api-platform/core

Bug fixes

• 01fd0b578 fix(symfony): do not redeclare object_mapper (#7602)
• 0ef0ba63a fix(metadata): update tests to use MappedObjectPaginator instead of ArrayPaginator (#7591)
• 6561eb1ec fix(symfony): do not load docs routes if docs disabled (#7448)
• 8f4bc086f fix(symfony): disable Swagger UI and ReDoc when Swagger is off (#7586)
• 9814f27ee fix(metadata): property placeholder on multiple parameters (#7598)
• bc1fd4c10 fix(laravel): belongs-to-many relations dont have a get-foreign-key-name method (#7589)
• d3bcded9b fix(metadata): use operation output class for mapping instead of operation class (#7601)
• d7bab4bb3 fix(serializer): properly handle read link parameters when generating iris (#7520)

Bug fixes

• 502c0e2de fix(symfony): skip argument resolver when context is not api platform (#7579)
• 834064fc6 fix(metadata): filter interface context php doc (#7560)
• 85458e0d9 fix(symfony): use app.request.query.get() directly instead of app.request.get() in swagger (#7578)
• ef3127000 fix(symfony): use current route for footer links (#7580)
• 49d80c840 fix(serializer): render BCMath\Number (PHP 8.4+) as string instead of object (#7555)

Symfony 8.0 compatible.

Bug fixes

• 44af80c43 fix(symfony): disable Swagger UI and keep openapi.json (#7549)
• 4dfa8da8b fix(metadata): repeatable attribute mutators (#7542)
• 5e2f729ed fix(state): never map a response (#7543)
• e9af8905c fix(metadata): disable pagination maximum items per page (#7553)

Bug fixes

• 53d3f8481 fix(state): object mapper flag (#7541)
• f4a1697ca Revert "fix: 🐛 make default value of pagination_maximum_items_per_page same…" (#7533)

Bug fixes

• 57fe3d1 fix(state): class existence check for ObjectMapperAwareInterface

Bug fixes

• 20f288959 fix: multiple :property template operations on a single resource (#7461)
• 44f227112 fix(symfony): inject api-platform default configuration in the php resource metadata factory (#7525)
• 921d7c8fe fix(state): create PUT has relation with lazy mapper (#7521)
• 951422e15 fix(openapi): maintain json schema for non-json operations (#7528)
• 98fc35221 fix(symfony): object mapper compatibility (#7531)
• a5c44624d fix(json-schema): pagination less schema with disabled pagination (#7506)
• da2324e82 fix(jsonschema): move jsonMergePatch postfix to DefinitionNameFactory (#7510)
• dc0df6110 fix(iri): json streamer iri template does not need metadata (#7511)

• 9416083f7 fix(state): object mapper aware interface (#7486)
• 99718d954 fix(serializer): resilient denormalizeRelation capability (#7474)
• 9b2f98610 fix(metadata): eliminate duplicate keys in the constructor of Parameters (#7492)
• a26c35840 fix(doctrine): properly set properties according to interface (#7487)
• a2867e986 fix(laravel): serializer attributes on Eloquent methods (#7416)
• aea8113e0 fix(json-schema): move member property out of HydraCollectionBaseSchema (#7456)
• b59626a97 fix(symfony): add missing symfony/asset dependency (#7491)
• ddf4c0b5e fix(graphql): stateOptions to get filter class (#7485)
• ebe6dc9a2 fix(jsonschema): fallback the schema for mixed properties to string|null instead of null (#7489)
• fa6e206cc fix(state): detect mapping on source (#7475)
• fafbe5c7b fix(validator): custom message was not translated (#7424)

Features

• f5c257dab feat(symfony): convert routing files to php-dsl (#7463)

Bug fixes

• 0b8237918 fix(state): object mapper with input different (#7435)
• 1094a52d6 fix(metadata): allow description and other fields to be override seperately (#7442)
• 133028e38 fix(state): object mapper on delete operation (#7447)
• 1a4636200 fix(doctrine): group or filter in an AndWhere #7441 (#7445)
• 55fd65795 fix(validator): validation exception without constraint violation list
• 5b59f8914 fix(jsonschema/jsonld): make @id and @type properties required only in the JSON-LD schema for output (#7397)
• 654339e03 fix(openapi): Improve response override (#7428)
• 6c267408a fix(hydra): genId false schema (#7440)
• 70bdf2959 fix(symfony): ensure the kernel is booted before using KernelBrowser::loginUser() (#7446)
• 9c918c657 fix(symfony): align listeners context (#7449)
• abe0438be fix(jsonschema): make all required properties optional in PATCH operation with 'json' format (#7398)
• e1ce9456b fix(openapi): define items type for HydraCollectionBaseSchema hydra:member (#7419)
• e52e825db fix(openapi): allow assertMatchesJsonSchema with custom output dto (#7438)
• f3c811d0f fix(hydra): add base schema to item of a collection (#7444)

