* 6.4:
  Drop PR warning and auto-closing on subtree splits
  Fix merge
  Remove review state from Serbian translations
  [Translation] Copy domains metadata when moving messages to intl ones
  [Form] Add missing translation for invalid UUID
  fix(translations): fix sr-Latn validation messages and video constrai…
  [Validator] Add translated messages for the XML constraint
  Update installation command for Stopwatch component
  [Notifier] Send message to MS-Teams via Workflow.
  [Mailer] Fix inline images in MandrillApiTransport by using the Content-ID as image name
  [Form] Translate TranslatableInterface label in violation messages
  [Security][HttpKernel] Add allowed_classes => false to unserialize() in CacheWarmerAggregate, LoggerDataCollector, and HttpCache Store
  Fix XMLHttpRequest URL handling in toolbar JS

* 7.4:
  Drop PR warning and auto-closing on subtree splits
  Fix merge
  [Validator] Support SVG dimensions with units
  Remove review state from Serbian translations
  [Translation] Copy domains metadata when moving messages to intl ones
  [Form] Add missing translation for invalid UUID
  fix(translations): fix sr-Latn validation messages and video constrai…
  [Validator] Add translated messages for the XML constraint
  Update installation command for Stopwatch component
  [Notifier] Send message to MS-Teams via Workflow.
  [Mailer] Fix inline images in MandrillApiTransport by using the Content-ID as image name
  [Form] Translate TranslatableInterface label in violation messages
  [Security][HttpKernel] Add allowed_classes => false to unserialize() in CacheWarmerAggregate, LoggerDataCollector, and HttpCache Store
  Fix XMLHttpRequest URL handling in toolbar JS

* 8.0:
  Drop PR warning and auto-closing on subtree splits
  Fix merge
  [Validator] Support SVG dimensions with units
  Remove review state from Serbian translations
  [Translation] Copy domains metadata when moving messages to intl ones
  [Form] Add missing translation for invalid UUID
  fix(translations): fix sr-Latn validation messages and video constrai…
  [Validator] Add translated messages for the XML constraint
  Update installation command for Stopwatch component
  [Notifier] Send message to MS-Teams via Workflow.
  [Mailer] Fix inline images in MandrillApiTransport by using the Content-ID as image name
  [Form] Translate TranslatableInterface label in violation messages
  [Security][HttpKernel] Add allowed_classes => false to unserialize() in CacheWarmerAggregate, LoggerDataCollector, and HttpCache Store
  Fix XMLHttpRequest URL handling in toolbar JS

SymfonyQuestionHelper::writePrompt() wrapped the ChoiceQuestion default in
OutputFormatter::escape(), so a choice whose value contains markup (e.g.
"<comment>Add new tag</comment>") leaked its raw tags in the brackets while the
same value rendered cleanly in the choices list below. Choice values are
developer-controlled (same trust level as formatChoiceQuestionChoices, which
interpolates them as-is), so the escape is dropped for both the single and
multiselect default.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* 6.4:
  [VarExporter] Fix exporting objects that cannot be instantiated empty
  [Translation] Create Crowdin files before uploading translations
  [Form] reviewed Polish translation unit 129
  [Validator] reviewed Polish translation units 143-145
  Harden TemplatedEmail unserialize and enforce hardening-test conventions
  [GHA] Add PHPStan rules to spot non-constant-time comparisons to hash_hmac() and __toString-based trampolines
  [Validator] Review French (fr) translations for XML constraints
  Unsafe unserialize phpstan rule
  [HttpKernel] Restore null-on-invalid for nullable #[Autowire(service:)] controller args
  [Validator][Form] Review Croatian translations
  [Form][Validator] Update Spanish translations
  [CI] Make the PHPStan job report only new errors
  [Console] Render formatter tags in ChoiceQuestion default value
  [Form][Validator] Review and correct Arabic translation

# Conflicts:
#	src/Symfony/Component/AssetMapper/Factory/CachedMappedAssetFactory.php
#	src/Symfony/Component/HttpKernel/Tests/DependencyInjection/RegisterControllerArgumentLocatorsPassTest.php
#	src/Symfony/Component/Intl/Transliterator/EmojiTransliterator.php
#	src/Symfony/Component/Translation/Bridge/Crowdin/Tests/CrowdinProviderTest.php
#	src/Symfony/Component/VarExporter/Tests/VarExporterTest.php

