symfony/ux-live-component

When a `#[LiveProp]` is typed as `DateTimeInterface` and no explicit `format` is configured, `hydrateObjectValue()` now parses for

BatchActionController now enforces an upper bound of 50 actions per _batch request and rejects larger payloads with a BadRequestHt

ChildComponentPartialRenderer now validates $childTag against a strict HTML tag-name regex before interpolating it, rejecting inva

The HMAC checksum for LiveComponent props now includes the component name and slot identifier (props vs propsFromParent) to preven

LiveComponent requests now require the `X-Requested-With: XMLHttpRequest` header in addition to the `Accept` header to prevent CSR