Merge branch '4.0'

* 4.0:
  SCA with Php Inspections (EA Extended)
  Add test case for #25264
  Fixed the null value exception case.
  Remove rc/beta suffix from composer.json files
  Ensure services & aliases can be referred to with `__toString`able objects
  Throw an exception is expression language is not installed
  [DI] Cast ids to string, as done on 3.4
  Fail as early and noisily as possible
  [Console][DI] Fail gracefully
  [FrameworkBundle] Fix visibility of a test helper
  [link] clear the cache after linking
  [DI] Trigger deprecation when setting a to-be-private synthetic service
  [Intl] Correct Typehint
  [link] Prevent warnings when running link with 2.7
  [Validator] ExpressionValidator should use OBJECT_TO_STRING to allow value in message
  do not eagerly filter comment lines
  [WebProfilerBundle], [TwigBundle] Fix Profiler breaking XHTML pages (Content-Type: application/xhtml+xml)

Author: nicolas-grekas

Csrf/composer.json

@@ -20,10 +20,10 @@
         "symfony/security-core": "~3.4|~4.0"
     },
     "require-dev": {
-        "symfony/http-foundation": "~3.4-beta5|~4.0-beta5"
+        "symfony/http-foundation": "~3.4|~4.0"
     },
     "conflict": {
-        "symfony/http-foundation": "<3.4-beta5|~4.0,<4.0-beta5"
+        "symfony/http-foundation": "<3.4"
     },
     "suggest": {
         "symfony/http-foundation": "For using the class SessionTokenStorage."

composer.json

@@ -18,7 +18,7 @@
     "require": {
         "php": "^7.1.3",
         "symfony/event-dispatcher": "~3.4|~4.0",
-        "symfony/http-foundation": "~3.4-beta5|~4.0-beta5",
+        "symfony/http-foundation": "~3.4|~4.0",
         "symfony/http-kernel": "~3.4|~4.0",
         "symfony/property-access": "~3.4|~4.0"
     },