Bug fixes

• 059e6a09e fix(symfony): remove suggest ocramius/package-versions (#7395)
• 3b0c44177 fix(openapi): ability to override description in response (#7412)
• 54bdce504 fix(symfony): openapi property path for validation
• 65e137fca fix: make default value of pagination_maximum_items_per_page same as Laravel version (#7396)
• 6916bea95 fix(serializer): require api-platform/metadata:^4.2 (#7409)
• 82d0dd7e0 fix(symfony): openapi property path for validation (#7411)
• a5102d9a2 fix(schema): anyOf must contains an array, not an object (#7399)
• dfe4fd7f2 fix: handle generic array in JsonSchema (#7414)

Also includes v4.1.25 bug fixes

Features

Features

• ceeaf51e8 feat: json streamer (#7225)
• 092a3a4f8 feat(mongodb): partial paginator (#7352)
• 1290ebb88 feat(serializer): ability to throw access denied exception when denormalizing secured properties (#7221)
• 1862d03b7 feat(symfony): add error classes options to open api config (#7143)
• 24a1cf5a2 feat(elasticsearch): add support for v9 (#7180)
• 26d2394b7 feat(doctrine): new search filters (#7121)
• 2a13100f4 feat(serializer): (un)set object-to-populate through denormalization context (#7124)
• 3ab0b8d0f feat(metadata): use PHP file as resource format
• 4abf17b3c feat(symfony): CSS Color Schema Restriction for Property Validation (#7215)
• 4b1b94cad feat(symfony): Autoconfigure classes using #[ApiResource] attribute (#6943)
• 6491bfc7a feat(doctrine): improve http cache invalidation using the info from the mapping (#7319)
• 9e9cf648d feat(metadata): introduce metadata mutators for resource & operations (#7213)
• a42034dc3 feat(symfony): object mapper with state options (#6801)
• a8b82172a feat(doctrine): support integer-backed enums in BackedEnumFilter (#7129)
• b52187d91 feat(serializer): handle defaultType for DiscriminatorMap (#7284)
• b948209b9 feat(laravel): add make:filter command to generate API Platform filters (#7364)
• ebd85f502 feat(symfony): add make:filter command to generate API Platform filters (#7355)
• bf09616cf feat(httpcache): add more cache directives to AddHeadersProcessor (#7008)
• f25d7d1a6 feat(metadata): ability to set description on an Error (#7329)

Breaking changes

• 073c0e282 fix(openapi)!: allowReserved, allowEmtpyValue defaults to null
• 62a9cc821 fix(state)!: parameter default value overrides falsy value
• 79edced67 fix(json-schema): share invariable sub-schemas

TypeInfo

• 143d512ef feat(jsonapi): use TypeInfo's Type (#7100)
• 1d579d095 feat(hal): use TypeInfo type (#7097)
• 350d6d707 feat(hydra): use TypeInfo's Type (#7099)
• 55461a83c feat: Use Type of TypeInfo instead of PropertyInfo (#6979)
• 7c796de0d feat(serializer): type info (#7104)
• 827e1f725 feat(elasticsearch): use TypeInfo type (#7098)
• a1952e304 feat(openapi): use TypeInfo's Type (#7096)
• dd3356824 feat(laravel): use TypeInfo's Type (#7101)

Bug fixes

• 02a764950 fix(symfony): explicitly set the target class when mapping entities to resources (#7311)
• 0411cd9cc fix(jsonld): duplicate error fields when prefix is enabled (#7021) (#7074)
• 1acf8f764 fix(symfony): only set name_converter for the default serializer (#6101) (#7365)
• 2c5c9e451 fix(openapi): no content schema (#7384)
• 321c68f12 fix: pagination via cursor on ApiResource operations (#7368)
• 5a8d4d282 fix(jsonld): various json streamer fixes (#7374)
• 9389b4f46 fix(laravel): restore accidentally removed BooleanFilter (#6881)
• b80ab9a59 fix(httpcache): collection iri invalidation for mapped entities (#7353)
• c9692b509 fix(state): transform uri variable using ReadLinkParameterProvider (#7375)
• d06b1a0a0 fix(state): object-mapper reuse related entity (#7300)
• ecb3f6cef fix(httpcache): only map entites that are persisted
• d921dd37a fix(mongodb): make ParameterExtension context more generic (#7389)

Miscellaneous

• 04f252e7f fix(symfony): missing finder dependency
• 1806cfae6 feat(symfony): stop watch system provider/processor
• 202c60fcb feat(openapi): license identifier (#7141)
• 4f0864c1a fix(symfony): remove deprecation about jsonopenapi
• 6db55be8c fix(metadata): wrong method name in resource mutator
• 76c80a67c fix: command name deprecation
• 77b292bfe feat(metadata): class is now class-string (#7307)
• 95451fbee feat(state): remove @internal from the CreateProvider
• ce4e97fe8 fix(hal): rename package
• cff61eab8 fix(metadata): append php file resource extractor (#7193)
• de9e7f576 feat(hal): allow to output null links for hal+json
• f010fd456 fix(serializer): deprecate SerializerAwareProviderInterface and SerializableProvider (#7348)
• f3d4afe03 fix(symfony): validator type-info

Bug fixes

• 2c5c9e451 fix(openapi): no content schema (#7384)
• 4f0864c1a fix(symfony): remove deprecation about jsonopenapi
• 5a8d4d282 fix(jsonld): various json streamer fixes (#7374)
• 62a9cc821 fix(state)!: parameter default value overrides falsy value
• 6db55be8c fix(metadata): wrong method name in resource mutator
• b80ab9a59 fix(httpcache): collection iri invalidation for mapped entities (#7353)
• c9692b509 fix(state): transform uri variable using ReadLinkParameterProvider (#7375)
• ce4e97fe8 fix(hal): rename package

