Changelog (v7.2.6...v7.3.0-BETA1)

• feature symfony/symfony#60007 [Security] Add methods param in IsCsrfTokenValid attribute (@Oviglo)
• feature symfony/symfony#54932 [Security][SecurityBundle] OIDC discovery (@vincentchalamon)
• feature symfony/symfony#50027 [Security] OAuth2 Introspection Endpoint (RFC7662) (@Spomky)
• feature symfony/symfony#59805 [Security] Improve DX of recent additions (@nicolas-grekas)
• feature symfony/symfony#59150 [Security] Allow using a callable with #[IsGranted] (@alexandre-daubois)
• feature symfony/symfony#59771 [Security] Add ability for voters to explain their vote (@nicolas-grekas)
• feature symfony/symfony#59562 [Security] Support hashing the hashed password using crc32c when putting the user in the session (@nicolas-grekas)
• feature symfony/symfony#51744 [Security] Add a normalization step for the user-identifier in firewalls (@Spomky)
• feature symfony/symfony#59682 [Security] Deprecate UserInterface & TokenInterface's eraseCredentials() (@chalasr, @nicolas-grekas)
• feature symfony/symfony#58300 [Security][SecurityBundle] Show user account status errors (@core23)
• feature symfony/symfony#57721 [Security][SecurityBundle] Add encryption support to OIDC tokens (@Spomky)

Changelog (v7.2.5...v7.2.6)

• bug symfony/symfony#60166 [Security] fix(security): fix OIDC user identifier (@vincentchalamon)

Changelog (v6.4.20...v6.4.21)

• bug symfony/symfony#60166 [Security] fix(security): fix OIDC user identifier (@vincentchalamon)

Changelog (v7.2.3...v7.2.4)

• bug symfony/symfony#59640 [Security] Return null instead of empty username to fix deprecation notice (@phasdev)

Changelog (v6.4.18...v6.4.19)

• bug symfony/symfony#59640 [Security] Return null instead of empty username to fix deprecation notice (@phasdev)

Changelog (v7.2.2...v7.2.3)

• bug symfony/symfony#59590 [Security] Throw an explicit error when refreshing a token with a null user (@alexandre-daubois)
• bug symfony/symfony#59347 [Security] Fix triggering session tracking from ContextListener (@nicolas-grekas)

Changelog (v7.1.10...v7.1.11)

• bug symfony/symfony#59590 [Security] Throw an explicit error when refreshing a token with a null user (@alexandre-daubois)
• bug symfony/symfony#59347 [Security] Fix triggering session tracking from ContextListener (@nicolas-grekas)

Changelog (v6.4.17...v6.4.18)

• bug symfony/symfony#59590 [Security] Throw an explicit error when refreshing a token with a null user (@alexandre-daubois)
• bug symfony/symfony#59347 [Security] Fix triggering session tracking from ContextListener (@nicolas-grekas)

Changelog (v7.1.9...v7.1.10)

• no significant changes

Changelog (v7.2.0...v7.2.1)

• no significant changes