Skip to content

Bump the php-prod group across 1 directory with 13 updates#562

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/composer/php-prod-5cfdccf62d
Open

Bump the php-prod group across 1 directory with 13 updates#562
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/composer/php-prod-5cfdccf62d

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 11, 2026

Bumps the php-prod group with 9 updates in the / directory:

Package From To
doctrine/dbal 3.10.4 3.10.5
doctrine/orm 3.6.1 3.6.2
nelmio/security-bundle 3.7.0 3.9.0
symfony/expression-language 7.4.0 7.4.4
symfony/form 7.4.3 7.4.4
symfony/security-bundle 7.4.0 7.4.6
symfony/translation 7.4.3 7.4.6
symfony/twig-bundle 7.4.3 7.4.4
twig/extra-bundle 3.22.2 3.23.0

Updates doctrine/dbal from 3.10.4 to 3.10.5

Release notes

Sourced from doctrine/dbal's releases.

3.10.5

Release Notes for 3.10.5

3.10.5

  • Total issues resolved: 0
  • Total pull requests resolved: 13
  • Total contributors: 6

CI

Dependencies,Test Suite

Dependencies

CI,MariaDB,MySQL

CI,SQL Server

Bug

CI,PHP,pdo_oci

Documentation

Commits

Updates doctrine/orm from 3.6.1 to 3.6.2

Release notes

Sourced from doctrine/orm's releases.

3.6.2

Release Notes for 3.6.2

3.6.x bugfix release (patch)

3.6.2

  • Total issues resolved: 0
  • Total pull requests resolved: 2
  • Total contributors: 2

Bugfix

Improvement

Commits

Updates nelmio/security-bundle from 3.7.0 to 3.9.0

Release notes

Sourced from nelmio/security-bundle's releases.

v3.9.0

What's Changed

Full Changelog: nelmio/NelmioSecurityBundle@v3.8.0...v3.9.0

v3.8.0

What's Changed

Full Changelog: nelmio/NelmioSecurityBundle@v3.7.0...v3.8.0

Commits
  • 86dd4d1 Merge pull request #389 from Spomky/feature/test-assertions
  • 0dc7667 feat(tests): Add PHPUnit assertions for security headers and update testing d...
  • 2fafee1 Merge pull request #372 from Spomky/features/cross-origin-policy
  • 63da27e Add Cross-Origin Policy feature with configurable headers (COEP, COOP, CORP)
  • See full diff in compare view

Updates symfony/config from 7.4.3 to 7.4.7

Release notes

Sourced from symfony/config's releases.

v7.4.7

Changelog (symfony/config@v7.4.6...v7.4.7)

  • no significant changes

v7.4.6

Changelog (symfony/config@v7.4.5...v7.4.6)

v7.4.4

Changelog (symfony/config@v7.4.3...v7.4.4)

  • bug #63053 add back missing enabled key in normalization step (xabbuh)
  • bug #63002 Fix merging node that canBeDisable()/canBeEnabled() (nicolas-grekas)
  • bug #62920 Allow ParamConfigurator in ParametersConfig (@​jack-worman)
Commits
  • 6c17162 [Config] Fix NodeDefinition template to be covariant
  • 9400e2f Merge branch '6.4' into 7.4
  • ce9cb0c [Config][Routing] Fix exclude option being ignored for non-glob and PSR-4 res...
  • 69271cf bug #63478 [Config] Fix ArrayShapeGenerator required keys with deep merging (...
  • f2dbc7f [Config] Fix ArrayShapeGenerator required keys with deep merging
  • 14a2318 Merge branch '6.4' into 7.4
  • 5254855 [Form] Add resource tracking for type extension classes in FormPass
  • 4275b53 Merge branch '7.3' into 7.4
  • 26ddb5e do not use PHPUnit mock objects without configured expectations
  • 077e131 Merge branch '7.3' into 7.4
  • Additional commits viewable in compare view

Updates symfony/console from 7.4.3 to 7.4.7

Release notes

Sourced from symfony/console's releases.

v7.4.7

Changelog (symfony/console@v7.4.6...v7.4.7)

v7.4.6

Changelog (symfony/console@v7.4.5...v7.4.6)

v7.4.4

Changelog (symfony/console@v7.4.3...v7.4.4)