Features

• b948209b9 feat(laravel): add make:filter command to generate API Platform filters (#7364)
• ebd85f502 feat(symfony): add make:filter command to generate API Platform filters (#7355)

Also includes patches from v4.1.24 and v4.2.0-alpha fixes

Bug fixes

• f010fd456 fix(serializer): deprecate SerializerAwareProviderInterface and SerializableProvider (#7348)
• 02a764950 fix(symfony): explicitly set the target class when mapping entities to resources (#7311)
• 04414e4fc fix(serializer): improve #7270 by reducing inconsistencies (#7346)
• 2c06a22e2 fix(validation): moving dependency from require-dev to require (#7296)
• 2cde06246 fix(openapi): output partial query parameter to OpenAPI when pagination_client_enabled is true (#7295)
• 2e6911c35 fix(openapi): sync typehints between properties and getter/canner for alllowReserved and allowEmptyValue (#7322)
• 385953a92 fix(jsonapi): handle type error when handling validation errors (#7330)
• 4f717c1e1 fix(openapi): allow null on allowReserved and allowEmptyValue properties (#7315)
• 6bc112193 fix(metadata): do not fail if phpstan/phpdoc-parser is missing (#7279)
• 871e5d3e1 fix(symfony): restore graphql_playground option (#7274)
• c41a0bca4 fix(jsonld): child class @src/JsonLd/JsonStreamer/ValueTransformer/TypeValueTransformer.php shortName (#7312)
• c46c57918 fix(doctrine): do not consider empty string as a current date (#7291)
• d06b1a0a0 fix(state): object-mapper reuse related entity (#7300)
• d1073bc67 fix(laravel): read property type before serialization (#7332)
• d1abfc0fa fix(openapi): nullable default values in operation openapi definition (#7321)
• d1e6772e3 fix(validation): property path on deepObject style (#7179)
• d35e46b14 fix(hydra): "property" may not be defined (#7293)
• e7502b65a fix(serializer): nested denormalization when allow_extra_attributes=false (#7270)
• ecb3f6cef fix(httpcache): only map entites that are persisted
• f3a54a239 fix: json formatted resource should not get xml errors #7287 (#7297)
• 0411cd9cc fix(jsonld): duplicate error fields when prefix is enabled (#7074)
• 073c0e282 !fix(openapi): allowReserved, allowEmtpyValue defaults to null
• 76c80a67c fix: command name deprecation
• 79edced67 !fix(json-schema): share invariable sub-schemas
• cff61eab8 fix(metadata): append php file resource extractor (#7193)
• f3d4afe03 fix(symfony): validator type-info

Features

• 092a3a4f8 feat(mongodb): partial paginator (#7352)
• 26d2394b7 feat(doctrine): new search filters (#7121)
• 1806cfae6 feat(symfony): stop watch system provider/processor
• 2d501b315 feat(laravel): support composite identifiers within Link (#7342)
• 6491bfc7a feat(doctrine): improve http cache invalidation using the info from the mapping (#7319)
• 77b292bfe feat(metadata): class is now class-string (#7307)
• 9e9cf648d feat(metadata): introduce metadata mutators for resource & operations (#7213)
• a8b82172a feat(doctrine): support integer-backed enums in BackedEnumFilter (#7129)
• b52187d91 feat(serializer): handle defaultType for DiscriminatorMap (#7284)
• de9e7f576 feat(hal): allow to output null links for hal+json
• f25d7d1a6 feat(metadata): add setter for description (#7329)
• 1290ebb88 feat(serializer): ability to throw access denied exception when denormalizing secured properties (#7221)
• 1862d03b7 feat(symfony): add error classes options to open api config (#7143)
• 202c60fcb feat(openapi): license identifier (#7141)
• 24a1cf5a2 feat(elasticsearch): add support for v9 (#7180)
• 2a13100f4 feat(serializer): (un)set object-to-populate through denormalization context (#7124)
• 3ab0b8d0f feat(metadata): use PHP file as resource format
• 4abf17b3c feat(symfony): CSS Color Schema Restriction for Property Validation (#7215)
• 4b1b94cad feat(symfony): autoconfigure classes using #[ApiResource] attribute (#6943)
• bf09616cf feat(httpcache): add more cache directives to AddHeadersProcessor (#7008)

JSON Streamer:

• ceeaf51e8 feat: json streamer (#7225)

Object Mapper:

• a42034dc3 feat(symfony): object mapper with state options (#6801)

TypeInfo:

• 7c796de0d feat(serializer): type info (#7104)
• 350d6d707 feat(hydra): use TypeInfo's Type (#7099)
• 55461a83c feat: Use Type of TypeInfo instead of PropertyInfo (#6979)
• 827e1f725 feat(elasticsearch): use TypeInfo type (#7098)
• a1952e304 feat(openapi): use TypeInfo's Type (#7096)
• dd3356824 feat(laravel): use TypeInfo's Type (#7101)
• 143d512ef feat(jsonapi): use TypeInfo's Type (#7100)
• 1d579d095 feat(hal): use TypeInfo type (#7097)

