Ux Autocomplete Laravel Package

• Fix the XSS vulnerability fix introduced in 3.1, which was broken on PostgreSQL. See section 2.36.2 below for details.

• Use hash_equals() to compare the extra_options checksum to prevent timing attacks
• Fix XSS vulnerability where data returned from AJAX endpoints was rendered without HTML escaping. See section 2.36 below for details.

• Minimum required Symfony version is now 7.4
• Minimum required PHP version is now 8.4
• Remove ParentEntityAutocompleteType in favor of BaseEntityAutocompleteType
• Remove ExtraLazyChoiceLoader in favor of Symfony\Component\Form\ChoiceList\Loader\LazyChoiceLoader from Symfony Form >=7.2
• Add parameter $security to AutocompleteResultsExecutor::__construct()
• Remove BC layer for EntityAutocompleterInterface::getAttributes() and EntityAutocompleterInterface::getGroupBy()

• Minimum required Symfony version is now 7.4
• Minimum required PHP version is now 8.4
• Remove ParentEntityAutocompleteType in favor of BaseEntityAutocompleteType
• Remove ExtraLazyChoiceLoader in favor of Symfony\Component\Form\ChoiceList\Loader\LazyChoiceLoader from Symfony Form >=7.2
• Add parameter $security to AutocompleteResultsExecutor::__construct()
• Remove BC layer for EntityAutocompleterInterface::getAttributes() and EntityAutocompleterInterface::getGroupBy()

• Add support for symfony/asset-mapper

• The autocomplete now watches for update to any option elements inside of it change, including the empty / placeholder element. Additionally, if the select or input element's disabled attribute changes, the autocomplete instance will update accordingly. This makes Autocomplete work correctly inside of a LiveComponent. This functionality does not work for multiple selects.

• Added support for using OptionGroups.

• Add assets/src to .gitattributes to exclude them from the installation

• Fix minCharacters option default value handling when using a falsy value like 0.

• Fix TypeScript types

• Add a new route parameter to AsEntityAutocompleteField, which allows to choose another route for Ajax calls.

• Fix minCharacters option default value handling when using a falsy value like 0.

• Fix TypeScript types

• Add a way to detect if a field is an "autocomplete" field in form themes - #608

• [BC BREAK]: The path to routes.php changed and you should update your route import accordingly:

# config/routes/ux_autocomplete.yaml
ux_autocomplete:
-    resource: '[@AutocompleteBundle](https://github.com/AutocompleteBundle)/Resources/routes.php'
+    resource: '[@AutocompleteBundle](https://github.com/AutocompleteBundle)/config/routes.php'
    prefix: '/autocomplete'

• Add support for tom-select version 2.2.2 and made this the minimum-supported version.
• Added support for the preload TomSelect option.
• Fix don't add WHERE IN criteria without params (#561).
• Fix issue where max_results was not passed as a Stimulus value (#538).
• Add all possible stylesheets for tom-select to the autoimport to choose from.

• Automatic pagination support added: if the query would return more results than your limit, when the user scrolls to the bottom of the options, it will make a second Ajax call to load more.

• Added max_results option to limit the number of results returned by the Ajax endpoint - #478.

• Support added for setting the required minimum search query length (defaults to 3) (#492)

• Fix support for more complex ids, like UUIDs - #494.

• Fixed bug where sometimes an error could occur in the Ajax call related to the label - #520.

• Component added!

• Fix the autocomplete search query throwing an exception on PostgreSQL because of the ESCAPE '\' clause introduced in 2.36; a backslash-free LIKE escape character is now used.

• Fix the autocomplete search query throwing an exception on PostgreSQL because of the ESCAPE '\' clause introduced in 2.36; a backslash-free LIKE escape character is now used.

• Escape LIKE wildcards (% and _) in the autocomplete search query so user input can no longer alter the matching behavior of the generated SQL query.

• Fix XSS vulnerability where data returned from AJAX endpoints was rendered without HTML escaping. Values from the text field of AJAX responses are now escaped by default.

  Possible BC break: if your endpoint legitimately returns HTML in the text field (e.g., for rich content), opt in via the options_as_html option:

   #[AsEntityAutocompleteField]
   class IngredientAutocompleteType extends AbstractType
   {
       public function configureOptions(OptionsResolver $resolver): void
       {
           $resolver->setDefaults([
               'class' => Ingredient::class,
  +            'options_as_html' => true,
           ]);
       }
   }
  

• Add reset_on_focus option to clear and reload options when the autocomplete field regains focus

• Ensure compatibility with PHP 8.5

• Add Symfony 8 support

• Default plugins like clear_button or remove_button can now be removed when setting their value to false in the tom_select_options.plugins option, for example:

<?php
#[AsEntityAutocompleteField]
class IngredientAutocompleteType extends AbstractType
{
    public function configureOptions(OptionsResolver $resolver): void
    {
        $resolver->setDefaults([
            'class' => Ingredient::class,
            'tom_select_options' => [
                'plugins' => [
                    'clear_button' => false, // Disable the clear button
                    'remove_button' => false, // Disable the remove button
                ],
            ],
        ]);
    }

    public function getParent(): string
    {
        return BaseEntityAutocompleteType::class;
    }
}

• Escape querySelector dynamic selector with CSS.escape() #2663

• Deprecate ExtraLazyChoiceLoader in favor of Symfony\Component\Form\ChoiceList\Loader\LazyChoiceLoader
• Reset TomSelect when updating url attribute #1505
• Add EntityAutocompleterInterface::getAttributes() method to define additional attributes for autocomplete results #2541

• Take labelField TomSelect option into account #2382

• Translate the option_create option from TomSelect with remote data setup #2279
• Add one missing Dutch translation #2279

• Translate the option_create option from TomSelect #2108

• Allow choice_value option in entity autocomplete fields #1723

• Missing translations added for many languages #1527 #1528 #1535

• Add doctrine/orm 3 support #1468
• Allow passing extra options to the autocomplete fields #1322
• Fix 2 bugs where TomSelect would reset when not necessary #1502
• Add one missing German translation #1521

• Fixed behavior of Autocomplete when the underlying select or option elements were modified to hopefully, more reliably, reset the autocomplete instance. This is particularly important with LiveComponents.
• Add support for the render.loading_more Tom Select Virtual Scroll option (loading_more_text)
• Avoid losing the selected options when the Stimulus component is disconnected and reconnected to the DOM.
• Added tom-select/dist/css/tom-select.bootstrap4.css to autoimport - this will cause this to appear in your controllers.json file by default, but disabled see.
• Allow passing extra_options key in an array passed as a 3rd argument of the ->add() method. It will be used during the Ajax call to fetch results.

• Revert "Change JavaScript package to type: module"

• Add new BaseEntityAutocompleteType
• Drop symfony 5.4 support.
• Add Symfony 7 support.
• Change JavaScript package to type: module