Bump the php-prod group across 1 directory with 16 updates - #649
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the php-prod group across 1 directory with 16 updates#649dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the php-prod group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [beberlei/assert](https://github.com/beberlei/assert) | `3.3.3` | `3.3.4` | | [doctrine/dbal](https://github.com/doctrine/dbal) | `3.10.5` | `3.10.6` | | [doctrine/doctrine-bundle](https://github.com/doctrine/DoctrineBundle) | `2.18.2` | `2.18.4` | | [doctrine/orm](https://github.com/doctrine/orm) | `3.6.5` | `3.6.7` | | [symfony/expression-language](https://github.com/symfony/expression-language) | `7.4.8` | `7.4.14` | | [symfony/flex](https://github.com/symfony/flex) | `2.10.0` | `2.11.0` | | [symfony/form](https://github.com/symfony/form) | `7.4.9` | `7.4.14` | | [symfony/runtime](https://github.com/symfony/runtime) | `7.4.1` | `7.4.14` | | [symfony/security-bundle](https://github.com/symfony/security-bundle) | `7.4.11` | `7.4.14` | | [symfony/translation](https://github.com/symfony/translation) | `7.4.10` | `7.4.14` | | [symfony/twig-bundle](https://github.com/symfony/twig-bundle) | `7.4.8` | `7.4.15` | | [symfony/webpack-encore-bundle](https://github.com/symfony/webpack-encore-bundle) | `2.4.0` | `2.4.1` | Updates `beberlei/assert` from 3.3.3 to 3.3.4 - [Release notes](https://github.com/beberlei/assert/releases) - [Changelog](https://github.com/beberlei/assert/blob/master/CHANGELOG.md) - [Commits](beberlei/assert@v3.3.3...v3.3.4) Updates `doctrine/dbal` from 3.10.5 to 3.10.6 - [Release notes](https://github.com/doctrine/dbal/releases) - [Commits](doctrine/dbal@3.10.5...3.10.6) Updates `doctrine/doctrine-bundle` from 2.18.2 to 2.18.4 - [Release notes](https://github.com/doctrine/DoctrineBundle/releases) - [Commits](doctrine/DoctrineBundle@2.18.2...2.18.4) Updates `doctrine/orm` from 3.6.5 to 3.6.7 - [Release notes](https://github.com/doctrine/orm/releases) - [Commits](doctrine/orm@3.6.5...3.6.7) Updates `symfony/config` from 7.4.10 to 7.4.15 - [Release notes](https://github.com/symfony/config/releases) - [Changelog](https://github.com/symfony/config/blob/8.2/CHANGELOG.md) - [Commits](symfony/config@v7.4.10...v7.4.15) Updates `symfony/console` from 7.4.11 to 7.4.15 - [Release notes](https://github.com/symfony/console/releases) - [Changelog](https://github.com/symfony/console/blob/8.2/CHANGELOG.md) - [Commits](symfony/console@v7.4.11...v7.4.15) Updates `symfony/expression-language` from 7.4.8 to 7.4.14 - [Release notes](https://github.com/symfony/expression-language/releases) - [Changelog](https://github.com/symfony/expression-language/blob/8.2/CHANGELOG.md) - [Commits](symfony/expression-language@v7.4.8...v7.4.14) Updates `symfony/flex` from 2.10.0 to 2.11.0 - [Release notes](https://github.com/symfony/flex/releases) - [Commits](symfony/flex@v2.10.0...v2.11.0) Updates `symfony/form` from 7.4.9 to 7.4.14 - [Release notes](https://github.com/symfony/form/releases) - [Changelog](https://github.com/symfony/form/blob/8.2/CHANGELOG.md) - [Commits](symfony/form@v7.4.9...v7.4.14) Updates `symfony/http-foundation` from 7.4.13 to 7.4.15 - [Release notes](https://github.com/symfony/http-foundation/releases) - [Changelog](https://github.com/symfony/http-foundation/blob/8.2/CHANGELOG.md) - [Commits](symfony/http-foundation@v7.4.13...v7.4.15) Updates `symfony/runtime` from 7.4.1 to 7.4.14 - [Release notes](https://github.com/symfony/runtime/releases) - [Changelog](https://github.com/symfony/runtime/blob/8.2/CHANGELOG.md) - [Commits](symfony/runtime@v7.4.1...v7.4.14) Updates `symfony/security-bundle` from 7.4.11 to 7.4.14 - [Release notes](https://github.com/symfony/security-bundle/releases) - [Changelog](https://github.com/symfony/security-bundle/blob/8.2/CHANGELOG.md) - [Commits](symfony/security-bundle@v7.4.11...v7.4.14) Updates `symfony/translation` from 7.4.10 to 7.4.14 - [Release notes](https://github.com/symfony/translation/releases) - [Changelog](https://github.com/symfony/translation/blob/8.2/CHANGELOG.md) - [Commits](symfony/translation@v7.4.10...v7.4.14) Updates `symfony/twig-bundle` from 7.4.8 to 7.4.15 - [Release notes](https://github.com/symfony/twig-bundle/releases) - [Changelog](https://github.com/symfony/twig-bundle/blob/8.2/CHANGELOG.md) - [Commits](symfony/twig-bundle@v7.4.8...v7.4.15) Updates `symfony/webpack-encore-bundle` from 2.4.0 to 2.4.1 - [Release notes](https://github.com/symfony/webpack-encore-bundle/releases) - [Changelog](https://github.com/symfony/webpack-encore-bundle/blob/2.x/CHANGELOG.md) - [Commits](symfony/webpack-encore-bundle@v2.4.0...v2.4.1) Updates `twig/twig` from 3.27.0 to 3.28.0 - [Release notes](https://github.com/twigphp/Twig/releases) - [Changelog](https://github.com/twigphp/Twig/blob/3.x/CHANGELOG) - [Commits](twigphp/Twig@v3.27.0...v3.28.0) --- updated-dependencies: - dependency-name: beberlei/assert dependency-version: 3.