phing Bump smarty/smarty from 3.1.48 to 4.3.5

Bumps smarty/smarty from 3.1.48 to 4.3.5.

Release notes

Sourced from smarty/smarty's releases.

v4.3.4

What's Changed

Fix strip_tags modifier for falsy input. by @wisskid in smarty-php/smarty#893

Fix use of negative numbers in math equations (4.3 port of #903) by @wisskid in smarty-php/smarty#904

Full Changelog: https://github.com/smarty-php/smarty/compare/v4.3.2...v4.3.4

v4.3.2

What's Changed

Remove md5 modifier from debug.tpl by @j-applese3d in smarty-php/smarty#871

muteUndefinedOrNullWarnings() now also mutes PHP8 warnings for undefi… by @wisskid in smarty-php/smarty#891

New Contributors

@j-applese3d made their first contribution in smarty-php/smarty#871

Full Changelog: https://github.com/smarty-php/smarty/compare/v4.3.1...v4.3.2

v4.3.1

Security

Fixed Cross site scripting vulnerability in Javascript escaping. This addresses CVE-2023-28447.

Fixed

$smarty->muteUndefinedOrNullWarnings() now also mutes PHP7 notices for undefined array indexes #736

$smarty->muteUndefinedOrNullWarnings() now treats undefined vars and array access of a null or false variables equivalent across all supported PHP versions

$smarty->muteUndefinedOrNullWarnings() now allows dereferencing of non-objects across all supported PHP versions #831

PHP 8.1 deprecation warnings on null strings in modifiers #834

v4.3.0

What's Changed

clean output buffer for Throwable instead of just Exception by @wisskid in smarty-php/smarty#797

Fix wrong indentation in libs/plugins/modifier.capitalize.php by @MrPetovan in smarty-php/smarty#802

fix compilation for caching templates by @Storyxx in smarty-php/smarty#801

Fix Variable Expression by @JonisoftGermany in smarty-php/smarty#808

Silence deprecation errors for strtime in PHP8.1 or higher by @wisskid in smarty-php/smarty#811

Fixed PHP8.1 deprecation errors passing null to parameter in trim by @IT-Experte in smarty-php/smarty#807

Re-organize all testrunners to use the same script(s). by @wisskid in smarty-php/smarty#812

Fixed PHP8.1 deprecation errors in strip_tags by @wisskid in smarty-php/smarty#803

#155 Adapt Smarty upper/lower functions to be codesafe (e.g. for Turkish locale) by @asmecher in smarty-php/smarty#586

Bug fix for underscore in template name by @EDCScott in smarty-php/smarty#581

Using PHP functions as modifiers now triggers a deprecation notice. by @wisskid in smarty-php/smarty#814

Use 'DIR' instead of 'dirname(FILE)' by @MekDrop in smarty-php/smarty#817

Fixed several typos and grammar errors by @AndrewDawes in smarty-php/smarty#821

PHP8.2 compatibility by @Progi1984 in smarty-php/smarty#775

Make SmartyCompilerException play nicer with error handler libraries by @Hunman in smarty-php/smarty#782

Change file permissions for directories and respect umask for files by @wisskid in smarty-php/smarty#828

New Contributors

@MrPetovan made their first contribution in smarty-php/smarty#802

... (truncated)

Changelog

Sourced from smarty/smarty's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

PHP8.3 support #925

Fixed

The {debug} tag was broken in v5 #922

[5.0.0-rc2] - 2023-11-11

Fixed

Registered output filters wouldn't run #899

Use of negative numbers in {math} equations #895

Do not auto-html-escape custom function results #906

Fix case-sensitive tag names #907

Removed

Removed $smarty->registered_filters array

[5.0.0-rc1] - 2023-08-08

Added

Added support for PHP8.2

Added a new way to extend Smarty functionality using Smarty::addExtension() or Smarty::setExtensions(). Please see the docs for more information.

Custom tags can accept positional parameters, so you can write a block compiler that support this: {trans "Jack" "dull boy"}All work and no play makes %s a %s.{/trans} #164

Full support for ternary operator: {$test ? $a : $b} and {$var ?: $value_if_falsy} #881

Full support for null coalescing operator: {$var ?? $value_if_null} #882

Changed

All Smarty code is now in the \Smarty namespace. For simple use-cases, you only need to add use \Smarty\Smarty; to your script and everything will work. If you extend Smarty or use Smarty plug-ins, please review your code to see if they assume specific class or method names. E.g.: Smarty_Internal_Template is now \Smarty\Template\, SmartyException is now \Smarty\Exception.

Template variable scope bubbling has been simplified and made more consistent. The global scope now equals the Smarty scope in order to avoid global state side effects. Please read the documentation for more details.

Lexers and Parsers PHP files are reliably generated from sources (.y and .plex) using the make file

Smarty now always runs in multibyte mode, using symfony/polyfill-mbstring if required. Please use the multibyte extension for optimal performance.

Smarty no longer calls mb_internal_encoding() and doesn't check for deprecated mbstring.func_overload ini directive #480

Generated <script> tags lo longer have deprecated type="text/javascript" or language="Javascript" attributes #815

Smarty will throw a compiler exception instead of silently ignoring a modifier on a function call, like this: {include|dot:"x-template-id" file="included.dot.tpl"} #526

The documentation was largely rewritten

... (truncated)

Commits

e0cbbdf Update php version number in docs
b4bbc17 Add PHP8.3 support for Smarty 4.3. (#927)
6e067ed Add unit tests to clarify current behavior
3931d8f Merge branch 'release/4.3.4' into support/4.3
d8c1dfe version bump
6887e55 Merge branch 'release/4.3.3' into support/4.3
642fd69 version bump
17a7d6f Fix release-script to user support-branch
b96a5c3 version bump
2ff66e0 Fix use of negative numbers in math equations. (#904)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Jan 30 '24 19:01 dependabot[bot]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (863a9da) 53.00% compared to head (9453e35) 53.00%. Report is 4 commits behind head on main.

:exclamation: Current head 9453e35 differs from pull request most recent head 05b66e8. Consider uploading reports for the commit 05b66e8 to get more accurate results

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #1791   +/-   ##
=========================================
  Coverage     53.00%   53.00%           
  Complexity     9806     9806           
=========================================
  Files           495      495           
  Lines         24705    24705           
=========================================
  Hits          13095    13095           
  Misses        11610    11610

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

Jan 31 '24 08:01 codecov[bot]

Superseded by #1805.

Mar 01 '24 11:03 dependabot[bot]