Skip to content

chore(deps): bump the composer group across 1 directory with 11 updates#3086

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/composer/examples/symfony/sample/composer-2ee574345f
Open

chore(deps): bump the composer group across 1 directory with 11 updates#3086
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/composer/examples/symfony/sample/composer-2ee574345f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the composer group with 10 updates in the /examples/symfony/sample directory:

Package From To
symfony/mime 7.2.4 7.4.12
symfony/runtime 7.2.3 7.4.12
symfony/yaml 7.2.5 7.4.12
twig/twig 3.26.0 3.27.0
symfony/cache 7.2.5 7.4.14
symfony/http-foundation 7.3.7 7.4.14
symfony/monolog-bridge 7.2.0 7.4.12
symfony/routing 7.2.3 7.4.13
symfony/security-http 7.2.4 7.4.14
symfony/dom-crawler 7.2.4 7.4.12

Updates symfony/mime from 7.2.4 to 7.4.12

Release notes

Sourced from symfony/mime's releases.

v7.4.12

Changelog (symfony/mime@v7.4.9...v7.4.12)

v7.4.9

Changelog (symfony/mime@v7.4.8...v7.4.9)

v7.4.8

Changelog (symfony/mime@v7.4.7...v7.4.8)

v7.4.7

Changelog (symfony/mime@v7.4.6...v7.4.7)

v7.4.6

Changelog (symfony/mime@v7.4.5...v7.4.6)

v7.4.5

Changelog (symfony/mime@v7.4.4...v7.4.5)

v7.4.4

Changelog (symfony/mime@v7.4.3...v7.4.4)

  • no significant changes

v7.4.0

Changelog (symfony/mime@v7.4.0-RC3...v7.4.0)

  • no significant changes

v7.4.0-RC2

Changelog (symfony/mime@v7.4.0-RC1...v7.4.0-RC2)

  • no significant changes

v7.4.0-RC1

Changelog (symfony/mime@v7.4.0-BETA2...v7.4.0-RC1)

  • no significant changes

... (truncated)

Changelog

Sourced from symfony/mime's changelog.

CHANGELOG

8.0

  • Replace __sleep/wakeup() by __(un)serialize() on AbstractPart implementations

7.4

  • Deprecate implementing __sleep/wakeup() on AbstractPart implementations; use __(un)serialize() instead

7.0

  • Remove Email::attachPart(), use Email::addPart() instead
  • Argument $body is now required (at least null) in Message::setBody()
  • Require explicit argument when calling Message::setBody()

6.3

  • Support detection of related parts if Content-Id is used instead of the name
  • Add TextPart::getDisposition()

6.2

  • Add File
  • Deprecate Email::attachPart(), use addPart() instead
  • Deprecate calling Message::setBody() without arguments

6.1

  • Add DataPart::getFilename() and DataPart::getContentType()

6.0

  • Remove Address::fromString(), use Address::create() instead
  • Remove Serializable interface from RawMessage

5.2.0

  • Add support for DKIM
  • Deprecated Address::fromString(), use Address::create() instead

... (truncated)

Commits
  • b198dd6 Merge branch '6.4' into 7.4
  • 7ccfb0c Merge branch '5.4' into 6.4
  • 8f89d3a [Mime] Reject email addresses containing line breaks in Address
  • 25d9bc3 Merge branch '6.4' into 7.4
  • f2f05cb [Mime] Fix transient test
  • 2d550c4 Merge branch '6.4' into 7.4
  • 330077b bug #64047 [Mime] Preserve inline part filename instead of overwriting it wit...
  • 4c7099f [Mime] Preserve inline part filename instead of overwriting it with the Conte...
  • e2ae51d [FrameworkBundle] Apply tagged MIME type guessers in File::getMimeType()
  • bcb284b Update XSD references in phpunit.xml.dist files
  • Additional commits viewable in compare view

Updates symfony/runtime from 7.2.3 to 7.4.12

Release notes

Sourced from symfony/runtime's releases.

v7.4.12

Changelog (symfony/runtime@v7.4.1...v7.4.12)

v7.4.8

Changelog (symfony/runtime@v7.4.7...v7.4.8)

