v4.1.7

What's Changed

• fix(metadata): Link Security YAML by @ytilotti in #7066
• fix(hydra): use correctly enable_docs by @alanpoulain in #7062
• fix(laravel): eloquent BelongsTo linking by @soyuka in #7075
• fix(symfony): internal resources should not inherit global defaults by @Crovitche-1623 in #7073
• fix(metadata): Use template typehint in parameters by @deguif in #7078
• fix(metadata): parameter provider within filter by @soyuka in #7081
• Revert "fix(jsonld): duplicate error fields when prefix is enabled" by @soyuka in #7074
• fix(symfony): do not ignore Test files on symfony by @soyuka in #7077

New Contributors

• @ytilotti made their first contribution in #7066

Full Changelog: v4.1.6...v4.1.7

v4.1.6

Full Changelog: v4.1.5...v4.1.6

v3.4.17

Exceptional release as 3.4 is not maintained anymore, this resolves our recent security issues:

GHSA-cg3c-245w-728m
GHSA-428q-q3vv-3fq3

What's Changed

• test: guides migration table eixts by @soyuka in #6931
• fix: allow parameter provider as object by @deguif in #7032
• fix: header parameter should be case insensitive by @soyuka in #7031
• Revert "fix(doctrine): throw an exception when a filter is not found in a parameter" by @soyuka in #7046

Full Changelog: v3.4.16...v3.4.17

v4.1.5

What's Changed

• 60747cc8c fix(graphql): access to unauthorized resource using node Relay CVE-2025-31481
• 7af65aad1 fix(graphql): property security might be cached w/ different objects CVE-2025-31485

Full Changelog: v4.1.4...v4.1.5

Notes

Laravel installation broken, use v4.1.6

v4.0.22

What's Changed

• 60747cc8c fix(graphql): access to unauthorized resource using node Relay CVE-2025-31481
• 7af65aad1 fix(graphql): property security might be cached w/ different objects CVE-2025-31485
• Revert "fix(doctrine): throw an exception when a filter is not found in a parameter" by @soyuka in #7046

Full Changelog: v4.0.21...v4.0.22

v4.1.4

What's Changed

• fix(state): support filter interface on serializer filter parameter provider by @deguif in #7047
• fix(laravel): error handler only on api routes by @soyuka in #7049
• fix(symfony): serialization of closure inside the profiler by @soyuka in #7054
• fix(doctrine): joinColumn might be an array by @soyuka in #7060
• Revert "fix(doctrine): throw an exception when a filter is not found in a parameter" by @soyuka in #7046

Full Changelog: v4.1.3...v4.1.4

v4.1.3

What's Changed

• fix(laravel): defer "filters" dependent services by @soyuka in #7045

Full Changelog: v4.1.2...v4.1.3

v4.1.2

What's Changed

• fix: fix React UMD & update-js.sh + add Laravel support in update-js.sh by @vincentchalamon in #7028
• fix(laravel): json api default parameters by @soyuka in #7027
• fix: allow parameter provider as object by @deguif in #7032
• fix: header parameter should be case insensitive by @soyuka in #7031
• fix(laravel): do not require files while autoconfiguring by @soyuka in #7024
• fix(symfony): allow to merge array with string in global defaults by @Crovitche-1623 in #7037
• fix(laravel): defer autoconfiguration by @soyuka in #7040

Full Changelog: v4.1.1...v4.1.2

v4.0.21

What's Changed

• fix: allow parameter provider as object by @deguif in #7032
• fix: header parameter should be case insensitive by @soyuka in #7031
• fix(symfony): allow to merge array with string in global defaults by @Crovitche-1623 in #7037

Full Changelog: v4.0.20...v4.0.21

v4.1.1

What's Changed

• chore: update client-side deps by @soyuka in #6961
• fix(symfony): detach objects from store to prevent infinite loop duri… by @LaurentHuzard in #6965
• fix(laravel): handle route prefix by @soyuka in #6978
• feat(laravel): add middleware granularity by @jonerickson in #6962
• chore: dependency constraints for laravel 12 by @soyuka in #6989
• fix(doctrine): Add a proper exception when a doctrine manager could not be found for a resource class by @lyrixx in #6995
• fix(laravel): query extensions with item operations by @soyuka in #7001
• fix(doctrine): correct the use statement for ManagerRegistry by @soyuka in #7004
• fix(openapi): boolean "true" value in HttpOperation::openapi by @soyuka in #7003
• fix: Doctrine mapping ArrayAccess deprecation by @dunglas in #6982
• fix(validation): deprecate string message for ValidationException con… by @soyuka in #7005
• fix(symfony): add a alwaysBootKernel property for BC layer by @Crovitche-1623 in #7007
• doc: comment typo in ApiResource.php by @Bartheyrman22 in #7012
• feat(laravel): auto configure our tagged interfaces by @soyuka in #7014
• feat(laravel): openapi export command by @soyuka in #7016
• fix(laravel): register ErrorProvider by @soyuka in #7018
• feat(laravel): stateOptions modelClass for eloquent by @soyuka in #7020
• fix(jsonld): duplicate error fields when prefix is enabled by @soyuka in #7021

New Contributors

• @LaurentHuzard made their first contribution in #6965
• @Bartheyrman22 made their first contribution in #7012

Full Changelog: v4.1.0...v4.1.1