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: doctrine/dbal dependency-version: 3.10.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: doctrine/doctrine-bundle dependency-version: 2.18.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: doctrine/orm dependency-version: 3.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: symfony/config dependency-version: 7.4.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: symfony/console dependency-version: 7.4.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: symfony/expression-language dependency-version: 7.4.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: symfony/flex dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-prod - dependency-name: symfony/form dependency-version: 7.4.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: symfony/http-foundation dependency-version: 7.4.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: symfony/runtime dependency-version: 7.4.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: symfony/security-bundle dependency-version: 7.4.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: symfony/translation dependency-version: 7.4.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: symfony/twig-bundle dependency-version: 7.4.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: symfony/webpack-encore-bundle dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-prod - dependency-name: twig/twig dependency-version: 3.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-prod ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the php-prod group with 12 updates in the / directory:
3.3.33.3.43.10.53.10.62.18.22.18.43.6.53.6.77.4.87.4.142.10.02.11.07.4.97.4.147.4.17.4.147.4.117.4.147.4.107.4.147.4.87.4.152.4.02.4.1Updates
beberlei/assertfrom 3.3.3 to 3.3.4Release notes
Sourced from beberlei/assert's releases.
Commits
f193f46Fix uuid() accepting {, }, and prefixes inside the string (#353)0962bb1Reject trailing newline in alnum, url and e164 (#352)7faccd8Fix copy-pasted docblock on base64 assertion (#351)db78955Add PHP 8.5 to CI (#346)8c10bf1Update GitHub Action versions (#347)Updates
doctrine/dbalfrom 3.10.5 to 3.10.6Release notes
Sourced from doctrine/dbal's releases.
Commits
c95589dfix(MariaDb): add support of new reserved wordTO_DATE(12.3+) (#7391)20af8cdMerge pull request #7458 from morozov/implicit-indexes-docsfdec68dExplain the real reason implicit indexes exist3e57250Merge pull request #7412 from doctrine/dependabot/github_actions/3.10.x/actio...a174732Bump actions/checkout from 6 to 73b365acMerge pull request #7397 from doctrine/dependabot/github_actions/3.10.x/codec...c403f17Merge pull request #7396 from doctrine/dependabot/github_actions/3.10.x/doctr...b13b644Bump codecov/codecov-action from 6 to 7fa7f556Bump the doctrine group with 4 updatesbb13e17Merge pull request #7378 from doctrine/dependabot/github_actions/3.10.x/zulip...Updates
doctrine/doctrine-bundlefrom 2.18.2 to 2.18.4Release notes
Sourced from doctrine/doctrine-bundle's releases.
Commits
175f8ffFix dark theme time bar colors in the profiler6316ebcFix doctrine:database:create failing without server_version for some connectionsc747e6aAdd functional regression test for EntityValueResolver on primary-key routes ...bf7ba3fMerge pull request #2250 from doctrine/dependabot/github_actions/2.18.x/actio...fcc6503Bump actions/checkout from 6 to 7d77d740Merge pull request #2249 from doctrine/dependabot/github_actions/2.18.x/doctr...6345c49Bump the doctrine group with 6 updates7315e32Merge pull request #2246 from greg0ire/downgrade-ed59cdfbbApply latest coding standardsff91106Downgrade event-dispatcherUpdates
doctrine/ormfrom 3.6.5 to 3.6.7Release notes
Sourced from doctrine/orm's releases.
