sonata-project/user-bundle
Symfony SonataUserBundle
5.19.0
5.8M downloads/mo
#4136 most downloaded on Packagist
sonata-project/SonataUserBundle
What this package is like to depend on
Last release 8 months ago
18 Dec 2025
Release timing varies
gaps range from 3 weeks to 8 months
Most releases are documented
notes for 64 of 74 stable releases
Nothing withdrawn
no release was ever pulled
14 years old
76 releases · first in 2012
4 releases in the last 12 months
see the full history below
Release timeline
76 releases · Sep 2012 to Dec 2025
2013
2015
2017
2019
2021
2023
2025
Releases
latest 60 of 76-
5.19.018 Dec 2025Release notes
Open source →Added
Changed
- [#1733] Makes references to
service('sonata.admin.pool')andservice('sonata.admin.configuration')optional. (@Hanmac) - [#1733] Makes references to
service('sonata.user.admin_roles_builder')andservice('sonata.user.security_roles_builder')optional. (@Hanmac)
Removed
Release notes
Open source →Added
Changed
- [#1733] Makes references to
service('sonata.admin.pool')andservice('sonata.admin.configuration')optional. (@Hanmac) - [#1733] Makes references to
service('sonata.user.admin_roles_builder')andservice('sonata.user.security_roles_builder')optional. (@Hanmac)
Removed
- [#1733] Makes references to
-
5.18.010 Nov 2025 -
5.17.018 Oct 2025Release notes
Open source →Added
- [#1723] Added
admin_resetting.phprouting config (@dmaicher) - [#1723] Added
admin_security.phprouting config (@dmaicher)
Deprecated
- [#1723] Added
-
5.16.013 Sep 2025 -
5.15.016 May 2025Release notes
Open source →Deprecated
- [#1710] Extending GlobalVariablesCompilerPass (@VincentLanglet)
Release notes
Open source →Deprecated
- [#1710] Extending GlobalVariablesCompilerPass (@VincentLanglet)
-
5.14.018 Oct 2024 -
5.13.026 Aug 2024Release notes
Open source →Changed
Fixed
- [#1689] Symfony 7.1 deprecation about
Symfony\Component\HttpKernel\DependencyInjection\Extensionusage (@VincentLanglet)
Removed
- [#1695] After requesting new passwort the username isn't passed to CheckEmailAction anymode (@VincentLanglet)
Release notes
Open source →Changed
Fixed
- [#1689] Symfony 7.1 deprecation about
Symfony\Component\HttpKernel\DependencyInjection\Extensionusage (@VincentLanglet)
Removed
- [#1695] After requesting new passwort the username isn't passed to CheckEmailAction anymode (@VincentLanglet)
- [#1689] Symfony 7.1 deprecation about
-
5.12.018 Apr 2024Release notes
Open source →Release notes
Open source → -
5.11.008 Mar 2024 -
5.10.022 Jul 2023 -
5.9.003 Jun 2023 -
5.8.013 May 2023Release notes
Open source →Added
- [#1643] Support for
sonata-project/form-extensions2.0 (@jordisala1991)
- [#1643] Support for
-
5.7.025 Apr 2023Release notes
Open source →Removed
- [#1632] Support for Symfony 4.4 (@jordisala1991)
- [#1632] Support for Twig 2 (@jordisala1991)
-
5.6.312 Apr 2023Release notes
Open source →Fixed
- [#1628] ORM schema mapping does not give errors about validation root (@jordisala1991)
- [#1626] Validation for unique
usernameandemailis applied tousernameCanonicalandemailCanonicalfields (@jordisala1991) - [#1626] Validation for MongoDB persistence (@jordisala1991)
- [#1627] Avoid deprecation on the check for is impersonator granted on Symfony >= 5.4 (@jordisala1991)
-
5.6.203 Apr 2023Release notes
Open source →Fixed
- [#1624] XML validation of MongoDB ODM mapping. (@landure)
- [#1620] Generate the profile link only if the logged user has access to it (edit or show permissions) (@jordisala1991)
- [#1621] Ensure password is updated when it is the only field edited (@jordisala1991)
- [#1621] Register doctrine event subscribers both for ORM and ODM (@jordisala1991)
-
5.6.130 Mar 2023Release notes
Open source →Fixed
- [#1615] Fix xml validation of MongoDB ODM mapping. (@jordisala1991)