  • no significant changes

v7.4.1

Changelog (symfony/runtime@v7.4.0...v7.4.1)

v7.4.0

Changelog (symfony/runtime@v7.4.0-RC3...v7.4.0)

  • no significant changes

v7.4.0-RC1

Changelog (symfony/runtime@v7.4.0-BETA2...v7.4.0-RC1)

  • no significant changes

v7.4.0-BETA2

Changelog (symfony/runtime@v7.4.0-BETA1...v7.4.0-BETA2)

v7.4.0-BETA1

Changelog (symfony/runtime@v7.3.4...v7.4.0-BETA1)

v7.3.8

Changelog (symfony/runtime@v7.3.7...v7.3.8)

v7.3.4

Changelog (symfony/runtime@v7.3.3...v7.3.4)

  • no significant changes

v7.3.1

... (truncated)

Changelog

Sourced from symfony/runtime's changelog.

CHANGELOG

8.1

  • Add resolveType() for customizing how types are resolved in runtimes extending SymfonyRuntime
  • Add support for apps returning a Response object in FrankenPhpWorkerRunner
  • Add FRANKENPHP_RESET_KERNEL to reset the kernel between requests

7.4

  • Add JSON encoded value support for APP_RUNTIME_OPTIONS
  • Add FrankenPhpWorkerRunner
  • Add automatic detection of FrankenPHP worker mode in SymfonyRuntime
  • Expose the runtime class in $_SERVER['APP_RUNTIME']
  • Expose the runtime options in $_SERVER['APP_RUNTIME_OPTIONS']
  • Make project_dir configurable in composer.json
  • Expose project_dir as APP_PROJECT_DIR env var

6.4

  • Add argument bool $debug = false to HttpKernelRunner::__construct()

5.4

  • The component is not experimental anymore
  • Add options "env_var_name" and "debug_var_name" to GenericRuntime and SymfonyRuntime
  • Add option "dotenv_overload" to SymfonyRuntime

5.3.0

  • Add the component
Commits

Updates symfony/yaml from 7.2.5 to 7.4.12

Release notes

Sourced from symfony/yaml's releases.

v7.4.12

Changelog (symfony/yaml@v7.4.11...v7.4.12)

v7.4.11

Changelog (symfony/yaml@v7.4.10...v7.4.11)

v7.4.10

Changelog (symfony/yaml@v7.4.6...v7.4.10)

v7.4.8

Changelog (symfony/yaml@v7.4.7...v7.4.8)

  • no significant changes

v7.4.6

Changelog (symfony/yaml@v7.4.5...v7.4.6)

v7.4.1

Changelog (symfony/yaml@v7.4.0...v7.4.1)

v7.4.0

Changelog (symfony/yaml@v7.4.0-RC3...v7.4.0)

  • no significant changes

v7.4.0-RC2

Changelog (symfony/yaml@v7.4.0-RC1...v7.4.0-RC2)

v7.4.0-RC1

Changelog (symfony/yaml@v7.4.0-BETA2...v7.4.0-RC1)

v7.4.0-BETA1

Changelog (symfony/yaml@v7.3.4...v7.4.0-BETA1)

... (truncated)

Changelog

Sourced from symfony/yaml's changelog.

CHANGELOG

8.0

  • Remove support for parsing duplicate mapping keys whose value is null

7.3

  • Add compact nested mapping support by using the Yaml::DUMP_COMPACT_NESTED_MAPPING flag
  • Add the Yaml::DUMP_FORCE_DOUBLE_QUOTES_ON_VALUES flag to enforce double quotes around string values

7.2

  • Deprecate parsing duplicate mapping keys whose value is null
  • Add support for dumping null as an empty value by using the Yaml::DUMP_NULL_AS_EMPTY flag

7.1

  • Add support for getting all the enum cases with !php/enum Foo

7.0

  • Remove the !php/const: tag, use !php/const instead (without the colon)

6.3

  • Add support to dump int keys as strings by using the Yaml::DUMP_NUMERIC_KEY_AS_STRING flag

