Symfony has shipped the 6.4.44 maintenance release. Fabien Potencier tagged it on 22 August. It is a pure bug fix update with no new features.

The changelog lists well over a hundred merged fixes. Nicolas Grekas authored the bulk of them, with contributions from cs278, javiereguiluz, wazum, tomsommer, lyrixx and around two dozen others.

Several components receive notable corrections. The Serializer fixes denormalization of mime messages typed as RawMessage, restores the SerializedName attribute when groups are set, and repairs XmlEncoder handling of nested discriminator maps and Traversable values. Security now matches check paths given as route aliases, refreshes the impersonator during impersonation and rejects malformed login link parameters instead of throwing a TypeError.

Messenger learns to tell apart handler services sharing the same class, rejects canceled scheduled messages so async transports do not redeliver them, and fails cleanly when messenger:consume gets no receiver. HttpKernel restores the locale after sub-requests, forwards request headers to inline rendered fragments and fixes caching of responses that cannot provide their content.

Other fixes span Form, Validator, DependencyInjection, Console, Yaml, DomCrawler, BrowserKit, Cache, Mailer, Translation, Finder, Filesystem, Lock, RateLimiter, Process and the Twig, Doctrine and Monolog bridges. One Filesystem fix stops mirror() from deleting files in the origin directory, a potentially destructive bug. The Validator also gains updated translations for German, Croatian, Albanian, French, Brazilian Portuguese, Serbian, Lithuanian and Slovak, plus new EntityExists and Ulid message units.

Applications on the 6.4 branch should update via Composer as usual.