Skip to content

chore(deps): bump symfony/cache from 6.4.11 to 7.4.13 - #2

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/symfony/cache-7.4.13
Open

chore(deps): bump symfony/cache from 6.4.11 to 7.4.13#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/symfony/cache-7.4.13

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 27, 2026

Copy link
Copy Markdown
Contributor

Bumps symfony/cache from 6.4.11 to 7.4.13.

Release notes

Sourced from symfony/cache's releases.

v7.4.13

Changelog (symfony/cache@v7.4.12...v7.4.13)

v7.4.12

Changelog (symfony/cache@v7.4.10...v7.4.12)

v7.4.10

Changelog (symfony/cache@v7.4.9...v7.4.10)

v7.4.9

Changelog (symfony/cache@v7.4.8...v7.4.9)

v7.4.8

Changelog (symfony/cache@v7.4.7...v7.4.8)

  • bug #63818 Ensure compatibility with Relay extension 0.21.0 (@​lyrixx)
  • bug #63747 Fix Psr16Cache::getMultiple() returning ValueWrapper with TagAwareAdapter (@​pcescon)
  • bug #63736 Fix undefined array key when tag save fails in AbstractTagAwareAdapter (@​pcescon)
  • bug #63655 Fix ChainAdapter ignoring item expiry when propagating to earlier adapters (@​guillaumeVDP)

v7.4.7

Changelog (symfony/cache@v7.4.6...v7.4.7)

v7.4.6

Changelog (symfony/cache@v7.4.5...v7.4.6)

v7.4.5

Changelog (symfony/cache@v7.4.4...v7.4.5)

... (truncated)

Changelog

Sourced from symfony/cache's changelog.

CHANGELOG

8.0

  • Remove CouchbaseBucketAdapter, use CouchbaseCollectionAdapter instead

7.4

  • Bump ext-redis to 6.1 and ext-relay to 0.12 minimum

7.3

  • Add support for \Relay\Cluster in RedisAdapter
  • Add support for valkey: / valkeys: schemes
  • Add support for namespace-based invalidation
  • Rename options "redis_cluster" and "redis_sentinel" to "cluster" and "sentinel" respectively

7.2

  • igbinary_serialize() is no longer used instead of serialize() by default when the igbinary extension is installed, due to behavior compatibilities between the two
  • Add optional Psr\Clock\ClockInterface parameter to ArrayAdapter

7.1

  • Add option sentinel_master as an alias for redis_sentinel
  • Deprecate CouchbaseBucketAdapter, use CouchbaseCollectionAdapter
  • Add support for URL encoded characters in Couchbase DSN
  • Add support for using DSN with PDOAdapter
  • The algorithm for the default cache namespace changed from SHA256 to XXH128

7.0

  • Add parameter $isSameDatabase to DoctrineDbalAdapter::configureSchema()
  • Drop support for Postgres < 9.5 and SQL Server < 2008 in DoctrineDbalAdapter

6.4

  • EarlyExpirationHandler no longer implements MessageHandlerInterface, rely on AsMessageHandler instead

6.3

... (truncated)

Commits
  • 4c09e18 Merge branch '6.4' into 7.4
  • 5490a57 Merge branch '5.4' into 6.4
  • bf58147 [Cache] skip tests for adapters that cannot clear by prefix
  • f796e47 Ignore Doctrine DBAL deprecations that can't be worked around
  • bf9d30f Merge branch '6.4' into 7.4
  • 03472b6 [Cache] Fix strlen(null) deprecation on RelayCluster path in RedisTrait::doCl...
  • 8602405 Merge branch '5.4' into 6.4
  • 4acd37c [Cache] Accept '_' and ':' in prefix passed to AbstractAdapter::clear()
  • 902d621 Merge branch '6.4' into 7.4
  • 8f9b022 Merge branch '5.4' into 6.4
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [symfony/cache](https://github.com/symfony/cache) from 6.4.11 to 7.4.13.
- [Release notes](https://github.com/symfony/cache/releases)
- [Changelog](https://github.com/symfony/cache/blob/8.1/CHANGELOG.md)
- [Commits](symfony/cache@v6.4.11...v7.4.13)

---
updated-dependencies:
- dependency-name: symfony/cache
  dependency-version: 7.4.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels May 27, 2026
@private-packagist

Copy link
Copy Markdown

composer.lock

Package changes

Package Operation From To About
psr/log upgrade 3.0.1 3.0.2 diff
symfony/cache upgrade v6.4.11 ⚠️ v7.4.13 ✅ diff
symfony/cache-contracts upgrade v3.5.0 v3.7.0 diff
symfony/deprecation-contracts upgrade v3.5.0 v3.7.0 diff
symfony/polyfill-php80 upgrade v1.30.0 v1.37.0 diff
symfony/service-contracts upgrade v3.5.0 v3.7.0 diff
symfony/var-exporter upgrade v6.4.9 v8.0.9 diff

Settings · Docs · Powered by Private Packagist

@joostfaassen

Copy link
Copy Markdown
Member

🤖 Dependabot PR processing skill — risk assessment

Acting on behalf of Joost Faassen.

Decision

Do not merge automatically — assessed risk: high

What changed

Title chore(deps): bump symfony/cache from 6.4.11 to 7.4.13
Semver major (6.4.117.4.13)
Files (1) composer.lock
Diff size +107 / −80

Why this was not merged automatically

  1. This looks like a major semver jump (6.4.117.4.13).
  2. Major dependency upgrades can introduce breaking API or runtime changes.
  3. Left open for human review.

Checks considered

  • Pull request is mergeable with a clean merge state
  • No failing / timed-out / cancelled required checks observed
  • Diff inspected for manifests/lockfiles only vs unexpected paths
  • Package/path screened against sensitive dependency patterns

Automated assessment by the Dependabot PR processing skill. Detail stays in this comment; the merge commit message is kept short on purpose.

3 similar comments
@joostfaassen

Copy link
Copy Markdown
Member

🤖 Dependabot PR processing skill — risk assessment

Acting on behalf of Joost Faassen.

Decision

Do not merge automatically — assessed risk: high

What changed

Title chore(deps): bump symfony/cache from 6.4.11 to 7.4.13
Semver major (6.4.117.4.13)
Files (1) composer.lock
Diff size +107 / −80

Why this was not merged automatically

  1. This looks like a major semver jump (6.4.117.4.13).
  2. Major dependency upgrades can introduce breaking API or runtime changes.
  3. Left open for human review.

Checks considered

  • Pull request is mergeable with a clean merge state
  • No failing / timed-out / cancelled required checks observed
  • Diff inspected for manifests/lockfiles only vs unexpected paths
  • Package/path screened against sensitive dependency patterns

Automated assessment by the Dependabot PR processing skill. Detail stays in this comment; the merge commit message is kept short on purpose.

@joostfaassen

Copy link
Copy Markdown
Member

🤖 Dependabot PR processing skill — risk assessment

Acting on behalf of Joost Faassen.

Decision

Do not merge automatically — assessed risk: high

What changed

Title chore(deps): bump symfony/cache from 6.4.11 to 7.4.13
Semver major (6.4.117.4.13)
Files (1) composer.lock
Diff size +107 / −80

Why this was not merged automatically

  1. This looks like a major semver jump (6.4.117.4.13).
  2. Major dependency upgrades can introduce breaking API or runtime changes.
  3. Left open for human review.

Checks considered

  • Pull request is mergeable with a clean merge state
  • No failing / timed-out / cancelled required checks observed
  • Diff inspected for manifests/lockfiles only vs unexpected paths
  • Package/path screened against sensitive dependency patterns

Automated assessment by the Dependabot PR processing skill. Detail stays in this comment; the merge commit message is kept short on purpose.

@joostfaassen

Copy link
Copy Markdown
Member

🤖 Dependabot PR processing skill — risk assessment

Acting on behalf of Joost Faassen.

Decision

Do not merge automatically — assessed risk: high

What changed

Title chore(deps): bump symfony/cache from 6.4.11 to 7.4.13
Semver major (6.4.117.4.13)
Files (1) composer.lock
Diff size +107 / −80

Why this was not merged automatically

  1. This looks like a major semver jump (6.4.117.4.13).
  2. Major dependency upgrades can introduce breaking API or runtime changes.
  3. Left open for human review.

Checks considered

  • Pull request is mergeable with a clean merge state
  • No failing / timed-out / cancelled required checks observed
  • Diff inspected for manifests/lockfiles only vs unexpected paths
  • Package/path screened against sensitive dependency patterns

Automated assessment by the Dependabot PR processing skill. Detail stays in this comment; the merge commit message is kept short on purpose.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant