symfony/ux v3.1.0

on GitHub

Changelog (v3.0.0...v3.1.0)

• security #557 [LiveComponent] Require X-Requested-With header to prevent CSRF (@Kocal)
• security #cve-2026-49216 [Autocomplete] Fix XSS via unescaped AJAX response data (@Kocal)
• security #cve-2026-49208 [LiveComponent] Parse format-less date LiveProps strictly with RFC 3339 (@Kocal)
• security #cve-2026-49209 [LiveComponent] Cap the number of actions per _batch request (@Kocal)
• security #cve-2026-49210 [LiveComponent] Reject malicious child component tags (@Kocal)
• security #cve-2026-49212 [LiveComponent] Bind HMAC checksum to component name and slot (@Kocal)
• security #cve-2026-49211 [Autocomplete] Escape LIKE wildcards in the search query (@Amoifr)
• feature #3601 [Translator] Add ux:translator:warm-cache command (@Kocal)
• feature #3432 [LiveComponent] Improve form validation error messages in exceptions (@PierreCapel)
• feature #3455 Use twig.safe_class tag and move setLexer to TwigComponentPass (@GromNaN)
• feature #3586 [Toolkit][Shadcn] Align button-group with shadcn reference (@seb-jean)
• feature #3589 [Toolkit][Shadcn] Align toggle-group with shadcn reference (@seb-jean)
• feature #3587 [Toolkit][Shadcn] Align hover-card with shadcn reference (@seb-jean)
• feature #3584 [Toolkit][Shadcn] Align collapsible with shadcn reference (@seb-jean)
• feature #3561 [Toolkit][Shadcn] Align table with shadcn reference (@seb-jean)
• feature #3563 [Toolkit][Shadcn] Align skeleton with shadcn reference (@seb-jean)
• feature #3583 [Toolkit][Shadcn] Align dialog with shadcn reference (@seb-jean)
• feature #3585 [Toolkit][Shadcn] Align empty with shadcn reference (@seb-jean)
• bug #3566 [LiveComponent] Make LiveComponentSubscriber safe-by-default (@Kocal)
• feature #3591 [Toolkit][Shadcn] Align switch with shadcn reference (@seb-jean)
• feature #3592 [Toolkit][Shadcn] Align field with shadcn reference (@seb-jean)
• feature #3593 [Toolkit][Shadcn] Align radio-group with shadcn reference (@seb-jean)
• feature #3594 [Toolkit][Shadcn] Align input-group with shadcn reference (@seb-jean)
• feature #3590 [Toolkit][Shadcn] Align input with shadcn reference (@seb-jean)
• feature #3559 [Toolkit][Shadcn] Align item with shadcn reference (@seb-jean)
• feature #3574 [Toolkit][Shadcn] Align label with shadcn reference (@seb-jean)
• feature #3573 [Toolkit][Shadcn] Align spinner with shadcn reference (@seb-jean)
• feature #3576 [Toolkit][Shadcn] Align checkbox with shadcn reference (@seb-jean)
• feature #3577 [Toolkit][Shadcn] Align progress with shadcn reference (@seb-jean)
• feature #3581 [Toolkit][Shadcn] Align kbd with shadcn reference (@seb-jean)
• feature #3553 [Toolkit][Shadcn] Align alert-dialog with shadcn reference (@seb-jean)
• feature #3551 [Toolkit][Shadcn] Align accordion with shadcn reference (@seb-jean)
• feature #3539 [Toolkit][Shadcn] Align separator with shadcn reference (@seb-jean)
• feature #3552 [Toolkit][Shadcn] Align alert with shadcn reference (@seb-jean)
• feature #3554 [Toolkit][Shadcn] Align aspect-ratio with shadcn reference (@seb-jean)
• feature #3555 [Toolkit][Shadcn] Align avatar with shadcn reference (@seb-jean)
• feature #3556 [Toolkit][Shadcn] Align badge with shadcn reference (@seb-jean)
• feature #3557 [Toolkit][Shadcn] Align breadcrumb with shadcn reference (@seb-jean)
• feature #3558 [Toolkit][Shadcn] Align button with shadcn reference (@seb-jean)
• feature #3564 [Toolkit][Shadcn] Align pagination with shadcn reference (@seb-jean)
• feature #3567 [Toolkit][Shadcn] Align tabs with shadcn reference (@seb-jean)
• feature #3568 [Toolkit][Shadcn] Align tooltip with shadcn reference (@seb-jean)
• feature #3569 [Toolkit][Shadcn] Align textarea with shadcn reference (@seb-jean)
• feature #3570 [Toolkit][Shadcn] Align resizable with shadcn reference (@seb-jean)
• bug #3565 [Autocomplete] Use hash_equals() to compare the extra_options checksum (@Amoifr)
• feature #3560 [Toolkit][Shadcn] Align toggle with shadcn reference (@seb-jean)
• feature #3538 [Toolkit][Shadcn] Align card with shadcn reference (@seb-jean)
• feature #3505 [Turbo] Add <turbo-mercure-stream-source> custom element (@seb-jean)
• feature #3531 [Toolkit] Add version-added key in toolkit manifest (@MrYamous)
• feature #3460 [CalendarLink] Add component (@zairigimad)
• bug #3508 [LiveComponent] Fix dynamic template resolution when using "loading" attribute (@xDeSwa)
• bug #3500 [TwigComponent] Include attribute name in null value error message (@IndraGunawan)
• feature #3527 [Toolkit][Shadcn] Rework collapsible recipe to use provide()/inject() (@Kocal)
• feature #3526 [Toolkit][Shadcn] Rework tooltip recipe to use provide()/inject() (@Kocal)
• feature #3525 [Toolkit][Shadcn] Rework alert-dialog recipe to use provide()/inject() (@Kocal)
• feature #3524 [Toolkit][Shadcn] Rework dialog recipe to use provide()/inject() (@Kocal)
• feature #3523 [Toolkit][Shadcn] Rework accordion recipe to use provide()/inject() (@Kocal)
• feature #3528 [Toolkit][Shadcn] Rework toggle-group recipe to use provide()/inject() (@Kocal)
• feature #3521 [Toolkit][Shadcn] Rework tabs recipe to use provide()/inject() (@Kocal)
• feature #3512 [TwigComponent] Add provide() and inject() Twig functions (@Kocal)
• feature #3478 [Toolkit][Shadcn] Add hover-card recipe (@Amoifr)
• feature #3485 [Toolkit][Shadcn] Add resizable recipe (@Amoifr)
• feature #3462 [Turbo] Add TurboFrame service to detect Turbo Frame requests (@seb-jean)
• feature #3439 [Turbo] Add minimal frame layout template (@seb-jean)
• feature #3464 [Toolkit][Shadcn] Add radio-group, collapsible, typography and toggle-group recipes (@Amoifr)
• feature #3442 [LiveComponent] Use aria-busy attribute during component re-render (@Amoifr)
• feature #3459 [Toolkit][Flowbite] add Dropdown and Avatar component (@DcgRG)