- [#1615] Avoid deprecation for enabled boolean field on MongoDB ODM. (@jordisala1991)
- [#1616] Fix always show edit button on user admin list page. (@jordisala1991)
-
5.6.022 Mar 2023 -
5.5.006 Feb 2023Release notes
Open source →Changed
- [#1587] RolesBuilder: add attributes "admin_code", "group_label", "group_code". (@piddubnij)
Fixed
- [#1587] Fix RolesBuilder attribute "admin_label" set admin translation domain (@piddubnij)
- [#1587] Fix roles matrix attribute "admin_label" can repeat not even in different groups but also in the same group (@piddubnij)
- [#1577] Sonata-admin 4.20 deprecation (@VincentLanglet)
-
5.4.009 Oct 2022 -
5.3.313 Aug 2022Release notes
Open source →Added
- [#1560] Add support for
sonata-project/doctrine-extensions^2.0. (@jordisala1991) - [#1560] Add support for
sonata-project/twig-extensions^2.0. (@jordisala1991)
Fixed
- [#1560] Add support for
-
5.3.228 Jul 2022Release notes
Open source →Fixed
- [#1556]
User::getUsernamereturn the real value in database (and can return null). (@VincentLanglet)
- [#1556]
-
5.3.120 Jul 2022Release notes
Open source →Fixed
- [#1553] Fix user edit page to check for a form attribute before rendering the role matrix. (@wluijt-endertech)
-
5.3.013 Jul 2022Release notes
Open source → -
5.2.025 Jun 2022Release notes
Open source →Added
- [#1543] Add compatibility with
doctrine/persistence^3.0. (@jordisala1991)
Removed
- [#1543] Avoid deprecations with lazy commands on Symfony 6.1. (@jordisala1991)
- [#1541] Support of Symfony 5.3 (@franmomu)
- [#1543] Add compatibility with
-
5.1.029 Apr 2022 -
5.0.013 Mar 2022Release notes
Open source →Fixed
- [#1517] Added validation translation to fix untranslated content. (@jordisala1991)
- [#1515] Fixed remember me checkbox padding on login page. (@jordisala1991)
-
5.0.0-rc.101 Mar 2022 pre-releaseNothing published for this version
-
5.0.0-alpha-105 Feb 2022 pre-releaseRelease notes
Open source →Added
- [#1489] Added
ResetPasswordRequestFormTypeform type. (@jordisala1991) - [#1484] Added
sonata:user:createcommand from FOSUserBundle (@jordisala1991) - [#1484] Added
sonata:user:promotecommand from FOSUserBundle (@jordisala1991) - [#1484] Added
sonata:user:demotecommand from FOSUserBundle (@jordisala1991) - [#1484] Added
sonata:user:change-passwordcommand from FOSUserBundle (@jordisala1991) - [#1484] Added
sonata:user:activatecommand from FOSUserBundle (@jordisala1991) - [#1484] Added
sonata:user:deactivatecommand from FOSUserBundle (@jordisala1991) - [#1479] Added
EditableRolesBuilderInterface. (@jordisala1991) - [#1454] Added support for Symfony 5. (@jordisala1991)
- [#1454] Added support for Symfony 6. (@jordisala1991)
- [#1444] Added support for Sonata 4. (@jordisala1991)
Changed
- [#1479] Changed
__construct()ofEditableRolesBuilderto provideTranslatorInterface(@jordisala1991)
Fixed
- [#1485] Fixed icons usage for Font Awesome 5. (@jordisala1991)
- [#1481] Improve bundle configuration for default and required parameters. (@jordisala1991)
Removed
- [#1490] Removed usage of container parameters for most of the bundle configuration. (@jordisala1991)
- [#1468] Removed user groups feature. (@jordisala1991)
- [#1463] Removed support for PHP 7.3 (@jordisala1991)
- [#1462] Removed social and profile fields from User. (@jordisala1991)
- [#1449] Removed FOSUserBundle dependency. (@jordisala1991)
- [#1489] Added
-
4.15.008 Jan 2022Release notes
Open source →Deprecated
- [#1471] Deprecated extending most of the classes of this bundle. (@jordisala1991)
Fixed
- [#1476]
User::__serialize()andUser::__unserialize()methods (@VincentLanglet)
-
4.14.028 Dec 2021Release notes
Open source →Deprecated
- [#1446] Deprecated the integration with
sonata-project/GoogleAuthenticator(@jordisala1991) - [#1439] Deprecated ReST API with FOSRest, Nelmio Api Docs and JMS Serializer. (@jordisala1991)
