symfony/ux-autocomplete

Changelog (v3.3.0...v3.4.0)

• minor #3735 Add sync-packages.php to normalize packages .gitattributes (@Kocal)
• bug #3730 Fix broken assets/tsconfig.json reference breaking webpack 5.109+ builds (@zalesak)

Changelog (v3.2.0...v3.3.0)

• bug #3685 Fix LIKE ESCAPE clause breaking search on PostgreSQL (@Amoifr)

Changelog (v3.1.0...v3.2.0)

• no significant changes

Changelog (v3.0.0...v3.1.0)

• security #cve-2026-49216 Fix XSS via unescaped AJAX response data (@Kocal)
• security #cve-2026-49211 Escape LIKE wildcards in the search query (@Amoifr)
• bug #3565 Use hash_equals() to compare the extra_options checksum (@Amoifr)

Changelog (v2.34.0...v3.0.0)

• feature #3453 Update minimum required Symfony version to 7.4 (@Kocal)
• feature #3450 Upgrade minimum required PHP version to 8.4 (@Kocal)
• feature #3422 Add option clear_on_focus (@zairigimad)
• feature #3186 Remove BC layers for methods and parameters (@Kocal)
• bug #3187 Add phpunit.dist.xml in .gitattributes (@Kocal)
• bug #3182 Drop Symfony PHPUnit Bridge in favor of PHPUnit >= 11.0 (@Kocal)
• feature #3103 Remove deprecated code for 3.0 (@smnandre)
• feature #2998 Upgrade minimum required PHP version to 8.2 (@Kocal)
• feature #2996 Update minimum required Symfony version to ^6.4 (@Kocal)

Changelog (v2.36.1...v2.36.2)

• bug #3685 Fix LIKE ESCAPE clause breaking search on PostgreSQL (@Amoifr)

• Fix the autocomplete search query throwing an exception on PostgreSQL because of the ESCAPE '\' clause introduced in 2.36; a backslash-free LIKE escape character is now used.

Changelog (v2.35.0...v2.36.0)

• security #cve-2026-49216 Fix XSS via unescaped AJAX response data (@Kocal)
• security #cve-2026-49211 Escape LIKE wildcards in the search query (@Amoifr)

Changelog (v2.34.0...v2.35.0)

• feature #3422 Add option clear_on_focus (@zairigimad)

Changelog (v2.33.0...v2.34.0)

• bug #3401 Update package.json to 2.33.0 (@Kocal)

Changelog (v2.32.0...v2.33.0)

• feature #3362 Migrate from tsup (deprecated) to tsdown (@Kocal)
• bug #3323 Use Extension from DependencyInjection instead of HttpKernel (@Kocal)
• bug #3304 Fix npm releases due to repository issue (@Kocal)
• bug #3290 Update root JS dependencies (@Kocal)

• Add Symfony 8 support

• Default plugins like clear_button or remove_button can now be removed when setting their value to false in the tom_select_options.plugins option, for example:

<?php
#[AsEntityAutocompleteField]
class IngredientAutocompleteType extends AbstractType
{
    public function configureOptions(OptionsResolver $resolver): void
    {
        $resolver->setDefaults([
            'class' => Ingredient::class,
            'tom_select_options' => [
                'plugins' => [
                    'clear_button' => false, // Disable the clear button
                    'remove_button' => false, // Disable the remove button
                ],
            ],
        ]);
    }

    public function getParent(): string
    {
        return BaseEntityAutocompleteType::class;
    }
}

• Escape querySelector dynamic selector with CSS.escape() #2663

• Deprecate ExtraLazyChoiceLoader in favor of Symfony\Component\Form\ChoiceList\Loader\LazyChoiceLoader
• Reset TomSelect when updating url attribute #1505
• Add EntityAutocompleterInterface::getAttributes() method to define additional attributes for autocomplete results #2541

• Take labelField TomSelect option into account #2382

• Translate the option_create option from TomSelect with remote data setup #2279
• Add one missing Dutch translation #2279

• Translate the option_create option from TomSelect #2108

• Allow choice_value option in entity autocomplete fields #1723

• Missing translations added for many languages #1527 #1528 #1535

• Add doctrine/orm 3 support #1468
• Allow passing extra options to the autocomplete fields #1322
• Fix 2 bugs where TomSelect would reset when not necessary #1502
• Add one missing German translation #1521

• Fixed behavior of Autocomplete when the underlying select or option elements were modified to hopefully, more reliably, reset the autocomplete instance. This is particularly important with LiveComponents.
• Add support for the render.loading_more Tom Select Virtual Scroll option (loading_more_text)
• Avoid losing the selected options when the Stimulus component is disconnected and reconnected to the DOM.
• Added tom-select/dist/css/tom-select.bootstrap4.css to autoimport - this will cause this to appear in your controllers.json file by default, but disabled see.
• Allow passing extra_options key in an array passed as a 3rd argument of the ->add() method. It will be used during the Ajax call to fetch results.

• Revert "Change JavaScript package to type: module"

• Add new BaseEntityAutocompleteType
• Drop symfony 5.4 support.
• Add Symfony 7 support.
• Change JavaScript package to type: module

• Add support for symfony/asset-mapper

• The autocomplete now watches for update to any option elements inside of it change, including the empty / placeholder element. Additionally, if the select or input element's disabled attribute changes, the autocomplete instance will update accordingly. This makes Autocomplete work correctly inside of a LiveComponent. This functionality does not work for multiple selects.

• Added support for using OptionGroups.

• Add assets/src to .gitattributes to exclude them from the installation

• Fix minCharacters option default value handling when using a falsy value like 0.

• Fix TypeScript types

• Add a new route parameter to AsEntityAutocompleteField, which allows to choose another route for Ajax calls.

• Fix minCharacters option default value handling when using a falsy value like 0.

• Fix TypeScript types

• Add a way to detect if a field is an "autocomplete" field in form themes - #608

• [BC BREAK]: The path to routes.php changed and you should update your route import accordingly:

# config/routes/ux_autocomplete.yaml
ux_autocomplete:
-    resource: '@AutocompleteBundle/Resources/routes.php'
+    resource: '@AutocompleteBundle/config/routes.php'
    prefix: '/autocomplete'

• Add support for tom-select version 2.2.2 and made this the minimum-supported version.
• Added support for the preload TomSelect option.
• Fix don't add WHERE IN criteria without params (#561).
• Fix issue where max_results was not passed as a Stimulus value (#538).
• Add all possible stylesheets for tom-select to the autoimport to choose from.

• Automatic pagination support added: if the query would return more results than your limit, when the user scrolls to the bottom of the options, it will make a second Ajax call to load more.

• Added max_results option to limit the number of results returned by the Ajax endpoint - #478.

• Support added for setting the required minimum search query length (defaults to 3) (#492)

• Fix support for more complex ids, like UUIDs - #494.

• Fixed bug where sometimes an error could occur in the Ajax call related to the label - #520.

• Component added!