInjection] Restore reading "container.behavior_describing_tags" in DecoratorServicePass (nicolas-grekas)

* bug #65008 [HttpKernel] Fix the escaping of the generated curl command (nicolas-grekas)

* bug #65009 [HttpClient] Fix the escaping of the generated curl command (nicolas-grekas)

* bug #65004 [HttpClient] Don't send the original Host header on cross-authority redirects (nicolas-grekas)

* bug #64995 [Serializer] Prefer serialized name over raw property key (ousamabenyounes)

* bug #64992 [String] Consistently return null for out-of-range offsets (javiereguiluz)

* bug #64986 [HttpKernel] Fix the curl command when a cookie holds an array (maximilian-walter)

* bug #64990 [PropertyInfo] Do not trigger legacy Type deprecation on getType() (saifulferoz)

* bug #64983 [ObjectMapper] Fix nested map() reconstructing an existing target (takashiraki)

* bug #64985 [Mailer] Fix fatal TypeError when sending a RawMessage via an API transport (Baylox)

* bug #64975 [SecurityBundle] Let the LDAP and non-LDAP variants of an authenticator share a firewall (nicolas-grekas)

* bug #64978 [Messenger] Reject a serialized type name that is another message's class name (nicolas-grekas)

* bug #64662 [Console] Decorate stdout and stderr independently when a formatter is injected (jprivet-dev)

* bug #64697 [Serializer] Keep the collection value type for iterable constructor parameters (misaert)

* bug #64917 [Messenger] Do not wrap the Doctrine transport keepalive in a transaction (bendavies)

* bug #64820 [Mailer][Messenger] Wrap AsyncAws exceptions into TransportException in the AmazonSqs and SES transports (voodooism, nicolas-grekas)

* bug #64768 [Bridge][Monolog] Do not reset in ConsoleCommandProcessor (lyrixx)

* bug #64903 [Console] Reduce buffer reallocations in FileInputHelper paste detection (jorgsowa)

* bug #64661 [FrameworkBundle] Register the argument resolver in ConsoleCommandAssertionsTrait::runCommand (fracsi)

* bug #64971 [Dotenv] Don't parse external env var values when resolving .env references (nicolas-grekas)

* bug #64972 [AssetMapper] Reset the mapped asset factory between requests (pokki-deploy)

* bug #64966 [AssetMapper] Avoid re-expanding bare importmap entries (pokki-deploy)

* bug #64965 [Serializer] Do not read subclass discriminator attributes from base objects (pokki-deploy)

* bug #64957 [Cache] Fix "Class Relay\Relay not found" for RedisCluster/RedisArray with tcp_keepalive (rjmackay)

* bug #64863 [FrameworkBundle] Keep transport decorators when mock_response_factory is set (alexndlm)

* bug #64864 [HttpKernel] Keep converting scalars of a form payload that carries an uploaded file (Amoifr)

* bug #64825 [PhpUnitBridge] fix finding given config file name (YumeNikki101)

* bug #64862 [ObjectMapper] Resolve a nested reverse-mapped property by the type of its destination (Amoifr)

* bug #64781 [ObjectMapper] Keep the class-level transform/if of the target's #[Map] in the reverse class-map factory (Orkin)

* bug #64724 [Serializer] Keep FILTER_BOOL working when ENABLE_TYPE_CONVERSION is enabled (Amoifr)

* bug #64868 [Messenger] Avoid redispatching messages from completed batches (Gaitholabi)

* bug #64835 [WebProfilerBundle] Fix crash when injecting the toolbar in a BinaryFileResponse (Fuck4ik)

* bug #64659 [Console] Strip terminal control characters from displayed file names (iliaal)

* bug #64710 [Mailer] Reject control characters in SmtpTransport::setLocalDomain() (iliaal)

* bug #64945 [HttpFoundation] Throw when IpUtils::isPrivateIp() receives a non-canonical IP address (Amoifr)

* bug #64670 [Config] Accept env placeholders for scalar alternatives in generated array-shapes (yvh)

* bug #64938 [Messenger] Do not reject unknown types when no message requires signing (pokki-deploy)

* bug #64935 [PropertyInfo] Ignore mutators with several required parameters (pokki-deploy)

* bug #64937 [Validator] Allow `Traverse` to be inherited (MatTheCat)

* bug #64654 [Validator] Merge target's own constraints when using #[ExtendsValidationFor] (pokki-deploy)

* bug #64708 [DependencyInjection] Fix lazy + factory service with a leading-backslash class on PHP 8.4 (Amoifr)

* bug #64751 [FrameworkBundle] Make `WebTestCase` enable web mode by default (MatTheCat)

* bug #64770 [ObjectMapper] Fix explicit #[Map(target:)] being overwritten by a same-name source property (danielpilot)

* bug #64801 [Validator] Allow null groups in ConstraintValidatorTestCase (sjh9714)

* bug #64828 [DependencyInjection] Add supported literal option `not_found` for `imports.[*].ignore_errors` in `services.schema` and `AppReference` (kaznovac)

* bug #64831 [FrameworkBundle] Fix valkey cache adapters ignoring `default_valkey_provider` (lazerg)

* bug #64848 [ObjectMapper] Fix per-property #[Map(source:)] being ignored when the target property name also exists on the source (Amoifr)