Fixed
- [#1430] Taking into account sonata_admin.options.logo_content configuration value (@AntoineRoue)
- [#1446] Deprecated the integration with
-
4.13.004 Nov 2021 -
4.12.008 Sep 2021Release notes
Open source →Added
- [#1396] Added support for PHP 8.0 (@jordisala1991)
- [#1396] Added support for Twig 3 (@jordisala1991)
- [#1396] Added support for Symfony
http-foundation5.3 (@jordisala1991)
Removed
- [#1396] Removed support for Symfony 5.1 and 5.2 (@jordisala1991)
-
4.11.103 Mar 2021Release notes
Open source →Fixed
- [#1332] Fix compatibility with doctrine/persistence 2.0 (@jordisala1991)
-
4.11.015 Feb 2021 -
4.10.205 Feb 2021 -
4.10.124 Nov 2020 -
4.10.024 Nov 2020 -
4.9.026 Oct 2020Release notes
Open source →Added
- [#1225] Support for
nelmio/api-doc-bundle>= 3.6 (@wbloszyk) - [#1230] Support for sonata-project/datagrid-bundle to version ^3.0 (@wbloszyk)
Fixed
- [#1247] Fixed Asserts validation for Default group. (@eerison)
- [#1254] Deprecation about the extension of
AbstractAdmin::getExportFields()method inUserAdmin. (@phansys) - [#1235] API routing paths after move routing type from 'REST' to 'XML' in v4.6.0 (@wbloszyk)
- [#1212] Removed sonata.templating argument from google_authenticator.xml (@Jean-ita)
Removed
- [#1225] Support for
-
4.8.007 Sep 2020Release notes
Open source →Added
Changed
- [#1205] Replace
ip_white_listbytrusted_ip_listconfiguration key (@davidromani)
Fixed
Removed
- [#1205] Replace
-
4.7.030 Jul 2020Release notes
Open source →Changed
- [#1183] SonataEasyExtendsBundle is now optional, using SonataDoctrineBundle is preferred (@jordisala1991)
Deprecated
- [#1183] Using SonataEasyExtendsBundle to add Doctrine mapping information (@jordisala1991)
Fixed
- [#1202] Fixed
wrong placeholder delimiters at ReST API controller
UserController. (@phansys) - [#1195] Fixed passing "format' parameter to API routes. (@phansys)
- [#1194] Fixed API route names. (@phansys)
Removed
-
4.6.029 Jun 2020Release notes
Open source →Added
- [#1185] Added support for "friendsofsymfony/rest-bundle:^3.0"; (@phansys)
- [#1185] Added
public alias
Sonata\UserBundle\Controller\Api\UserControllerforsonata.user.controller.api.userservice; (@phansys) - [#1185] Added
public alias
Sonata\UserBundle\Controller\Api\GroupControllerforsonata.user.controller.api.groupservice. (@phansys)
Fixed
- [#1180] Fixed display errors in reset template (@clementlefrancois)
- [#1175] Fixed a bug with ResetAction relying on concrete Session implementation (@oleg-andreyev)
Removed
-
4.5.307 May 2020Release notes
Open source →Added
- czech translations
Fixed
- Fixed retrieving all forwarded ip headers in the google authenticator helper
Security
- Avoid leaking usernames in password recovery
-
4.5.204 Feb 2020 -
4.5.121 Oct 2019Release notes
Open source →Added
- Add missing translation for admin menu
Fixed
- Fixed invocation of non-existent "getLogger" method. Changed to access property.
-
4.5.027 Sep 2019Release notes
Open source →Fixed
- Missing Spanish translations.
Changed
- Replaced usages of deprecated "templating" service with "twig" where possible.
Removed
- Dependency conflict against "jms/serializer:^3.0".
Changed
- Add missing dependency against "twig/twig"
- Changed usages of
{% spaceless %}tag, which is deprecated as of Twig 1.38 with{% apply spaceless %}filter
-
4.4.013 Jun 2019Release notes
Open source →Added
- Added compatibility with jms/serializer-bundle:^3.0 and jms/serializer:^2.0
- Added missing google auth french translation
Fixed
- Fixed a bug with inability to use external model classes
- Fixed wrong google auth user manager argument when not using autowiring
- Fixed hard coded google auth redirection url
Changed
- Updated
_controllerattribute for routes which were using deprecated syntax.
