Skip to content

chore(deps): bump the symfony group with 14 updates - #436

Merged
froozeify merged 1 commit into
mainfrom
dependabot/composer/symfony-ac6248ae58
Nov 6, 2026
Merged

froozeify merged 1 commit into
mainfrom
dependabot/composer/symfony-ac6248ae58

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the symfony group with 14 updates:

Package From To
symfony/dependency-injection 8.1.10 8.1.11
symfony/doctrine-messenger 8.1.10 8.1.11
symfony/finder 8.1.10 8.1.11
symfony/flex 2.11.0 2.12.0
symfony/http-client-contracts 3.7.3 3.8.1
symfony/lock 8.1.10 8.1.11
symfony/messenger 8.1.10 8.1.11
symfony/property-access 8.1.10 8.1.11
symfony/property-info 8.1.10 8.1.11
symfony/rate-limiter 8.1.10 8.1.11
symfony/runtime 8.1.10 8.1.11
symfony/security-bundle 8.1.9 8.1.10
symfony/security-core 8.1.10 8.1.11
symfony/service-contracts 3.7.3 3.8.1

Updates symfony/dependency-injection from 8.1.10 to 8.1.11

Release notes

Sourced from symfony/dependency-injection's releases.

v8.1.11

Changelog (symfony/dependency-injection@v8.1.10...v8.1.11)

[SECURITY] Security release

Commits
  • d678f8d Merge branch '7.4' into 8.1
  • 4df0d83 [DependencyInjection] Fix #[Target] resolution when two names give the same...
  • See full diff in compare view

Updates symfony/doctrine-messenger from 8.1.10 to 8.1.11

Release notes

Sourced from symfony/doctrine-messenger's releases.

v8.1.11

Changelog (symfony/doctrine-messenger@v8.1.10...v8.1.11)

  • minor #67722 Ignore ids that are not integers when finding a message of the Doctrine transport (@​BenMacha)
  • bug #67709 Restore the schema assets filter when the Doctrine transport setup fails (@​BenMacha)

[SECURITY] Security release

Commits
  • 74e6045 Merge branch '7.4' into 8.1
  • 8093b88 Merge branch '6.4' into 7.4
  • f95053d [Messenger] Return null when finding a Doctrine message with an out of range ID
  • 1926a12 [Messenger] Fix Doctrine message ID validation
  • a1a88a7 Merge branch '7.4' into 8.1
  • 4114a74 Merge branch '6.4' into 7.4
  • 76916a1 [Messenger] Ignore ids that are not integers when finding a message of the Do...
  • 3dc9588 [Messenger] Restore the schema assets filter when the Doctrine transport setu...
  • See full diff in compare view

Updates symfony/finder from 8.1.10 to 8.1.11

Release notes

Sourced from symfony/finder's releases.

v8.1.11

Changelog (symfony/finder@v8.1.10...v8.1.11)

  • bug #67785 Fix Glob::toRegex() producing an invalid regex for bracket expressions containing a slash (@​0xABCD01)

[SECURITY] Security release

Commits
  • a2902e4 Merge branch '7.4' into 8.1
  • c723f99 Merge branch '6.4' into 7.4
  • 02515ea [Finder] Fix Glob::toRegex() producing an invalid regex for bracket expressio...
  • See full diff in compare view

Updates symfony/flex from 2.11.0 to 2.12.0

Release notes

Sourced from symfony/flex's releases.

