Merge branch '5.3' into 5.4

* 5.3:
  Bump license year
  Bump license year
  [HttpClient] Turn negative timeout to a very long timeout
  Features goes to 6.x branch
  fix lowest required PropertyInfo component release
  [Validator] throw when Constraint::_construct() has not been called
  Bump Symfony version to 5.3.14
  Update VERSION for 5.3.13
  Update CHANGELOG for 5.3.13
  Bump Symfony version to 4.4.37
  Update VERSION for 4.4.36
  Update CONTRIBUTORS for 4.4.36
  Update CHANGELOG for 4.4.36
  Allow symfony/runtime plugin

Author: fabpot

.github/PULL_REQUEST_TEMPLATE.md

@@ -15,7 +15,7 @@ Additionally (see https://symfony.com/releases):
  - Always add tests and ensure they pass.
  - Bug fixes must be submitted against the lowest maintained branch where they apply
    (lowest branches are regularly merged to upper ones so they get the fixes too.)
- - Features and deprecations must be submitted against branch 5.x.
+ - Features and deprecations must be submitted against the latest branch.
  - Changelog entry should follow https://symfony.com/doc/current/contributing/code/conventions.html#writing-a-changelog-entry
  - Never break backward compatibility (see https://symfony.com/bc).
 -->

CHANGELOG-5.3.md

@@ -7,6 +7,69 @@ in 5.3 minor versions.
 To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
 To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v5.3.0...v5.3.1
 
+* 5.3.13 (2021-12-29)
+
+ * bug #44838 [DependencyInjection][HttpKernel] Fix enum typed bindings (ogizanagi)
+ * bug #44723 [Lock] Release PostgreSqlStore connection lock on failure (simon-watiau) * commit 'e5b2f9efba':   [Lock] Release PostgreSqlStore connection lock on failure
+ * bug #44826 [HttpKernel] Do not attempt to register enum arguments in controller service locator (ogizanagi)
+ * bug #44824 [Mime] Fix missing sprintf in DkimSigner (alamirault)
+ * bug #44816 [Translation] [LocoProvider] Use rawurlencode and separate tag setting (danut007ro)
+ * bug #44805 [Security] fix unserializing session payloads from v4 (nicolas-grekas)
+ * bug #44820 [Cache] Don't lock when doing nested computations (nicolas-grekas)
+ * bug #44807 [Messenger] fix Redis support on 32b arch (nicolas-grekas)
+ * bug #44759 [HttpFoundation] Fix notice when HTTP_PHP_AUTH_USER passed without pass (Vitali Tsyrkin)
+ * bug #44799 [Cache] fix compat with apcu < 5.1.10 (nicolas-grekas)
+ * bug #44085 [Translation] Fix TranslationPullCommand with ICU translations (Kocal)
+ * bug #44771 [Notifier] Use correct factory for the msteams transport (veewee)
+ * bug #44618 [HttpKernel] Fix SessionListener without session in request (shyim)
+ * bug #44743 [HttpClient] fix checking for recent curl consts (nicolas-grekas)
+ * bug #44752 [Security/Http] Fix cookie clearing on logout (maxhelias)
+ * bug #44732 [Mime] Relaxing in-reply-to header validation (ThomasLandauer)
+ * bug #44728 [Mime] Fix encoding filenames in multipart/form-data (nicolas-grekas)
+ * bug #44710 [DependencyInjection] fix linting callable classes (nicolas-grekas)
+ * bug #44639 [DependencyInjection] Cast tag attribute value to string (ruudk)
+ * bug #44473 [Validator] Restore default locale in ConstraintValidatorTestCase (rodnaph)
+ * bug #44682 [FrameworkBundle] alias `cache.app.taggable` to `cache.app` if using `cache.adapter.redis_tag_aware` (kbond)
+ * bug #44671 [HttpClient] Fix tracing requests made after calling withOptions() (nicolas-grekas)
+ * bug #44577 [Cache] Fix proxy no expiration to the Redis (Sergey Belyshkin)
+ * bug #44669 [Cache] disable lock on CLI (nicolas-grekas)
+ * bug #44598 [Translation] Handle the blank-translation in Loco Adapter (kgonella)
+ * bug #44354 [RateLimiter] Make RateLimiter resilient to timeShifting (jderusse)
+ * bug #44600 [Serializer] Fix denormalizing custom class in UidNormalizer (fancyweb)
+ * bug #44537 [Config] In XmlUtils, avoid converting from octal every string starting with a 0 (alexandre-daubois)
+ * bug #44510 [Workflow] Fix eventsToDispatch parameter setup for StateMachine (Olexandr Kalaidzhy)
+ * bug #44625 [HttpClient] fix monitoring responses issued before reset() (nicolas-grekas)
+ * bug #44623 [HttpClient] Fix dealing with "HTTP/1.1 000 " responses (nicolas-grekas)
+ * bug #44601 [HttpClient] Fix closing curl-multi handle too early on destruct (nicolas-grekas)
+ * bug #44571 [HttpClient] Don't reset timeout counter when initializing requests (nicolas-grekas)
+ * bug #44479 [HttpClient] Double check if handle is complete (Nyholm)
+ * bug #44418 [DependencyInjection] Resolve ChildDefinition in AbstractRecursivePass (fancyweb)
+ * bug #44474 [Translation] [Bridge] [Lokalise] Fix push keys to lokalise. Closes #… (olegmifle)
+ * bug #43164 [FrameworkBundle] Fix cache pool configuration with one adapter and one provider (fancyweb)
+ * bug #44419 [PropertyAccess] Fix accessing public property on Object (kevcomparadise)
+ * bug #44565 [FrameworkBundle] Use correct cookie domain in loginUser() (wouterj)
+ * bug #44538 [Process] fixed uppercase ARGC and ARGV should also be skipped (rbaarsma)
+ * bug #44438 [HttpClient] Fix handling thrown \Exception in \Generator in MockResponse (fancyweb)
+ * bug #44469 [String] Fix requiring wcswitch table several times (fancyweb)
+ * bug #44502 [HttpFoundation] do not call preg_match() on null (xabbuh)
+ * bug #44481 [FrameworkBundle] Fix loginUser() causing deprecation (wouterj)
+ * bug #44416 [Translation] Make http requests synchronous when reading the Loco API (Kocal)
+ * bug #44350 [Translation] Fix TranslationTrait (Tomasz Kusy)
+ * bug #44467 [Console] Fix parameter types for `ProcessHelper::mustRun()` (derrabus)
+ * bug #44427 [FrameworkBundle] Fix compatibility with symfony/security-core 6.x (deps=high tests) (wouterj)
+ * bug #44399 Prevent infinite nesting of lazy `ObjectManager` instances when `ObjectManager` is reset (Ocramius)
+ * bug #44375 [DoctrineBridge] fix calling get_class on non-object (kbond)
+ * bug #44361 [HttpClient] Fix handling error info in MockResponse (fancyweb)
+ * bug #44309 [Messenger] Leverage DBAL's getNativeConnection() method (derrabus)
+ * bug #44187 [Translation] [Loco] Fix idempotency of LocoProvider write method (welcoMattic)
+ * bug #43992 [Security] Do not overwrite already stored tokens for REMOTE_USER authentication (stlrnz)
+ * bug #43876 [Validator] Fix validation for single level domains (HypeMC)
+ * bug #44327 [Debug][ErrorHandler] Increased the reserved memory from 10k to 32k (sakalys)
+ * bug #44261 [Process] intersect with getenv() in case-insensitive manner to get default envs (stable-staple)
+ * bug #44295 [Serializer] fix support for lazy/unset properties (nicolas-grekas)
+ * bug #44277 [Notifier] Fix AllMySms bridge body content (afiocre)
+ * bug #44269 [DoctrineBridge] Revert " add support for the JSON type" (dunglas)
+
 * 5.3.12 (2021-11-24)
 
  * security #cve-2021-41268 [SecurityBundle] Default signature_properties to the previous behavior (wouterj)