This repository was archived by the owner on Aug 31, 2026. It is now read-only.
Bump the composer group across 1 directory with 7 updates - #249
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Bump the composer group across 1 directory with 7 updates#249dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the composer group with 7 updates in the /api directory: | Package | From | To | | --- | --- | --- | | [symfony/yaml](https://github.com/symfony/yaml) | `5.3.6` | `5.4.52` | | [webonyx/graphql-php](https://github.com/webonyx/graphql-php) | `0.13.9` | `15.32.3` | | [symfony/cache](https://github.com/symfony/cache) | `5.3.4` | `5.4.53` | | [symfony/dom-crawler](https://github.com/symfony/dom-crawler) | `5.3.4` | `5.4.52` | | [symfony/polyfill-intl-idn](https://github.com/symfony/polyfill-intl-idn) | `1.23.0` | `1.38.1` | | [symfony/routing](https://github.com/symfony/routing) | `5.3.4` | `5.4.53` | | [symfony/security-http](https://github.com/symfony/security-http) | `5.3.6` | `5.4.53` | Updates `symfony/yaml` from 5.3.6 to 5.4.52 - [Release notes](https://github.com/symfony/yaml/releases) - [Changelog](https://github.com/symfony/yaml/blob/8.2/CHANGELOG.md) - [Commits](symfony/yaml@v5.3.6...v5.4.52) Updates `webonyx/graphql-php` from 0.13.9 to 15.32.3 - [Release notes](https://github.com/webonyx/graphql-php/releases) - [Changelog](https://github.com/webonyx/graphql-php/blob/master/CHANGELOG.md) - [Upgrade guide](https://github.com/webonyx/graphql-php/blob/master/UPGRADE.md) - [Commits](webonyx/graphql-php@v0.13.9...v15.32.3) Updates `symfony/cache` from 5.3.4 to 5.4.53 - [Release notes](https://github.com/symfony/cache/releases) - [Changelog](https://github.com/symfony/cache/blob/8.2/CHANGELOG.md) - [Commits](symfony/cache@v5.3.4...v5.4.53) Updates `symfony/dom-crawler` from 5.3.4 to 5.4.52 - [Release notes](https://github.com/symfony/dom-crawler/releases) - [Changelog](https://github.com/symfony/dom-crawler/blob/8.2/CHANGELOG.md) - [Commits](symfony/dom-crawler@v5.3.4...v5.4.52) Updates `symfony/polyfill-intl-idn` from 1.23.0 to 1.38.1 - [Release notes](https://github.com/symfony/polyfill-intl-idn/releases) - [Commits](symfony/polyfill-intl-idn@v1.23.0...v1.38.1) Updates `symfony/routing` from 5.3.4 to 5.4.53 - [Release notes](https://github.com/symfony/routing/releases) - [Changelog](https://github.com/symfony/routing/blob/8.2/CHANGELOG.md) - [Commits](symfony/routing@v5.3.4...v5.4.53) Updates `symfony/security-http` from 5.3.6 to 5.4.53 - [Release notes](https://github.com/symfony/security-http/releases) - [Changelog](https://github.com/symfony/security-http/blob/8.2/CHANGELOG.md) - [Commits](symfony/security-http@v5.3.6...v5.4.53) --- updated-dependencies: - dependency-name: symfony/yaml dependency-version: 5.4.52 dependency-type: direct:production dependency-group: composer - dependency-name: webonyx/graphql-php dependency-version: 15.32.3 dependency-type: direct:production dependency-group: composer - dependency-name: symfony/cache dependency-version: 5.4.53 dependency-type: indirect dependency-group: composer - dependency-name: symfony/dom-crawler dependency-version: 5.4.52 dependency-type: indirect dependency-group: composer - dependency-name: symfony/polyfill-intl-idn dependency-version: 1.38.1 dependency-type: indirect dependency-group: composer - dependency-name: symfony/routing dependency-version: 5.4.53 dependency-type: indirect dependency-group: composer - dependency-name: symfony/security-http dependency-version: 5.4.53 dependency-type: indirect dependency-group: composer ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Collaborator
|
Closing: this repository has been archived. Its default branch has had no commit for over two years. |
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the composer group with 7 updates in the /api directory:
5.3.65.4.520.13.915.32.35.3.45.4.535.3.45.4.521.23.01.38.15.3.45.4.535.3.65.4.53Updates
symfony/yamlfrom 5.3.6 to 5.4.52Release notes
Sourced from symfony/yaml's releases.
... (truncated)
Changelog
Sourced from symfony/yaml's changelog.
... (truncated)
Commits
b0b2705[Yaml] Harden the Parser::cleanup() regexes against catastrophic backtracking5a351ff[Yaml] Bound collection-alias resolution in the parserb02ba66[Yaml] Bound recursion depth in the parsera454d47Add PR template and auto-close PR on subtree split repositories7025b96parse empty sequence elements as null62f96e1🐛 throw ParseException on invalid date81cad0cRevert "minor #54653 Auto-close PRs on subtree-splits (nicolas-grekas)"bc780e1call substr() with integer offsetsa38ba0bAuto-close PRs on subtree-splitse78db7fApply php-cs-fixer fix --rules nullable_type_declaration_for_default_null_valueUpdates
webonyx/graphql-phpfrom 0.13.9 to 15.32.3Release notes
Sourced from webonyx/graphql-php's releases.
... (truncated)
Changelog
Sourced from webonyx/graphql-php's changelog.
... (truncated)
Upgrade guide
Sourced from webonyx/graphql-php's upgrade guide.
... (truncated)
Commits
993bf0bRelease v15.32.36c1d600Address review findings7b7f208Add recursion depth limit to prevent stack overflow8d0f1c5Release v15.32.2996adcfAdd comparison budget to OverlappingFieldsCanBeMergedff116eaDocument security scope to reduce low-quality advisory submissions2711a1eUse v4 tag format for ramsey/composer-install action3874d60Update ramsey/composer-install action to v42340e43Update dependency phpstan/phpstan to v2.1.51 (#1904)8405df9Update dependency phpstan/phpstan to v2.1.50 (#1899)Updates
symfony/cachefrom 5.3.4 to 5.4.53Release notes
Sourced from symfony/cache's releases.
Changelog
Sourced from symfony/cache's changelog.
... (truncated)
Commits
bf58147[Cache] skip tests for adapters that cannot clear by prefix4acd37c[Cache] Accept '_' and ':' in prefix passed to AbstractAdapter::clear()03b191d[Cache] Validate the prefix given to AbstractAdapter::clear()0fe08ee[Cache] Fix clear() when using Predis12b03e3Revert "bug #58661 [Cache] Initialize RedisAdapter cursor to 0 (thomas-hiron)"e135eb8initialize RedisAdapter cursor to 0c2b90dado not skip tests from data providers6cf23addrop existing schema if tests create it explicitly7050072do not mix named and positional arguments in data provider definitions911f2bcdo not use TestCase::getName() when possibleUpdates
symfony/dom-crawlerfrom 5.3.4 to 5.4.52Release notes
Sourced from symfony/dom-crawler's releases.
... (truncated)
Changelog
Sourced from symfony/dom-crawler's changelog.
... (truncated)
Commits
b4cf17f[DomCrawler] Fix XXE in addXmlContent() by not enablingvalidateOnParseb57df76Work around parse_url() bug (bis)89647a5Minor fixes around parse_url() checks7111520Add PR template and auto-close PR on subtree split repositories4c76e41Work around parse_url() bug2ad469cRevert "minor #54653 Auto-close PRs on subtree-splits (nicolas-grekas)"1dffb11Auto-close PRs on subtree-splits000634e[DomCrawler] Encode html entities only if nessecarye3b4806Apply php-cs-fixer fix --rules nullable_type_declaration_for_default_null_value728f1fc[DomCrawler] Revert "bug #52579 UriResolver support path with colons"Updates
symfony/polyfill-intl-idnfrom 1.23.0 to 1.38.1Release notes
Sourced from symfony/polyfill-intl-idn's releases.
Commits
dc21118[Intl][Idn] Reject xn-- labels whose Punycode payload decodes to ASCII-only9614ac4Give testing some lovec36586dBump to PHP 7.2, stick to phpunit 8.5a6e83bdRevert "minor #477 Auto-close PRs on subtree-splits (kbond)"872bf45Auto-close PRs on subtree-splits412b0a6Conform to IDNA version 15.1.0 revision 31a287ed7Remove branch-alias from composer.jsonecaafcefeature #334 [PHP 8.1] AddCURLStringFilepolyfill (Ayesh, nicolas-grekas)b5b0079CS fix5a42f2dBump for 1.28Updates
symfony/routingfrom 5.3.4 to 5.4.53Release notes
Sourced from symfony/routing's releases.
... (truncated)
Commits
f4ca0c5[Routing] Fix dot-segment encoding for chained "../" and "./" in generated URLs275b313[Routing] Fix regex alternation anchoring in UrlGenerator requirement validationdd08c19[Routing] Fix: lost priority when defining hosts in configuration986597bdo not use TestCase::getName() when possible7289d3cAdd PR template and auto-close PR on subtree split repositoriesb6f7178Fix typosf8dd6f8use more entropy with uniqid()c99c74bbug #57645 [Routing] Discard in-memory cache of routes when writing the file-...7bec6df[Router] Discard in-memory cache of routes when writing the file-based cache6df1dd8Revert "minor #54653 Auto-close PRs on subtree-splits (nicolas-grekas)"Updates
symfony/security-httpfrom 5.3.6 to 5.4.53Release notes
Sourced from symfony/security-http's releases.
... (truncated)
Changelog
Sourced from symfony/security-http's changelog.
... (truncated)
Commits
119cc48[Security] Don't honor user-supplied _failure_path on failure_forward355f32f[Security] Anchor emailAddress regex to RDN boundary in X509Authenticatorcde02b0[security-http] Check owner of persisted remember-me cookie7152f0e[Security] Store original token in token storage when implicitly exiting impe...8a4986dAdd PR template and auto-close PR on subtree split repositoriesc0f8159Work around parse_url() bugdc6de50Revert stateless check14d271e[HttpKernel][Security] Fix accessing session for stateless request7194820Revert "minor #54653 Auto-close PRs on subtree-splits (nicolas-grekas)"1957999minor #54785 Remove calls toTestCase::iniSet()and calls to deprecated met...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.