Ux Live Component Laravel Package

Changelog (https://github.com/symfony/ux-live-component/compare/v3.3.0...v3.4.0)

• bug #3730 Fix broken assets/tsconfig.json reference breaking webpack 5.109+ builds (@zalesak)

Changelog (https://github.com/symfony/ux-live-component/compare/v3.2.0...v3.3.0)

• bug #3676 Avoid 500 errors on malformed hydration payloads (@Amoifr)
• bug #3688 Fix data-loading scanner ignoring data-live-ignore subtrees (@Amoifr)
• bug #3690 Fix support for nullable collection properties on component (@rogierknoester)

Changelog (https://github.com/symfony/ux-live-component/compare/v3.1.0...v3.2.0)

• no significant changes

Changelog (https://github.com/symfony/ux-live-component/compare/v3.0.0...v3.1.0)

• security #557 Require X-Requested-With header to prevent CSRF (@Kocal)
• security #cve-2026-49208 Parse format-less date LiveProps strictly with RFC 3339 (@Kocal)
• security #cve-2026-49209 Cap the number of actions per _batch request (@Kocal)
• security #cve-2026-49210 Reject malicious child component tags (@Kocal)
• security #cve-2026-49212 Bind HMAC checksum to component name and slot (@Kocal)
• feature #3432 Improve form validation error messages in exceptions (@PierreCapel)
• bug #3566 Make LiveComponentSubscriber safe-by-default (@Kocal)
• bug #3508 Fix dynamic template resolution when using "loading" attribute (@xDeSwa)
• feature #3442 Use aria-busy attribute during component re-render (@Amoifr)

Changelog (https://github.com/symfony/ux-live-component/compare/v2.35.0...v2.36.0)

• security #557 Require X-Requested-With header to prevent CSRF (@Kocal)
• security #cve-2026-49208 Parse format-less date LiveProps strictly with RFC 3339 (@Kocal)
• security #cve-2026-49209 Cap the number of actions per _batch request (@Kocal)
• security #cve-2026-49210 Reject malicious child component tags (@Kocal)
• security #cve-2026-49212 Bind HMAC checksum to component name and slot (@Kocal)

Changelog (https://github.com/symfony/ux-live-component/compare/v2.34.0...v2.35.0)

• feature #3407 Allow Symfony UX 3.x packages (@Kocal)

Changelog (https://github.com/symfony/ux-live-component/compare/v2.34.0...v3.0.0)

• feature #3452 Remove compatibility layer with Symfony PropertyInfo <7.1 (@Kocal)
• feature #3453 Update minimum required Symfony version to 7.4 (@Kocal)
• feature #3450 Upgrade minimum required PHP version to 8.4 (@Kocal)
• feature #3407 Allow Symfony UX 3.x packages (@Kocal)
• bug #3398 Post-merge fixes for 3.x (@Kocal)
• bug #3187 Add phpunit.dist.xml in .gitattributes (@Kocal)
• bug #3182 Drop Symfony PHPUnit Bridge in favor of PHPUnit >= 11.0 (@Kocal)
• feature #3051 Remove deprecations (@smnandre)
• feature #2998 Upgrade minimum required PHP version to 8.2 (@Kocal)
• feature #2996 Update minimum required Symfony version to ^6.4 (@Kocal)

Changelog (https://github.com/symfony/ux-live-component/compare/v2.33.0...v2.34.0)

• bug #3401 Update package.json to 2.33.0 (@Kocal)
• bug #3367 Allow empty values to bypass model validation modifiers (@xDeSwa)

Changelog (https://github.com/symfony/ux-live-component/compare/v2.32.0...v2.33.0)

• bug #3372 Fix reflection issues for private properties from trait and parent class (@kachnitel)
• feature #3364 Add debug:live-component command (Mickaël BULIARD)
• feature #3361 Allow components use dynamically templates (@xDeSwa)
• bug #3363 Fix preservation of !important inline style changes (@xDeSwa)
• feature #3362 Migrate from tsup (deprecated) to tsdown (@Kocal)
• bug #3353 Fix PHPDoc types of TestLiveComponent::call() (@StevenRenaux)
• feature #3336 Add option fetchCredentials (@Kocal)
• bug #3337 Fix tests with lowest dependencies, incompatibility with zenstruck/foundry and Symfony 5.4 (@GromNaN)
• bug #3325 Fix minimum requested 6.x version of FrameworkBundle for LiveComponent (@Kocal)
• bug #3304 Fix npm releases due to repository issue (@Kocal)
• bug #3290 Update root JS dependencies (@Kocal)
• bug #3279 Remove usage of framework.annotations.enabled (@Kocal)