* bug #64934 [HttpClient] Do not stream empty PSR-18 request bodies (pokki-deploy)

* bug #64931 [TwigBridge] prevent implicit string casts for translatable message objects (xabbuh)

* bug #64905 [PropertyInfo] Fix union with mixed handling in PhpStanTypeHelper (Amoifr)

* bug #64928 [Messenger] Strip trace from nested exceptions in ErrorDetailsStamp (pkranjcecx)

* bug #64933 [Messenger] Fix ack/reject failing when the Redis stream entry is already deleted (pokki-deploy)

* bug #64707 [AssetMapper] Fix crash when a remote package depends on a locally-mapped importmap entry (Amoifr)

* bug #64655 [EventDispatcher] Fix regression in TraceableEventDispatcher invocation counting (jnahmias)

* bug #64727 [Routing] Detect circular references in object route parameters (Amoifr)

* bug #64932 Do not expose the `BundleAdapter` class in the `kernel.bundles` parameter (mpdude)

* bug #64741 [Mime] Fix dropped whitespace between multiple encoded words (eyupcanakman)

* bug #64843 [Console] Fix table borders around colspan cells and header-less tables (wazum)

* bug #64930 Handle PHP 8.6 removing function arguments in error messages (MatTheCat)

* bug #64847 [DoctrineBridge] Filter non-.php files in ProxyCacheWarmer::warmUp() to avoid CacheWarmerAggregate exception (semx)

* bug #64822 [Config] Escape "*/" in generated array-shape comments (lazerg)

* bug #64857 [Config] Escape comment-closing sequence in generated config builders (sadiqk2)

* bug #64886 [Console] Fix two ValueError crashes on multibyte / multi-column widths (sadiqk2)

* bug #64887 [Cache] Initialize PhpArrayAdapter before classifying keys in deleteItems() (sadiqk2)

* bug #64897 [Messenger][AmazonSqs] Fix fatal on shutdown when the in-flight receive cannot be resumed (vadimgodev)

* bug #64904 [ErrorHandler] Fix fatal error without args triggering an error when calling `getTraceFromString` (timacdonald)

* bug #64914 [EventDispatcher] Clear wrappedListeners in TraceableEventDispatcher::reset() (guillaumedelre)

* bug #64914 [EventDispatcher] Clear wrappedListeners in TraceableEventDispatcher::reset() (guillaumedelre)

* bug #64672 [Yaml] Fix line folding after trailing backslashes in quoted strings (eyupcanakman)

* bug #64668 [DependencyInjection] Fix env var reported as never used for a removed autowired service (eyupcanakman)

* bug #64915 [Yaml] Fix parsing and dumping of NaN (semx)

* bug #64918 [String] Fix AsciiSlugger::getLocale() TypeError with no locale set (eyupcanakman)

* bug #64920 [Validator] add missing inherited options to Video constraint (xabbuh)

* bug #64891 [TwigBridge] ensure that a label with value "0" is rendered (xabbuh)

* bug #64889 [HttpClient] Replace the native "dechunk" stream filter with a pure PHP implementation (nicolas-grekas)

* bug #64898 [Cache] Remove obsolete `return` instruction from classes constructors (cedric-anne)

* bug #64895 [Dotenv] Allow multiple underscores at start (Sajito)

* bug #64884 Fix/webprofiler mailer macros 6.4 (HecFranco)

* bug #64877 [Validator] Reject misplaced "X" character in ISBN-10 validation (semx)

* bug #64856 [Console] Fall back to "stty sane" when restoring the captured terminal state fails (lyrixx)

* bug #64649 [Serializer] Fix support check for nested array items (nicolas-grekas)

* bug #64827 jitter shouldn't make scheduler miss runs (mrossard)

* bug #64840 [Tui] Repaint the full screen on resize so multiplexer reattaches are not blank (fabpot)

* bug #64849 [Console] Fix SymfonyStyle questions when using output sections (javiereguiluz)

* bug #64797 [Notifier] add handling for the Prelude bridge to UnsupportedSchemeException (xabbuh)

* bug #64815 [Cache] Remove always-true method_exists() check in FilesystemCommonTrait::__destruct() (munzzyy)

* bug #64794 [PropertyInfo] Prevent `PhpDocTypeHelper` to wrongly assume keys type (MatTheCat)

* bug #64778 [Console] Fix #[MapDateTime] arguments resolved as strings by BuiltinTypeValueResolver (serhiilabs)

* bug #64791 [Tui] Fix wrapping lines that end with whitespace followed by ANSI codes exceeding the width (fabpot)

* bug #64783 Add additional IP ranges for RFC2544 and RFC5180 (thePanz)

* bug #64789 [HttpFoundation] Add RFC5737 and RFC3849 to IpUtils::PRIVATE_SUBNETS (thePanz)

* bug #64739 [PropertyInfo] Prevent `PhpDocTypeHelper` to wrongly assume keys type (MatTheCat)

* bug #64752 [Yaml] Fix parsing of integers with a leading plus sign (eyupcanakman)

* bug #64701 Fix Absolute URL generation by ignore tel: mailto: and other app links (tomm1996, alexander-schranz)

* bug #64734 [Filesystem] Trim trailing whitespace from the tempnam() prefix (Amoifr)

* bug #64732 [String] Fix splice() on multibyte strings (eyupcanakman)