v2.12.0

What's Changed

New Contributors

Full Changelog: symfony/flex@v2.11.0...v2.12.0

Commits
  • 3d37e85 tidy #1130 Link the README to the introduction of Flex (nicolas-grekas)
  • 0b5ea28 Link the README to the introduction of Flex
  • d317aa1 minor #1131 Add the missing period in the warning about the CHANGELOG (nicola...
  • deb3590 Add the missing period in the warning about the CHANGELOG
  • 431d079 bug #1133 Fix recipes:update when add-lines targets a file that the recipe al...
  • eca26d9 Fix recipes:update when add-lines targets a file that the recipe also copies
  • fe3fb28 bug #1132 Fix unpacking packs leaving their dev dependencies in the "packages...
  • aa7e755 Fix unpacking packs leaving their dev dependencies in the "packages" section ...
  • 87e1a19 bug #1129 Fix unpacking packs on Composer < 2.2.6 and keep empty sections in ...
  • a07d27b Fix unpacking packs on Composer < 2.2.6 and keep empty sections in composer.j...
  • Additional commits viewable in compare view

Updates symfony/http-client-contracts from 3.7.3 to 3.8.1

Release notes

Sourced from symfony/http-client-contracts's releases.

v3.8.1

Changelog (symfony/http-client-contracts@v3.8.0...v3.8.1)

  • Skip tests that rely on 500ms server pauses on Windows
  • Expose HTTP trailers as the "trailers" response info
  • Stop asserting the Host header the CLI server used to reflect
  • Document that withOptions() rejects an unsupported option
  • Add ListenerIntrospectionInterface

v3.8.0

Changelog (symfony/http-client-contracts@v3.7.3...v3.8.0)

  • no significant changes
Commits
  • f9f9426 Merge branch '8.1' into 8.2
  • 2178f8a Merge branch '7.4' into 8.1
  • 44a83d4 Merge branch '6.4' into 7.4
  • 6369933 [HttpClient] Skip tests that rely on 500ms server pauses on Windows
  • cfb2da3 [HttpClient] Expose HTTP trailers as the "trailers" response info
  • f358516 Merge branch '8.1' into 8.2
  • fb20b3c Merge branch '7.4' into 8.1
  • 1f906d7 Merge branch '6.4' into 7.4
  • c9bd664 [HttpClient] Stop asserting the Host header the CLI server used to reflect
  • c1961be Merge branch '8.1' into 8.2
  • Additional commits viewable in compare view

Updates symfony/lock from 8.1.10 to 8.1.11

Release notes

Sourced from symfony/lock's releases.

v8.1.11

Changelog (symfony/lock@v8.1.10...v8.1.11)

[SECURITY] Security release

Commits
  • c121c80 Merge branch '7.4' into 8.1
  • 1c89b44 Merge branch '6.4' into 7.4
  • af0d95a [Lock] Do not expose the DSN in the unsupported connection exception of Store...
  • d5f4906 Merge branch '7.4' into 8.1
  • 60d0749 Merge branch '6.4' into 7.4
  • f1df90d [Lock] Remove the MongoDB connection URI from the exception messages of Mongo...
  • add5989 [Lock] Mark the DSNs and options of the DBAL and MongoDB stores as #[\Sensiti...
  • See full diff in compare view

Updates symfony/messenger from 8.1.10 to 8.1.11

Release notes

Sourced from symfony/messenger's releases.

v8.1.11

Changelog (symfony/messenger@v8.1.10...v8.1.11)

[SECURITY] Security release

Commits
  • 9e155be [Messenger] Fix infinite retries when a serializer throws a decoding failure
  • 62fbaf2 Merge branch '7.4' into 8.1
  • ef17b70 Merge branch '6.4' into 7.4
  • 8a2bac2 [Messenger] Don't reuse a serialized body after replacing the message
  • 071137b Merge branch '7.4' into 8.1
  • d4447ca Merge branch '6.4' into 7.4
  • 9035071 minor #67771 [Messenger] Do not expose the DSN in the exception thrown when n...
  • 4fd6adb [Messenger] Treat encoded envelopes whose body or type isn't a string as deco...
  • 34fb101 [Messenger] Do not expose the DSN in the exception thrown when no transport s...
  • afab625 [Messenger] Treat a body or header that isn't a string as a decoding failure ...
  • Additional commits viewable in compare view

Updates symfony/property-access from 8.1.10 to 8.1.11

Release notes

Sourced from symfony/property-access's releases.