* 7.4:
  [Lock][Form][FrameworkBundle][Mailer][HttpKernel] Harden remaining unserialize trampolines and webhook reject paths
  Remove review state from Serbian translations
  Harden __toString trampolines via __unserialize()
  Remove needs-review-translation flag for Russian validators
  [VarExporter] Fix exporting objects that cannot be instantiated empty
  [Translation] Create Crowdin files before uploading translations
  [Form] reviewed Polish translation unit 129
  [Validator] reviewed Polish translation units 143-145
  Harden TemplatedEmail unserialize and enforce hardening-test conventions
  [GHA] Add PHPStan rules to spot non-constant-time comparisons to hash_hmac() and __toString-based trampolines
  [Validator] Review French (fr) translations for XML constraints
  Unsafe unserialize phpstan rule
  [HttpKernel] Restore null-on-invalid for nullable #[Autowire(service:)] controller args
  [Validator][Form] Review Croatian translations
  [Form][Validator] Update Spanish translations
  [CI] Make the PHPStan job report only new errors
  [Console] Render formatter tags in ChoiceQuestion default value
  [Form][Validator] Review and correct Arabic translation

# Conflicts:
#	src/Symfony/Bundle/FrameworkBundle/Command/BuildDebugContainerTrait.php
#	src/Symfony/Bundle/FrameworkBundle/Command/ContainerLintCommand.php
#	src/Symfony/Component/DependencyInjection/Loader/XmlFileLoader.php
#	src/Symfony/Component/HttpKernel/Tests/DependencyInjection/RegisterControllerArgumentLocatorsPassTest.php
#	src/Symfony/Component/Security/Core/Authentication/Token/RememberMeToken.php

* 8.0:
  [Mime] Reject \Stringable in DataPart::__unserialize()
  [Lock][Form][FrameworkBundle][Mailer][HttpKernel] Harden remaining unserialize trampolines and webhook reject paths
  Remove review state from Serbian translations
  Harden __toString trampolines via __unserialize()
  Remove needs-review-translation flag for Russian validators
  [VarExporter] Fix exporting objects that cannot be instantiated empty
  [Translation] Create Crowdin files before uploading translations
  [Form] reviewed Polish translation unit 129
  [Validator] reviewed Polish translation units 143-145
  Harden TemplatedEmail unserialize and enforce hardening-test conventions
  [GHA] Add PHPStan rules to spot non-constant-time comparisons to hash_hmac() and __toString-based trampolines
  [Validator] Review French (fr) translations for XML constraints
  Unsafe unserialize phpstan rule
  [HttpKernel] Restore null-on-invalid for nullable #[Autowire(service:)] controller args
  [Validator][Form] Review Croatian translations
  [Form][Validator] Update Spanish translations
  [CI] Make the PHPStan job report only new errors
  [Console] Render formatter tags in ChoiceQuestion default value
  [Form][Validator] Review and correct Arabic translation

# Conflicts:
#	src/Symfony/Bundle/FrameworkBundle/CacheWarmer/AbstractPhpFileCacheWarmer.php
#	src/Symfony/Bundle/FrameworkBundle/DependencyInjection/Compiler/ContainerBuilderDebugDumpPass.php
#	src/Symfony/Component/Cache/Adapter/ArrayAdapter.php
#	src/Symfony/Component/DependencyInjection/Compiler/ResolveDecoratorStackPass.php
#	src/Symfony/Component/DependencyInjection/Compiler/ResolveInstanceofConditionalsPass.php
#	src/Symfony/Component/DependencyInjection/Loader/Configurator/PrototypeConfigurator.php
#	src/Symfony/Component/DependencyInjection/Loader/Configurator/ServicesConfigurator.php
#	src/Symfony/Component/DependencyInjection/Loader/FileLoader.php
#	src/Symfony/Component/DependencyInjection/Loader/YamlFileLoader.php
#	src/Symfony/Component/Form/Flow/DataStorage/SessionDataStorage.php
#	src/Symfony/Component/Messenger/Transport/Serialization/PhpSerializer.php
#	src/Symfony/Component/Translation/Bridge/Crowdin/CrowdinProvider.php
#	src/Symfony/Component/Translation/Bridge/Crowdin/Tests/CrowdinProviderTest.php
#	src/Symfony/Component/VarExporter/Instantiator.php
#	src/Symfony/Component/VarExporter/Internal/Exporter.php
#	src/Symfony/Component/Yaml/Inline.php