Bug fixes

• 02a764950 fix(symfony): explicitly set the target class when mapping entities to resources (#7311)
• 04414e4fc fix(serializer): improve #7270 by reducing inconsistencies (#7346)
• 2c06a22e2 fix(validation): moving dependency from require-dev to require (#7296)
• 2cde06246 fix(openapi): output partial query parameter to OpenAPI when pagination_client_enabled is true (#7295)
• 2e6911c35 fix(openapi): sync typehints between properties and getter/canner for alllowReserved and allowEmptyValue (#7322)
• 385953a92 fix(jsonapi): handle type error when handling validation errors (#7330)
• 4f717c1e1 fix(openapi): allow null on allowReserved and allowEmptyValue properties (#7315)
• 6bc112193 fix(metadata): do not fail if phpstan/phpdoc-parser is missing (#7279)
• 871e5d3e1 fix(symfony): restore graphql_playground option (#7274)
• c41a0bca4 fix(jsonld): child class @src/JsonLd/JsonStreamer/ValueTransformer/TypeValueTransformer.php shortName (#7312)
• c46c57918 fix(doctrine): do not consider empty string as a current date (#7291)
• d06b1a0a0 fix(state): object-mapper reuse related entity (#7300)
• d1073bc67 fix(laravel): read property type before serialization (#7332)
• d1abfc0fa fix(openapi): nullable default values in operation openapi definition (#7321)
• d1e6772e3 fix(validation): property path on deepObject style (#7179)
• d35e46b14 fix(hydra): "property" may not be defined (#7293)
• e7502b65a fix(serializer): nested denormalization when allow_extra_attributes=false (#7270)
• ecb3f6cef fix(httpcache): only map entites that are persisted
• f3a54a239 fix: json formatted resource should not get xml errors #7287 (#7297)
• 0411cd9cc fix(jsonld): duplicate error fields when prefix is enabled (#7074)
• 073c0e282 !fix(openapi): allowReserved, allowEmtpyValue defaults to null
• 76c80a67c fix: command name deprecation
• 79edced67 !fix(json-schema): share invariable sub-schemas
• cff61eab8 fix(metadata): append php file resource extractor (#7193)
• f3d4afe03 fix(symfony): validator type-info

Features

• 1806cfae6 feat(symfony): stop watch system provider/processor
• 2d501b315 feat(laravel): support composite identifiers within Link (#7342)
• 6491bfc7a feat(doctrine): improve http cache invalidation using the info from the mapping (#7319)
• 77b292bfe feat(metadata): class is now class-string (#7307)
• 9e9cf648d feat(metadata): introduce metadata mutators for resource & operations (#7213)
• a8b82172a feat(doctrine): support integer-backed enums in BackedEnumFilter (#7129)
• b52187d91 feat(serializer): handle defaultType for DiscriminatorMap (#7284)
• de9e7f576 feat(hal): allow to output null links for hal+json
• f25d7d1a6 feat(metadata): add setter for description (#7329)
• 1290ebb88 feat(serializer): ability to throw access denied exception when denormalizing secured properties (#7221)
• 1862d03b7 feat(symfony): add error classes options to open api config (#7143)
• 202c60fcb feat(openapi): license identifier (#7141)
• 24a1cf5a2 feat(elasticsearch): add support for v9 (#7180)
• 2a13100f4 feat(serializer): (un)set object-to-populate through denormalization context (#7124)
• 3ab0b8d0f feat(metadata): use PHP file as resource format
• 4abf17b3c feat(symfony): CSS Color Schema Restriction for Property Validation (#7215)
• 4b1b94cad feat(symfony): autoconfigure classes using #[ApiResource] attribute (#6943)
• bf09616cf feat(httpcache): add more cache directives to AddHeadersProcessor (#7008)

JSON Streamer:

• ceeaf51e8 feat: json streamer (#7225)

Object Mapper:

• a42034dc3 feat(symfony): object mapper with state options (#6801)

TypeInfo:

• 7c796de0d feat(serializer): type info (#7104)
• 350d6d707 feat(hydra): use TypeInfo's Type (#7099)
• 55461a83c feat: Use Type of TypeInfo instead of PropertyInfo (#6979)
• 827e1f725 feat(elasticsearch): use TypeInfo type (#7098)
• a1952e304 feat(openapi): use TypeInfo's Type (#7096)
• dd3356824 feat(laravel): use TypeInfo's Type (#7101)
• 143d512ef feat(jsonapi): use TypeInfo's Type (#7100)
• 1d579d095 feat(hal): use TypeInfo type (#7097)

Introducing new Symfony components!

