Symfony 8.1.4

Symfony 8.1.4, a maintenance release in the 8.1 series, was released on August 7, 2026. This release contains 40+ bug fixes across the framework's core components with no breaking changes and no new features.

Overview

This patch release focuses on stability for the DependencyInjection, Serializer, Messenger, and HttpFoundation components, resolving regressions reported since 8.1.3.

Bug Fixes

• RateLimiter — burst size and computed duration are now capped correctly (cs278)
• HttpFoundation — UriSigner expiration of 0 is treated as a date, not as no expiry (sadiqk2)
• PropertyInfo — non-public mutators are no longer reported as writable (nicolas-grekas)
• DependencyInjection — fixed #[Autoconfigure] being processed twice for PSR-4-discovered abstract types; lazy proxies now honor the interface passed to #[Lazy] (javiereguiluz, nicolas-grekas)
• Serializer — FILTER_BOOL no longer breaks union type denormalization (eliot488995568)
• Messenger — original payload is re-sent when retrying undecodable messages; PostgreSQL transport no longer blocks the worker loop (SystematicCZ, bzajacc)
• HttpClient — GuzzleHttpHandler no longer crashes with guzzlehttp/guzzle ^8.0 (peter17)
• Lock — a released read lock no longer lets a new read lock through while a write lock is held (Zombaya)
• Mime — backslashes are escaped in Address::getEncodedName(); corrupted CID references fixed (munzzyy, MarcinOrlowski)
• Cache — compatibility restored with ext-redis 5 (nicolas-grekas)
• Console — column widths correct when a row spans columns (wazum)

Deprecations

No new deprecations were introduced in this release.

Upgrade Notes

Upgrade via composer update symfony/symfony or the individual packages you depend on. Symfony 8.1.4 is fully backward compatible with 8.1.x; no migration steps are required. Special thanks to all contributors, including javiereguiluz, nicolas-grekas, lazerg, ousamabenyounes, and sadiqk2.