6.2

  • Add support for !php/enum and !php/enum *->value
  • Deprecate the !php/const: tag in key which will be replaced by the !php/const tag (without the colon) since 3.4

6.1

  • In cases where it will likely improve readability, strings containing single quotes will be double-quoted

5.4

  • Add a $maxNestingLevel argument to Parser::__construct(), Yaml::parse() and Yaml::parseFile() to bound recursion depth (default 128)

... (truncated)

Commits
  • 8b6952b Merge branch '6.4' into 7.4
  • 68dcd1f Merge branch '5.4' into 6.4
  • b0b2705 [Yaml] Harden the Parser::cleanup() regexes against catastrophic backtracking
  • 5a351ff [Yaml] Bound collection-alias resolution in the parser
  • e2eb64a Merge branch '6.4' into 7.4
  • e4fb993 [Yaml] Reject non-stringables when using "!!binary"
  • b02ba66 [Yaml] Bound recursion depth in the parser
  • c660d65 Merge branch '6.4' into 7.4
  • f8d2f4a [Yaml] fix flow collection drops &anchor and !!str &anchor items
  • 563e765 Update XSD references in phpunit.xml.dist files
  • Additional commits viewable in compare view

Updates twig/twig from 3.26.0 to 3.27.0

Release notes

Sourced from twig/twig's releases.

v3.27.0

Changelog (twigphp/Twig@v3.26.0...v3.27.0)

  • security #558 Fix sandbox filter/tag/function allow-list bypass when sandbox state changes between renders (@​fabpot)
  • security #cve-2026-48805 Fix sandbox bypass in deprecated internal wrappers (@​fabpot)
  • security #552 Fix sandbox __toString policy bypass via dynamic mapping keys (@​fabpot)
  • security #535 Fix sandbox __toString bypasses via Traversable in join/replace filters and the in/not in operators (@​fabpot)
  • security #534 Fix sandbox bypass in the "column" filter under SourcePolicyInterface (@​fabpot)
  • feature #4817 Add a strict mode to SecurityPolicy to opt-in to the 4.0 sandbox behavior for the extends/use tags and the parent/block/attribute functions (@​fabpot)
  • feature #4813 Deprecate the fact that the parent, block, and attribute functions are always allowed in a sandboxed template (@​fabpot)
  • bug #4812 Fix PHP 8.1+ implicit float-to-int deprecation in sandboxed array access (@​fabpot)
  • bug #4807 Escape root profile name in HtmlDumper (@​fabpot)
  • bug #4808 Restrict allowed classes in Profile::unserialize() (@​fabpot)
  • feature #4803 Deprecate the "Twig\Sandbox\SourcePolicyInterface" interface (@​fabpot)
Changelog

Sourced from twig/twig's changelog.

3.27.0 (2026-05-27)

  • Add a strict mode to Twig\Sandbox\SecurityPolicy to opt-in to the 4.0 behavior for the extends/use tags and the parent/block/attribute functions, which are otherwise still implicitly allowed in a sandbox
  • Deprecate the fact that the parent, block, and attribute functions are always allowed in a sandboxed template
  • Fix sandbox filter/tag/function allow-list bypass when the sandbox state changed between renders of a cached Template instance
  • Fix PHP 8.1+ implicit float-to-int deprecation triggered by sandboxed ArrayAccess attribute access with a float key
  • Restrict allowed classes in Twig\Profiler\Profile::unserialize() to prevent arbitrary class instantiation
  • Escape root profile name in HtmlDumper
  • Fix sandbox bypass in deprecated internal wrappers twig_array_some(), twig_array_every(), and twig_check_arrow_in_sandbox() (src/Resources/core.php)
  • Deprecate the Twig\Sandbox\SourcePolicyInterface interface with no replacement
  • Fix sandbox bypass in the "column" filter when sandboxing is enabled via SourcePolicyInterface
  • Fix sandbox __toString bypass via Traversable arguments to the join and replace filters (also covers containers that implement both Stringable and Traversable)
  • Fix sandbox __toString bypass via the in and not in operators
  • Prevent a stack overflow in SandboxExtension::ensureToStringAllowed() when a self-referencing iterable is passed to a sandboxed template
  • Add support for any expression as a dynamic mapping key (attribute access, filters, ...)
  • Fix sandbox __toString policy bypass via dynamic mapping keys
Commits
  • 04ae1bf Prepare the 3.27.0 release
  • 99a1038 security #558 Fix sandbox filter/tag/function allow-list bypass when sandbox ...
  • 23eb6eb Fix sandbox filter/tag/function allow-list bypass when sandbox state changes ...
  • 7d55aa8 security #cve-2026-48805 Fix sandbox bypass in deprecated internal wrappers (...
  • 9fcf690 security #552 Fix sandbox __toString policy bypass via dynamic mapping keys (...
  • 635cea4 Document new support for any expression as a dynamic mapping key
  • 9ff4101 Fix sandbox __toString policy bypass via dynamic mapping keys
  • baebc46 security #535 Fix sandbox __toString bypasses via Traversable in join/`...
  • e3f6665 Fix deprecation notices in tests
  • 475fb69 Guard sandbox __toString walker against self-referencing iterables
  • Additional commits viewable in compare view