Features

• 1290ebb88 feat(serializer): ability to throw access denied exception when denormalizing secured properties (#7221)
• 1862d03b7 feat(symfony): add error classes options to open api config (#7143)
• 202c60fcb feat(openapi): license identifier (#7141)
• 24a1cf5a2 feat(elasticsearch): add support for v9 (#7180)
• 2a13100f4 feat(serializer): (un)set object-to-populate through denormalization context (#7124)
• 3ab0b8d0f feat(metadata): use PHP file as resource format
• 4abf17b3c feat(symfony): CSS Color Schema Restriction for Property Validation (#7215)
• 4b1b94cad feat(symfony): autoconfigure classes using #[ApiResource] attribute (#6943)
• bf09616cf feat(httpcache): add more cache directives to AddHeadersProcessor (#7008)

Object Mapper:

• a42034dc3 feat(symfony): object mapper with state options (#6801)

TypeInfo:

• 7c796de0d feat(serializer): type info (#7104)
• 350d6d707 feat(hydra): use TypeInfo's Type (#7099)
• 55461a83c feat: Use Type of TypeInfo instead of PropertyInfo (#6979)
• 827e1f725 feat(elasticsearch): use TypeInfo type (#7098)
• a1952e304 feat(openapi): use TypeInfo's Type (#7096)
• dd3356824 feat(laravel): use TypeInfo's Type (#7101)
• 143d512ef feat(jsonapi): use TypeInfo's Type (#7100)
• 1d579d095 feat(hal): use TypeInfo type (#7097)

Bug fixes

• 0411cd9cc fix(jsonld): duplicate error fields when prefix is enabled (#7074)
• 073c0e282 !fix(openapi): allowReserved, allowEmtpyValue defaults to null
• 76c80a67c fix: command name deprecation
• 79edced67 !fix(json-schema): share invariable sub-schemas
• cff61eab8 fix(metadata): append php file resource extractor (#7193)
• f3d4afe03 fix(symfony): validator type-info

Bug fixes

• 9f5d0e020 fix(serializer): gate cache_key in JsonApi and Hal with isCacheKeySafe
• 3812a3617 fix(serializer): adapt tests for 4.1 (createMock for HAL, drop name converter)
• 8f32ad0e3 fix(serializer): bump min serializer dep and fix phpstan probe typing
• 89ca6f279 fix(state): _api_operation_nme to _api_operation_name in ErrorProvider (#7637)

Bug fixes

• dfe42b385 fix(symfony): skip argument resolver when context is not api platform

Bug fixes

• 3df65aa86 fix(symfony): allow disabling PHPStan PhpDocParser (#7507)
• 7c76fb8ea fix(jsonld): read identifier with itemUriTemplate (#7517)

Bug fixes

• 4fa6d3fa2 fix(laravel): groups with input/output
• 99718d954 fix(serializer): resilient denormalizeRelation capability (#7474)
• a26c35840 fix(doctrine): properly set properties according to interface (#7487)
• a2867e986 fix(laravel): serializer attributes on Eloquent methods (#7416)
• ddf4c0b5e fix(graphql): stateOptions to get filter class (#7485)
• fafbe5c7b fix(validator): custom message was not translated (#7424)

Bug fixes

• 54352d853 fix(jsonld): hydra context w3.org updates (#7410)
• 85f198a56 fix(laravel): filter should query correct property
• 91b17f1f3 fix(laravel): correct the example of swagger_ui.apiKeys config (#7392)

Bug fixes

• 07112a27d fix(laravel): remove duplication code exception
• 4abec444e fix(metadata): compute isWritable during updates (#7383)
• 7c117d9f7 fix: phpdoc for HttpOperation paginationViaCursor parameter (#7379)

Features

Laravel compatibility with api-platform/http-cache:

• fa2bc95ff fix(laravel): http cache compatibility (#7380)

Bug fixes

• 254cbdd00 fix(symfony): only set name_converter for the default serializer (#6101) (#7365)
• dcbc529a0 fix: pagination via cursor on ApiResource operations (#7368)

Bug fixes

• 11bba62c2 fix(laravel): serialization issue with camelCase relation (#7356)

Bug fixes

• 04414e4fc fix(serializer): improve #7270 by reducing inconsistencies (#7346)
• 2e6911c35 fix(openapi): sync typehints between properties and getter/canner for alllowReserved and allowEmptyValue (#7322)
• 385953a92 fix(jsonapi): handle type error when handling validation errors (#7330)
• 4f717c1e1 fix(openapi): allow null on allowReserved and allowEmptyValue properties (#7315)
• c46c57918 fix(doctrine): do not consider empty string as a current date (#7291)
• d1073bc67 fix(laravel): read property type before serialization (#7332)
• d1abfc0fa fix(openapi): nullable default values in operation openapi definition (#7321)
• e7502b65a fix(serializer): nested denormalization when allow_extra_attributes=false (#7270)

Features

• 2d501b315 feat(laravel): support composite identifiers within Link (#7342)

Bug fixes

• c41a0bca4 fix(jsonld): child class @type shortName (#7312)
• d26088ba1 chore: allow doctrine-persistence:^4.0 (#7309)

Bug fixes

• 2c06a22e2 fix(validation): moving dependency from require-dev to require (#7296)
• 2cde06246 fix(openapi): output partial query parameter to OpenAPI when pagination_client_enabled is true (#7295)
• 6bc112193 fix(metadata): do not fail if phpstan/phpdoc-parser is missing (#7279)
• 871e5d3e1 fix(symfony): restore graphql_playground option (#7274)
• d1e6772e3 fix(validation): property path on deepObject style (#7179)
• d35e46b14 fix(hydra): "property" may not be defined (#7293)
• f3a54a239 fix: json formatted resource should not get xml errors #7287 (#7297)

