`JsonApi\ItemNormalizer::denormalize()` is called twice resulting in nulled input properties

[daFish]

API Platform version(s) affected: 4.2.17

Description
After PR #7779, AbstractItemNormalizer::supportsDenormalization() returns true for input DTOs during serializer re-entry (via the api_platform_input flag).
For JSON:API, this causes JsonApi\ItemNormalizer to claim the DTO and attempt to extract data.attributes from already-flat data, yielding an empty array.

The flow:

1. JsonApi\ItemNormalizer::denormalize() unwraps data.attributes → flat array
2. AbstractItemNormalizer detects input DTO → re-enters serializer with flat data
3. JsonApi\ItemNormalizer::supportsDenormalization() now returns true (new flag)
4. JsonApi\ItemNormalizer::denormalize() runs again on flat data → $data['data']['attributes'] is null → empty
5. Input DTO properties are all null

[soyuka]

#7785 duplicate (will release a patch today)

[daFish]

@soyuka I have tested the new version but it still fails. This affects every POST/PATCH operation that uses input: DTOs with JSON:API format. All resources using map: false with input DTOs are broken.

[soyuka]

https://github.com/api-platform/core/releases/tag/v4.2.19 should fix it sorry for the trouble #7779 was risky and we were missing tests on this use case!

[daFish]

Great, thank you. This worked.