Updates symfony/cache from 7.2.5 to 7.4.14

Release notes

Sourced from symfony/cache's releases.

v7.4.14

Changelog (symfony/cache@v7.4.13...v7.4.14)

v7.4.13

Changelog (symfony/cache@v7.4.12...v7.4.13)

v7.4.12

Changelog (symfony/cache@v7.4.10...v7.4.12)

v7.4.10

Changelog (symfony/cache@v7.4.9...v7.4.10)

v7.4.9

Changelog (symfony/cache@v7.4.8...v7.4.9)

v7.4.8

Changelog (symfony/cache@v7.4.7...v7.4.8)

  • bug #63818 Ensure compatibility with Relay extension 0.21.0 (@​lyrixx)
  • bug #63747 Fix Psr16Cache::getMultiple() returning ValueWrapper with TagAwareAdapter (@​pcescon)
  • bug #63736 Fix undefined array key when tag save fails in AbstractTagAwareAdapter (@​pcescon)
  • bug #63655 Fix ChainAdapter ignoring item expiry when propagating to earlier adapters (@​guillaumeVDP)

v7.4.7

Changelog (symfony/cache@v7.4.6...v7.4.7)

v7.4.6

Changelog (symfony/cache@v7.4.5...v7.4.6)

  • bug #63437 Wrap DoctrineDbalAdapter::doSave() in savepoint to prevent transaction poisoning (@​lacatoire)

... (truncated)

Changelog

Sourced from symfony/cache's changelog.

CHANGELOG

8.0

  • Remove CouchbaseBucketAdapter, use CouchbaseCollectionAdapter instead

7.4

  • Bump ext-redis to 6.1 and ext-relay to 0.12 minimum

7.3

  • Add support for \Relay\Cluster in RedisAdapter
  • Add support for valkey: / valkeys: schemes
  • Add support for namespace-based invalidation
  • Rename options "redis_cluster" and "redis_sentinel" to "cluster" and "sentinel" respectively

7.2

  • igbinary_serialize() is no longer used instead of serialize() by default when the igbinary extension is installed, due to behavior compatibilities between the two
  • Add optional Psr\Clock\ClockInterface parameter to ArrayAdapter

7.1

  • Add option sentinel_master as an alias for redis_sentinel
  • Deprecate CouchbaseBucketAdapter, use CouchbaseCollectionAdapter
  • Add support for URL encoded characters in Couchbase DSN
  • Add support for using DSN with PDOAdapter
  • The algorithm for the default cache namespace changed from SHA256 to XXH128

7.0

  • Add parameter $isSameDatabase to DoctrineDbalAdapter::configureSchema()
  • Drop support for Postgres < 9.5 and SQL Server < 2008 in DoctrineDbalAdapter

6.4

  • EarlyExpirationHandler no longer implements MessageHandlerInterface, rely on AsMessageHandler instead

6.3

... (truncated)