Bug fixes

• 0e712d969 fix(symfony): catch InvalidUriVariableException in IriConverter (#7271)
• 221e5d97f fix(openapi): command options mode (InputOption::VALUE_REQUIRED) (#7266)
• 3ed6f30f5 fix(symfony): fix resolving groups in ValidationGroupsExtractorTrait when GroupSequence (#7272)
• 6e4e46bfe fix(json-schema): Rebuild sub-schema definition without @id property when genId is false (#7162) (#7251)
• 803165228 fix(symfony): missing GroupSequence type for validation groups
• 85e18a2d6 fix(metadata): support stateOptions in YAML and XML for Doctrine ORM/ODM (#7217)
• 88e0073bf fix(validator): error xml format output
• bf271d139 fix(validator): parameter validation list<string>|string (#7245)
• d3e73f09a fix(metadata): read every OpenApiOperation attributes in Xml instead of only "deprecated" (#7189)
• e40bb19a6 fix(laravel): decorate error handler (#7247)
• f0604a07e fix: getcontainer return type (#7230)
• f46c0a3f4 fix(jsonld): reset gen_id configuration (#7264)
• f82464431 fix(state): depend only on translation contracts (#7262)
• fa37c1eba fix(state): error xml format output (#7273)

Experimental Features

• 8885000db feat(state): cast parameter values to validate with the Type constraint (#7240)

Bug fixes

• 34a0d54b1 fix(jsonld): genId false should work with embeded resources (#7219)
• c025b8f9f fix(openapi): correct example usage for 3.0 (#7218)
• cdda4146b fix(laravel): Allow LinksHandler to handle polymorphic relationships (#7231)
• dba97370f fix(metadata): boolean type detection from parameter's schema (#7223)

Bug fixes

• 4a99a5f6e fix(laravel): persist HasMany and MorphMany relationships (#7208)
• 9bfa5fef0 fix(metadata): call dynamic validation groups #7184 (#7184)
• b2131645d fix(laravel): route where uses requirements (#7199)
• b2b5f99c6 refactor(state): merge parameter and link security (#7200)

Notes:

Two providers are now available on parameters (query parameters, header and uri variables Link):

• ReadLinkParameterProvider previously used for link security (renamed from Symfony\Security\State\LinkedReadProvider)
• IriConverterParameterProvider this allows you to read a resource from an IRI usefull for filters (eg ?author=/authors/1)

Previous tests on link security were left untouched we removed the experimental class Symfony\Security\State\LinkAccessCheckerProvider as well as the LinkedReadProvider as they're not used anymore.

There was an issue with the subtree split as we attempted to test lower dependencies on the subtree split, some components where wrongly tagged.

The proper fix is at: https://github.com/api-platform/core/pull/7196

Bug fixes

• 4bdfd6063 fix(symfony, laravel) skip webhooks when generates routing (#7175)
• 582076cb6 fix(openapi): duplicate get path for webhooks (#7174)
• 84b967930 fix(laravel): persist morph relations (#7170)
• d51cddba2 fix(laravel): index on non-primary key (#7183)
• fdb485dd2 fix(openapi): example and default with nullable value not being shown

Features

• 79d08db6a feat(elasticsearch): add support for v9 (#7180)

Bug fixes

• b14a463a9 fix(laravel): register error handler without graphql

Bug fixes

• 329acf21e fix(metadata): infer parameter string type from schema (#7161)
• 5459ba375 fix(metadata): parameter cast to array flag (#7160)
• fe73002bf fix(laravel): duplicated property names
• b0390080e fix(laravel): name convert validation property path
• 730d17a30 fix(laravel): validate the model instead of body
• 4d66f5ef3 fix(laravel): persist embeded relations with groups
• 39123942a fix(laravel): register error handler without graphql
• fd010ea1b fix(openapi): nullable externalDocs return type
• 470c2e8bd fix(httpcache): iri cache tag for collection operation with path parameter
• 9c0dbb653 fix(state): do not expose FQCN in DeserializeProvider on PartialDenormalizationException (#7158)
• f78986000 fix(serializer): exception message to not expose resource FQCN (#7156)

Features

• 767fa926b feat(laravel): add name_converter option

Bug fixes

• 4dd0cdfc4 fix(doctrine): support integer-backed enums in BackedEnumFilter (#7127)
• 70a922573 fix: error formats (#7148)
• 723d041c4 fix(metadata): xml PHPize HTTP cache headers (#7140)
• d3d0ca21b fix(serializer): invalid uri variable 400 response (#7135)

Bug fixes

• 0cd9b9f70 fix: backport handling of union/intersection type in item normalizer (#7106)
• 0fc0904b9 fix(metadata): correct class to exclude defaults (#7088)
• 5145a8383 fix: filtering not using strategy set in attribute when strategy not set per property (#7136)
• 613bb5b75 fix(doctrine): filters schema for dates and numbers (#7131)
• ed1ef2594 fix(state): specify :property parameter properties (#7110)
• f55606b01 fix(serializer): throw NotNormalizableValueException when resource not found or invalid IRI on denormalization
• 3faf5d4b4 fix(doctrine): order filter instance service
• 0ff950f37 fix: type info deprecations to baseline
• d93d580a1 fix: command name deprecation

