[10.2] Dependency bumps for release 10.2.0

[phil-davis]

Description

After these commits:

make
Building core

Note: You can type 'make help' for more targets

php /usr/bin/composer install
Loading composer repositories with package information
Installing dependencies (including require-dev) from lock file
Package operations: 0 installs, 9 updates, 0 removals
  - Updating symfony/debug (v3.4.24 => v3.4.26): Loading from cache
  - Updating symfony/console (v3.4.24 => v3.4.26): Loading from cache
  - Updating symfony/event-dispatcher (v3.4.24 => v3.4.26): Loading from cache
  - Updating symfony/process (v3.4.24 => v3.4.26): Loading from cache
  - Updating symfony/routing (v3.4.24 => v3.4.26): Loading from cache
  - Updating symfony/translation (v3.4.24 => v3.4.26): Loading from cache
  - Updating mikey179/vfsstream (v1.6.5 => v1.6.6): Loading from cache
  - Updating theseer/tokenizer (1.1.0 => 1.1.2): Loading from cache

From stable10 PRs #35004 #35034 #35048

I included #35004 because that also modifies composer.lock and so needed to be cherry-picked first. Otherwise, if you want me to exclude those dependency bumps then I have to mess about more with individual composer commands.

Motivation and Context

Apply dependencies to 10.2 - specially those for Symfony 3.4.26 that has various CVEs.

How Has This Been Tested?

CI

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Database schema changes (next release will require increase of minor version instead of patch)
• Breaking change (fix or feature that would cause existing functionality to change)
• Technical debt
• Tests only (no source changes)

Checklist:

• Code changes
• Unit tests added
• Acceptance tests added
• Documentation ticket raised:

[PVince81]

👍

let's hope this won't affect any major things that we're currently testing

[phil-davis]

These have all been passing CI in master and stable10 and no developers (including me) have noticed any problems.

[codecov]

Codecov Report

Merging #35062 into release-10.2.0 will not change coverage.
The diff coverage is n/a.

@@                Coverage Diff                @@
##             release-10.2.0   #35062   +/-   ##
=================================================
  Coverage             64.29%   64.29%           
  Complexity            20040    20040           
=================================================
  Files                  1285     1285           
  Lines                 76824    76824           
  Branches               1307     1307           
=================================================
  Hits                  49393    49393           
  Misses                27050    27050           
  Partials                381      381

Flag	Coverage Δ	Complexity Δ
#javascript	53.01% <ø> (ø)	0 <ø> (ø)	⬇️
#phpunit	65.49% <ø> (ø)	20040 <ø> (ø)	⬇️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1c7b738...18d2a75. Read the comment docs.

[codecov]

Codecov Report

Merging #35062 into release-10.2.0 will not change coverage.
The diff coverage is n/a.

@@                Coverage Diff                @@
##             release-10.2.0   #35062   +/-   ##
=================================================
  Coverage             64.29%   64.29%           
  Complexity            20040    20040           
=================================================
  Files                  1285     1285           
  Lines                 76824    76824           
  Branches               1307     1307           
=================================================
  Hits                  49393    49393           
  Misses                27050    27050           
  Partials                381      381

Flag	Coverage Δ	Complexity Δ
#javascript	53.01% <ø> (ø)	0 <ø> (ø)	⬇️
#phpunit	65.49% <ø> (ø)	20040 <ø> (ø)	⬇️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1c7b738...18d2a75. Read the comment docs.