-
4.3.030 Jan 2019Release notes
Open source →Fixed
- exception when calling
sonata:user:two-step-verificationeven with proper configuration - deprecation for symfony/config 4.2+
- case when user was not found in sendEmailAction
- rendering resetting email on Windows
Deprecated
- executing a
Sonata\UserBundle\Command\TwoStepVerificationCommandthat did not receive arguments.
- exception when calling
-
4.2.308 Jul 2018Release notes
Open source →Fixed
Replace deprecated use of Google\Authenticator\GoogleAuthenticator by Sonata's namespace
-
4.2.209 Jun 2018Release notes
Open source →Fixed
- The following services can be get via the container again:
sonata.user.user_managersonata.user.group_managerSonata\UserBundle\Form\Type\RolesMatrixTypeSonata\UserBundle\Entity\UserManagerProxy
- The following services can be get via the container again:
-
4.2.115 May 2018Release notes
Open source →Fixed
- Load
Sonata\UserBundle\Twig\RolesMatrixExtensiononly if UserBundle is used - Make
Sonata\UserBundle\Form\Type\SecurityRolesTypepublic, as it is lazy loaded - Move static
Entity\BaseUser::getGenderListtoModel\Userso that it is available to all persistence systems
- Load
-
4.2.008 May 2018Release notes
Open source →Added
- Role permissions can now be displayed in a matrix view using the
Sonata\UserBundle\Form\Type\RolesMatrixType
Fixed
- Missing french translations were added
- Commands now work on Symfony 4
Removed
- Removed compatibility with older versions of FOSRestBundle (<2.1)
- Role permissions can now be displayed in a matrix view using the
-
4.1.108 Feb 2018Release notes
Open source →Changed
- Switch all templates references to Twig namespaced syntax
- Switch from templating service to sonata.templating
Fixed
- choices for User gender now appears correctly flipped and translated
- Deprecation message on SecurityRolesType about
choices_as_values
-
4.1.020 Jan 2018Release notes
Open source →Added
- New experience for
sonata-project/google-authenticatorusers. Showing QR-code in login form, automatically setting 2FA secret to user. - use forcedRoles and ipWhiteList also on InteractiveLoginListener
Changed
- use
symfony/security-coreandsymfony/security-aclinstead ofsymfony/security
Fixed
- Avoid templates path colon notation
- Bad conflict rule for nelmio/api-doc-bundle
- New experience for
-
4.0.120 Dec 2017Release notes
Open source →Fixed
- Fixed flipped choices values/labels in SecurityRolesType when using symfony 2.8
- Admin pool variable in admin resetting templates
-
4.0.004 Dec 2017Release notes
Open source →Added
- Add support for FOSUser 2.0
- Added missing
swiftmailerdependency
Changed
- Risky code change for PHP 7
- Made
sonata-project/google-authenticatoran optional dependency - Moved public methods of
UsertoUserInterface - Lowered upper composer dependencies
- default values moved to the Configuration class
sonata.user.admin.userandsonata.user.admin.groupare public now
Fixed
- Fixed PHPDoc
- Fixed wrong parent calls in UserManager
- Fixed wrong router call in Controller
- missing logo in templates
Removed
- Removed removed user model properties
- Removed deprecated code
-
3.6.004 Dec 2017Release notes
Open source →Added
- make Roles in SecurityRolesType translateable
- Added Russian translations
Changed
- Changed internal folder structure to
src,testsanddocs
Fixed
- Added a check to the UserAclVoter class to ensure the subject is an object
-
3.5.004 Nov 2017 -
3.4.022 Oct 2017Release notes
Open source →Fixed
- Fixed the twig configuration setting bug.
Removed
- Support for old versions of php and Symfony.
-
3.3.021 Sep 2017Release notes
Open source →Changed
- Use sonata admin pool the get the master role name
Fixed
AccountBlockServiceextendsAbstractAdminBlockServiceinstead of wrongAbstractBlockService- missing spanish translations were added
-
3.2.413 Jun 2017Release notes
Open source →Added
- Added Dutch translation for
title_user_authentication
Changed
- Google Authenticator 2 is now allowed
Fixed
- Deprecated block service usage
- Compatibility with Twig 2.0 was improved
- Fixed hardcoded paths to classes in
.xml.skeletonfiles of config
- Added Dutch translation for