Bug fixes

• 40c09d1c0 fix(metadata): yaml link security (#7066)
• 545eb69b8 fix(symfony): internal resources should not inherit global defaults (#7073)
• 615bdd6b1 fix(hydra): use correctly enable_docs (#7062)
• 694681f4b fix(symfony): do not ignore Test files on symfony (#7077)
• 6f15be5c7 fix(laravel): eloquent BelongsTo linking (#7075)
• dddd3eee4 fix(metadata): parameter provider within filter (#7081)
• dfca9bf60 Revert "fix(jsonld): duplicate error fields when prefix is enabled (#7021)" (#7074)
• d696a8e42 fix(metadata): use template typehint in parameters (#7078)

Bug fixes

• 44e560839 fix(laravel): undefined variable app

Bug fixes

• 60747cc8c fix(graphql): access to unauthorized resource using node Relay CVE-2025-31481
• 7af65aad1 fix(graphql): property security might be cached w/ different objects CVE-2025-31485

Bug fixes

• eaf007536 fix(state): support filter interface on serializer filter parameter provider (#7047)
• b0fa2291e fix(laravel): error handler only on api routes (#7049)
• 1eb9da13a fix(laravel): missing filters (#7056)
• a46a76889 fix(symfony): serialization of closure inside the profiler (#7054)
• c1b50e2cb fix(doctrine): joinColumn might be an array (#7060)
• f4c426d71 Revert "fix(doctrine): throw an exception when a filter is not found in a par…" (#7046)

Bug fixes

• 8a2265041 fix(laravel): defer "filters" dependent services (#7045)

Bug fixes

• 42f25cf04 fix: react@18 for UMD + add Laravel support in update-js.sh (#7028)
• 77ffc380b fix(laravel): do not require tests while autoconfiguring (#7024)
• 935b9b55d fix(laravel): json api default parameters (#7027)
• a2824ff4b fix(laravel): defer autoconfiguration (#7040)

Bug fixes

• 1e0bc9dc8 fix(laravel): query extensions with item operations (#7001)
• 1e7076c65 fix(laravel): register ErrorProvider (#7018)
• 2771363b0 fix(validation): deprecate string message for ValidationException constructor (#7005)
• 500062da2 fix(symfony): add a alwaysBootKernel property for BC layer (#7007)
• 8697d6630 fix(openapi): boolean "true" value in HttpOperation::openapi (#7003)
• b1e0c889c fix(doctrine): correct the use statement for ManagerRegistry (#7004)
• fcbd804b2 fix(jsonld): duplicate error fields when prefix is enabled (#7021)

Features

• 129853668 feat(laravel): stateOptions modelClass for eloquent (#7020)
• 42991b941 feat(laravel): openapi export command (#7016)
• dd1b89f9b feat(laravel): auto configure our tagged interfaces (#7014)

Also contains v4.0.20 changes.

Bug fixes

• da37ca91c fix(laravel): default to file cache instead of cache.default (#6955)
• e041d721e fix: errors retrieval and documentation (#6952)
• e6130cbcc fix: missing filters on swagger ui entrypoint (#6950)
• 01fd74268 fix(laravel): restore accidentally removed BooleanFilter
• db40a63e7 fix(hydra): rdfs:label should not duplicate title (#6748)
• deb2ed265 fix(laravel): fix use laravel fillable for writable props (#6898)
• 67fbe51c5 fix: reintroduce the show_webby parameter in Laravel config (#6741)

Features

• cb5ede1c5 feat: add checkMode parameter to control json schema validation (#6974)
• 771d9401c feat(elasticsearch): re-introduce v7 support (#6827)
• b5372ddee feat(openapi): filter x-apiplatform-tags to produce different openapi specifications (#6945)
• 2e2debb94 feat(mongodb): Replace usage of deprecated method AggregationBuilder::execute() (#6933)
• 4bdf042e5 feat(mongodb): Add pagination metadata to the aggregation results (#6912)
• b968ccd50 feat(openapi): document error outputs using json-schemas (#6923)
• c97db6bb2 feat: swagger ui persist authorization option (#6877)
• 00787f32d feat(laravel): automatically register policies (#6623)
• 12c42096b feat(metadata): ability to hide an hydra class/operation (#6871)
• 57f15cf4f feat(state): strict query parameters (#6399)
• bd0e92936 feat(openapi): HTTP Authentication Support for Swagger UI (#6665)
• be98f4e01 feat(graphql): allow to configure max query depth and max query complexity (#6880)
• c78ed0b78 feat(laravel): boolean filter (#6806)
• d0a442786 feat(doctrine): enhance getLinksHandler with method validation and typo suggestions (#6874)
• f67f6f1ac feat(doctrine): doctrine filters like laravel eloquent filters (#6775)

Bug fixes

• da37ca91c fix(laravel): default to file cache instead of cache.default (#6955)
• e041d721e fix: errors retrieval and documentation (#6952)
• e6130cbcc fix: missing filters on swagger ui entrypoint (#6950)

