updated VERSION for 2.2.8
[Validator] Simplified usage of the Callback constraint
bumped Symfony version to 2.2.9
Merge branch '2.2' into 2.3

* 2.2:
  bumped Symfony version to 2.2.9
  updated VERSION for 2.2.8
  updated CHANGELOG for 2.2.8
  bumped the version
  fixed typo
  updated VERSION for 2.2.7
  update CONTRIBUTORS for 2.2.7
  updated CHANGELOG for 2.2.7
  bugix: CookieJar returns cookies with domain "domain.com" for domain "foodomain.com"

Conflicts:
	src/Symfony/Component/HttpKernel/Kernel.php
form_debug.xml should be loaded only if form config is enabled
[Routing] removed extra argument
merged branch tyx/fix/form-profiling (PR #9137)

This PR was merged into the master branch.

Discussion
----------

[Form] form_debug.xml should be loaded only if form config is enabled

| Q             | A
| ------------- | ---
| Bug fix?      | yes
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets |  -
| License       | MIT
| Doc PR        | -

Explication here:
https://github.com/symfony/symfony/commit/1972a916539d0bb877df9b16d373c272edd20cfd#commitcomment-4187567

Commits
-------

b668e24 form_debug.xml should be loaded only if form config is enabled
merged branch bschussek/issue2480 (PR #9133)

This PR was merged into the master branch.

Discussion
----------

[Validator] Simplified usage of the Callback constraint

| Q             | A
| ------------- | ---
| Bug fix?      | no
| New feature?  | yes
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | fixes #2480, replaces #3939
| License       | MIT
| Doc PR        | symfony/symfony-docs#3012

Commits
-------

cccb1db [Validator] Simplified usage of the Callback constraint
[DependencyInjection] Prevented inlining of lazy loaded private service definitions.
minor#9120 Update FormTypeCsrfExtension.php (tweini)

This PR was merged into the master branch.

Discussion
----------

Update FormTypeCsrfExtension.php

There is no need to store the FormFactory in an Attribute.
The FormFactory can be retrieved directly.

Commits
-------

90d59ea Update FormTypeCsrfExtension.php
Set cost type to integer

This seems to be a remnant of when the code dealt with crypt() directly. The password_hash() function expects the cost option to be an LVAL (it does a type conversion for strings).
minor#9143 Set cost type to integer (datibbaw)

This PR was submitted for the master branch but it was merged into the 2.3 branch instead (closes #9143).

Discussion
----------

Set cost type to integer

This seems to be a remnant of when the code dealt with crypt() directly. The password_hash() function expects the cost option to be an LVAL (it does a type conversion for strings).

Commits
-------

93ec8bf Set cost type to integer
updated CHANGELOG for 2.3.5
updated VERSION for 2.3.5
[Security] Added CSRF sub-component
[Security] Changed Security HTTP sub-component to depend on CSRF sub-component instead of Form
[Form] Deprecated the CSRF implementation and added an optional dependency to the Security CSRF sub-component instead
[FrameworkBundle][SecurityBundle] Added service configuration for the new Security CSRF sub-component
bumped Symfony version to 2.3.6
added getLoaders() method