Commits
  • 9adfcb2 Merge branch '6.4' into 7.4
  • 704edf2 [Cache] Ensure RelayProxy compatibility with Relay extension 0.30.0
  • 0f7dc34 [Cache] Ensure RelayClusterProxy compatibility with Relay extension 0.30.0
  • 82698be Restore compat with DBAL v4.x
  • da9142e Migrate table definitions to DBAL's TableEditor API
  • 9b4976b Merge branch '6.4' into 7.4
  • 654e10f Unsafe unserialize phpstan rule
  • 1bb79da Merge branch '6.4' into 7.4
  • 2a639ad Drop PR warning and auto-closing on subtree splits
  • dad10dd Migrate configureSchema() to DBAL's editor API
  • Additional commits viewable in compare view

Updates symfony/http-foundation from 7.3.7 to 7.4.14

Release notes

Sourced from symfony/http-foundation's releases.

v7.4.14

Changelog (symfony/http-foundation@v7.4.13...v7.4.14)

v7.4.13

Changelog (symfony/http-foundation@v7.4.7...v7.4.13)

v7.4.8

Changelog (symfony/http-foundation@v7.4.7...v7.4.8)

  • no significant changes

v7.4.7

Changelog (symfony/http-foundation@v7.4.6...v7.4.7)

v7.4.6

Changelog (symfony/http-foundation@v7.4.5...v7.4.6)

v7.4.5

Changelog (symfony/http-foundation@v7.4.4...v7.4.5)

v7.4.4

Changelog (symfony/http-foundation@v7.4.3...v7.4.4)

v7.4.3

Changelog (symfony/http-foundation@v7.4.2...v7.4.3)

v7.4.1

Changelog (symfony/http-foundation@v7.4.0...v7.4.1)

... (truncated)

Changelog

Sourced from symfony/http-foundation's changelog.

CHANGELOG

8.2

  • Deprecate not passing an expiry to UriSigner::sign()
  • Add the $defaultExpiration argument to UriSigner::__construct()
  • Add argument $version to UriSigner::sign(), UriSigner::check(), UriSigner::checkRequest(), and UriSigner::verify() to bind a signed URI to a state token, folded into the signature

8.1

  • Add BinaryFileResponse::shouldDeleteFileAfterSend()
  • Deprecate setting public properties of Request and Response objects directly; use setters or constructor arguments instead
  • Add SessionHasFlashMessage test constraint
  • Response::__construct() now accepts a ResponseHeaderBag as its third argument
  • ParameterBag::getInt() and ParameterBag::getBoolean() now throw UnexpectedValueException instead of silently returning 0/false when the value cannot be converted

8.0

  • Drop HTTP method override support for methods GET, HEAD, CONNECT and TRACE
  • Add argument $subtypeFallback to Request::getFormat()
  • Remove the following deprecated session options from NativeSessionStorage: referer_check, use_only_cookies, use_trans_sid, sid_length, sid_bits_per_character, trans_sid_hosts, trans_sid_tags
  • Trigger PHP warning when using Request::sendHeaders() after headers have already been sent; use a StreamedResponse instead
  • Add arguments $v4Bytes and $v6Bytes to IpUtils::anonymize()
  • Add argument $partitioned to ResponseHeaderBag::clearCookie()
  • Add argument $expiration to UriSigner::sign()
  • Remove Request::get(), use properties ->attributes, query or request directly instead
  • Remove accepting null $format argument to Request::setFormat()

7.4

  • Add #[WithHttpStatus] to define status codes: 404 for SignedUriException and 403 for ExpiredSignedUriException
  • Add support for the QUERY HTTP method
  • Add support for structured MIME suffix
  • Add Request::set/getAllowedHttpMethodOverride() to list which HTTP methods can be overridden
  • Deprecate using Request::sendHeaders() after headers have already been sent; use a StreamedResponse instead
  • Deprecate method Request::get(), use properties ->attributes, query or request directly instead
  • Make Request::createFromGlobals() parse the body of PUT, DELETE, PATCH and QUERY requests
  • Deprecate HTTP method override for methods GET, HEAD, CONNECT and TRACE; it will be ignored in Symfony 8.0
  • Deprecate accepting null $format argument to Request::setFormat()

