Merge branch '7.3' into 7.4

* 7.3:
  [SecurityBundle] Fix semantic configuration for singulars/plurals in XML
  [JsonPath] Make the component RFC compliant
  Fix `#[IsCsrfTokenValid]` to ensure `$tokenKey` is non-nullable

Author: nicolas-grekas