  • no significant changes
Commits
  • e1e6770 Fix merge
  • 66aaab8 Merge branch '6.4' into 7.4
  • 49257c9 [Console] Fix ApplicationTester ignoring interactive and verbosity opti...
  • de4f40b Merge branch '6.4' into 7.4
  • 4d5318a [Console] Fix OUTPUT_RAW corrupting binary content on Windows
  • 6d643a9 Fix merge
  • 87fb10f Merge branch '6.4' into 7.4
  • 7b1f1c3 [Console] Fix various completion edge cases
  • 11c4f79 Merge branch '6.4' into 7.4
  • a0613ff [Console] Fix validator exception masked by MissingInputException on empty input
  • Additional commits viewable in compare view

Updates symfony/expression-language from 7.4.0 to 7.4.4

Release notes

Sourced from symfony/expression-language's releases.

v7.4.4

Changelog (symfony/expression-language@v7.4.3...v7.4.4)

  • no significant changes
Commits
  • f3a6497 Merge branch '7.3' into 7.4
  • bb4594c Merge branch '6.4' into 7.3
  • 89c10ef do not use PHPUnit mock objects without configured expectations
  • See full diff in compare view

Updates symfony/form from 7.4.3 to 7.4.4

Release notes

Sourced from symfony/form's releases.

v7.4.4

Changelog (symfony/form@v7.4.3...v7.4.4)

  • bug #63144 Fix OrderedHashMap auto-increment logic with mixed keys (yoeunes)
  • bug #63154 don't skip custom view transformers while normalizing submitted newlines (xabbuh)
  • bug #63113 Fix ICU 72+ whitespace handling in DateTimeToLocalizedStringTransformer (roukmoute)
  • bug #62884 Prevent cached block prefixes from leaking across nested collections (@​nicolas-grekas)
Commits
  • 264fc87 Merge branch '7.3' into 7.4
  • 4bc8440 Merge branch '6.4' into 7.3
  • b758162 bug #63144 [Form] Fix OrderedHashMap auto-increment logic with mixed keys (...
  • cb356ab [Form] Fix OrderedHashMap auto-increment logic with mixed keys
  • 5188efe don't skip custom view transformers while normalizing submitted newlines
  • 8482e91 Merge branch '7.3' into 7.4
  • e6b4024 Merge branch '6.4' into 7.3
  • 61318b8 [Form] Fix ICU 72+ whitespace handling in DateTimeToLocalizedStringTransformer
  • b085d61 Merge branch '7.3' into 7.4
  • fd74772 do not use PHPUnit mock objects without configured expectations
  • Additional commits viewable in compare view

Updates symfony/http-foundation from 7.4.3 to 7.4.7

Release notes

Sourced from symfony/http-foundation's releases.

v7.4.7

Changelog (symfony/http-foundation@v7.4.6...v7.4.7)

v7.4.6

Changelog (symfony/http-foundation@v7.4.5...v7.4.6)

v7.4.5

Changelog (symfony/http-foundation@v7.4.4...v7.4.5)

v7.4.4

Changelog (symfony/http-foundation@v7.4.3...v7.4.4)

Commits
  • f94b3e7 Merge branch '6.4' into 7.4
  • cffffd0 [HttpFoundation] Fix session cookie_lifetime not applied in mock session storage
  • fd97d5e Merge branch '6.4' into 7.4
  • 5bb346d [HttpFoundation] Handle empty session data in updateTimestamp() to fix compat...
  • 17de1a3 Merge branch '6.4' into 7.4
  • 31b030e stop using with*() without expects()
  • 36ba5c7 Merge branch '6.4' into 7.4
  • 31e2a27 BinaryFileResponse: always return 206 if Range is valid
  • 669ac23 Merge branch '6.4' into 7.4
  • 2ed100b [HttpFoundation] Reject invalid paths
  • Additional commits viewable in compare view

Updates symfony/security-bundle from 7.4.0 to 7.4.6

Release notes

Sourced from symfony/security-bundle's releases.