7.3

  • Add support for iterable of string in StreamedResponse
  • Add EventStreamResponse and ServerEvent classes to streamline server event streaming

... (truncated)

Commits
  • 06db5ae Migrate table definitions to DBAL's TableEditor API
  • 4bbd430 Merge branch '6.4' into 7.4
  • 41a0b1a Unsafe unserialize phpstan rule
  • 2c6cb02 Merge branch '6.4' into 7.4
  • 443b2d0 [HttpFoundation] Add RFC6598 Shared Address Space to IpUtils::PRIVATE_SUBNETS
  • ad4348e Merge branch '6.4' into 7.4
  • 2ebaf12 Drop PR warning and auto-closing on subtree splits
  • 29e11e9 Migrate configureSchema() to DBAL's editor API
  • bc354f4 Merge branch '6.4' into 7.4
  • 48d76c2 security #cve-2026-48736 [HttpFoundation] Block IPv6 transition forms in IpUt...
  • Additional commits viewable in compare view

Updates symfony/monolog-bridge from 7.2.0 to 7.4.12

Release notes

Sourced from symfony/monolog-bridge's releases.

v7.4.12

Changelog (symfony/monolog-bridge@v7.4.9...v7.4.12)

v7.4.9

Changelog (symfony/monolog-bridge@v7.4.8...v7.4.9)

v7.4.8

Changelog (symfony/monolog-bridge@v7.4.7...v7.4.8)

  • bug #63720 Fix ConsoleHandler losing output after nested command terminates (@​mp3000mp)

v7.4.6

Changelog (symfony/monolog-bridge@v7.4.5...v7.4.6)

  • no significant changes

v7.4.4

Changelog (symfony/monolog-bridge@v7.4.3...v7.4.4)

  • no significant changes

v7.4.0

Changelog (symfony/monolog-bridge@v7.4.0-RC3...v7.4.0)

  • no significant changes

v7.4.0-RC1

Changelog (symfony/monolog-bridge@v7.4.0-BETA2...v7.4.0-RC1)

  • no significant changes

v7.4.0-BETA2

Changelog (symfony/monolog-bridge@v7.4.0-BETA1...v7.4.0-BETA2)

v7.4.0-BETA1

Changelog (symfony/monolog-bridge@v7.3.4...v7.4.0-BETA1)

v7.3.10

Changelog (symfony/monolog-bridge@v7.3.9...v7.3.10)

... (truncated)

Changelog

Sourced from symfony/monolog-bridge's changelog.

CHANGELOG

8.1

  • Add subjectMaxLength option to MailerHandler to truncate long email subjects (defaults to 200)

8.0

  • Remove NotFoundActivationStrategy, use HttpCodeActivationStrategy instead

7.4

  • Deprecate class NotFoundActivationStrategy, use HttpCodeActivationStrategy instead

7.0

  • Drop support for monolog < 3.0
  • Remove class Logger, use HttpKernel's DebugLoggerConfigurator instead

6.4

  • Add native return type to Logger::clear() and to DebugProcessor::clear()
  • Deprecate class Logger, use HttpKernel's DebugLoggerConfigurator instead

6.1

  • Add support for Monolog 3

6.0

  • The $actionLevel constructor argument of NotFoundActivationStrategy has been replaced by the $inner one which expects an ActivationStrategyInterface to decorate instead
  • The $actionLevel constructor argument of HttpCodeActivationStrategy has been replaced by the $inner one which expects an ActivationStrategyInterface to decorate instead
  • Remove ResetLoggersWorkerSubscriber in favor of "reset_on_message" option in messenger configuration
  • Remove SwiftMailerHandler, use MailerHandler instead

5.4

  • Deprecate ResetLoggersWorkerSubscriber to reset buffered logs in messenger workers, use "reset_on_message" option in messenger configuration instead.