Commits
bc217c0Merge pull request #12486 from greg0ire/3.6.xe75a435Merge remote-tracking branch 'origin/2.20.x' into 3.6.xf525f32Merge pull request #12482 from greg0ire/fix-el-formatting4689337Avoid passing arrays to get_class471b129Merge pull request #12477 from greg0ire/avoid-overwritef2530f2Merge pull request #12476 from greg0ire/def-expr-depr18977e0Avoid adding the same foreign key twice for STI54b4f4bAddress string default expression deprecation8b64c10Merge pull request #12475 from greg0ire/fix-job-labelsfdea8dcUse correct matrix element nameUpdates
symfony/configfrom 7.4.10 to 7.4.15Release notes
Sourced from symfony/config's releases.
Commits
b18e338[Config] Accept env placeholders for scalar alternatives in generated array-s...cf3e089Merge branch '6.4' into 7.4977d47c[Config] Keep "*/" default values readable by escaping the slashe39cdd9[Config] Escape comment-closing sequence in generated config builders7b665e4Merge branch '6.4' into 7.4922d980Harden __toString trampolines via __unserialize()c6343f4Merge branch '6.4' into 7.41152f21Unsafe unserialize phpstan rule992eb8eMerge branch '6.4' into 7.456b43e9Drop PR warning and auto-closing on subtree splitsUpdates
symfony/consolefrom 7.4.11 to 7.4.15Release notes
Sourced from symfony/console's releases.
Commits
088ec6fMerge branch '6.4' into 7.43b643aa[Console] Decorate stdout and stderr independently when a formatter is injected8b00823Merge branch '6.4' into 7.4ac2d6aebug #64843 [Console] Fix table borders around colspan cells and header-less t...f2ae6d8[Console] Fix table borders around colspan cells and header-less tables0ecccdf[Console] Fix two ValueError crashes on multibyte / multi-column widths5e0e5b8Merge branch '6.4' into 7.48693e05[Console] Fall back to "stty sane" when restoring the captured terminal state...91fbf79Merge branch '6.4' into 7.45cbb467[Console] Fix SymfonyStyle questions when using output sectionsUpdates
symfony/expression-languagefrom 7.4.8 to 7.4.14Release notes
Sourced from symfony/expression-language's releases.
Commits
bd5763fMerge branch '6.4' into 7.4728f0c4Unsafe unserialize phpstan ruleda18576Merge branch '6.4' into 7.404007e7Drop PR warning and auto-closing on subtree splitsb47bf60Update XSD references in phpunit.xml.dist files0f034c3Merge branch '6.4' into 7.4cd88d0fCS fixes - native_function_invocation & static_lambda0a3916bBackport some CS fixes from 7.4696937d[CS] Back config from 8.1 and apply heredoc_indentation rule20314d6Add deprecationTrigger ignoreUndefinedTriggers="true" in phpunit.xml.dist filesUpdates
symfony/flexfrom 2.10.0 to 2.11.0Release notes
Sourced from symfony/flex's releases.
Commits
4a6d98ebug #1090 [DockerComposeConfigurator] Fix duplicate top-level key on reconfig...3446c0f[DockerComposeConfigurator] Fix duplicate top-level key on reconfigure1b27cd3bug #1083 Fix "null as array offset" deprecation in DockerComposeConfigurator...acdf466feature #1077 AddSYMFONY_ALLOW_CONTRIBvariable (GromNaN)bd9c559AddSYMFONY_ALLOW_CONTRIBvariablef5c68e3minor #1056 Upgrade to PHPUnit 12 (HypeMC)e67bbcdUpgrade to PHPUnit 126581d4dfeature #1087 Add --no-changelog option to recipes:update (7ochem)48cad51Add --no-changelog option to recipes:update168d502bug #1091 Fix resolving aliases when runningcomposer req(nicolas-grekas)Updates
symfony/formfrom 7.4.9 to 7.4.14Release notes
Sourced from symfony/form's releases.
Commits
355e956Merge branch '6.4' into 7.480fe97ddata #64602 [Form][Validator] Review Hungarian translations (antalaron)dcfce83[Form][Validator] Review Hungarian translationseaee5e7Merge branch '6.4' into 7.46e4fa40[Form][Validator] Ukrainian translation review and updateab29f4cdata #64597 Review Indonesian (id) translations (sawirricardo)0abe2f6[Translation] Verify Tagalog (tl) validator strings and remove needs-review f...aac1d3ffix Indonesian (id) translations reviewed by native speaker1a3bec7Merge branch '6.4' into 7.47ecfaf8[Form][Validator] Review Bulgarian (bg) translationsUpdates
symfony/http-foundationfrom 7.4.13 to 7.4.15Release notes
Sourced from symfony/http-foundation's releases.
