symfony (2.7.10-0ubuntu2) xenial; urgency=medium

  * php-symfony-class-loader: hardcode composer-derived dependencies, as
    we don't need polyfill if we only support PHP7.0.

 -- Nishanth Aravamudan <nish.aravamudan@canonical.com>  Fri, 18 Mar 2016 17:06:11 -0700

symfony (2.7.10-0ubuntu1) xenial; urgency=medium

  * New upstream release (2.7.10) (LP: #1558848).
  * Copy d/p/HttpFoundation-Fix-incompatibility-with-php-memcache.patch
    from Debian 2.8.2-1.
  * Update d/p/Workaround-OR-ed-versions-are-not-supported.patch for
    Proxy-Manager 2.0.0.
  * Fix issue during build by not invoking dh_php (remnant from
    removing php5-symfony-debug).
  * Update d/licensing/image-checksums.dcf for new
    src/Symfony/Bundle/WebProfilerBundle/Resources/views/Collector/twig.html.twig
    SVG images.
  * Drop:
    - d/p/Embed-paragonie-random_compat-into-the-security-comp.patch 
      [ not needed with PHP7.0 ]
    - d/p/cherrypick_5d433cab.patch
      [ present in 2.7.10 ]

 -- Nishanth Aravamudan <nish.aravamudan@canonical.com>  Thu, 17 Mar 2016 17:43:54 -0700

symfony (2.7.9+dfsg-1ubuntu2) xenial; urgency=medium

  [ Nishanth Aravamudan ]
  * Cherry-pick commit upstream 5d433cab.
  * Update proxy-manager dependent tests to the 2.0.0 code syntax.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 21 Feb 2016 07:26:44 +0000

symfony (2.7.9+dfsg-1ubuntu1) xenial; urgency=medium

  * d/: Update to PHP 7.0 dependencies.
  * remove php5-symfony-debug
    - https://github.com/symfony/symfony/issues/17515#issuecomment-174425132.
  * d: add nocheck and stage1 build profiles.
  * LP: #1544279.

 -- Nishanth Aravamudan <nish.aravamudan@canonical.com>  Tue, 09 Feb 2016 17:00:21 -0800

symfony (2.7.9+dfsg-1) unstable; urgency=high

  [ Fabien Potencier ]
  * updated VERSION for 2.7.9

  [ Daniel Beyer ]
  * Drop patch to skip broken tests in the Process component (no longer needed)
    - Skip-broken-tests-in-Process-component.patch
  * Add patch to provide function random_bytes() for php 5
    - Embed-paragonie-random_compat-into-the-security-comp.patch
  * Add a README.Debian (Closes: #806903)

  [ David Prévot ]
  * Update autoload and dependencies for php-symfony-framework-bundle
  * Update copyright (years)
  * Add copyright entry for embedded paragonie/random_compat

 -- David Prévot <taffit@debian.org>  Sun, 17 Jan 2016 16:23:58 -0400

symfony (2.7.7+dfsg-1) unstable; urgency=high

  [ Christian Flothmann ]
  * Vulnerability in Security Remember-Me Service [CVE-2015-8125]
    - fix potential timing attack issue
    - mitigate CSRF timing attack vulnerability
    - prevent timing attacks in digest auth listener
  * Session Fixation in the "Remember Me" Login Feature [CVE-2015-8124]
    - migrate session after remember me authentication

  [ Fabien Potencier ]
  * updated VERSION for 2.7.7

  [ Daniel Beyer ]
  * Pin debian/watch to stable 2.x releases of Symfony

 -- Daniel Beyer <dabe@deb.ymc.ch>  Tue, 24 Nov 2015 08:10:09 +0100

symfony (2.7.6+dfsg-1) unstable; urgency=medium

  [ Fabien Potencier ]
  * updated VERSION for 2.7.6

  [ David Prévot ]
  * Update phpunit calls with regard to network access

 -- Daniel Beyer <dabe@deb.ymc.ch>  Sun, 08 Nov 2015 15:14:54 +0100

symfony (2.7.5+dfsg-1) unstable; urgency=medium

  [ Fabien Potencier ]
  * updated VERSION for 2.7.5

  [ David Prévot ]
  * debian/control:
    - Drop now useless transitional dummy packages
      (php-symfony-classloader and php-symfony-eventdispatcher)
    - php5-mongo makes the tests fail, since it requires a set up
      MongoDB server
  * debian/test/control: Add missing php-doctrine-data-fixtures
    dependency for CI

  [ Daniel Beyer ]
  * Correct incomplete autoloading for php-symfony-asset
  * Run tests parallel during build time, similar to how upstream does it
  * Run DEP-8 (as-installed) tests parallel, similar to how upstream does it
  * Remove prefixed 'NNNN-'-numbering for Debian patches
  * Use a simplistic vendor/autoload.php to run tests during build time.
    This is to make sure we use the autoload.php files generated by phpab
    and additionally eliminates the need to generate a vendor/autoload.php
    using phpab during build time. Instead we use now use a symbolic link
    for vendor/autoload.php pointing to debian/autoload.build.php.
  * Include tests in autoload.php files generated by phpab
  * Use a simplistic vendor/autoload.php for DEP-8 (as-installed) tests.
    This ensures we use the autoload.php files generated by phpab during
    DEP-8 (as-installed) test. Additionally we no longer need to generate
    a vendor/autoload.php using phpab. Instead we now simply use a symbolic
    link for vendor/autoload.php pointing to debian/autoload.DEP-8.php.
  * Add new patch fixing wrong autoloader detection used by some tests
    - FrameworkBundle-SecurityBundle-Don-t-try-to-include-.patch
  * Drop temporary workaround patch (no longer needed)
    - Temporary-workaround.patch
  * Update patch to skip additional tests needing network
    - group-online-for-test-failing-without-network.patch
  * Add new patch to skip broken tests in the Process component
    - Skip-broken-tests-in-Process-component.patch
  * Provide missing meta.json for php-symfony-intl

 -- Daniel Beyer <dabe@deb.ymc.ch>  Fri, 02 Oct 2015 20:41:11 -0400

symfony (2.7.1+dfsg-1) unstable; urgency=medium

  [ Fabien Potencier ]
  * updated VERSION for 2.7.1

 -- David Prévot <taffit@debian.org>  Sun, 14 Jun 2015 17:15:34 -0400

symfony (2.7.0+dfsg-1) unstable; urgency=medium

  [ Fabien Potencier ]
  * updated VERSION for 2.7.0

  [ David Prévot ]
  * Adapt minimal version in CI for unstable

 -- David Prévot <taffit@debian.org>  Sun, 31 May 2015 09:36:15 -0400

# For older changelog entries, run 'apt-get changelog php-symfony-finder'
