API Platform Core Files

What's Changed

• fix(graphql): update existing object on nested input id by @soyuka in https://github.com/api-platform/core/pull/8786
• fix(jsonapi): declare type: object on JSON:API resource schemas by @ousamabenyounes in https://github.com/api-platform/core/pull/8724
• fix(state): reject invalid GraphQL pagination cursors by @BenMacha in https://github.com/api-platform/core/pull/8779
• fix(serializer): unwrap the collection key type, not the collection type by @BenMacha in https://github.com/api-platform/core/pull/8780
• fix(laravel): ignore non-string values in search filters by @BenMacha in https://github.com/api-platform/core/pull/8781
• fix(laravel): purge the HTTP cache on GraphQL mutations by @BenMacha in https://github.com/api-platform/core/pull/8782
• fix(laravel): filter on every value given to EqualsFilter by @BenMacha in https://github.com/api-platform/core/pull/8783
• fix(doctrine): reject too large pages with ODM partial pagination by @BenMacha in https://github.com/api-platform/core/pull/8776
• fix(doctrine): ignore nested array values in range and search filters by @BenMacha in https://github.com/api-platform/core/pull/8775
• fix(laravel): honor mcp.enabled and add mcp.middleware by @soyuka in https://github.com/api-platform/core/pull/8789
• fix(doctrine): document SortFilter parameters as a single value by @Amoifr in https://github.com/api-platform/core/pull/8759
• fix(laravel): validate header parameters against headers by @soyuka in https://github.com/api-platform/core/pull/8711
• test(graphql): run the IterableType assertions that never executed by @dylanpulver in https://github.com/api-platform/core/pull/8772
• fix(jsonschema): keep description and externalDocs on nested resources by @abp002 in https://github.com/api-platform/core/pull/8723
• fix(jsonapi): check relation IRI type on denormalization by @soyuka in https://github.com/api-platform/core/pull/8788
• fix(metadata): read allowReserved of OpenAPI parameters in YAML by @Maxcastel in https://github.com/api-platform/core/pull/8716
• fix(metadata): extract XML paginationViaCursor as a list of fields by @Maxcastel in https://github.com/api-platform/core/pull/8729
• fix(metadata): parse YAML booleans and input/output arrays correctly by @Maxcastel in https://github.com/api-platform/core/pull/8761
• fix(metadata): relax the XML schema where it rejects valid metadata by @Maxcastel in https://github.com/api-platform/core/pull/8760
• fix(metadata): extract the hydra option of properties from YAML and XML by @Maxcastel in https://github.com/api-platform/core/pull/8740
• fix(metadata): accept openapi and priority on XML parameters by @Maxcastel in https://github.com/api-platform/core/pull/8737
• fix(metadata): read XML OpenAPI externalDocs and optional attributes by @Maxcastel in https://github.com/api-platform/core/pull/8735
• fix(serializer): reject a non-string id in JSON-LD and JSON:API relations by @BenMacha in https://github.com/api-platform/core/pull/8778
• fix(doctrine): left join collection associations in IriFilter inside OR groups by @BenMacha in https://github.com/api-platform/core/pull/8777
• fix(metadata): do not duplicate list defaults on operations by @Maxcastel in https://github.com/api-platform/core/pull/8712
• fix(metadata): reject invalid HTTP status codes on operations by @Maxcastel in https://github.com/api-platform/core/pull/8714
• fix(metadata): reject duplicate GraphQL operation names instead of silently dropping them by @Maxcastel in https://github.com/api-platform/core/pull/8713
• fix(symfony): validate the classes of the default parameters by @Maxcastel in https://github.com/api-platform/core/pull/8715
• fix(mcp): support MCP SDK 0.9 registry capabilities by @tacman in https://github.com/api-platform/core/pull/8758
• chore(jsonapi): require serializer ^4.4.7 by @soyuka in https://github.com/api-platform/core/pull/8800
• chore: bump doctrine-common and serializer floors by @soyuka in https://github.com/api-platform/core/pull/8801
• fix(serializer): enforce securityPostDenormalize on non-cloneable objects by @soyuka in https://github.com/api-platform/core/pull/8787
• fix(mcp): honor exception_to_status in tool errors by @soyuka in https://github.com/api-platform/core/pull/8804
• fix(state): skip object mapping for IRI filter values by @soyuka in https://github.com/api-platform/core/pull/8802
• fix(openapi): document the minimum of the page parameter by @Maxcastel in https://github.com/api-platform/core/pull/8812
• fix(hydra): do not document NotExposed operations by @Maxcastel in https://github.com/api-platform/core/pull/8811
• fix(openapi): remove the QUERY operations from the 3.0 export by @Maxcastel in https://github.com/api-platform/core/pull/8810
• fix(hal): make the collection JSON schema match the normalizer by @Maxcastel in https://github.com/api-platform/core/pull/8809
• fix(openapi): document the 403 response for every security option by @Maxcastel in https://github.com/api-platform/core/pull/8808
• fix(openapi): document the default of a parameter that has a schema by @Maxcastel in https://github.com/api-platform/core/pull/8807
• fix(validator): accept 0 as a parameter minimum or maximum by @Maxcastel in https://github.com/api-platform/core/pull/8806
• fix(state): compare the request content type case-insensitively by @Maxcastel in https://github.com/api-platform/core/pull/8798
• fix(state): reset the target resource for each parameter security check by @Maxcastel in https://github.com/api-platform/core/pull/8797
• fix(metadata): wrap a single attribute in ApiProperty::withSerialize() by @Maxcastel in https://github.com/api-platform/core/pull/8794
• fix(serializer): pass variadic constructor arguments like Symfony by @Maxcastel in https://github.com/api-platform/core/pull/8792
• fix(symfony): reject defaults that need objects by @Maxcastel in https://github.com/api-platform/core/pull/8762
• fix(metadata): convert the YAML and XML nativeType of a property when it has a parent by @Maxcastel in https://github.com/api-platform/core/pull/8742
• fix(laravel): return 400 for invalid IRIs and serializer errors by @Maxcastel in https://github.com/api-platform/core/pull/8805
• fix(metadata): read method and routeName of operations in YAML by @Maxcastel in https://github.com/api-platform/core/pull/8720
• fix(state): send the Sunset header as an HTTP date in GMT by @Maxcastel in https://github.com/api-platform/core/pull/8799
• perf(jsonld): do not compute the anonymous context when the document already has one by @Maxcastel in https://github.com/api-platform/core/pull/8796
• fix(metadata): read hideHydraOperation and strictQueryParameterValidation on YAML resources and operations by @Maxcastel in https://github.com/api-platform/core/pull/8719
• fix(mcp): validate tool arguments against inputSchema by @soyuka in https://github.com/api-platform/core/pull/8803

New Contributors

• @BenMacha made their first contribution in https://github.com/api-platform/core/pull/8779
• @dylanpulver made their first contribution in https://github.com/api-platform/core/pull/8772

Full Changelog: https://github.com/api-platform/core/compare/v5.0.5...v5.0.6