area51 icon indicating copy to clipboard operation
area51 copied to clipboard

Published 20 hours ago • verified publisher icon phpbb

Bump symfony/symfony from 3.4.36 to 3.4.49

Open dependabot[bot] opened this issue 1 year ago • 1 comments

Bumps symfony/symfony from 3.4.36 to 3.4.49.

Changelog

Sourced from symfony/symfony's changelog.

  • 3.4.49 (2021-05-19)

  • security #cve-2021-21424 [Security\Core] Fix user enumeration via response body on invalid credentials (chalasr)

  • 3.4.48 (2021-05-12)

  • security #cve-2021-21424 [Security][Guard] Prevent user enumeration (chalasr)

  • 3.4.47 (2020-11-27)

  • bug #38628 [DoctrineBridge] indexBy could reference to association columns (juanmiguelbesada)

  • 3.4.46 (2020-10-28)

  • bug #38669 [Serializer] fix decoding float XML attributes starting with 0 (Marcin Kruk)

  • bug #38595 [TwigBridge] do not translate null placeholders or titles (xabbuh)

  • bug #38652 [Filesystem] Check if failed unlink was caused by permission denied (Nyholm)

  • bug #38604 [DoctrineBridge] indexBy does not refer to attributes, but to column names (xabbuh)

  • bug #38606 [WebProfilerBundle] Hide debug toolbar in print view (jt2k)

  • bug #38582 [DI] Fix Reflection file name with eval()'d code (maxime-aknin)

  • bug #38516 [HttpFoundation] Fix Range Requests (BattleRattle)

  • bug #38510 [PropertyInfo] Support for the mixed type (derrabus)

  • bug #38444 [PhpUnitBridge] fix running parallel tests with phpunit 9 (nicolas-grekas)

  • bug #38442 [VarDumper] fix truncating big arrays (nicolas-grekas)

  • bug #38380 [Form] propagate validation groups to subforms (johanderuijter, xabbuh)

  • bug #38360 [BrowserKit] Cookie expiration at current timestamp (iquito)

  • 3.4.45 (2020-09-27)

  • bug #38228 [Yaml Parser] Fix edge cases when parsing multiple documents (digilist)

  • bug #38229 [Yaml] fix parsing comments not prefixed by a space (xabbuh)

  • bug #38131 [Validator] allow consumers to mock all methods (xabbuh)

  • bug #37097 DateTime validator support for trailing data (stefankleff)

  • bug #38116 [Console] Silence warnings on sapi_windows_cp_set() call (chalasr)

  • bug #38114 [Console] guard $argv + $token against null, preventing unnecessary exceptions (bilogic)

  • bug #38099 Prevent parsing invalid octal digits as octal numbers (julienfalque)

  • bug #38091 [DI] fix ContainerBuilder on PHP8 (nicolas-grekas)

  • bug #38080 [Console] Make sure $maxAttempts is an int or null (derrabus)

  • bug #38073 [VarDumper] Fix caster for invalid SplFileInfo objects on php 8 (derrabus)

  • bug #38071 [PhpUnitBridge] Adjust output parsing of CoverageListenerTrait for PHPUnit 9.3 (sanmai, derrabus)

  • bug #38049 [Debug] Parse "x not found" errors correctly on php 8 (derrabus)

  • bug #38024 [Console] Fix undefined index for inconsistent command name definition (chalasr)

  • 3.4.44 (2020-08-31)

  • bug #37949 [Yaml] fix more numeric cases changing in PHP 8 (xabbuh)

  • bug #37921 [Yaml] account for is_numeric() behavior changes in PHP 8 (xabbuh)

  • bug #37912 [ExpressionLanguage] fix passing arguments to call_user_func_array() on PHP 8 (xabbuh)

  • bug #37853 [Validator] ensure that the validator is a mock object for backwards-compatibility (xabbuh)

  • bug #37845 [Serializer] Fix variadic support when using type hints (fabpot)

... (truncated)

Commits
  • ba0e346 Merge pull request #41276 from fabpot/release-3.4.49
  • 13af892 Update VERSION for 3.4.49
  • 184bd68 Update CHANGELOG for 3.4.49
  • 1ad13fe security #cve-2021-21424 [Security\Core] Fix user enumeration via response bo...
  • e850700 [Security\Core] Fix user enumeration via response body on invalid credentials
  • d0d17db Merge pull request #41193 from fabpot/release-3.4.48
  • fd84b53 Update VERSION for 3.4.48
  • 684ab1f Update CHANGELOG for 3.4.48
  • 2a581d2 security #cve-2021-21424 [Security][Guard] Prevent user enumeration (chalasr)
  • f012eee [Security][Guard] Prevent user enumeration via response content
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

dependabot[bot] avatar Feb 26 '24 12:02 dependabot[bot]

composer.lock

Package changes

Package Operation From To About
doctrine/deprecations add - 1.1.3 view code - License: MIT License
symfony/polyfill-intl-normalizer add - v1.29.0 view code - License: MIT License
symfony/polyfill-php80 add - v1.29.0 view code - License: MIT License
doctrine/annotations upgrade v1.8.0 1.14.3 diff
doctrine/cache upgrade 1.10.0 1.13.0 diff
doctrine/collections upgrade 1.6.4 1.8.0 diff
doctrine/common upgrade v2.11.0 2.13.3 diff
doctrine/event-manager upgrade 1.1.0 1.2.0 diff
doctrine/inflector upgrade 1.3.1 1.4.4 diff
doctrine/lexer upgrade 1.0.2 1.2.3 diff
doctrine/persistence upgrade 1.3.3 1.3.8 diff
doctrine/reflection upgrade v1.0.0 1.2.4 diff
fig/link-util upgrade 1.1.0 1.1.2 diff
monolog/monolog upgrade 1.25.3 1.27.1 diff
psr/log upgrade 1.1.2 1.1.4 diff
symfony/http-client-contracts upgrade v1.1.8 v1.10.0 diff
symfony/mime upgrade v4.4.2 v4.4.47 diff
symfony/polyfill-apcu upgrade v1.13.1 v1.29.0 diff
symfony/polyfill-ctype upgrade v1.13.1 v1.29.0 diff
symfony/polyfill-intl-icu upgrade v1.13.1 v1.29.0 diff
symfony/polyfill-intl-idn upgrade v1.13.1 v1.29.0 diff
symfony/polyfill-mbstring upgrade v1.13.1 v1.29.0 diff
symfony/polyfill-php56 upgrade v1.13.1 v1.20.0 diff
symfony/polyfill-php70 upgrade v1.13.1 v1.20.0 diff
symfony/polyfill-php72 upgrade v1.13.1 v1.29.0 diff
symfony/polyfill-php73 upgrade v1.13.1 v1.29.0 diff
symfony/service-contracts upgrade v1.1.8 v1.10.0 diff
symfony/symfony upgrade v3.4.36 :warning: v3.4.49 :warning: diff
twig/twig upgrade v2.12.2 :warning: v2.16.0 :white_check_mark: diff
paragonie/random_compat remove v9.99.99 - -
symfony/polyfill-util remove v1.13.1 - -

Settings · Docs · Powered by Private Packagist

private-packagist[bot] avatar Feb 26 '24 12:02 private-packagist[bot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot[bot] avatar Jun 01 '24 11:06 dependabot[bot]