v8.1.11

Changelog (symfony/property-access@v8.1.10...v8.1.11)

[SECURITY] Security release

Commits
  • d080c2a Merge branch '7.4' into 8.1
  • 4dce451 Merge branch '6.4' into 7.4
  • c846c1a [PropertyAccess] Fix parsing type errors thrown by anonymous classes
  • 24cb0c2 Merge branch '7.4' into 8.1
  • 5ef6ac1 Merge branch '6.4' into 7.4
  • 42dfc09 [PropertyAccess] Handle uninitialized properties of anonymous classes on PHP 8.6
  • See full diff in compare view

Updates symfony/property-info from 8.1.10 to 8.1.11

Release notes

Sourced from symfony/property-info's releases.

v8.1.11

Changelog (symfony/property-info@v8.1.10...v8.1.11)

[SECURITY] Security release

Commits
  • b5afa37 Merge branch '7.4' into 8.1
  • 1eeaa66 Merge branch '6.4' into 7.4
  • 776f55e [PropertyInfo] Don't turn intersection types into class names in PhpDocExtractor
  • 0b16965 [PropertyInfo] Return null from PhpStanExtractor::getTypeFromConstructor() wh...
  • 4dcdd28 [PropertyInfo] Don't turn intersection types into class names in PhpDocExtrac...
  • See full diff in compare view

Updates symfony/rate-limiter from 8.1.10 to 8.1.11

Release notes

Sourced from symfony/rate-limiter's releases.

v8.1.11

Changelog (symfony/rate-limiter@v8.1.10...v8.1.11)

[SECURITY] Security release

Commits
  • 6311b3a Merge branch '7.4' into 8.1
  • a65b828 Merge branch '6.4' into 7.4
  • ba333c7 [RateLimiter] Validate the refill amount, the fixed window interval and the s...
  • 570611e [RateLimiter] Apply a changed limit to stored calendar-aligned windows
  • d9fd67f [RateLimiter] Preserve calendar-aligned reservations across periods
  • See full diff in compare view

Updates symfony/runtime from 8.1.10 to 8.1.11

Release notes

Sourced from symfony/runtime's releases.

v8.1.11

Changelog (symfony/runtime@v8.1.10...v8.1.11)

[SECURITY] Security release

Commits
  • c673bbd Merge branch '7.4' into 8.1
  • 5149bb4 [Runtime] Terminate the kernel when sending the FrankenPHP response fails
  • 5ae22da [Runtime] Terminate the kernel within the FrankenPHP request callback
  • See full diff in compare view

Updates symfony/security-bundle from 8.1.9 to 8.1.10

Release notes

Sourced from symfony/security-bundle's releases.

v8.1.10

Changelog (symfony/security-bundle@v8.1.9...v8.1.10)

[SECURITY] Security release

Commits
  • 7768dea Merge branch '7.4' into 8.1
  • 0323d19 Merge branch '6.4' into 7.4
  • 1266568 [SecurityBundle] Stop asserting an empty body for the 401 of a rejected acces...
  • 62f7530 Merge branch '7.4' into 8.1
  • 628f98e Merge branch '6.4' into 7.4
  • 1a7c268 [Security][SecurityBundle] Decide the checks of an expression for the token b...
  • See full diff in compare view

Updates symfony/security-core from 8.1.10 to 8.1.11

Release notes

Sourced from symfony/security-core's releases.

v8.1.11

Changelog (symfony/security-core@v8.1.10...v8.1.11)

[SECURITY] Security release

Commits
  • be90ca4 Merge branch '7.4' into 8.1
  • c93b219 Merge branch '6.4' into 7.4
  • e7b2ec0 [Security] Fix Voter with anonymous classes and nested supports() calls
  • abe11d1 Merge branch '7.4' into 8.1
  • a2ea67a Merge branch '6.4' into 7.4
  • 6c57539 [Form][Security][Validator] Review Vietnamese translations
  • See full diff in compare view