* 6.4:
  [Form][Validator] Ukrainian translation review and update
  Restore compat with DBAL v4.x
  [FrameworkBundle] Detect env placeholders in resolved route parameter values
  Add skill to help with targetting PRs to their appropriate branch
  Console: use mb_convert_encoding() instead of mb_convert_variables()
  [Translation] Verify Tagalog (tl) validator strings and remove needs-review flags
  Bump the github-actions group with 2 updates
  fix Indonesian (id) translations reviewed by native speaker
  [EventSourceHttpClient] Prevent re-yielding of the first chunk after reconnect

# Conflicts:
#	.github/expected-missing-return-types.diff
#	composer.json
#	src/Symfony/Bridge/Doctrine/SchemaListener/AbstractSchemaListener.php
#	src/Symfony/Bridge/Doctrine/SchemaListener/DoctrineDbalCacheAdapterSchemaListener.php
#	src/Symfony/Bridge/Doctrine/SchemaListener/LockStoreSchemaListener.php
#	src/Symfony/Bridge/Doctrine/SchemaListener/MessengerTransportDoctrineSchemaListener.php
#	src/Symfony/Bridge/Doctrine/SchemaListener/PdoSessionHandlerSchemaListener.php
#	src/Symfony/Bridge/Doctrine/SchemaListener/RememberMeTokenProviderDoctrineSchemaListener.php
#	src/Symfony/Bridge/Doctrine/Security/RememberMe/DoctrineTokenProvider.php
#	src/Symfony/Component/Cache/Adapter/DoctrineDbalAdapter.php
#	src/Symfony/Component/Cache/Tests/Adapter/DoctrineDbalAdapterTest.php
#	src/Symfony/Component/HttpFoundation/Tests/Session/Storage/Handler/PdoSessionHandlerTest.php
#	src/Symfony/Component/Lock/Store/DoctrineDbalStore.php
#	src/Symfony/Component/Lock/Tests/Store/DoctrineDbalStoreTest.php
#	src/Symfony/Component/Lock/composer.json
#	src/Symfony/Component/Messenger/Bridge/Doctrine/Tests/Transport/ConnectionTest.php
#	src/Symfony/Component/Messenger/Bridge/Doctrine/Tests/Transport/DoctrineTransportTest.php
#	src/Symfony/Component/Messenger/Bridge/Doctrine/Transport/Connection.php
#	src/Symfony/Component/Messenger/Bridge/Doctrine/Transport/DoctrineTransport.php

* 7.4:
  [Form][Validator] Ukrainian translation review and update
  Restore compat with DBAL v4.x
  [FrameworkBundle] Detect env placeholders in resolved route parameter values
  Add skill to help with targetting PRs to their appropriate branch
  Console: use mb_convert_encoding() instead of mb_convert_variables()
  [Translation] Verify Tagalog (tl) validator strings and remove needs-review flags
  [Mailer] Register MicrosoftGraphTransportFactory in Transport::FACTORY_CLASSES
  Bump the github-actions group with 2 updates
  fix Indonesian (id) translations reviewed by native speaker
  [EventSourceHttpClient] Prevent re-yielding of the first chunk after reconnect

# Conflicts:
#	.github/workflows/scorecards.yml

* 8.0:
  [Form][Validator] Ukrainian translation review and update
  Restore compat with DBAL v4.x
  [FrameworkBundle] Detect env placeholders in resolved route parameter values
  Add skill to help with targetting PRs to their appropriate branch
  Console: use mb_convert_encoding() instead of mb_convert_variables()
  [Translation] Verify Tagalog (tl) validator strings and remove needs-review flags
  [Mailer] Register MicrosoftGraphTransportFactory in Transport::FACTORY_CLASSES
  Bump the github-actions group with 2 updates
  Bump the github-actions group with 2 updates
  fix Indonesian (id) translations reviewed by native speaker
  [EventSourceHttpClient] Prevent re-yielding of the first chunk after reconnect