5.3

... (truncated)

Commits
  • 20bb234 Merge branch '6.4' into 7.4
  • 85500da Merge branch '5.4' into 6.4
  • c903fd3 [MonologBridge] Fix interactive_only not preventing propagation
  • 3d69868 [MonologBridge] Bind server:log to localhost by default
  • 20366bc Merge branch '6.4' into 7.4
  • 690d3d1 [MonologBridge] Guard against re-entrant calls in AbstractTokenProcessor
  • 4ea8d53 Update XSD references in phpunit.xml.dist files
  • b1c3905 Merge branch '6.4' into 7.4
  • 7234ea0 CS fixes - native_function_invocation & static_lambda
  • ee0d2a6 [CS] Back config from 8.1 and apply heredoc_indentation rule
  • Additional commits viewable in compare view

Updates symfony/polyfill-intl-idn from 1.31.0 to 1.38.1

Release notes

Sourced from symfony/polyfill-intl-idn's releases.

v1.38.1

Changelog (symfony/polyfill-intl-idn@v1.31.0...v1.38.1)

v1.37.0

Changelog (symfony/polyfill-intl-idn@v1.36.0...v1.37.0)

  • no significant changes

v1.36.0

Changelog (symfony/polyfill-intl-idn@v1.35.0...v1.36.0)

  • no significant changes

v1.35.0

Changelog (symfony/polyfill-intl-idn@v1.34.0...v1.35.0)

  • no significant changes

v1.34.0

Changelog (symfony/polyfill-intl-idn@v1.33.0...v1.34.0)

  • no significant changes
Commits
  • dc21118 [Intl][Idn] Reject xn-- labels whose Punycode payload decodes to ASCII-only
  • 9614ac4 Give testing some love
  • See full diff in compare view

Updates symfony/routing from 7.2.3 to 7.4.13

Release notes

Sourced from symfony/routing's releases.

v7.4.13

Changelog (symfony/routing@v7.4.12...v7.4.13)

v7.4.12

Changelog (

Bumps the composer group with 10 updates in the /examples/symfony/sample directory:

| Package | From | To |
| --- | --- | --- |
| [symfony/mime](https://github.com/symfony/mime) | `7.2.4` | `7.4.12` |
| [symfony/runtime](https://github.com/symfony/runtime) | `7.2.3` | `7.4.12` |
| [symfony/yaml](https://github.com/symfony/yaml) | `7.2.5` | `7.4.12` |
| [twig/twig](https://github.com/twigphp/Twig) | `3.26.0` | `3.27.0` |
| [symfony/cache](https://github.com/symfony/cache) | `7.2.5` | `7.4.14` |
| [symfony/http-foundation](https://github.com/symfony/http-foundation) | `7.3.7` | `7.4.14` |
| [symfony/monolog-bridge](https://github.com/symfony/monolog-bridge) | `7.2.0` | `7.4.12` |
| [symfony/routing](https://github.com/symfony/routing) | `7.2.3` | `7.4.13` |
| [symfony/security-http](https://github.com/symfony/security-http) | `7.2.4` | `7.4.14` |
| [symfony/dom-crawler](https://github.com/symfony/dom-crawler) | `7.2.4` | `7.4.12` |



Updates `symfony/mime` from 7.2.4 to 7.4.12
- [Release notes](https://github.com/symfony/mime/releases)
- [Changelog](https://github.com/symfony/mime/blob/8.2/CHANGELOG.md)
- [Commits](symfony/mime@v7.2.4...v7.4.12)

Updates `symfony/runtime` from 7.2.3 to 7.4.12
- [Release notes](https://github.com/symfony/runtime/releases)
- [Changelog](https://github.com/symfony/runtime/blob/8.2/CHANGELOG.md)
- [Commits](symfony/runtime@v7.2.3...v7.4.12)

Updates `symfony/yaml` from 7.2.5 to 7.4.12
- [Release notes](https://github.com/symfony/yaml/releases)
- [Changelog](https://github.com/symfony/yaml/blob/8.2/CHANGELOG.md)
- [Commits](symfony/yaml@v7.2.5...v7.4.12)

Updates `twig/twig` from 3.26.0 to 3.27.0
- [Release notes](https://github.com/twigphp/Twig/releases)
- [Changelog](https://github.com/twigphp/Twig/blob/3.x/CHANGELOG)
- [Commits](twigphp/Twig@v3.26.0...v3.27.0)

