diff --git a/CHANGELOG-6.3.md b/CHANGELOG-6.3.md
index 9d3308e979be8..c54a8ba138554 100644
--- a/CHANGELOG-6.3.md
+++ b/CHANGELOG-6.3.md
@@ -7,6 +7,42 @@ in 6.3 minor versions.
 To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
 To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v6.3.0...v6.3.1
 
+* 6.3.5 (2023-09-30)
+
+ * bug #51773 [Mailer] [Mailgun] Fix outlook sender (Romanavr)
+ * bug #50761 [DoctrineBridge] Ignore invalid stores in `LockStoreSchemaListener` raised by `StoreFactory` (alexandre-daubois)
+ * bug #51508 [Messenger] Fix routing to multiple fallback transports (valtzu)
+ * bug #51468 [Messenger] Fix forced bus name gone after an error in delayed message handling (valtzu)
+ * bug #51509 [HttpKernel] Fix the order of merging of serializationContext and self::CONTEXT_DENORMALIZE (pedrocasado)
+ * bug #51701 [Serializer] Fix parsing XML root node attributes (mtarld)
+ * bug #50787 [Messenger] Fix exiting `messenger:failed:retry` command (HypeMC)
+ * bug #49700 [Serializer] Fix reindex normalizedData array in AbstractObjectNormalizer::denormalize() (André Laugks)
+ * bug #51489 [Mime] Fix email (de)serialization issues (X-Coder264)
+ * bug #51529 [Mailer] [Mailgun] fix parsing of payload timestamp to event date value (DateTimeImmutable) in MailgunPayloadConverter (ovgray)
+ * bug #51728 [AssetMapper] Fixing jsdelivr regex to catch 2x export syntax in a row (weaverryan)
+ * bug #51726 [Validator] NoSuspiciousCharacters custom error messages fix (bam1to)
+ * bug #51588 [FrameworkBundle] Always use buildDir as `ConfigBuilderGenerator` outputDir (HypeMC)
+ * bug #51754 [Cache] Fix Redis6Proxy (nicolas-grekas)
+ * bug #51721 [Notifier][Telegram] Add escaping for slashes (igrizzli)
+ * bug #51704 [Routing] Fix routing collection defaults when adding a new route to a collection (bram123)
+ * bug #51675 [Messenger] Fix cloned TraceableStack not unstacking the stack independently  (krciga22)
+ * bug #51198 [DependencyInjection] Fix autocasting `null` env values to empty string with `container.env_var_processors_locator` (fancyweb)
+ * bug #51683 [Cache] Fix support for Redis Sentinel using php-redis 6.0.0 (Qonstrukt)
+ * bug #51686 [SecurityBundle][PasswordHasher] Fix password migration with custom hasher service with security bundle config (ogizanagi)
+ * bug #51669 [FrameworkBundle] Handle tags array attributes in descriptors (fancyweb)
+ * bug #51671 [FrameworkBundle] Fix support for `translator.default_path` in XML (HeahDude)
+ * bug #51659 [HttpClient] Fix TraceableResponse if response has no destruct method (maxhelias)
+ * bug #51629 [Notifier] Fix Smsmode HttpClient mandatory headers (inwebo)
+ * bug #51674 [Scheduler] Match next run timezone with "from" timezone (valtzu)
+ * bug #51598 [Cache] fix using multiple Redis Sentinel hosts when the first one is not resolvable (digilist)
+ * bug #51497 [FrameworkBundle] no serializer mapping cache in debug mode without enable_annotations (soyuka)
+ * bug #51645 [String] Update wcswidth data with Unicode 15.1 (fancyweb)
+ * bug #51586 [ErrorHandler] Handle PHP 8.3 `highlight_file` function output changes  (PhilETaylor)
+ * bug #47221 [Serializer] Fallback looking for DiscriminatorMap on interfaces (Caligone)
+ * bug #50794 [TwigBridge] Change return type of Symfony\Bridge\Twig\AppVariable::getSession() (Dirkhuethorst)
+ * bug #51568 [Mailer] bug - fix EsmtpTransport variable $code definition (kgnblg)
+ * bug #51511 [PasswordHasher] Avoid passing `null` to `hash_pbkdf2()` (sdespont)
+
 * 6.3.4 (2023-08-26)
 
  * bug #51475 [Serializer] Fix union of enum denormalization (mtarld)
diff --git a/src/Symfony/Component/HttpKernel/Kernel.php b/src/Symfony/Component/HttpKernel/Kernel.php
index 94e886b49f63c..be4c9e15bc651 100644
--- a/src/Symfony/Component/HttpKernel/Kernel.php
+++ b/src/Symfony/Component/HttpKernel/Kernel.php
@@ -76,12 +76,12 @@ abstract class Kernel implements KernelInterface, RebootableInterface, Terminabl
      */
     private static array $freshCache = [];
 
-    public const VERSION = '6.3.5-DEV';
+    public const VERSION = '6.3.5';
     public const VERSION_ID = 60305;
     public const MAJOR_VERSION = 6;
     public const MINOR_VERSION = 3;
     public const RELEASE_VERSION = 5;
-    public const EXTRA_VERSION = 'DEV';
+    public const EXTRA_VERSION = '';
 
     public const END_OF_MAINTENANCE = '01/2024';
     public const END_OF_LIFE = '01/2024';

<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Transitional//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>
<html xmlns='http://www.w3.org/1999/xhtml'>
<head>
<title>pFad - Phonifier reborn</title>
<meta http-equiv='Content-Type' content='text/html; charset=utf-8' />
</head>
<body>
<h1>Pfad - The Proxy pFad of &#169; 2024 Garber Painting. All rights reserved.</h1>


<!-- Disclaimer -->
<p>Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.</p>
<br>
<p>Alternative Proxies:</p><p><a href="http://rainy.clevelandohioweatherforecast.com/php-proxy/index.php?q=https://patch-diff.githubusercontent.com/raw/symfony/symfony/pull/51788.diff" target="_blank">Alternative Proxy</a></p><p><a href="http://rainy.clevelandohioweatherforecast.com/pFad/index.php?u=https://patch-diff.githubusercontent.com/raw/symfony/symfony/pull/51788.diff" target="_blank">pFad Proxy</a></p><p><a href="http://rainy.clevelandohioweatherforecast.com/pFad/v3index.php?u=https://patch-diff.githubusercontent.com/raw/symfony/symfony/pull/51788.diff" target="_blank">pFad v3 Proxy</a></p><p><a href="http://rainy.clevelandohioweatherforecast.com/pFad/v4index.php?u=https://patch-diff.githubusercontent.com/raw/symfony/symfony/pull/51788.diff" target="_blank">pFad v4 Proxy</a></p></body>
</html>