Bump the composer group across 1 directory with 7 updates

[dependabot]

Bumps the composer group with 7 updates in the / directory:

Package	From	To
erusev/parsedown	1.7.1	1.7.4
league/flysystem	1.0.47	1.0.70
nesbot/carbon	1.34.0	1.39.1
swiftmailer/swiftmailer	6.1.3	6.3.0
symfony/http-foundation	4.1.4	4.4.49
symfony/http-kernel	4.1.4	4.4.51
symfony/process	4.1.4	4.4.44

Updates erusev/parsedown from 1.7.1 to 1.7.4

Release notes

Sourced from erusev/parsedown's releases.

1.7.4

Introduce rawHtml concept from beta 1.8 that extensions may optionally utilise. In 1.8 beta versions this feature is utilised internally and might have compatibility issues with extensions, this release does not use this feature internally so no such issues will be present.

1.7.3

No release notes provided.

1.7.2

This is a security release and resolves an issue which would allow a user to add arbitrary classes to fenced code blocks. This might have security consequences, see #699 for more detail.

Commits

• cb17b64 Increment version for release
• 21f99b1 Merge pull request #745 from aidantwoods/dev-1.7.x/opt-in-rawHtml
• 791faca Test on 7.4
• add8d18 Add rawHtml without using it (extensions may opt-in)
• 7073ac3 Dev for 1.7.4
• 3d2b25b Add test to prevent regression
• 6d89393 New release due to mislabeled previous tag
• d60bcdc Bump version
• c390a9e Merge pull request #700 from aidantwoods/fix/spaces-in-class-names-1.7.x
• 0f1e9da Fix test platforms
• Additional commits viewable in compare view

Updates league/flysystem from 1.0.47 to 1.0.70

Release notes

Sourced from league/flysystem's releases.

1.0.62

When resources are not actually file pointers, but fopen results from URL, the fstat call fails. This resulted in an error in PHP 7.4 because it's more strict about variable handling. This affected the Util::getStreamSize utility method.

Changelog

Sourced from league/flysystem's changelog.

1.0.70 - 2020-07-26

Fixes

• Local::update now also updates permissions.

1.0.69 - 2020-05-12

Fixes

• Corrected the docblock return type of getTimestamp and enforce it in the Filesystem.

1.0.68 - 2020-05-12

Fixes

• Added mime-types for .ico files (#1163)

1.0.67 - 2020-04-16

Fixes

• Added mime-types for markdown (#1153)

1.0.66 - 2020-03-17

Fixes

• Warnings from FTP are now silenced, preventing exceptions.

1.0.65 - 2020-03-08

• Added missing webp mime-type entry.

1.0.64 - 2020-02-05

• Improved performance of the connectivity check for FTP connections.

1.0.63 - 2020-01-04

• Introduces base exception marker and custom runtime exceptions for error cases.

1.0.62 - 2019-12-29

• (#1119) Made Util::getStreamSize account for fstat failure.

1.0.61 - 2019-12-08

• Fixed an array access issue for PHP 7.4 (#1106)

... (truncated)

Commits

• 5858247 Pre-release changelog
• 69e921c Set visibility on update on the Local adapter
• fb1979a Don't fetch mimetype on local write, it's not needed. [perf]
• 2ed2984 Do update deps
• 279e0fb Allow a wide phpspec range
• fcfdcf3 Missed a ; in the bash
• 184c53b Upgrade phpspec for PHP nightly test run
• 1100333 Set locale when testing UTF-8 compatibility
• befb3c0 add a new community support for tencent cloud cos storage
• ef6a97e Skip 'not writable' test when running as root
• Additional commits viewable in compare view

Updates nesbot/carbon from 1.34.0 to 1.39.1

Commits

• 4be0c00 Fix validateCurrentDate return type annotation (#1909)
• d09eeed Use Trusty distribution for PHP 5.4 and 5.5 tests (#1760)
• dd62a58 #1736 Implement resetMacros()
• a4ba579 Add relative to now/other modes
• 7c74242 Skip incompatible tests
• 9a9bfe0 Apply fixes from StyleCI (#1755)
• dfdf31a #1736 Add methods (partial support):
• 4f60ec0 Fix PHP < 7.1 compatibility
• 68752a4 #1736 Add methods:
• 3ca610e Fix PHP 5.4 compatibility
• Additional commits viewable in compare view

Updates swiftmailer/swiftmailer from 6.1.3 to 6.3.0

Changelog

Sourced from swiftmailer/swiftmailer's changelog.