Features

• 771d9401c feat(elasticsearch): re-introduce v7 support (#6827)
• b5372ddee feat(openapi): filter x-apiplatform-tags to produce different openapi specifications (#6945)

Features

• 2e2debb94 feat(mongodb): Replace usage of deprecated method AggregationBuilder::execute() (#6933)
• 4bdf042e5 feat(mongodb): Add pagination metadata to the aggregation results (#6912)
• b968ccd50 feat(openapi): document error outputs using json-schemas (#6923)

Bug fixes

• 01fd74268 fix(laravel): restore accidentally removed BooleanFilter
• db40a63e7 fix(hydra): rdfs:label should not duplicate title (#6748)
• deb2ed265 fix(laravel): fix use laravel fillable for writable props (#6898)

Features

• c97db6bb2 feat: swagger ui persist authorization option (#6877)

Notes

The hydra patch changes default hydra:title and uses the resource shortname. Previously the hydra:title information was duplicating the hydra:description. The rdfs:label got removed from the hydra:Class as it was used instead of the hydra:title. On hydra:property rdfs:label got renamed to label as the rdfs namespace is available in the context. The ApiPlatform\Metadata\ErrorResource and the ConstraintViolation (ValidationException class) are now generated directly from your PHP classes, only our ConstraintViolationList is hard-written and documents the ConstraintViolation::violation property. Therefore, your own error resources are also documented. On top of that, we now set the rdfs:subClassOf to hydra:Error. #[ApiProperty(hydra: false)] allows you to skip a documented hydra:supportedProperty on a class. On write operations, we added the expectsHeader field.

Bug fixes

• 67fbe51c5 fix: reintroduce the show_webby parameter in Laravel config (#6741)

Features

• 00787f32d feat(laravel): automatically register policies (#6623)
• 12c42096b feat(metadata): ability to hide an hydra class/operation (#6871)
• 57f15cf4f feat(state): strict query parameters (#6399)
• bd0e92936 feat(openapi): HTTP Authentication Support for Swagger UI (#6665)
• be98f4e01 feat(graphql): allow to configure max query depth and max query complexity (#6880)
• c78ed0b78 feat(laravel): boolean filter (#6806)
• d0a442786 feat(doctrine): enhance getLinksHandler with method validation and typo suggestions (#6874)
• f67f6f1ac feat(doctrine): doctrine filters like laravel eloquent filters (#6775)

Bug fixes

• 60747cc8c fix(graphql): access to unauthorized resource using node Relay CVE-2025-31481
• 7af65aad1 fix(graphql): property security might be cached w/ different objects CVE-2025-31485
• f4c426d71 Revert "fix(doctrine): throw an exception when a filter is not found in a par…" (#7046)

Bug fixes

• 7cb5a6db8 fix: allow parameter provider as object (#7032)
• bb83e9a03 fix(symfony): allow to merge array with string in global defaults (#7037)
• da2e86809 fix: header parameter should be case insensitive (#7031)

Features

Bug fixes

• 284937039 fix(doctrine): mapping ArrayAccess deprecation (#6982)
• a434173b8 fix(doctrine): Add a proper exception when a doctrine manager could not be found for a resource class (#6995)

Features

Bug fixes

• 1dfefda5e fix(laravel): add middleware granularity (#6962)

Compatibility with Laravel 12.

Bug fixes

• 7007dcca8 fix(laravel): duplicate middleware in routes
• a16147ab7 fix(laravel): handle route prefix (#6978)
• d2e1963c5 fix(symfony): detach objects to prevent loop when using Doctrine middleware and Mercure (#6936) (#6965)

Features

Bug fixes

• 5124d8c57 fix(laravel): Prevent overwriting existing routes on the router (#6941)
• 5c7e0d2c0 fix(symfony): error wrongly inherit normalization context (#6939)
• af35d34d0 fix(laravel): mitigate property metadata read for Error (#6951)
• d5b48b1cd fix(laravel): SwaggerUI custom CSS (#6937)
• da796b979 fix(metadata): allow serializer attribute object in ApiProperty::$serialize (#6946)
• de2d298e3 fix: ensure template files have a tpl file extension (#6826) (#6829)
• b6a67a197 perf: various optimizations for Laravel/Symfony (#6954)

To save some time during cache warmup we recommend to define uri variables such as: uriVariables: ['id']. More details at #6954.

Features

Bug fixes

• dc4fc84ba fix(graphql): securityAfterResolver not called

Features

Bug fixes

• 36cee399c fix(state): skip Content-Location header for GET requests (#6901)
• dba9de197 fix(symfony): fix property restrictions for root resource with dynamic validation groups (#6908)

Features

• 421d97ecf feat(laravel): add support for backed enum normalizers (#6911)

Also contains v3.4.15 changes.

Bug fixes

• 97cdb6b3f fix(state): remove ProcessorInterface laravel specific type
• b12a0d005 fix(graphql): register types for parameter args (#6895)

Also contains v3.4.14 changes.

Bug fixes

• 3a694624b fix(laravel): eloquent BelongsToMany relation (#6862)
• c8db7aef0 fix(laravel): jsonapi query parameters (page, sort, fields and include) (#6876)
• f2c998158 fix(jsonld): anonymous context hydra_prefix value (#6873)

Also contains v3.4.10 changes.