v7.4.6

Changelog (symfony/security-bundle@v7.4.5...v7.4.6)

v7.4.4

Changelog (symfony/security-bundle@v7.4.3...v7.4.4)

Commits
  • d79c6d9 Merge branch '6.4' into 7.4
  • f67bd24 [Security] Fix lazy firewall triggering remember me authentication on POST re...
  • f738b7b Update security-1.0.xsd with missing oauth2 element
  • a907dbe Merge branch '6.4' into 7.4
  • 31604f8 remove usages of the deprecated any() invoked count expectation
  • a325e38 use PHPUnit 13 on PHP 8.4+
  • 7281b64 Merge branch '7.3' into 7.4
  • 03d6ba1 bug #62973 [WebProfiler] fix the security profiler template (aurac)
  • 4289702 [WebProfiler] fix the security profiler template
  • 1a55c47 Merge branch '7.3' into 7.4
  • Additional commits viewable in compare view

Updates symfony/translation from 7.4.3 to 7.4.6

Release notes

Sourced from symfony/translation's releases.

v7.4.6

Changelog (symfony/translation@v7.4.5...v7.4.6)

  • bug #63231 Fix for Crowdin Translation File Replaced with Partial Data When Pushing Default Locale Without --force (@​bhdnb)

v7.4.4

Changelog (symfony/translation@v7.4.3...v7.4.4)

Commits
  • 1888cf0 Merge branch '6.4' into 7.4
  • d07d117 remove usages of the deprecated any() invoked count expectation
  • bfde137 Merge branch '7.3' into 7.4
  • 3d2b54f Merge branch '6.4' into 7.3
  • d6cc8e2 [Translation] Fix handling of empty lines in CsvFileLoader
  • See full diff in compare view

Updates symfony/twig-bundle from 7.4.3 to 7.4.4

Release notes

Sourced from symfony/twig-bundle's releases.

v7.4.4

Changelog (symfony/twig-bundle@v7.4.3...v7.4.4)

  • no significant changes
Commits
  • e8829e0 Merge branch '7.3' into 7.4
  • 5dfe33a Merge branch '6.4' into 7.3
  • a5c8dcc do not use PHPUnit mock objects without configured expectations
  • See full diff in compare view

Updates twig/extra-bundle from 3.22.2 to 3.23.0

Commits
  • 7a27e78 minor #4718 Add .gitignore & .gitattributes to all .gitattributes (jmsche)
  • 8f6488a Add .gitignore & .gitattributes to all .gitattributes
  • See full diff in compare view

Updates twig/twig from 3.22.2 to 3.23.0

Changelog

Sourced from twig/twig's changelog.

3.23.0 (2026-01-23)

  • Add = assignment operator (allows to set variables in expression or to replace the short-form of the set tag)
  • Add sequence, mapping, and object destructuring
  • Add ?. null-safe operator
  • Add === and !== operators (equivalent to the same as and not same as tests)
  • Fix opcache preload warning for unlinked anonymous class
  • Fix spread operator behavior
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the php-prod group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [doctrine/dbal](https://github.com/doctrine/dbal) | `3.10.4` | `3.10.5` |
| [doctrine/orm](https://github.com/doctrine/orm) | `3.6.1` | `3.6.2` |
| [nelmio/security-bundle](https://github.com/nelmio/NelmioSecurityBundle) | `3.7.0` | `3.9.0` |
| [symfony/expression-language](https://github.com/symfony/expression-language) | `7.4.0` | `7.4.4` |
| [symfony/form](https://github.com/symfony/form) | `7.4.3` | `7.4.4` |
| [symfony/security-bundle](https://github.com/symfony/security-bundle) | `7.4.0` | `7.4.6` |
| [symfony/translation](https://github.com/symfony/translation) | `7.4.3` | `7.4.6` |
| [symfony/twig-bundle](https://github.com/symfony/twig-bundle) | `7.4.3` | `7.4.4` |
| [twig/extra-bundle](https://github.com/twigphp/twig-extra-bundle) | `3.22.2` | `3.23.0` |



Updates `doctrine/dbal` from 3.10.4 to 3.10.5
- [Release notes](https://github.com/doctrine/dbal/releases)
- [Commits](doctrine/dbal@3.10.4...3.10.5)

Updates `doctrine/orm` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/doctrine/orm/releases)
- [Commits](doctrine/orm@3.6.1...3.6.2)

Updates `nelmio/security-bundle` from 3.7.0 to 3.9.0
- [Release notes](https://github.com/nelmio/NelmioSecurityBundle/releases)
- [Changelog](https://github.com/nelmio/NelmioSecurityBundle/blob/master/CHANGELOG.md)
- [Commits](nelmio/NelmioSecurityBundle@v3.7.0...v3.9.0)

Updates `symfony/config` from 7.4.3 to 7.4.7
- [Release notes](https://github.com/symfony/config/releases)
- [Changelog](https://github.com/symfony/config/blob/8.1/CHANGELOG.md)
- [Commits](symfony/config@v7.4.3...v7.4.7)

Updates `symfony/console` from 7.4.3 to 7.4.7
- [Release notes](https://github.com/symfony/console/releases)
- [Changelog](https://github.com/symfony/console/blob/8.1/CHANGELOG.md)
- [Commits](symfony/console@v7.4.3...v7.4.7)

Updates `symfony/expression-language` from 7.4.0 to 7.4.4
- [Release notes](https://github.com/symfony/expression-language/releases)
- [Changelog](https://github.com/symfony/expression-language/blob/8.1/CHANGELOG.md)
- [Commits](symfony/expression-language@v7.4.0...v7.4.4)

Updates `symfony/form` from 7.4.3 to 7.4.4
- [Release notes](https://github.com/symfony/form/releases)
- [Changelog](https://github.com/symfony/form/blob/8.1/CHANGELOG.md)
- [Commits](symfony/form@v7.4.3...v7.4.4)

Updates `symfony/http-foundation` from 7.4.3 to 7.4.7
- [Release notes](https://github.com/symfony/http-foundation/releases)
- [Changelog](https://github.com/symfony/http-foundation/blob/8.1/CHANGELOG.md)
- [Commits](symfony/http-foundation@v7.4.3...v7.4.7)

Updates `symfony/security-bundle` from 7.4.0 to 7.4.6
- [Release notes](https://github.com/symfony/security-bundle/releases)
- [Changelog](https://github.com/symfony/security-bundle/blob/8.1/CHANGELOG.md)
- [Commits](symfony/security-bundle@v7.4.0...v7.4.6)

Updates `symfony/translation` from 7.4.3 to 7.4.6
- [Release notes](https://github.com/symfony/translation/releases)
- [Changelog](https://github.com/symfony/translation/blob/8.1/CHANGELOG.md)
- [Commits](symfony/translation@v7.4.3...v7.4.6)

Updates `symfony/twig-bundle` from 7.4.3 to 7.4.4
- [Release notes](https://github.com/symfony/twig-bundle/releases)
- [Changelog](https://github.com/symfony/twig-bundle/blob/8.1/CHANGELOG.md)
- [Commits](symfony/twig-bundle@v7.4.3...v7.4.4)

Updates `twig/extra-bundle` from 3.22.2 to 3.23.0
- [Release notes](https://github.com/twigphp/twig-extra-bundle/releases)
- [Commits](twigphp/twig-extra-bundle@v3.22.2...v3.23.0)

Updates `twig/twig` from 3.22.2 to 3.23.0
- [Changelog](https://github.com/twigphp/Twig/blob/3.x/CHANGELOG)
- [Commits](twigphp/Twig@v3.22.2...v3.23.0)

---
updated-dependencies:
- dependency-name: doctrine/dbal
  dependency-version: 3.10.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: doctrine/orm
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: nelmio/security-bundle
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: php-prod
- dependency-name: symfony/config
  dependency-version: 7.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/console
  dependency-version: 7.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/expression-language
  dependency-version: 7.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/form
  dependency-version: 7.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/http-foundation
  dependency-version: 7.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/security-bundle
  dependency-version: 7.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/translation
  dependency-version: 7.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/twig-bundle
  dependency-version: 7.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: twig/extra-bundle
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: php-prod
- dependency-name: twig/twig
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: php-prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Mar 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants