Symfony 6.3.2 has just been released.
Here is the list of the most important changes since 6.3.1:

bug #51138 [Scheduler] Postpone schedule creation (@HypeMC)
bug #50933 [Serializer] Fix deserializing nested arrays of objects with mixed keys (@HypeMC)
bug #51071 [VarExporter] Fix calling scope detection inside magic accessors (@vtsykun)
bug #51078 [FrameworkBundle][Workflow] Throw exception is workflow.xxx.transitions is not an array (@lyrixx)
bug #51102 [Webhook] Allow slash in webhook type (@alamirault)
bug #51114 [Serializer] Fix denormalizing abstract part headers in MimeMessageNormalizer (@fancyweb)
bug #51055 [Scheduler] Fix NPE in debug:scheduler command (@maxbeckers)
bug #51042 [Mailer] [Mailgun] Disable tls for mailgun as it should use STARTTLS (@joelwurtz)
bug #51056 [SecurityBundle] Add firewalls.logout.csrf_token_manager to XSD (@HeahDude)
bug #51065 [AssetMapper] Fixing import parsing from jsdelivr (@weaverryan)
bug #50788 [Validator] Fix regression with class metadatada on parent classes (@rmikalkenas)
bug #51030 [Intl] Fixed directory traversal in emoji compression tool (@rlandgrebe)
bug #51017 [VarExporter] Fix exporting classes with __serialize() but not __unserialize() (@fancyweb)
bug #51031 Fix deprecations on PHP 8.3 (@nicolas-grekas)
bug #51000 [WebProfilerBundle] Fix error in case of ‚Content-Type‘ set null in dev environment with no debug (@alexbuyanow)
bug #50985 [DependencyInjection] Fix fetching lazy non-shared services multiple times (@HypeMC)
bug #50994 [ErrorHandler][Runtime] Don’t mess with ini_set(‚assert.warning‘) (@nicolas-grekas)
bug #50988 [DependencyInjection] Run the ResolveFactoryClassPass when lint:container builds the container from a dump (@MatTheCat)
bug #50968 [PropertyAccess] Fix access to undefined „file“ key when checking stack frames (@nicolas-grekas)
bug #50552 [Security] Allow custom scheme to be used as redirection URIs (@Spomky)
bug #50945 [DebugBundle][FrameworkBundle] Fix using the framework without the Console component (@HypeMC)
bug #50913 [HttpKernel][WebProfilerBundle] Fix search feature (Cyril HERRERA)
bug #50963 [Messenger] do not listen to signals if the pcntl extension is missing (@xabbuh)
bug #50937 [Form] fetch all known ChoiceType values at once (@xabbuh)
bug #50944 [FrameworkBundle] Add missing monolog channel tag to the messenger:failed:retry command (@HypeMC)
bug #49070 [RateLimiter] fix incorrect retryAfter of FixedWindow (@RobertMe)
bug #50960 [VarDumper] Fix dumping ArrayObject with DumpDataCollector (@lyrixx, @HypeMC)
bug #50943 [Intl] Taking into account bibliographic + overlong (@oleg-andreyev)
bug #50954 [PhpUnitBridge] Kill the last concurrent process when it stales for more than 60s (@nicolas-grekas)
bug #50893 [Notifier] Fix Esendex messages serialization (@raphael-geffroy)
bug #50475 [FrameworkBundle] Prevent cache:clear to lose files on subsequent runs (@Okhoshi)
bug #47252 [PhpUnitBridge] Use triggering class to generate baseline for deprecation messages from DebugClassLoader (@leongersen)
bug #50582 [Security/Http] Fix false-string handling in RememberMeAuthenticator (@ossinkine)
bug #50595 [DependencyInjection] Don’t ignore attributes on the actual decorator (@HypeMC)
bug #50804 [Serializer] Fix Normalizer not utilizing converted name for index variadic param (@DidierLmn)
bug #50813 [DoctrineBridge] Load refreshed user proxy (@MatTheCat)
bug #50905 [DepdencyInjection] Fix costly logic when checking errored definitions (@nicolas-grekas)
bug #50884 [Finder] Fix initial directory is opened twice (@mvorisek)
bug #50818 [Scheduler] Fix PeriodicalTrigger from argument for stateful run dates (@StanJansen)
bug #50881 [Messenger] Fix passing options set via tags to handler descriptors (@nicolas-grekas)
feature #50838 [DoctrineBridge] Remove outdated comment (@HeahDude)
bug #50837 [DependencyInjection] Fix autocasting null env values to empty string (@fancyweb)
bug #50819 [SecurityBundle] Do not translate Bearer header’s error_description (@MatTheCat)
bug #50793 [DependencyInjection] Fix resource tracking for lazy services (@nicolas-grekas)
bug #50810 [String] Fix Inflector for ’status‘ (@evertharmeling)
bug #50776 [Serializer] Fix type error not be accessed before initialization (@shyim)

Want to upgrade to this new release? Because Symfony protects
backwards-compatibility very closely, this should be quite easy. Use
SymfonyInsight upgrade reports
to detect the code you will need to change in your project and
read our upgrade
documentation to learn more.

Want to be notified whenever a new Symfony release is published? Or when a
version is not maintained anymore? Or only when a security issue is fixed?
Consider subscribing to the Symfony Roadmap Notifications.

Symfony Blog

Read More