Commits
1f898eeMerge branch '6.4' into 7.4ea0c801bug #65023 [HttpFoundation] Validate the characters allowed in a cookie path ...464d13c[HttpFoundation] Fix TypeError in UriSigner when the hash parameter is not a ...eb5b7f9[HttpFoundation] Reject reserved characters in the cookie path and domain4e13f71[HttpFoundation] Fix newline handling in server event fields6516dc3bug #65001 [HttpFoundation] Fix retry field being dropped across server event...a477c9f[HttpFoundation] Fix retry field being dropped across server event streams2ceb4c4Merge branch '6.4' into 7.4f34d2dd[HttpFoundation] Throw when IpUtils::isPrivateIp() receives a non-canonical I...b98fde6Merge branch '6.4' into 7.4Updates
symfony/runtimefrom 7.4.1 to 7.4.14Release notes
Sourced from symfony/runtime's releases.
Commits
15497f7Merge branch '6.4' into 7.4b0eb951Drop PR warning and auto-closing on subtree splits4bf8c6aRemove usage of Kernel::VERSION758139a[Runtime][FrameworkBundle] Trust argv on CLI-like SAPIs in the remaining QUER...e1eefc0Merge branch '6.4' into 7.4daae8b3Merge branch '5.4' into 6.4f24aa13[Runtime] Trust argv on CLI-like SAPIs to fix subprocess args5c2c5bdMerge branch '6.4' into 7.4ecaabebMerge branch '5.4' into 6.47e9d038[Runtime] Fix CVE-2024-50340 patch bypass by gating argv on $_SERVER['QUERY_S...Updates
symfony/security-bundlefrom 7.4.11 to 7.4.14Release notes
Sourced from symfony/security-bundle's releases.
Commits
6ec147eMerge branch '6.4' into 7.4c74078b[SecurityBundle] Fix state leak in LogoutUrlGenerator in async environments89aad76Merge branch '6.4' into 7.4ca3b486Drop PR warning and auto-closing on subtree splits0cbc652Merge branch '6.4' into 7.4bcf0a9c[SecurityBundle] Fix Security::login() across firewalls6f6f859security #cve-2026-45074 [Security] Require configuring trusted hosts when us...a17c3dc[Security] Require configuring trusted hosts when using CAS authenticationUpdates
symfony/translationfrom 7.4.10 to 7.4.14Release notes
Sourced from symfony/translation's releases.
Commits
a1af4daMerge branch '6.4' into 7.4fef99ce[Translation] Fix test failing without the intl extension672dce0Merge branch '6.4' into 7.46dd831eDrop PR warning and auto-closing on subtree splitsf3accfeFix merge7010c88[Translation] Copy domains metadata when moving messages to intl onesfaf89d6Merge branch '6.4' into 7.4f7123e5[Translation] Fix XLIFF 2 catalog metadata96c29f6Merge branch '6.4' into 7.4fc60adf[ErrorHandler][HttpClient][Translation] Fix edge case spotted by the CIUpdates
symfony/twig-bundlefrom 7.4.8 to 7.4.15Release notes
Sourced from symfony/twig-bundle's releases.
Commits
e3d2beaMerge branch '6.4' into 7.415bad71allow Twig 411b69c6Merge branch '6.4' into 7.49175957Drop PR warning and auto-closing on subtree splits83990efRemove usage of Kernel::VERSION745f184Update XSD references in phpunit.xml.dist files6b92609Merge branch '6.4' into 7.4130749fCS fixes - native_function_invocation & static_lambda36ff13b[CS] Back config from 8.1 and apply heredoc_indentation rule174e6b0Add deprecationTrigger ignoreUndefinedTriggers="true" in phpunit.xml.dist filesUpdates
symfony/webpack-encore-bundlefrom 2.4.0 to 2.4.1Release notes
Sourced from symfony/webpack-encore-bundle's releases.
Commits
cac8d6cminor #261 Don't let Composer advisory blocking break CI (Kocal)cb3dd07Don't let Composer advisory blocking break CI9edab87minor #259 Add Zizmor, Dependabot, and upgrade+pin actions (Kocal)42e1d0cAdd Zizmor, Dependabot, and upgrade+pin actionsfee5542minor #256 Update .gitattributes (gharlan)c1c96ddbug #258 Fix Symfony 8.1 DependencyInjection deprecation warning (30Sana)2bee63bFix Symfony 8.1 DependencyInjection deprecation warning4286633Update .gitattributesUpdates
twig/twigfrom 3.27.0 to 3.28.0Release notes
Sourced from Description has been truncated