| ⇢ | A | ResetPasswordType added | |
| ⇢ | A | ForgotPasswordType added | 
| ⇢ | C | AbstractSecurityController::resetPasswordAction() added | |
| ⇢ | B | AbstractSecurityController::forgotPasswordAction() added | |
| ⇢ | A | ResetPasswordType::buildForm() added | |
| ⇢ | A | ResetPasswordType::configureOptions() added | |
| ⇢ | A | AbstractSecurityController::updateUser() added | |
| ⇢ | A | ForgotPasswordType::buildForm() added | |
| ⇢ | A | ForgotPasswordType::configureOptions() added | |
| ⇢ | A | AbstractSecurityController::getTokenManager() added | |
| ⇢ | A | AbstractSecurityController::getMessenger() added | |
| A | ↛ | UserTrait::setPasswordRequestedAt() removed | |
| A | ↛ | UserTrait::setPasswordRequestToken() removed | |
| A | ↛ | UserTrait::isPasswordRequestNonExpired() removed | |
| A | ↛ | UserTrait::getPasswordRequestedAt() removed | |
| A | ↛ | UserTrait::getPasswordRequestToken() removed |