[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
api-platform/symfony (source)	^4.1 → ^5.0

---

Release Notes

api-platform/core (api-platform/symfony)

v5.0.2

Compare Source

API Platform 5.0.2 contains every change shipped in v4.4.3, plus the changes below.

Behavior changes

• 0c0b608f4 fix(openapi): document request body on operations that deserialize (#​8598). An operation with deserialize: true on a method other than POST, PUT or PATCH (for example GET or DELETE) now gets a requestBody and an input JSON Schema in the OpenAPI document. This can change your generated schema, so clients generated from it or snapshot tests of it can differ. It is acceptable in 5.0, but it was reverted from 4.4 because a schema change must not ship in a patch release.

Bug fixes

• 773c6cca0 fix(doctrine): avoid deprecation with SortFilter (#​8617)
• 54add936f fix(jsonapi): sparse fieldsets on included resources (#​8584)
• f590d9438 fix(laravel): don't duplicate the filter interface use statement (#​8593)
• c092cd0df fix(metadata): use operation shortName for resources without ApiResource (#​8609)
• d25771aa7 fix: throw exception when an operation is not declared in ApiResource for parameter attributes on properties (#​8552)

v5.0.1

Compare Source

API Platform 5.0.1 contains every change shipped in v4.4.1 and v4.4.2, plus the fixes below.

Bug fixes

• 1dc16378c fix(symfony): use StrictUnifiedDiffOutputBuilder in api:upgrade-filter (#​8559)
• 27153419c fix(symfony,graphql): resolve twig runtime csp_nonce function (#​8575)
• 6f9837b25 fix(metadata): format-agnostic uriTemplate match (#​8540)
• a4b814308 fix(symfony): guard test client service when api-platform/test is absent (#​8574)
• c5e19e1a6 fix(mongodb): nullable from php type, not mapping (#​8298)
• ca8c8fc4b fix(validator): do not emit an unresolved {{ type }} placeholder (#​8546)
• fe9a06c71 fix(redoc): update ReDoc to 2.5.4 to fix crash on OpenAPI 3.2 documents (#​8569)

v5.0.0

Compare Source

API Platform 5.0 contains every change shipped in v4.4.0, plus the removals and breaking changes below.

Breaking changes

• 14ce74352 feat(jsonapi)!: default use_iri_as_id to false (#​8512)
• ce741c851 feat(state)!: drop TranslatorInterface support from DeserializeProvider (#​8514)
• 906a36dca feat!: drop the Request::getContentType() fallbacks (#​8517)
• cf1d5a9fc feat(symfony)!: drop the Symfony 6 value resolver shim (#​8516)
• e22e74464 feat!: remove deprecated APIs scheduled for 5.0 (#​8367)
• 4a9a14507 feat!: remove legacy PropertyInfo Type system (#​8364)
• 1e6d13ae1 feat!: core 5.0 cleanups (getProperties interface, json:api status string) (#​8366)
• Denormalization errors on a property carrying a Symfony Validator constraint now return 422 with a ConstraintViolation payload instead of 400 with a hydra:Error payload (#​8211, #​8389). Properties without constraint metadata still return 400. This shipped in the 4.4 betas and was moved to 5.0; there is no configuration flag, but the behaviour can be disabled by overriding the api_platform.state.denormalization_violation_factory service.

Features

• edead1f0c feat: HTTP QUERY method support (RFC 10008) (#​8349)
• 826e847b6 feat(metadata): resolve %param% in yaml/xml and attribute resource config (#​8284)
• 56c4ae204 feat(symfony): add routePriority to control route matching order (#​8309)
• c3b6bb41f feat: allow restricting operations for parameter attributes on properties (#​7899)
• fce2bdfe6 feat(state): apply uri variable provider values (#​8491)
• 56daf41c4 feat: allow Parameter attributes on properties (#​7870)
• 24871a9ac feat(symfony): emit a csp nonce on the swagger ui and graphiql scripts (#​8310)
• a8af8e1b9 feat(doctrine): embed joined/sti relations when a discriminator subclass declares the group (#​8283)
• 711f00657 feat: extract ApiTestCase in its own api-platform/test package (#​7887)
• 672d48e25 feat(symfony): map UniqueConstraintViolationException to 422 by default (#​8478)
• d37a75379 feat(doctrine): standalone Date/Exists filters, ComparisonFilter [between], deprecate RangeFilter (#​8351)

Bug fixes

• 5ad54c9d9 fix(symfony): separate route priority (#​8529)
• 239e44c44 fix(symfony): make api-platform/test a dev dependency (#​8527)
• 7afb7c8a7 fix(test): restore main CI after the ApiTestCase extraction (#​8526)
• 88f98d961 fix(serializer): read Symfony attributes through their public properties (#​8519)
• 78151b7d1 fix(mcp): return resource read results for resources (#​8436)
• 8360186ed fix(serializer): remove dead native-type guards in AbstractItemNormalizerTest
• 88f458a11 fix(jsonschema): drop removed getBuiltinTypes path in SchemaPropertyMetadataFactory

Dependencies

• ApiPlatform\Symfony\Bundle\Test\ApiTestCase and its helpers now live in the new api-platform/test package; the classes in the old namespace are deprecated and will be removed in 6.0 (#​7887).
• Symfony ^7.4 || ^8.0; support for 6.4 is dropped.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock

Loading composer repositories with package information
Dependency symfony/http-kernel is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency symfony/http-foundation is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency symfony/console is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires api-platform/symfony ^5.0, found api-platform/symfony[v5.0.0, v5.0.1, v5.0.2] but these were not loaded, likely because it conflicts with another require.
  Problem 2
    - dbp/relay-core-bundle is locked to version v0.1.248 and an update of this package was not requested.
    - dbp/relay-core-bundle v0.1.248 requires api-platform/symfony ^4.1 -> found api-platform/symfony[v4.1.0, ..., v4.4.3] but it conflicts with your root composer.json require (^5.0).
  Problem 3
    - dbp/relay-base-publication-bundle is locked to version v0.1.2 and an update of this package was not requested.
    - dbp/relay-base-publication-bundle v0.1.2 requires dbp/relay-core-bundle ^0.1.220 -> satisfiable by dbp/relay-core-bundle[v0.1.248].
    - dbp/relay-core-bundle v0.1.248 requires api-platform/symfony ^4.1 -> found api-platform/symfony[v4.1.0, ..., v4.4.3] but it conflicts with your root composer.json require (^5.0).

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.