Version 2.8.9 (2016-07-30)

• bug #19470 undefined offset fix (#19406) (ReenExe)
• bug #19300 [HttpKernel] Use flock() for HttpCache's lock files (mpdude)
• bug #19428 [Process] Fix write access check for pipes on Windows (nicolas-grekas)
• bug #19439 [DependencyInjection] Fixed deprecated default message template with XML (jeremyFreeAgent)
• bug #19397 [HttpFoundation] HttpCache refresh stale responses containing an ETag (maennchen)
• bug #19426 [Form] Fix the money form type render with Bootstrap3 (Th3Mouk)
• bug #19422 [DomCrawler] Inherit the namespace cache in subcrawlers (stof)
• bug #19425 [BrowserKit] Uppercase the "GET" method in redirects (jakzal)
• bug #19384 Fix PHP 7.1 related failures (nicolas-grekas)
• bug #19379 [VarDumper] Fix for PHP 7.1 (nicolas-grekas)
• bug #19342 Added class existence check if is_subclass_of() fails in compiler passes (SCIF)
• bug #19369 Fix the DBAL session handler version check for Postgresql (stof)
• bug #19368 [VarDumper] Fix dumping jsons casted as arrays (nicolas-grekas)
• bug #19334 [Security] Fix the retrieval of the last username when using forwarding (stof)
• bug #19321 [HttpFoundation] Add OPTIONS and TRACE to the list of safe methods (dunglas)
• bug #19317 [BrowserKit] Update Client::getAbsoluteUri() for query string only URIs (georaldc)
• bug #19298 [ClassLoader] Fix declared classes being computed when not needed (nicolas-grekas)
• bug #19316 [Validator] Added additional MasterCard range to the CardSchemeValidator (Dennis Væversted)
• bug #19290 [HttpKernel] fixed internal subrequests having an if-modified-since-header (MalteWunsch)
• bug #19307 [Security] Fix deprecated usage of DigestAuthenticationEntryPoint::getKey() in DigestAuthenticationListener (Maxime STEINHAUSSER)
• bug #19309 [DoctrineBridge] added missing error code for constraint. (Koc)
• bug #19306 [Form] fixed bug - name in ButtonBuilder (cheprasov)
• bug #19292 [varDumper] Fix missing usage of ExceptionCaster::$traceArgs (nicolas-grekas)
• bug #19288 [VarDumper] Fix indentation trimming in ExceptionCaster (nicolas-grekas)
• bug #19267 [Validator] UuidValidator must accept a Uuid constraint. (hhamon)
• bug #19186 Fix for #19183 to add support for new PHP MongoDB extension in sessions. (omanizer)
• bug #19253 [Console] Fix block() padding formatting after #19189 (chalasr)
• bug #19218 [Security][Guard] check if session exist before using it (pasdeloup)

Version 2.8.8 (2016-06-30)

• bug #19217 [HttpKernel] Inline ValidateRequestListener logic into HttpKernel (nicolas-grekas)
• bug #18688 [HttpFoundation] Warning when request has both Forwarded and X-Forwarded-For (magnusnordlander)
• bug #19173 [Console] Decouple SymfonyStyle from TableCell (ro0NL)
• bug #19189 [Console] Fix formatting of SymfonyStyle::comment() (chalasr)
• bug #19211 [Form] fix post max size translation type extension for >= 2.8 (Tobion)
• bug #17822 [WIP] [Form] fix empty_data option in expanded ChoiceType (HeahDude)
• bug #19134 Distinguish between first and subsequent progress bar displays (rquadling)
• bug #19061 [FORM] fix post_max_size_message translation (alt. 2) (David Badura)
• bug #19100 [Console] Fixed SymfonyQuestionHelper multi-choice with defaults (sstok)
• bug #18924 [DoctrineBridge] Don't use object IDs in DoctrineChoiceLoader when passing a value closure (webmozart)
• bug #19138 [DomCrawler] No more exception on field name with strange format (guiled, fabpot)
• bug #18935 [Form] Consider a violation even if the form is not submitted (egeloen)
• bug #19127 [Form] Add exception to FormRenderer about non-unique block names (enumag)
• bug #19118 [Process] Fix pipes cleaning on Windows (nicolas-grekas)
• bug #19128 Avoid phpunit 5.4 warnings on getMock (2.7+) (iltar)
• bug #19114 [HttpKernel] Dont close the reponse stream in debug (nicolas-grekas)
• bug #19101 [Session] fix PDO transaction aborted under PostgreSQL (Tobion)
• bug #18501 [HttpFoundation] changed MERGE queries (hjkl)
• bug #19062 [HttpFoundation] Fix UPSERT for PgSql >= 9.5 (nicolas-grekas)
• bug #18548 [Form] minor fixes in DateTime transformers (HeahDude)
• bug #18732 [PropertyAccess][DX] Enhance exception that say that some methods are missing if they don't (nykopol)
• bug #19048 [HttpFoundation] Use UPSERT for sessions stored in PgSql >= 9.5 (nicolas-grekas)
• bug #19038 Fix feature detection for IE (Alsciende)
• bug #18915 [DependencyInjection] force enabling the external XML entity loaders (xabbuh)
• bug #19020 [Form] Fixed collapsed choice attributes (HeahDude)
• bug #19028 [Yaml] properly count skipped comment lines (xabbuh)
• bug #19009 [WebProfilerBundle] Fix invalid CSS style (romainneutron)
• bug #17733 [Yaml] Fix wrong line number when comments are inserted in the middle of a block. (paradajozsef)
• bug #18911 Fixed singular of committee (peterrehm)
• bug #18971 Do not inject web debug toolbar on attachments (peterrehm)