chore(deps): bump the composer group with 5 updates

[dependabot]

Bumps the composer group with 5 updates:

Package	From	To
laravel/framework	11.29.0	11.34.2
league/commonmark	2.5.3	2.6.0
symfony/http-client	7.1.5	7.2.0
symfony/http-foundation	7.1.5	7.2.0
symfony/process	7.1.5	7.2.0

Updates laravel/framework from 11.29.0 to 11.34.2

Release notes

Sourced from laravel/framework's releases.

v11.34.2

• Revert "[11.x] Add non-static JsonResource wrapping" by @​taylorotwell in laravel/framework#53686
• [11.x] groupBy() return type phpdoc by @​lorenzolosa in laravel/framework#53684
• [11.x] Fix withoutOverlapping for grouped scheduled closures by @​istiak-tridip in laravel/framework#53680
• [11.x] Fix ResendTransport missing custom headers by @​lucasmichot in laravel/framework#53687

v11.34.1

• Configure cloud log socket by @​taylorotwell in laravel/framework#53666

v11.34.0

• [10.x] Fix append and prepend batch to chain by @​Bencute in laravel/framework#53455
• [11.x] Allow BackedEnum when using fromRoute() in MakesHttpRequests by @​wietsewarendorff in laravel/framework#53593
• [11.x] Test Improvements by @​crynobone in laravel/framework#53586
• [11.x] Move $ownerKey check for null to MorphTo as BelongsTo relationship will always return a string by @​crynobone in laravel/framework#53592
• Unset eloquent model's cached cast attribute by @​adamthehutt in laravel/framework#53583
• [11.x] Add non-static JsonResource wrapping by @​SanderMuller in laravel/framework#53543
• [10.x] PHP 8.4 Code Compatibility by @​crynobone in laravel/framework#53612
• Add assertCount() for fake storage by @​ahmadreza1383 in laravel/framework#53620
• Fix Paginator __construct parameter typehint for phpstan by @​Afrowson in laravel/framework#53615
• [11.x] Add generics for Arr::last() by @​talkinnl in laravel/framework#53619
• Add typed closure to bootstrappers in console application by @​MatusBoa in laravel/framework#53613
• refactor: Some minor performance & readability enhancements by @​dshafik in laravel/framework#53596
• [11.x] Improve doc blocks for interacting with enum inputs by @​axlon in laravel/framework#53625
• [11.x] Skip object construction if no rebound callbacks are set by @​axlon in laravel/framework#53502
• Make the bearerToken method case-insensitive by @​samtlewis in laravel/framework#53627
• [11.x] Fix attribute inheritance for nested scheduled groups by @​istiak-tridip in laravel/framework#53626
• [11.x] Supports PHP 8.4 by @​crynobone in laravel/framework#53468
• ☁️ by @​taylorotwell in laravel/framework#53623
• [11.x] Fix typo in docblock by @​stancl in laravel/framework#53636
• Add Number::spellOrdinal() to spell ordinals as words. by @​joelstein in laravel/framework#53661
• [11.x] Add PausePrompt fallback by @​jwpage in laravel/framework#53660
• [11.x] Fix SyntaxError on Vite prefetch with empty assets by @​jnoordsij in laravel/framework#53659
• [11.x] Improved class-string types by @​timacdonald in laravel/framework#53657
• [11.x] Use never type for methods that always throws by @​tamiroh in laravel/framework#53643
• [11.x] Adds conditional to routes by @​Boorinio in laravel/framework#53654
• [11.x] Make withoutDefer also return $this by @​tamiroh in laravel/framework#53644
• Add shorthands for fake HTTP responses by @​jasonmccreary in laravel/framework#53663
• Use the environment method instead of the isLocal method by @​NaokiTsuchiya in laravel/framework#53638
• [11.x] Fix: Ensure generated policies return boolean values by @​Aluisio-Pires in laravel/framework#53632
• Bus assertempty by @​jasonmccreary in laravel/framework#53664
• [11.x] Improve schedule group behaviors by @​istiak-tridip in laravel/framework#53641
• [11.x] Add Request::fluent method by @​stevebauman in laravel/framework#53662
• [11.x] Support named in-memory SQLite connections by @​stancl in laravel/framework#53635
• event name & listener callback types by @​rudiedirkx in laravel/framework#53642
• Test cleanup from #53664 by @​jasonmccreary in laravel/framework#53672
• [11.x] Fix: Prevent invalid AWS credentials options being created by @​robchett in laravel/framework#53633
• [11.x] Expand Support\Fluent data access and transformation capabilities by @​stevebauman in laravel/framework#53665

v11.33.2

• Support ObservedBy on parent model classes by @​adamthehutt in laravel/framework#53579

... (truncated)

Changelog

Sourced from laravel/framework's changelog.

v11.34.2 - 2024-11-27

• Revert "[11.x] Add non-static JsonResource wrapping" by @​taylorotwell in laravel/framework#53686
• [11.x] groupBy() return type phpdoc by @​lorenzolosa in laravel/framework#53684
• [11.x] Fix withoutOverlapping for grouped scheduled closures by @​istiak-tridip in laravel/framework#53680
• [11.x] Fix ResendTransport missing custom headers by @​lucasmichot in laravel/framework#53687

v11.34.1 - 2024-11-26

• Configure cloud log socket by @​taylorotwell in laravel/framework#53666

v11.34.0 - 2024-11-26

• [10.x] Fix append and prepend batch to chain by @​Bencute in laravel/framework#53455
• [11.x] Allow BackedEnum when using fromRoute() in MakesHttpRequests by @​wietsewarendorff in laravel/framework#53593
• [11.x] Test Improvements by @​crynobone in laravel/framework#53586
• [11.x] Move $ownerKey check for null to MorphTo as BelongsTo relationship will always return a string by @​crynobone in laravel/framework#53592
• Unset eloquent model's cached cast attribute by @​adamthehutt in laravel/framework#53583
• [11.x] Add non-static JsonResource wrapping by @​SanderMuller in laravel/framework#53543
• [10.x] PHP 8.4 Code Compatibility by @​crynobone in laravel/framework#53612
• Add assertCount() for fake storage by @​ahmadreza1383 in laravel/framework#53620
• Fix Paginator __construct parameter typehint for phpstan by @​Afrowson in laravel/framework#53615
• [11.x] Add generics for Arr::last() by @​talkinnl in laravel/framework#53619
• Add typed closure to bootstrappers in console application by @​MatusBoa in laravel/framework#53613
• refactor: Some minor performance & readability enhancements by @​dshafik in laravel/framework#53596
• [11.x] Improve doc blocks for interacting with enum inputs by @​axlon in laravel/framework#53625
• [11.x] Skip object construction if no rebound callbacks are set by @​axlon in laravel/framework#53502
• Make the bearerToken method case-insensitive by @​samtlewis in laravel/framework#53627
• [11.x] Fix attribute inheritance for nested scheduled groups by @​istiak-tridip in laravel/framework#53626
• [11.x] Supports PHP 8.4 by @​crynobone in laravel/framework#53468
• ☁️ by @​taylorotwell in laravel/framework#53623
• [11.x] Fix typo in docblock by @​stancl in laravel/framework#53636
• Add Number::spellOrdinal() to spell ordinals as words. by @​joelstein in laravel/framework#53661
• [11.x] Add PausePrompt fallback by @​jwpage in laravel/framework#53660
• [11.x] Fix SyntaxError on Vite prefetch with empty assets by @​jnoordsij in laravel/framework#53659
• [11.x] Improved class-string types by @​timacdonald in laravel/framework#53657
• [11.x] Use never type for methods that always throws by @​tamiroh in laravel/framework#53643
• [11.x] Adds conditional to routes by @​Boorinio in laravel/framework#53654
• [11.x] Make withoutDefer also return $this by @​tamiroh in laravel/framework#53644
• Add shorthands for fake HTTP responses by @​jasonmccreary in laravel/framework#53663
• Use the environment method instead of the isLocal method by @​NaokiTsuchiya in laravel/framework#53638
• [11.x] Fix: Ensure generated policies return boolean values by @​Aluisio-Pires in laravel/framework#53632
• Bus assertempty by @​jasonmccreary in laravel/framework#53664
• [11.x] Improve schedule group behaviors by @​istiak-tridip in laravel/framework#53641
• [11.x] Add Request::fluent method by @​stevebauman in laravel/framework#53662
• [11.x] Support named in-memory SQLite connections by @​stancl in laravel/framework#53635
• event name & listener callback types by @​rudiedirkx in laravel/framework#53642
• Test cleanup from #53664 by @​jasonmccreary in laravel/framework#53672
• [11.x] Fix: Prevent invalid AWS credentials options being created by @​robchett in laravel/framework#53633
• [11.x] Expand Support\Fluent data access and transformation capabilities by @​stevebauman in laravel/framework#53665

... (truncated)

Commits

• 865da6d Update version to v11.34.2
• 1d32031 Fix Resend transport headers bug (#53687)
• ae1ce8d Update facade docblocks
• 285d4b7 [11.x] Fix withoutOverlapping for grouped scheduled closures (#53680)
• b1f07ed fix groupBy() return type phpdoc (#53684)
• 41d1a2d Revert "[11.x] Add non-static JsonResource wrapping (#53543)" (#53686)
• e7b12ff Update CHANGELOG
• ed07324 Update version to v11.34.1
• 8d32280 configure cloud log socket (#53666)
• a9acf84 Update CHANGELOG
• Additional commits viewable in compare view

Updates league/commonmark from 2.5.3 to 2.6.0

Release notes

Sourced from league/commonmark's releases.

2.6.0

This is a security release to address potential denial of service attacks when parsing specially crafted, malicious input from untrusted sources (like user input). See GHSA-c2pc-g5qf-rfrf for more details.

Added

• Added max_delimiters_per_line config option to prevent denial of service attacks when parsing malicious input
• Added table/max_autocompleted_cells config option to prevent denial of service attacks when parsing large tables
• The AttributesExtension now supports attributes without values (#985, #986)
• The AutolinkExtension exposes two new configuration options to override the default behavior (#969, #987):
  • autolink/allowed_protocols - an array of protocols to allow autolinking for
  • autolink/default_protocol - the default protocol to use when none is specified
• Added RegexHelper::isWhitespace() method to check if a given character is an ASCII whitespace character
• Added CacheableDelimiterProcessorInterface to ensure linear complexity for dynamic delimiter processing
• Added Bracket delimiter type to optimize bracket parsing

Changed

• [ and ] are no longer added as Delimiter objects on the stack; a new Bracket type with its own stack is used instead
• UrlAutolinkParser no longer parses URLs with more than 127 subdomains
• Expanded reference links can no longer exceed 100kb, or the size of the input document (whichever is greater)
• Delimiters should always provide a non-null value via DelimiterInterface::getIndex()
  • We'll attempt to infer the index based on surrounding delimiters where possible
• The DelimiterStack now accepts integer positions for any $stackBottom argument
• Several small performance optimizations

Changelog

Sourced from league/commonmark's changelog.

[2.6.0] - 2024-12-07

This is a security release to address potential denial of service attacks when parsing specially crafted, malicious input from untrusted sources (like user input).

Added

• Added max_delimiters_per_line config option to prevent denial of service attacks when parsing malicious input
• Added table/max_autocompleted_cells config option to prevent denial of service attacks when parsing large tables
• The AttributesExtension now supports attributes without values (#985, #986)
• The AutolinkExtension exposes two new configuration options to override the default behavior (#969, #987):
  • autolink/allowed_protocols - an array of protocols to allow autolinking for
  • autolink/default_protocol - the default protocol to use when none is specified
• Added RegexHelper::isWhitespace() method to check if a given character is an ASCII whitespace character
• Added CacheableDelimiterProcessorInterface to ensure linear complexity for dynamic delimiter processing
• Added Bracket delimiter type to optimize bracket parsing

Changed

• [ and ] are no longer added as Delimiter objects on the stack; a new Bracket type with its own stack is used instead
• UrlAutolinkParser no longer parses URLs with more than 127 subdomains
• Expanded reference links can no longer exceed 100kb, or the size of the input document (whichever is greater)
• Delimiters should always provide a non-null value via DelimiterInterface::getIndex()
  • We'll attempt to infer the index based on surrounding delimiters where possible
• The DelimiterStack now accepts integer positions for any $stackBottom argument
• Several small performance optimizations

Commits

• d150f91 Prepare to release 2.6.0
• 2f1e520 Merge commit from fork
• d777db8 Add pathological test for deeply-nested blocks
• 92dbad9 Flag this as a security release
• 8b9d95e Fix pathological test suite failing not loading extensions in CI
• 5156796 Add max_delimiters_per_line config option
• 5ce491f Optimize repeated parsing of links without closing brace
• 540d850 Fix quadratic complexity parsing long backtick code spans with no matching cl...
• e1cfa8d Use recursive lookup as a last resort to avoid throwing
• b61bbd4 Use delimiter position to optimize processing
• Additional commits viewable in compare view

Updates symfony/http-client from 7.1.5 to 7.2.0

Release notes

Sourced from symfony/http-client's releases.

v7.2.0

Changelog (symfony/http-client@v7.2.0-RC1...v7.2.0)

• bug symfony/symfony#59023 [HttpClient] Fix streaming and redirecting with NoPrivateNetworkHttpClient (@​nicolas-grekas)
• bug symfony/symfony#59013 [HttpClient] Fix checking for private IPs before connecting (@​nicolas-grekas)
• bug symfony/symfony#58562 [HttpClient] Close gracefull when the server closes the connection abruptly (@​discordier)
• bug symfony/symfony#58953 [HttpClient] Fix computing stats for PUSH with Amp (@​nicolas-grekas)
• bug symfony/symfony#58924 [HttpClient] Fix empty hosts in option "resolve" (@​nicolas-grekas)
• bug symfony/symfony#58915 [HttpClient] Fix option "resolve" with IPv6 addresses (@​nicolas-grekas)
• bug symfony/symfony#58914 [HttpClient] Fix option "bindto" with IPv6 addresses (@​nicolas-grekas)
• bug symfony/symfony#58875 [HttpClient] Removed body size limit (Carl Julian Sauter)
• bug symfony/symfony#58860 [HttpClient] Fix catching some invalid Location headers (@​nicolas-grekas)
• bug symfony/symfony#58836 Work around parse_url() bug (bis) (@​nicolas-grekas)
• bug symfony/symfony#58850 [HttpClient] fix PHP 7.2 compatibility (@​xabbuh)

v7.2.0-RC1

Changelog (symfony/http-client@v7.2.0-BETA2...v7.2.0-RC1)

• security symfony/symfony#cve-2024-50342 [HttpClient] Resolve hostnames in NoPrivateNetworkHttpClient (@​nicolas-grekas)

v7.2.0-BETA2

Changelog (symfony/http-client@v7.2.0-BETA1...v7.2.0-BETA2)

• bug symfony/symfony#58776 [DependencyInjection][HttpClient][Routing] Reject URIs that contain invalid characters (@​nicolas-grekas)
• security symfony/symfony#cve-2024-50342 [HttpClient] Filter private IPs before connecting when Host == IP (@​nicolas-grekas)
• bug symfony/symfony#58704 [HttpClient] fix for HttpClientDataCollector fails if proc_open is disabled via php.ini (@​ZaneCEO)

v7.2.0-BETA1

Changelog (symfony/http-client@v7.1.6...v7.2.0-BETA1)

• feature symfony/symfony#54179 [HttpClient] Add support for amphp/http-client v5 (@​nicolas-grekas)

v7.1.9

Changelog (symfony/http-client@v7.1.8...v7.1.9)

• bug symfony/symfony#59013 [HttpClient] Fix checking for private IPs before connecting (@​nicolas-grekas)
• bug symfony/symfony#58562 [HttpClient] Close gracefull when the server closes the connection abruptly (@​discordier)
• bug symfony/symfony#58924 [HttpClient] Fix empty hosts in option "resolve" (@​nicolas-grekas)
• bug symfony/symfony#58915 [HttpClient] Fix option "resolve" with IPv6 addresses (@​nicolas-grekas)
• bug symfony/symfony#58914 [HttpClient] Fix option "bindto" with IPv6 addresses (@​nicolas-grekas)
• bug symfony/symfony#58875 [HttpClient] Removed body size limit (Carl Julian Sauter)
• bug symfony/symfony#58860 [HttpClient] Fix catching some invalid Location headers (@​nicolas-grekas)
• bug symfony/symfony#58836 Work around parse_url() bug (bis) (@​nicolas-grekas)
• bug symfony/symfony#58850 [HttpClient] fix PHP 7.2 compatibility (@​xabbuh)

v7.1.8

Changelog (symfony/http-client@v7.1.7...v7.1.8)

• security symfony/symfony#cve-2024-50342 [HttpClient] Resolve hostnames in NoPrivateNetworkHttpClient (@​nicolas-grekas)

... (truncated)

Changelog

Sourced from symfony/http-client's changelog.

CHANGELOG

7.2

• Add support for amphp/http-client v5 on PHP 8.4+

7.1

• Add HttpOptions::setHeader() to add or replace a single header
• Allow mocking start_time info in MockResponse
• Add MockResponse::fromFile() and JsonMockResponse::fromFile() methods to help using fixtures files
• Add ThrottlingHttpClient to enable limiting the number of requests within a certain period
• Deprecate the setLogger() methods of the NoPrivateNetworkHttpClient, TraceableHttpClient and ScopingHttpClient classes, configure the logger of the wrapped clients directly instead

7.0

• Remove implementing Http\Message\RequestFactory from HttplugClient

6.4

• Add HarFileResponseFactory testing utility, allow to replay responses from .har files
• Add max_retries option to RetryableHttpClient to adjust the retry logic on a per request level
• Add PingWehookMessage and PingWebhookMessageHandler
• Enable using EventSourceHttpClient::connect() for both GET and POST

6.3

• Add option crypto_method to set the minimum TLS version and make it default to v1.2
• Add UriTemplateHttpClient to use URI templates as specified in the RFC 6570
• Add ServerSentEvent::getArrayData() to get the Server-Sent Event's data decoded as an array when it's a JSON payload
• Allow array of urls as base_uri option value in RetryableHttpClient to retry on a new url each time
• Add JsonMockResponse, a MockResponse shortcut that automatically encodes the passed body to JSON and sets the content type to application/json by default
• Support file uploads by nesting resource streams in option "body"

6.2

• Make HttplugClient implement Psr\Http\Message\RequestFactoryInterface, StreamFactoryInterface and UriFactoryInterface
• Deprecate implementing Http\Message\RequestFactory, StreamFactory and UriFactory on HttplugClient
• Add withOptions() to HttplugClient and Psr18Client

6.1

... (truncated)

Commits

• 955e433 Merge branch '7.1' into 7.2
• f4459f8 Merge branch '6.4' into 7.1
• 18725f0 Merge branch '5.4' into 6.4
• d77d8e2 [HttpClient] Fix streaming and redirecting with NoPrivateNetworkHttpClient
• 99ceaed [HttpClient] Fix primary_ip info when using amphp/http-client v5
• e961ee6 Merge branch '7.1' into 7.2
• 2ec4972 Merge branch '6.4' into 7.1
• 60a1136 Merge branch '5.4' into 6.4
• 63a1278 [HttpClient] Fix checking for private IPs before connecting
• 3d49526 Merge branch '7.1' into 7.2
• Additional commits viewable in compare view

Updates symfony/http-foundation from 7.1.5 to 7.2.0

Release notes

Sourced from symfony/http-foundation's releases.

v7.2.0

Changelog (symfony/http-foundation@v7.2.0-RC1...v7.2.0)

• bug symfony/symfony#58862 [Notifier] Fix GoIpTransport (@​nicolas-grekas)
• bug symfony/symfony#58836 Work around parse_url() bug (bis) (@​nicolas-grekas)

v7.2.0-RC1

Changelog (symfony/http-foundation@v7.2.0-BETA2...v7.2.0-RC1)

• no significant changes

v7.2.0-BETA2

Changelog (symfony/http-foundation@v7.2.0-BETA1...v7.2.0-BETA2)

• security symfony/symfony#cve-2024-50345 [HttpFoundation] Reject URIs that contain invalid characters (@​nicolas-grekas)
• bug symfony/symfony#58712 [HttpFoundation] Fix support for \SplTempFileObject in BinaryFileResponse (@​elementaire)

v7.2.0-BETA1

Changelog (symfony/http-foundation@v7.1.6...v7.2.0-BETA1)

• feature symfony/symfony#57805 [FrameworkBundle] Deprecate session.sid_length and session.sid_bits_per_character config options (@​alexandre-daubois)
• feature symfony/symfony#58244 [HttpFoundation] Deprecate more options in NativeSessionStorage (@​alexandre-daubois)
• feature symfony/symfony#58154 [HttpFoundation] Add PRIVATE_SUBNETS as a shortcut for private IP address ranges to Request::setTrustedProxies() (@​nicolas-grekas)
• feature symfony/symfony#58038 [HttpFoundation] Add optional $v4Bytes and $v6Bytes parameters to IpUtils::anonymize() (@​alexandre-daubois)
• feature symfony/symfony#57909 [HttpFoundation] Add $requests parameter to RequestStack constructor (@​alexander-schranz)

v7.1.9

Changelog (symfony/http-foundation@v7.1.8...v7.1.9)

• bug symfony/symfony#58862 [Notifier] Fix GoIpTransport (@​nicolas-grekas)
• bug symfony/symfony#58836 Work around parse_url() bug (bis) (@​nicolas-grekas)

v7.1.8

Changelog (symfony/http-foundation@v7.1.7...v7.1.8)

• no significant changes

v7.1.7

Changelog (symfony/http-foundation@v7.1.6...v7.1.7)

• security symfony/symfony#cve-2024-50345 [HttpFoundation] Reject URIs that contain invalid characters (@​nicolas-grekas)
• bug symfony/symfony#58712 [HttpFoundation] Fix support for \SplTempFileObject in BinaryFileResponse (@​elementaire)

v7.1.6

Changelog (symfony/http-foundation@v7.1.5...v7.1.6)

• bug symfony/symfony#58619 [HttpFoundation][Lock] Ensure compatibility with ext-mongodb v2 (@​GromNaN)

Changelog

Sourced from symfony/http-foundation's changelog.

CHANGELOG

7.2

• Add optional $requests parameter to RequestStack::__construct()
• Add optional $v4Bytes and $v6Bytes parameters to IpUtils::anonymize()
• Add PRIVATE_SUBNETS as a shortcut for private IP address ranges to Request::setTrustedProxies()
• Deprecate passing referer_check, use_only_cookies, use_trans_sid, trans_sid_hosts, trans_sid_tags, sid_bits_per_character and sid_length options to NativeSessionStorage

7.1

• Add optional $expirationParameter argument to UriSigner::__construct()
• Add optional $expiration argument to UriSigner::sign()
• Rename $parameter argument of UriSigner::__construct() to $hashParameter
• Add UploadedFile::getClientOriginalPath()
• Add QueryParameterRequestMatcher
• Add HeaderRequestMatcher
• Add support for \SplTempFileObject in BinaryFileResponse
• Add verbose argument to response test constraints

7.0

• Calling ParameterBag::filter() throws an UnexpectedValueException on invalid value, unless flag FILTER_NULL_ON_FAILURE is set
• Calling ParameterBag::getInt() and ParameterBag::getBool() throws an UnexpectedValueException on invalid value
• Remove classes RequestMatcher and ExpressionRequestMatcher
• Remove Request::getContentType(), use Request::getContentTypeFormat() instead
• Throw an InvalidArgumentException when calling Request::create() with a malformed URI
• Require explicit argument when calling JsonResponse::setCallback(), Response::setExpires/setLastModified/setEtag(), MockArraySessionStorage/NativeSessionStorage::setMetadataBag(), NativeSessionStorage::setSaveHandler()
• Add argument $statusCode to Response::sendHeaders() and StreamedResponse::sendHeaders()

6.4

• Make HeaderBag::getDate(), Response::getDate(), getExpires() and getLastModified() return a DateTimeImmutable
• Support root-level Generator in StreamedJsonResponse
• Add UriSigner from the HttpKernel component
• Add partitioned flag to Cookie (CHIPS Cookie)
• Add argument bool $flush = true to Response::send()
• Make MongoDbSessionHandler instantiable with the mongodb extension directly

6.3

• Calling ParameterBag::getDigit(), getAlnum(), getAlpha() on an array throws a UnexpectedValueException instead of a TypeError
• Add ParameterBag::getString() to convert a parameter into string and throw an exception if the value is invalid
• Add ParameterBag::getEnum()

... (truncated)

Commits

• e88a66c Merge branch '7.1' into 7.2
• 8276584 Merge branch '6.4' into 7.1
• 431771b Merge branch '5.4' into 6.4
• 3f38b8a [HttpFoundation] Fix test
• 40e6615 bug #58862 [Notifier] Fix GoIpTransport (nicolas-grekas)
• d2737ec Merge branch '5.4' into 6.4
• 897e8a2 [HttpFoundation] Revert risk change
• 69094c8 [Notifier] Fix GoIpTransport
• 7df6f57 Merge branch '7.1' into 7.2
• 2251578 Merge branch '6.4' into 7.1
• Additional commits viewable in compare view

Updates symfony/process from 7.1.5 to 7.2.0

Release notes

Sourced from symfony/process's releases.

v7.2.0

Changelog (symfony/process@v7.2.0-RC1...v7.2.0)

• no significant changes

v7.2.0-BETA2

Changelog (symfony/process@v7.2.0-BETA1...v7.2.0-BETA2)

• security symfony/symfony#cve-2024-51736 [Process] Use PATH before CD to load the shell on Windows (@​nicolas-grekas)
• bug symfony/symfony#58752 [Process] Fix escaping /X arguments on Windows (@​nicolas-grekas)
• bug symfony/symfony#58735 [Process] Return built-in cmd.exe commands directly in ExecutableFinder (@​Seldaek)
• bug symfony/symfony#58723 [Process] Properly deal with not-found executables on Windows (@​nicolas-grekas)
• bug symfony/symfony#58711 [Process] Fix handling empty path found in the PATH env var with ExecutableFinder (@​nicolas-grekas)

v7.2.0-BETA1

Changelog (symfony/process@v7.1.6...v7.2.0-BETA1)

• feature symfony/symfony#58258 [Process] Add Laravel Herd php detection path (@​mpociot)
• feature symfony/symfony#52679 [Process] ExecutableFinder::addSuffix() has no effect (@​TravisCarden)

v7.1.8

Changelog (symfony/process@v7.1.7...v7.1.8)

• no significant changes

v7.1.7

Changelog (symfony/process@v7.1.6...v7.1.7)

• security symfony/symfony#cve-2024-51736 [Process] Use PATH before CD to load the shell on Windows (@​nicolas-grekas)
• bug symfony/symfony#58752 [Process] Fix escaping /X arguments on Windows (@​nicolas-grekas)
• bug symfony/symfony#58735 [Process] Return built-in cmd.exe commands directly in ExecutableFinder (@​Seldaek)
• bug symfony/symfony#58723 [Process] Properly deal with not-found executables on Windows (@​nicolas-grekas)
• bug symfony/symfony#58711 [Process] Fix handling empty path found in the PATH env var with ExecutableFinder (@​nicolas-grekas)

v7.1.6

Changelog (symfony/process@v7.1.5...v7.1.6)

• no significant changes

Commits

• d34b22b Merge branch '7.1' into 7.2
• 4278337 Merge branch '6.4' into 7.1
• 3cb242f Merge branch '5.4' into 6.4
• 5d1662f normalize paths to avoid failures if a path is referenced by different names
• 37f5c1f Merge branch '7.1' into 7.2
• 9b8a40b Merge branch '6.4' into 7.1
• 25214ad Merge branch '5.4' into 6.4
• 0190687 [Process] Fix test
• f2f5bb9 Merge branch '7.1' into 7.2
• 66716d3 Merge branch '6.4' into 7.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.