Version 4.0.9 (2018-04-30)

• bug #27074 [Debug][WebProfilerBundle] Fix setting file link format (lyrixx, nicolas-grekas)
• bug #27088 ResolveBindingsPass: Don't throw error for unused service, missing parent class (weaverryan)
• bug #27086 [PHPUnitBridge] Add an implementation just for php 7.0 (greg0ire)
• bug #26138 [HttpKernel] Catch HttpExceptions when templating is not installed (cilefen)
• bug #27007 [Cache] TagAwareAdapterInterface::invalidateTags() should commit deferred items (nicolas-grekas)
• bug #27067 [HttpFoundation] Fix setting session-related ini settings (e-moe)
• bug #27061 [HttpKernel] Don't clean legacy containers that are still loaded (nicolas-grekas)
• bug #27064 [VarDumper] Fix HtmlDumper classes match (ogizanagi)
• bug #27016 [Security][Guard] GuardAuthenticationProvider::authenticate cannot return null (biomedia-thomas)
• bug #26831 [Bridge/Doctrine] count(): Parameter must be an array or an object that implements Countable (gpenverne)
• bug #27044 [Security] Skip user checks if not implementing UserInterface (chalasr)
• bug #27025 [DI] Add check of internal type to ContainerBuilder::getReflectionClass (upyx)
• bug #26994 [PhpUnitBridge] Add type hints (greg0ire)
• bug #26014 [Security] Fixed being logged out on failed attempt in guard (iltar)
• bug #25348 [HttpFoundation] Send cookies using header() to fix "SameSite" ones (nicolas-grekas, cvilleger)
• bug #26910 Use new PHP7.2 functions in hasColorSupport (johnstevenson)
• bug #26999 [VarDumper] Fix dumping of SplObjectStorage (corphi)
• bug #25841 [DoctrineBridge] Fix bug when indexBy is meta key in PropertyInfo\DoctrineExtractor (insekticid)
• bug #26983 [TwigBridge] [Bootstrap 4] Fix PercentType error rendering. (alexismarquis)
• bug #26980 [TwigBundle] fix formatting arguments in plaintext format (xabbuh)
• bug #26886 Don't assume that file binary exists on *nix OS (teohhanhui)
• bug #26959 [Console] Fix PSR exception context key (scaytrase)
• bug #26899 [Routing] Fix loading multiple class annotations for invokable classes (1ed)
• bug #26643 Fix that ESI/SSI processing can turn a "private" response "public" (mpdude)
• bug #26932 [Form] Fixed trimming choice values (HeahDude)
• bug #26922 [TwigBundle] fix rendering exception stack traces (xabbuh)
• bug #26773 [HttpKernel] Make ServiceValueResolver work if controller namespace starts with a backslash in routing (mathieutu)
• bug #26870 Add d-block to bootstrap 4 alerts (Normunds)
• bug #26857 [HttpKernel] Dont create mock cookie for new sessions in tests (nicolas-grekas)
• bug #26875 [Console] Don't go past exact matches when autocompleting (nicolas-grekas)
• bug #26823 [Validator] Fix LazyLoadingMetadataFactory with PSR6Cache for non classname if tested values isn't existing class (Pascal Montoya, pmontoya)
• bug #26834 [Yaml] Throw parse error on unfinished inline map (nicolas-grekas)