Symfony 6.3.11 has just been released.
Here is the list of the most important changes since 6.3.10:

• bug #53054 [Cache] Fix expiration time for CouchbaseCollection (@alexandre-daubois)
• bug #53259 [RateLimit] Test and fix peeking behavior on rate limit policies (@wouterj)
• bug #52406 [Validator] Fix Constraints\Email::ERROR_NAMES (@mathroc)
• bug #53140 [Serializer] Skip uninitialized properties with deep_object_to_populate (@mtarld)
• bug #53195 [HttpKernel] Fix default locale is ignored when set_locale_from_accept_language is used (@jkobus)
• bug #52928 [Dotenv] Allow environment variables starting with an underscore (@xabbuh)
• bug #53243 [Mailer][Postmark] Add missing changelog for webhook support (@OskarStark)
• bug #53232 [Notifier] [Smsc] Require login and password (@OskarStark)
• bug #53225 [WebProfilerBundle] Fix the design of the compact toolbar button (@javiereguiluz)
• bug #53178 [Translation][Crowdin] Use project language mapping (@andrii-bodnar)
• bug #53187 [Messenger] Fix using negative delay (@J-roen)
• bug #53133 [Validator] Fix using known option names as field names (@HypeMC)
• bug #53172 [SecurityBundle] Prevent to login/logout without a request context (@symfonyaml)
• bug #53153 [WebProfilerBundle] Fix JS error when evaluating scripts (@jderusse)
• bug #52998 [Notifier] [Bridges] Provide EventDispatcher and HttpClient to the transport (@rdavaillaud)
• bug #52817 [Serializer] Do not instantiate object if it is not instantiable (@maxbaldanza)
• bug #53079 [DoctrineBridge] Add check for lazy object interface (@maxbaldanza)
• bug #53115 [Serializer] Fix partial denormalization with missing constructor arguments (@HypeMC)
• bug #53125 [Mailer] add the MailPace transport to the UnsupportedSchemeException (@xabbuh)
• bug #53081 [Serializer] Keep stack trace for enum value denormalizer error (@kylekatarnls)
• bug #53107 [HttpKernel] Don't validate partially denormalized object (@HypeMC)
• bug #52891 [HttpKernel] Fix request attribute value ignored with pinned resolvers (@HypeMC)
• bug #53057 [HttpKernel] Move @internal from AbstractSessionListener class to its methods and properties (@Florian-Merle)
• bug #52990 [TwigBridge] don't use deprecated and internal Twig functions (@xabbuh)
• bug #53007 [FrameworkBundle] Fix webhook parser service removal and add notifier parser service removal (@alexandre-daubois)
• bug #52996 [Validator] add missing translation (@xabbuh)
• bug #52978 [Webhook] [Framework] Added missing XML attribute in config XSD (@TimoBakx)
• bug #52584 [WebProfilerBundle] Fix intercept external redirects (@HeahDude)
• bug #52964 [ExpressionLanguage] Fix null coalescing propagation (@fancyweb)
• bug #52940 [Console] Fix color support check on non-Windows platforms (@theofidry)
• bug #52896 [Messenger] Avoid reconnecting active Redis connections. (@BusterNeece)
• bug #52923 Avoid incompatibility with symfony/console 7 (@jdecool)
• bug #52927 [Dotenv] Properly handle SYMFONY_DOTENV_VARS being the empty string (@xabbuh)
• bug #52935 [Validator] Missing translations for Slovak (sk) #51954 (Jan Vernarsky)
• bug #52941 [Console] Fix xterm detection (@theofidry)
• bug #52795 [FrameworkBundle] do not overwrite an application's default serialization context (@xabbuh)
• bug #52885 [Serializer] fix nullable int cannot be serialized (@nikophil)
• bug #52886 [HttpKernel] Catch TypeError if the wrong type is used in BackedEnumValueResolver (@alexandre-daubois)
• bug #52864 [HttpClient][Mailer][Process] always pass microseconds to usleep as integers (@xabbuh)

Want to upgrade to this new release? Because Symfony protects
backwards-compatibility very closely, this should be quite easy. Use
SymfonyInsight upgrade reports
to detect the code you will need to change in your project and
read our upgrade
documentation to learn more.
Want to be notified whenever a new Symfony release is published? Or when a
version is not maintained anymore? Or only when a security issue is fixed?
Consider subscribing to the Symfony Roadmap Notifications.

Sponsor the Symfony project.