What's Changed
- chore: resolve stale SerializerContextBuilder / ContextAction 5.0 TODOs by @soyuka in #8402
- fix(doctrine): ignore operator-map values in ExactFilter and PartialSearchFilter by @soyuka in #8415
- fix(mcp): support mcp/sdk 0.7 and pin symfony/mcp-bundle by @soyuka in #8425
- ci: verify splitsh-lite checksum before running it by @alexisLefebvre in #8441
- ci: pin third-party actions to commit SHAs by @alexisLefebvre in #8439
- ci: pin build tooling to exact versions by @alexisLefebvre in #8442
- ci: restrict default token permissions to read-only by @alexisLefebvre in #8440
- test(state): mark the deprecated serializer-aware provider test by @soyuka in #8426
- fix(symfony): remove redundant messenger dispatch docblocks by @ousamabenyounes in #8410
- chore(state): document processor and provider interface by @VincentLanglet in #8446
- chore(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in #8437
- fix(mcp): fix no security / validation in mcp tools when using symfony listeners by @joelwurtz in #8435
- ci: remove dead Coveralls integration by @soyuka in #8456
- fix(test): support symfony/mercure 0.8 in test fixtures by @soyuka in #8458
- fix(hydra): stream totalItems as an integer by @soyuka in #8459
- fix(metadata): drop unreachable array guards on serializer attributes by @soyuka in #8460
- test: adapt json-streamer and object-mapper fixtures to Symfony 8.1.4 by @soyuka in #8461
- fix(mcp): return resource read results for resources by @ousamabenyounes in #8436
- refactor(mcp): dedupe security and validator gates by @soyuka in #8457
- fix(serializer): discriminated input patch fix by @aurimasrimkusnfq in #8427
- test(symfony): skip mcp provider chain tests without mcp-bundle by @soyuka in #8462
- ci: align the whole symfony stack on the 8.1 edge job by @soyuka in #8465
- test: assert rating as a json number across json-streamer versions by @soyuka in #8463
- test(openapi): assert the yaml export structurally, not by key order by @soyuka in #8464
- ci: restore the PMU_VERSION pin that the merge up dropped by @ousamabenyounes in #8474
- ci: raise inter-component floors so the PHP 8.5 lowest jobs pass by @ousamabenyounes in #8445
- test: stop mercure tests hitting a public hub by @soyuka in #8489
- perf(laravel): add a local cache to the metadata cache factories by @nstoeckel in #8417
- ci: ignore files inside component test directories in codecov by @dylan-rumble in #8469
- fix(symfony): log the ErrorListener diagnostic at debug level by @davidmpaz in #8433
- feat(symfony): map UniqueConstraintViolationException to 422 by default by @Amoifr in #8478
- fix(jsonschema): handle partial update required properties by @JakovKnezovicc in #8485
- fix(metadata): stop alerting on inline unwired filters at warmup by @soyuka in #8490
- fix: improve iri converter cache by @Johannes-Werbrouck in #8472
- fix(metadata): preserve bracketed indexes in query values by @ousamabenyounes in #8409
- fix(jsonschema): keep property metadata on reference schemas by @gaetan-petit in #8480
- fix(laravel): key the iri operation cache on Relation by @soyuka in #8492
- perf(metadata): reuse the cached resource metadata collection by @soyuka in #8493
- test(metadata): build the elasticsearch state options in the compatibility expectation by @Amoifr in #8496
- fix(mcp): evaluate security when listing tools and resources by @Amoifr in #8483
New Contributors
- @ousamabenyounes made their first contribution in #8410
- @aurimasrimkusnfq made their first contribution in #8427
- @nstoeckel made their first contribution in #8417
- @dylan-rumble made their first contribution in #8469
- @davidmpaz made their first contribution in #8433
- @Amoifr made their first contribution in #8478
- @Johannes-Werbrouck made their first contribution in #8472
- @gaetan-petit made their first contribution in #8480
Full Changelog: v5.0.0-alpha.2...v5.0.0-alpha.3