Updates `symfony/cache` from 7.2.5 to 7.4.14
- [Release notes](https://github.com/symfony/cache/releases)
- [Changelog](https://github.com/symfony/cache/blob/8.2/CHANGELOG.md)
- [Commits](symfony/cache@v7.2.5...v7.4.14)

Updates `symfony/http-foundation` from 7.3.7 to 7.4.14
- [Release notes](https://github.com/symfony/http-foundation/releases)
- [Changelog](https://github.com/symfony/http-foundation/blob/8.2/CHANGELOG.md)
- [Commits](symfony/http-foundation@v7.3.7...v7.4.14)

Updates `symfony/monolog-bridge` from 7.2.0 to 7.4.12
- [Release notes](https://github.com/symfony/monolog-bridge/releases)
- [Changelog](https://github.com/symfony/monolog-bridge/blob/8.2/CHANGELOG.md)
- [Commits](symfony/monolog-bridge@v7.2.0...v7.4.12)

Updates `symfony/polyfill-intl-idn` from 1.31.0 to 1.38.1
- [Release notes](https://github.com/symfony/polyfill-intl-idn/releases)
- [Commits](symfony/polyfill-intl-idn@v1.31.0...v1.38.1)

Updates `symfony/routing` from 7.2.3 to 7.4.13
- [Release notes](https://github.com/symfony/routing/releases)
- [Changelog](https://github.com/symfony/routing/blob/8.2/CHANGELOG.md)
- [Commits](symfony/routing@v7.2.3...v7.4.13)

Updates `symfony/security-http` from 7.2.4 to 7.4.14
- [Release notes](https://github.com/symfony/security-http/releases)
- [Changelog](https://github.com/symfony/security-http/blob/8.2/CHANGELOG.md)
- [Commits](symfony/security-http@v7.2.4...v7.4.14)

Updates `symfony/dom-crawler` from 7.2.4 to 7.4.12
- [Release notes](https://github.com/symfony/dom-crawler/releases)
- [Changelog](https://github.com/symfony/dom-crawler/blob/8.2/CHANGELOG.md)
- [Commits](symfony/dom-crawler@v7.2.4...v7.4.12)

---
updated-dependencies:
- dependency-name: symfony/mime
  dependency-version: 7.4.12
  dependency-type: direct:production
  dependency-group: composer
- dependency-name: symfony/runtime
  dependency-version: 7.4.12
  dependency-type: direct:production
  dependency-group: composer
- dependency-name: symfony/yaml
  dependency-version: 7.4.12
  dependency-type: direct:production
  dependency-group: composer
- dependency-name: twig/twig
  dependency-version: 3.27.0
  dependency-type: direct:production
  dependency-group: composer
- dependency-name: symfony/cache
  dependency-version: 7.4.14
  dependency-type: indirect
  dependency-group: composer
- dependency-name: symfony/http-foundation
  dependency-version: 7.4.14
  dependency-type: indirect
  dependency-group: composer
- dependency-name: symfony/monolog-bridge
  dependency-version: 7.4.12
  dependency-type: indirect
  dependency-group: composer
- dependency-name: symfony/polyfill-intl-idn
  dependency-version: 1.38.1
  dependency-type: indirect
  dependency-group: composer
- dependency-name: symfony/routing
  dependency-version: 7.4.13
  dependency-type: indirect
  dependency-group: composer
- dependency-name: symfony/security-http
  dependency-version: 7.4.14
  dependency-type: indirect
  dependency-group: composer
- dependency-name: symfony/dom-crawler
  dependency-version: 7.4.12
  dependency-type: indirect
  dependency-group: composer
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot requested a review from a team as a code owner June 30, 2026 19:55
Copilot AI review requested due to automatic review settings June 30, 2026 19:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Jun 30, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot can't review bot-authored pull requests automatically. A user with Copilot access can request a review manually.

@github-actions github-actions Bot enabled auto-merge (squash) June 30, 2026 19:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant