Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the composer group across 1 directory with 5 updates #4

Open
wants to merge 1 commit into
base: 2.7
Choose a base branch
from
Open

Bump the composer group across 1 directory with 5 updates #4

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Apr 17, 2024

Bumps the composer group with 5 updates in the / directory:

Package From To
doctrine/annotations 1.2.4 1.2.7
doctrine/cache 1.4.1 1.5.4
doctrine/common 2.5.0 2.5.3
swiftmailer/swiftmailer 5.4.0 5.4.12
twig/twig 1.18.1 1.36.0

Updates doctrine/annotations from 1.2.4 to 1.2.7

Release notes

Sourced from doctrine/annotations's releases.

v1.2.6

Revert a small change from v1.2.5 that removed a check for the wrong reasons, nothing major but better now.

v1.2.5

Total issues resolved: 1

  • Make AnnotationReader PHP7 compatible by fixing code that checks for removed ini variable.
Commits
  • f25c8aa [DCOM-293] Fix security misconfiguration vulnerability that can allow local a...
  • f4a9170 Revert "Fix broken merge on Zend Opcache check."
  • 6eeadf5 Fix broken merge on Zend Opcache check.
  • 735b6c5 Merge pull request #59 from mpalourdio/opcache.load_comments
  • 0a706d3 Move classes with reserved keywords in a separate file and skip test for php 7
  • 10a0a9d Use PHP_VERSION_ID, and not PHP_VERSION
  • 0ab9972 Add PHP7 to the build matrix
  • 0eae200 opcache.load_comments has been removed from PHP 7
  • c8927ad Merge pull request #57 from stof/patch-1
  • ae5fbc0 Switch to the docker-based infrastructure on Travis
  • See full diff in compare view

Updates doctrine/cache from 1.4.1 to 1.5.4

Release notes

Sourced from doctrine/cache's releases.

v1.5.4

Total issues resolved: 1

v1.5.3

Total issues resolved: 5

v1.5.2

Total issues resolved: 3

v1.5.1

Build Status

Total issues resolved: 1

v1.5.0

Build Status

Total issues resolved: 9

v1.4.4

Build Status

Total issues resolved: 1

v1.4.3

Build Status

Total issues resolved: 3

... (truncated)

Commits

Updates doctrine/common from 2.5.0 to 2.5.3

Release notes

Sourced from doctrine/common's releases.

v2.5.3

Total issues resolved: 1

Build Status

v2.5.2

Release Notes - Doctrine Common - Version 2.5.2

Bug-fixes

Improvement

Commits

Updates swiftmailer/swiftmailer from 5.4.0 to 5.4.12

Changelog

Sourced from swiftmailer/swiftmailer's changelog.

5.4.12 (2018-07-31)

  • fixed typo

5.4.11 (2018-07-31)

  • fixed startTLS support for PHP 5.6-

5.4.10 (2018-07-27)

  • fixed startTLS only allowed tls1.0, now allowed: tls1.0, tls1.1, tls1.2

5.4.9 (2018-01-23)

  • no changes, last version of the 5.x series

5.4.8 (2017-05-01)

  • fixed encoding inheritance in addPart()
  • fixed sorting MIME children when their types are equal

5.4.7 (2017-04-20)

  • fixed NTLMAuthenticator clobbering bcmath scale

5.4.6 (2017-02-13)

  • removed exceptions thrown in destructors as they lead to fatal errors
  • switched to use sha256 by default in DKIM as per the RFC
  • fixed an 'Undefined variable: pipes' PHP notice
  • fixed long To headers when using the mail transport
  • fixed NTLMAuthenticator when no domain is passed with the username
  • prevented fatal error during unserialization of a message
  • fixed a PHP warning when sending a message that has a length of a multiple of 8192

5.4.5 (2016-12-29)

  • SECURITY FIX: fixed CVE-2016-10074 by disallowing potentially unsafe shell characters

    Prior to 5.4.5, the mail transport (Swift_Transport_MailTransport) was vulnerable to passing arbitrary shell arguments if the "From", "ReturnPath" or "Sender" header came from a non-trusted source, potentially allowing Remote Code Execution

... (truncated)

Commits
  • 181b89f prepared the 5.4.12 release
  • dccdd7c updated CHANGES
  • d96063e fixed typo
  • 7c6640e prepared the 5.4.11 release
  • 5a82b2e updated CHANGES
  • d9aed42 refactored code
  • 421299e bug #1112 wxu: Fix release version is not compatible with low version PHP (wxu)
  • c14b7af wxu: Fix release version is not compatible with low version PHP
  • dd71cc1 prepared the 5.4.10 release
  • 5fbe82f Allow explicit tls1.0, tls1.1, tls1.2 for startTLS
  • Additional commits viewable in compare view

Updates twig/twig from 1.18.1 to 1.36.0

Changelog

Sourced from twig/twig's changelog.

  • 1.36.0 (2018-12-16)

  • made sure twig_include returns a string

  • fixed multi-byte UFT-8 in escape('html_attr')

  • added the "deprecated" tag

  • added support for dynamically named tests

  • fixed GlobalsInterface extended class

  • fixed filesystem loader throwing an exception instead of returning false

  • 1.35.4 (2018-07-13)

  • ensured that syntax errors are triggered with the right line

  • added the Symfony ctype polyfill as a dependency

  • "js" filter now produces valid JSON

  • 1.35.3 (2018-03-20)

  • fixed block names unicity

  • fixed counting children of SimpleXMLElement objects

  • added missing else clause to avoid infinite loops

  • fixed .. (range operator) in sandbox policy

  • 1.35.2 (2018-03-03)

  • fixed a regression in the way the profiler is registered in templates

  • 1.35.1 (2018-03-02)

  • added an exception when using "===" instead of "same as"

  • fixed possible array to string conversion concealing actual error

  • made variable names deterministic in compiled templates

  • fixed length filter when passing an instance of IteratorAggregate

  • fixed Environment::resolveTemplate to accept instances of TemplateWrapper

  • 1.35.0 (2017-09-27)

  • added Twig_Profiler_Profile::reset()

  • fixed use TokenParser to return an empty Node

  • added RuntimeExtensionInterface

  • added circular reference detection when loading templates

  • 1.34.4 (2017-07-04)

  • added support for runtime loaders in IntegrationTestCase

  • fixed deprecation when using Twig_Profiler_Dumper_Html

  • 1.34.3 (2017-06-07)

  • fixed namespaces introduction

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the composer group across 1 directory with 5 updates
110944b 
Bumps the composer group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [doctrine/annotations](https://github.com/doctrine/annotations) | `1.2.4` | `1.2.7` |
| [doctrine/cache](https://github.com/doctrine/cache) | `1.4.1` | `1.5.4` |
| [doctrine/common](https://github.com/doctrine/common) | `2.5.0` | `2.5.3` |
| [swiftmailer/swiftmailer](https://github.com/swiftmailer/swiftmailer) | `5.4.0` | `5.4.12` |
| [twig/twig](https://github.com/twigphp/Twig) | `1.18.1` | `1.36.0` |



Updates `doctrine/annotations` from 1.2.4 to 1.2.7
- [Release notes](https://github.com/doctrine/annotations/releases)
- [Commits](doctrine/annotations@v1.2.4...v1.2.7)

Updates `doctrine/cache` from 1.4.1 to 1.5.4
- [Release notes](https://github.com/doctrine/cache/releases)
- [Commits](doctrine/cache@v1.4.1...v1.5.4)

Updates `doctrine/common` from 2.5.0 to 2.5.3
- [Release notes](https://github.com/doctrine/common/releases)
- [Commits](doctrine/common@v2.5.0...v2.5.3)

Updates `swiftmailer/swiftmailer` from 5.4.0 to 5.4.12
- [Changelog](https://github.com/swiftmailer/swiftmailer/blob/v5.4.12/CHANGES)
- [Commits](swiftmailer/swiftmailer@v5.4.0...v5.4.12)

Updates `twig/twig` from 1.18.1 to 1.36.0
- [Changelog](https://github.com/twigphp/Twig/blob/v1.36.0/CHANGELOG)
- [Commits](twigphp/Twig@v1.18.1...v1.36.0)

---
updated-dependencies:
- dependency-name: doctrine/annotations
  dependency-type: indirect
  dependency-group: composer
- dependency-name: doctrine/cache
  dependency-type: indirect
  dependency-group: composer
- dependency-name: doctrine/common
  dependency-type: indirect
  dependency-group: composer
- dependency-name: swiftmailer/swiftmailer
  dependency-type: indirect
  dependency-group: composer
- dependency-name: twig/twig
  dependency-type: indirect
  dependency-group: composer
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 17, 2024
This was referenced Apr 17, 2024
Closed
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants