Skip to content

Bump the php-prod group across 1 directory with 10 updates#537

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/composer/php-prod-46e5a69db7
Open

Bump the php-prod group across 1 directory with 10 updates#537
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/composer/php-prod-46e5a69db7

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 29, 2026

Bumps the php-prod group with 6 updates in the / directory:

Package From To
nelmio/security-bundle 3.7.0 3.8.0
symfony/expression-language 7.4.0 7.4.4
symfony/security-bundle 7.4.0 7.4.4
symfony/translation 7.4.3 7.4.4
symfony/twig-bundle 7.4.3 7.4.4
twig/extra-bundle 3.22.2 3.23.0

Updates nelmio/security-bundle from 3.7.0 to 3.8.0

Release notes

Sourced from nelmio/security-bundle's releases.

v3.8.0

What's Changed

Full Changelog: nelmio/NelmioSecurityBundle@v3.7.0...v3.8.0

Commits
  • 2fafee1 Merge pull request #372 from Spomky/features/cross-origin-policy
  • 63da27e Add Cross-Origin Policy feature with configurable headers (COEP, COOP, CORP)
  • See full diff in compare view

Updates symfony/config from 7.4.3 to 7.4.4

Release notes

Sourced from symfony/config's releases.

v7.4.4

Changelog (symfony/config@v7.4.3...v7.4.4)

  • bug #63053 add back missing enabled key in normalization step (xabbuh)
  • bug #63002 Fix merging node that canBeDisable()/canBeEnabled() (nicolas-grekas)
  • bug #62920 Allow ParamConfigurator in ParametersConfig (@​jack-worman)
Commits
  • 4275b53 Merge branch '7.3' into 7.4
  • 26ddb5e do not use PHPUnit mock objects without configured expectations
  • 077e131 Merge branch '7.3' into 7.4
  • b45cbe6 Merge branch '6.4' into 7.3
  • d445bad do not use PHPUnit mock objects without configured expectations
  • 63087d6 add back missing enabled key in normalization step
  • 39a67af [Config] Fix merging node that canBeDisable()/canBeEnabled()
  • 6bc0518 Allow ParamConfigurator in ParametersConfig
  • See full diff in compare view

Updates symfony/console from 7.4.3 to 7.4.4

Release notes

Sourced from symfony/console's releases.

v7.4.4

Changelog (symfony/console@v7.4.3...v7.4.4)

  • no significant changes
Commits
  • 41e3871 Merge branch '7.3' into 7.4
  • a28c3e5 do not use PHPUnit mock objects without configured expectations
  • 2f1da34 Merge branch '7.3' into 7.4
  • b721b9b Merge branch '6.4' into 7.3
  • 0bc2199 do not use PHPUnit mock objects without configured expectations
  • See full diff in compare view

Updates symfony/expression-language from 7.4.0 to 7.4.4

Release notes

Sourced from symfony/expression-language's releases.

v7.4.4

Changelog (symfony/expression-language@v7.4.3...v7.4.4)

  • no significant changes
Commits
  • f3a6497 Merge branch '7.3' into 7.4
  • bb4594c Merge branch '6.4' into 7.3
  • 89c10ef do not use PHPUnit mock objects without configured expectations
  • See full diff in compare view

Updates symfony/http-foundation from 7.4.3 to 7.4.5

Release notes

Sourced from symfony/http-foundation's releases.

v7.4.5

Changelog (symfony/http-foundation@v7.4.4...v7.4.5)

v7.4.4

Changelog (symfony/http-foundation@v7.4.3...v7.4.4)

Commits
  • 446d0db Merge branch '7.3' into 7.4
  • 5347db9 Merge branch '6.4' into 7.3
  • f1a490c [HttpFoundation] Fix PdoSessionHandler charset-collation mismatch with the Do...
  • 977a554 Merge branch '7.3' into 7.4
  • cc4ae96 Merge branch '6.4' into 7.3
  • a7c652d [HttpFoundation] Fix double-prefixing of session keys when using redis/memcached
  • a85bc9c Merge branch '7.3' into 7.4
  • 66e496a Merge branch '6.4' into 7.3
  • 4a673e9 do not use PHPUnit mock objects without configured expectations
  • See full diff in compare view

Updates symfony/security-bundle from 7.4.0 to 7.4.4

Release notes

Sourced from symfony/security-bundle's releases.

v7.4.4

Changelog (symfony/security-bundle@v7.4.3...v7.4.4)

Commits
  • 7281b64 Merge branch '7.3' into 7.4
  • 03d6ba1 bug #62973 [WebProfiler] fix the security profiler template (aurac)
  • 4289702 [WebProfiler] fix the security profiler template
  • 1a55c47 Merge branch '7.3' into 7.4
  • 03fe652 do not use PHPUnit mock objects without configured expectations
  • 4588b45 Merge branch '7.3' into 7.4
  • d3e2c0f Merge branch '6.4' into 7.3
  • 2cebe17 do not use PHPUnit mock objects without configured expectations
  • debd211 Merge branch '6.4' into 7.3
  • 508e67e [SecurityBundle] Fix tests with Symfony 7.4
  • See full diff in compare view

Updates symfony/translation from 7.4.3 to 7.4.4

Release notes

Sourced from symfony/translation's releases.

v7.4.4

Changelog (symfony/translation@v7.4.3...v7.4.4)

Commits
  • bfde137 Merge branch '7.3' into 7.4
  • 3d2b54f Merge branch '6.4' into 7.3
  • d6cc8e2 [Translation] Fix handling of empty lines in CsvFileLoader
  • See full diff in compare view

Updates symfony/twig-bundle from 7.4.3 to 7.4.4

Release notes

Sourced from symfony/twig-bundle's releases.

v7.4.4

Changelog (symfony/twig-bundle@v7.4.3...v7.4.4)

  • no significant changes
Commits
  • e8829e0 Merge branch '7.3' into 7.4
  • 5dfe33a Merge branch '6.4' into 7.3
  • a5c8dcc do not use PHPUnit mock objects without configured expectations
  • See full diff in compare view

Updates twig/extra-bundle from 3.22.2 to 3.23.0

Commits
  • 7a27e78 minor #4718 Add .gitignore & .gitattributes to all .gitattributes (jmsche)
  • 8f6488a Add .gitignore & .gitattributes to all .gitattributes
  • See full diff in compare view

Updates twig/twig from 3.22.2 to 3.23.0

Changelog

Sourced from twig/twig's changelog.

3.23.0 (2026-01-23)

  • Add = assignment operator (allows to set variables in expression or to replace the short-form of the set tag)
  • Add sequence, mapping, and object destructuring
  • Add ?. null-safe operator
  • Add === and !== operators (equivalent to the same as and not same as tests)
  • Fix opcache preload warning for unlinked anonymous class
  • Fix spread operator behavior
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the php-prod group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [nelmio/security-bundle](https://github.com/nelmio/NelmioSecurityBundle) | `3.7.0` | `3.8.0` |
| [symfony/expression-language](https://github.com/symfony/expression-language) | `7.4.0` | `7.4.4` |
| [symfony/security-bundle](https://github.com/symfony/security-bundle) | `7.4.0` | `7.4.4` |
| [symfony/translation](https://github.com/symfony/translation) | `7.4.3` | `7.4.4` |
| [symfony/twig-bundle](https://github.com/symfony/twig-bundle) | `7.4.3` | `7.4.4` |
| [twig/extra-bundle](https://github.com/twigphp/twig-extra-bundle) | `3.22.2` | `3.23.0` |



Updates `nelmio/security-bundle` from 3.7.0 to 3.8.0
- [Release notes](https://github.com/nelmio/NelmioSecurityBundle/releases)
- [Changelog](https://github.com/nelmio/NelmioSecurityBundle/blob/master/CHANGELOG.md)
- [Commits](nelmio/NelmioSecurityBundle@v3.7.0...v3.8.0)

Updates `symfony/config` from 7.4.3 to 7.4.4
- [Release notes](https://github.com/symfony/config/releases)
- [Changelog](https://github.com/symfony/config/blob/8.1/CHANGELOG.md)
- [Commits](symfony/config@v7.4.3...v7.4.4)

Updates `symfony/console` from 7.4.3 to 7.4.4
- [Release notes](https://github.com/symfony/console/releases)
- [Changelog](https://github.com/symfony/console/blob/8.1/CHANGELOG.md)
- [Commits](symfony/console@v7.4.3...v7.4.4)

Updates `symfony/expression-language` from 7.4.0 to 7.4.4
- [Release notes](https://github.com/symfony/expression-language/releases)
- [Changelog](https://github.com/symfony/expression-language/blob/8.1/CHANGELOG.md)
- [Commits](symfony/expression-language@v7.4.0...v7.4.4)

Updates `symfony/http-foundation` from 7.4.3 to 7.4.5
- [Release notes](https://github.com/symfony/http-foundation/releases)
- [Changelog](https://github.com/symfony/http-foundation/blob/8.1/CHANGELOG.md)
- [Commits](symfony/http-foundation@v7.4.3...v7.4.5)

Updates `symfony/security-bundle` from 7.4.0 to 7.4.4
- [Release notes](https://github.com/symfony/security-bundle/releases)
- [Changelog](https://github.com/symfony/security-bundle/blob/8.1/CHANGELOG.md)
- [Commits](symfony/security-bundle@v7.4.0...v7.4.4)

Updates `symfony/translation` from 7.4.3 to 7.4.4
- [Release notes](https://github.com/symfony/translation/releases)
- [Changelog](https://github.com/symfony/translation/blob/8.1/CHANGELOG.md)
- [Commits](symfony/translation@v7.4.3...v7.4.4)

Updates `symfony/twig-bundle` from 7.4.3 to 7.4.4
- [Release notes](https://github.com/symfony/twig-bundle/releases)
- [Changelog](https://github.com/symfony/twig-bundle/blob/8.1/CHANGELOG.md)
- [Commits](symfony/twig-bundle@v7.4.3...v7.4.4)

Updates `twig/extra-bundle` from 3.22.2 to 3.23.0
- [Release notes](https://github.com/twigphp/twig-extra-bundle/releases)
- [Commits](twigphp/twig-extra-bundle@v3.22.2...v3.23.0)

Updates `twig/twig` from 3.22.2 to 3.23.0
- [Changelog](https://github.com/twigphp/Twig/blob/3.x/CHANGELOG)
- [Commits](twigphp/Twig@v3.22.2...v3.23.0)

---
updated-dependencies:
- dependency-name: nelmio/security-bundle
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: php-prod
- dependency-name: symfony/config
  dependency-version: 7.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/console
  dependency-version: 7.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/expression-language
  dependency-version: 7.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/http-foundation
  dependency-version: 7.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/security-bundle
  dependency-version: 7.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/translation
  dependency-version: 7.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: symfony/twig-bundle
  dependency-version: 7.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-prod
- dependency-name: twig/extra-bundle
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: php-prod
- dependency-name: twig/twig
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: php-prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Jan 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants