API Platform Core Files

What's Changed

• chore: resolve stale SerializerContextBuilder / ContextAction 5.0 TODOs by @soyuka in https://github.com/api-platform/core/pull/8402
• fix(doctrine): ignore operator-map values in ExactFilter and PartialSearchFilter by @soyuka in https://github.com/api-platform/core/pull/8415
• fix(mcp): support mcp/sdk 0.7 and pin symfony/mcp-bundle by @soyuka in https://github.com/api-platform/core/pull/8425
• ci: verify splitsh-lite checksum before running it by @alexisLefebvre in https://github.com/api-platform/core/pull/8441
• ci: pin third-party actions to commit SHAs by @alexisLefebvre in https://github.com/api-platform/core/pull/8439
• ci: pin build tooling to exact versions by @alexisLefebvre in https://github.com/api-platform/core/pull/8442
• ci: restrict default token permissions to read-only by @alexisLefebvre in https://github.com/api-platform/core/pull/8440
• test(state): mark the deprecated serializer-aware provider test by @soyuka in https://github.com/api-platform/core/pull/8426
• fix(symfony): remove redundant messenger dispatch docblocks by @ousamabenyounes in https://github.com/api-platform/core/pull/8410
• chore(state): document processor and provider interface by @VincentLanglet in https://github.com/api-platform/core/pull/8446
• chore(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in https://github.com/api-platform/core/pull/8437
• fix(mcp): fix no security / validation in mcp tools when using symfony listeners by @joelwurtz in https://github.com/api-platform/core/pull/8435
• ci: remove dead Coveralls integration by @soyuka in https://github.com/api-platform/core/pull/8456
• fix(test): support symfony/mercure 0.8 in test fixtures by @soyuka in https://github.com/api-platform/core/pull/8458
• fix(hydra): stream totalItems as an integer by @soyuka in https://github.com/api-platform/core/pull/8459
• fix(metadata): drop unreachable array guards on serializer attributes by @soyuka in https://github.com/api-platform/core/pull/8460
• test: adapt json-streamer and object-mapper fixtures to Symfony 8.1.4 by @soyuka in https://github.com/api-platform/core/pull/8461
• fix(mcp): return resource read results for resources by @ousamabenyounes in https://github.com/api-platform/core/pull/8436
• refactor(mcp): dedupe security and validator gates by @soyuka in https://github.com/api-platform/core/pull/8457
• fix(serializer): discriminated input patch fix by @aurimasrimkusnfq in https://github.com/api-platform/core/pull/8427
• test(symfony): skip mcp provider chain tests without mcp-bundle by @soyuka in https://github.com/api-platform/core/pull/8462
• ci: align the whole symfony stack on the 8.1 edge job by @soyuka in https://github.com/api-platform/core/pull/8465
• test: assert rating as a json number across json-streamer versions by @soyuka in https://github.com/api-platform/core/pull/8463
• test(openapi): assert the yaml export structurally, not by key order by @soyuka in https://github.com/api-platform/core/pull/8464
• ci: restore the PMU_VERSION pin that the merge up dropped by @ousamabenyounes in https://github.com/api-platform/core/pull/8474
• ci: raise inter-component floors so the PHP 8.5 lowest jobs pass by @ousamabenyounes in https://github.com/api-platform/core/pull/8445
• test: stop mercure tests hitting a public hub by @soyuka in https://github.com/api-platform/core/pull/8489
• perf(laravel): add a local cache to the metadata cache factories by @nstoeckel in https://github.com/api-platform/core/pull/8417
• ci: ignore files inside component test directories in codecov by @dylan-rumble in https://github.com/api-platform/core/pull/8469
• fix(symfony): log the ErrorListener diagnostic at debug level by @davidmpaz in https://github.com/api-platform/core/pull/8433
• feat(symfony): map UniqueConstraintViolationException to 422 by default by @Amoifr in https://github.com/api-platform/core/pull/8478
• fix(jsonschema): handle partial update required properties by @JakovKnezovicc in https://github.com/api-platform/core/pull/8485
• fix(metadata): stop alerting on inline unwired filters at warmup by @soyuka in https://github.com/api-platform/core/pull/8490
• fix: improve iri converter cache by @Johannes-Werbrouck in https://github.com/api-platform/core/pull/8472
• fix(metadata): preserve bracketed indexes in query values by @ousamabenyounes in https://github.com/api-platform/core/pull/8409
• fix(jsonschema): keep property metadata on reference schemas by @gaetan-petit in https://github.com/api-platform/core/pull/8480
• fix(laravel): key the iri operation cache on Relation by @soyuka in https://github.com/api-platform/core/pull/8492
• perf(metadata): reuse the cached resource metadata collection by @soyuka in https://github.com/api-platform/core/pull/8493
• test(metadata): build the elasticsearch state options in the compatibility expectation by @Amoifr in https://github.com/api-platform/core/pull/8496
• fix(mcp): evaluate security when listing tools and resources by @Amoifr in https://github.com/api-platform/core/pull/8483

New Contributors

• @ousamabenyounes made their first contribution in https://github.com/api-platform/core/pull/8410
• @aurimasrimkusnfq made their first contribution in https://github.com/api-platform/core/pull/8427
• @nstoeckel made their first contribution in https://github.com/api-platform/core/pull/8417
• @dylan-rumble made their first contribution in https://github.com/api-platform/core/pull/8469
• @davidmpaz made their first contribution in https://github.com/api-platform/core/pull/8433
• @Amoifr made their first contribution in https://github.com/api-platform/core/pull/8478
• @Johannes-Werbrouck made their first contribution in https://github.com/api-platform/core/pull/8472
• @gaetan-petit made their first contribution in https://github.com/api-platform/core/pull/8480

Full Changelog: https://github.com/api-platform/core/compare/v5.0.0-alpha.2...v5.0.0-alpha.3