6.3.0 (2021-10-18)

• Fix support for PHP 8.1

6.2.7 (2021-03-09)

• Allow egulias/email-validator 3.1+

6.2.6 (2021-03-05)

• Fix Bcc support

6.2.5 (2021-01-12)

• Don't trust properties at destruct time
• Remove invalid PHPDocs param in EventDispatcher interface
• Bump license year
• Removes PHP version from README

6.2.4 (2020-12-08)

• Prevent flushing of the bubble queue when event handler raises another event
• Add support for PHP 8
• Code cleanups

6.2.3 (2019-11-12)

• no changes

6.2.2 (2019-11-12)

• fixed compat with PHP 7.4
• fixed error message when connecting to a stream raises an error before connect()

6.2.1 (2019-04-21)

• reverted "deprecated Swift_CharacterStream_ArrayCharacterStream and Swift_CharacterStream_NgCharacterStream in favor of Swift_CharacterStream_CharacterStream"

6.2.0 (2019-03-10)

• added support for symfony/polyfill-intl-dn

... (truncated)

Commits

• 8a5d507 Prepare 6.3.0 release
• 56dccc1 Fix changelog
• bc28df7 bug #1355 PHP 8.1 Support (driesvints)
• ee8a1d9 PHP 8.1 Support
• 2a7fb75 minor #1352 Add information about EOM (fabpot)
• 0863074 Add information about EOM
• 23e9ffa Change intro doc page title
• 0cf1030 minor #1336 [Doc] Fixed the syntax of a table in messages.rst (javiereguiluz)
• 93ab97b [Doc] Fixed the syntax of a table in messages.rst
• 6044649 minor #1335 [Doc] Fixed a minor issue in a code example (javiereguiluz)
• Additional commits viewable in compare view

Updates symfony/http-foundation from 4.1.4 to 4.4.49

Changelog

Sourced from symfony/http-foundation's changelog.

CHANGELOG

7.3

• Add support for iterable of string in StreamedResponse
• Add EventStreamResponse and ServerEvent classes to streamline server event streaming
• Add support for valkey: / valkeys: schemes for sessions
• Request::getPreferredLanguage() now favors a more preferred language above exactly matching a locale
• Allow UriSigner to use a ClockInterface
• Add UriSigner::verify()

7.2

• Add optional $requests parameter to RequestStack::__construct()
• Add optional $v4Bytes and $v6Bytes parameters to IpUtils::anonymize()
• Add PRIVATE_SUBNETS as a shortcut for private IP address ranges to Request::setTrustedProxies()
• Deprecate passing referer_check, use_only_cookies, use_trans_sid, trans_sid_hosts, trans_sid_tags, sid_bits_per_character and sid_length options to NativeSessionStorage

7.1

• Add optional $expirationParameter argument to UriSigner::__construct()
• Add optional $expiration argument to UriSigner::sign()
• Rename $parameter argument of UriSigner::__construct() to $hashParameter
• Add UploadedFile::getClientOriginalPath()
• Add QueryParameterRequestMatcher
• Add HeaderRequestMatcher
• Add support for \SplTempFileObject in BinaryFileResponse
• Add verbose argument to response test constraints

7.0

• Calling ParameterBag::filter() throws an UnexpectedValueException on invalid value, unless flag FILTER_NULL_ON_FAILURE is set
• Calling ParameterBag::getInt() and ParameterBag::getBool() throws an UnexpectedValueException on invalid value
• Remove classes RequestMatcher and ExpressionRequestMatcher
• Remove Request::getContentType(), use Request::getContentTypeFormat() instead
• Throw an InvalidArgumentException when calling Request::create() with a malformed URI
• Require explicit argument when calling JsonResponse::setCallback(), Response::setExpires/setLastModified/setEtag(), MockArraySessionStorage/NativeSessionStorage::setMetadataBag(), NativeSessionStorage::setSaveHandler()
• Add argument $statusCode to Response::sendHeaders() and StreamedResponse::sendHeaders()

6.4

• Make HeaderBag::getDate(), Response::getDate(), getExpires() and getLastModified() return a DateTimeImmutable
• Support root-level Generator in StreamedJsonResponse
• Add UriSigner from the HttpKernel component

... (truncated)

Commits

• 191413c [HttpFoundation] Compare cookie with null value as empty string in ResponseCo...
• 773aca6 [HttpFoundation] Check IPv6 is valid before comparing it
• cd4f478 [HttpFoundation] Fix session tests
• 7eea76a skip a test if the mime type detection feature will not work
• 9aeb286 Fix BinaryFileResponse content type detection logic
• 7acdc97 [HttpFoundation] Prevent BinaryFileResponse::prepare from adding content type...
• 935f796 [HttpFoundation] Always return strings from accept headers
• 518e21d [HttpFoundation] move flushing outside of Response::closeOutputBuffers
• b2f2e3c [HttpFoundation] Fix tests on PHP 8.2 (bis)
• 32589ae [HttpFoundation] Fix tests on PHP 8.2
• Additional commits viewable in compare view

Updates symfony/http-kernel from 4.1.4 to 4.4.51

Release notes

Sourced from symfony/http-kernel's releases.

v4.4.51

Changelog (symfony/http-kernel@v4.4.50...v4.4.51)

• no significant changes

Changelog

Sourced from symfony/http-kernel's changelog.

CHANGELOG

7.3

• Add $key argument to #[MapQueryString] that allows using a specific key for argument resolving
• Support Uid in #[MapQueryParameter]
• Add ServicesResetterInterface, implemented by ServicesResetter
• Allow configuring the logging channel per type of exceptions in ErrorListener

7.2

• Remove @internal flag and add @final to ServicesResetter
• Add support for SYMFONY_DISABLE_RESOURCE_TRACKING env var
• Add support for configuring trusted proxies/headers/hosts via env vars

7.1

• Add method isKernelTerminating() to ExceptionEvent that allows to check if an exception was thrown while the kernel is being terminated
• Add HttpException::fromStatusCode()
• Add $validationFailedStatusCode argument to #[MapQueryParameter] that allows setting a custom HTTP status code when validation fails
• Add NearMissValueResolverException to let value resolvers report when an argument could be under their watch but failed to be resolved
• Add $type argument to #[MapRequestPayload] that allows mapping a list of items
• The Extension class is marked as internal, extend the Extension class from the DependencyInjection component instead
• Deprecate Extension::addAnnotatedClassesToCompile()
• Deprecate AddAnnotatedClassesToCachePass
• Deprecate the setAnnotatedClassCache() and getAnnotatedClassesToCompile() methods of the Kernel class
• Add #[MapUploadedFile] attribute to fetch, validate, and inject uploaded files into controller arguments

7.0

• Add argument $reflector to ArgumentResolverInterface::getArguments() and ArgumentMetadataFactoryInterface::createArgumentMetadata()
• Remove ArgumentValueResolverInterface, use ValueResolverInterface instead
• Remove StreamedResponseListener
• Remove AbstractSurrogate::$phpEscapeMap
• Remove HttpKernelInterface::MASTER_REQUEST
• Remove terminate_on_cache_hit option from HttpCache
• Require explicit argument when calling ConfigDataCollector::setKernel(), RouterListener::setCurrentRequest()
• Remove Kernel::stripComments()
• Remove FileLinkFormatter, use FileLinkFormatter from the ErrorHandler component instead
• Remove UriSigner, use UriSigner from the HttpFoundation component instead
• Add argument $buildDir to WarmableInterface
• Add argument $filter to Profiler::find() and FileProfilerStorage::find()

6.4

... (truncated)

Commits

• ad8ab19 Update VERSION for 4.4.51
• aa6df6c Update VERSION for 4.4.50
• f7822a7 security #cve-2022-24894 [HttpKernel] Remove private headers before storing r...
• 4e36db8 Update VERSION for 4.4.49
• bc62d95 [HttpKernel] Fix message for unresovable arguments of invokable controllers
• 0924172 Bump Symfony version to 4.4.49
• a6d5229 Update VERSION for 4.4.48
• 26989b2 bug #47857 [HttpKernel] Fix empty request stack when terminating with excepti...
• 3f61170 [HttpKernel] Fix empty request stack when terminating with exception
• 9a34f1a bug #47878 [HttpKernel] Remove EOL when using error_log() in HttpKernel Logge...
• Additional commits viewable in compare view

Updates symfony/process from 4.1.4 to 4.4.44

Release notes

Sourced from symfony/process's releases.

v4.4.44

Changelog (symfony/process@v4.4.43...v4.4.44)

• no significant changes

v4.4.41

Changelog (symfony/process@v4.4.40...v4.4.41)

• bug #45931 Fix Process::getEnv() when setEnv() hasn't been called before (asika32764)

v4.4.40

Changelog (symfony/process@v4.4.39...v4.4.40)

• bug #45676 Don't return executable directories in PhpExecutableFinder (fancyweb)

v4.4.37

Changelog (symfony/process@v4.4.36...v4.4.37)

• bug #45103 Avoid calling fclose on an already closed resource (Seldaek)

Changelog

Sourced from symfony/process's changelog.

CHANGELOG

7.3

• Add RunProcessMessage::fromShellCommandline() to instantiate a Process via the fromShellCommandline method

7.1

• Add Process::setIgnoredSignals() to disable signal propagation to the child process

6.4

• Add PhpSubprocess to handle PHP subprocesses that take over the configuration from their parent
• Add RunProcessMessage and RunProcessMessageHandler

5.2.0

• added Process::setOptions() to set Process specific options
• added option create_new_console to allow a subprocess to continue to run after the main script exited, both on Linux and on Windows

5.1.0

• added Process::getStartTime() to retrieve the start time of the process as float

5.0.0

• removed Process::inheritEnvironmentVariables()
• removed PhpProcess::setPhpBinary()
• Process must be instantiated with a command array, use Process::fromShellCommandline() when the command should be parsed by the shell
• removed Process::setCommandLine()

4.4.0

• deprecated Process::inheritEnvironmentVariables(): env variables are always inherited.
• added Process::getLastOutputTime() method

4.2.0

... (truncated)

Commits

• 5cee9cd CS fixes
• 9eedd60 [Process] Fix Process::getEnv() when setEnv() hasn't been called before
• 54e9d76 [Finder] fix tests on Windows
• 7489e29 [Process] Don't return executable directories in PhpExecutableFinder
• b2d924e [Process] Update PHPDoc to use proper placeholder syntax
• 96532c9 [Process] Avoid calling fclose on an already closed resource
• f0521ab Bump license year
• a35d6b8 Run open_basedir tests in separate processes
• ff1cabb CS fixes
• c1d5c35 [Process] fixed uppercase ARGC and ARGV should also be skipped
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.