Updates symfony/service-contracts from 3.7.3 to 3.8.1

Release notes

Sourced from symfony/service-contracts's releases.

v3.8.1

Changelog (symfony/service-contracts@v3.8.0...v3.8.1)

  • Improve the descriptions of the types and attributes registered for autoconfiguration
  • Pass a shutdown flag to service reset methods
  • Add ListenerIntrospectionInterface

v3.8.0

Changelog (symfony/service-contracts@v3.7.3...v3.8.0)

  • no significant changes
Commits
  • 052852a Improve the descriptions of the types and attributes registered for autoconfi...
  • ec1a99d [Contracts][DependencyInjection] Pass a shutdown flag to service reset methods
  • fa017b0 [Contracts][EventDispatcher] Add ListenerIntrospectionInterface
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the symfony group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [symfony/dependency-injection](https://github.com/symfony/dependency-injection) | `8.1.10` | `8.1.11` |
| [symfony/doctrine-messenger](https://github.com/symfony/doctrine-messenger) | `8.1.10` | `8.1.11` |
| [symfony/finder](https://github.com/symfony/finder) | `8.1.10` | `8.1.11` |
| [symfony/flex](https://github.com/symfony/flex) | `2.11.0` | `2.12.0` |
| [symfony/http-client-contracts](https://github.com/symfony/http-client-contracts) | `3.7.3` | `3.8.1` |
| [symfony/lock](https://github.com/symfony/lock) | `8.1.10` | `8.1.11` |
| [symfony/messenger](https://github.com/symfony/messenger) | `8.1.10` | `8.1.11` |
| [symfony/property-access](https://github.com/symfony/property-access) | `8.1.10` | `8.1.11` |
| [symfony/property-info](https://github.com/symfony/property-info) | `8.1.10` | `8.1.11` |
| [symfony/rate-limiter](https://github.com/symfony/rate-limiter) | `8.1.10` | `8.1.11` |
| [symfony/runtime](https://github.com/symfony/runtime) | `8.1.10` | `8.1.11` |
| [symfony/security-bundle](https://github.com/symfony/security-bundle) | `8.1.9` | `8.1.10` |
| [symfony/security-core](https://github.com/symfony/security-core) | `8.1.10` | `8.1.11` |
| [symfony/service-contracts](https://github.com/symfony/service-contracts) | `3.7.3` | `3.8.1` |


Updates `symfony/dependency-injection` from 8.1.10 to 8.1.11
- [Release notes](https://github.com/symfony/dependency-injection/releases)
- [Changelog](https://github.com/symfony/dependency-injection/blob/8.2/CHANGELOG.md)
- [Commits](symfony/dependency-injection@v8.1.10...v8.1.11)

Updates `symfony/doctrine-messenger` from 8.1.10 to 8.1.11
- [Release notes](https://github.com/symfony/doctrine-messenger/releases)
- [Changelog](https://github.com/symfony/doctrine-messenger/blob/8.2/CHANGELOG.md)
- [Commits](symfony/doctrine-messenger@v8.1.10...v8.1.11)

Updates `symfony/finder` from 8.1.10 to 8.1.11
- [Release notes](https://github.com/symfony/finder/releases)
- [Changelog](https://github.com/symfony/finder/blob/8.2/CHANGELOG.md)
- [Commits](symfony/finder@v8.1.10...v8.1.11)

Updates `symfony/flex` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/symfony/flex/releases)
- [Commits](symfony/flex@v2.11.0...v2.12.0)

Updates `symfony/http-client-contracts` from 3.7.3 to 3.8.1
- [Release notes](https://github.com/symfony/http-client-contracts/releases)
- [Changelog](https://github.com/symfony/http-client-contracts/blob/main/CHANGELOG.md)
- [Commits](symfony/http-client-contracts@v3.7.3...v3.8.1)

Updates `symfony/lock` from 8.1.10 to 8.1.11
- [Release notes](https://github.com/symfony/lock/releases)
- [Changelog](https://github.com/symfony/lock/blob/8.2/CHANGELOG.md)
- [Commits](symfony/lock@v8.1.10...v8.1.11)

Updates `symfony/messenger` from 8.1.10 to 8.1.11
- [Release notes](https://github.com/symfony/messenger/releases)
- [Changelog](https://github.com/symfony/messenger/blob/8.2/CHANGELOG.md)
- [Commits](symfony/messenger@v8.1.10...v8.1.11)

Updates `symfony/property-access` from 8.1.10 to 8.1.11
- [Release notes](https://github.com/symfony/property-access/releases)
- [Changelog](https://github.com/symfony/property-access/blob/8.2/CHANGELOG.md)
- [Commits](symfony/property-access@v8.1.10...v8.1.11)

Updates `symfony/property-info` from 8.1.10 to 8.1.11
- [Release notes](https://github.com/symfony/property-info/releases)
- [Changelog](https://github.com/symfony/property-info/blob/8.2/CHANGELOG.md)
- [Commits](symfony/property-info@v8.1.10...v8.1.11)

Updates `symfony/rate-limiter` from 8.1.10 to 8.1.11
- [Release notes](https://github.com/symfony/rate-limiter/releases)
- [Changelog](https://github.com/symfony/rate-limiter/blob/8.2/CHANGELOG.md)
- [Commits](symfony/rate-limiter@v8.1.10...v8.1.11)

Updates `symfony/runtime` from 8.1.10 to 8.1.11
- [Release notes](https://github.com/symfony/runtime/releases)
- [Changelog](https://github.com/symfony/runtime/blob/8.2/CHANGELOG.md)
- [Commits](symfony/runtime@v8.1.10...v8.1.11)

Updates `symfony/security-bundle` from 8.1.9 to 8.1.10
- [Release notes](https://github.com/symfony/security-bundle/releases)
- [Changelog](https://github.com/symfony/security-bundle/blob/8.2/CHANGELOG.md)
- [Commits](symfony/security-bundle@v8.1.9...v8.1.10)

Updates `symfony/security-core` from 8.1.10 to 8.1.11
- [Release notes](https://github.com/symfony/security-core/releases)
- [Changelog](https://github.com/symfony/security-core/blob/8.2/CHANGELOG.md)
- [Commits](symfony/security-core@v8.1.10...v8.1.11)

Updates `symfony/service-contracts` from 3.7.3 to 3.8.1
- [Release notes](https://github.com/symfony/service-contracts/releases)
- [Changelog](https://github.com/symfony/service-contracts/blob/main/CHANGELOG.md)
- [Commits](symfony/service-contracts@v3.7.3...v3.8.1)

---
updated-dependencies:
- dependency-name: symfony/dependency-injection
  dependency-version: 8.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/doctrine-messenger
  dependency-version: 8.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/finder
  dependency-version: 8.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/flex
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: symfony
- dependency-name: symfony/http-client-contracts
  dependency-version: 3.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: symfony
- dependency-name: symfony/lock
  dependency-version: 8.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/messenger
  dependency-version: 8.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/property-access
  dependency-version: 8.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/property-info
  dependency-version: 8.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/rate-limiter
  dependency-version: 8.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/runtime
  dependency-version: 8.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/security-bundle
  dependency-version: 8.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/security-core
  dependency-version: 8.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/service-contracts
  dependency-version: 3.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: symfony
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

github-actions Bot commented Nov 6, 2026

Copy link
Copy Markdown
Contributor

✅ PHPUnit Summary

Tests: 624, Assertions: 2529, Skipped: 1.
Time: 04:27.507, Memory: 52.50 MB

✅ No PHPUnit Deprecations Found

@froozeify
froozeify merged commit 71a213d into main Nov 6, 2026
4 checks passed
@froozeify
froozeify deleted the dependabot/composer/symfony-ac6248ae58 branch November 6, 2026 08:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant