dependabot[bot]
commented
2 years ago Looks like symfony/symfony is up-to-date now, so this is no longer needed.
Closed dependabot[bot] closed 2 years ago
dependabot[bot]
commented
2 years ago Looks like symfony/symfony is up-to-date now, so this is no longer needed.
Bumps symfony/symfony from 3.4.27 to 3.4.35.
Release notes
*Sourced from [symfony/symfony's releases](https://github.com/symfony/symfony/releases).* > ## v3.4.35 > **Changelog** (since https://github.com/symfony/symfony/compare/v3.4.34...v3.4.35) > > * bug [#34344](https://github-redirect.dependabot.com/symfony/symfony/issues/34344) [Console] Constant STDOUT might be undefined ([@nicolas-grekas](https://github.com/nicolas-grekas)) > * security #cve-2019-18889 [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances ([@nicolas-grekas](https://github.com/nicolas-grekas)) > * security #cve-2019-18888 [HttpFoundation] fix guessing mime-types of files with leading dash ([@nicolas-grekas](https://github.com/nicolas-grekas)) > * security #cve-2019-18887 [HttpKernel] Use constant time comparison in UriSigner ([@stof](https://github.com/stof)) > > [PR] [symfony/symfony#34350](https://github-redirect.dependabot.com/symfony/symfony/pull/34350) > [SECURITY] Security release > > ## v3.4.34 > **Changelog** (since https://github.com/symfony/symfony/compare/v3.4.33...v3.4.34) > > * bug [#34297](https://github-redirect.dependabot.com/symfony/symfony/issues/34297) [DI] fix locators with numeric keys ([@nicolas-grekas](https://github.com/nicolas-grekas)) > * bug [#34282](https://github-redirect.dependabot.com/symfony/symfony/issues/34282) [DI] Dont cache classes with missing parents ([@nicolas-grekas](https://github.com/nicolas-grekas)) > * bug [#34181](https://github-redirect.dependabot.com/symfony/symfony/issues/34181) [Stopwatch] Fixed bug in getDuration when counting multiple ongoing periods ([@TimoBakx](https://github.com/TimoBakx)) > * bug [#34179](https://github-redirect.dependabot.com/symfony/symfony/issues/34179) [Stopwatch] Fixed a bug in StopwatchEvent::getStartTime ([@TimoBakx](https://github.com/TimoBakx)) > * bug [#34203](https://github-redirect.dependabot.com/symfony/symfony/issues/34203) [FrameworkBundle] [HttpKernel] fixed correct EOL and EOM month ([@erics86](https://github.com/erics86)) > > [PR] [symfony/symfony#34322](https://github-redirect.dependabot.com/symfony/symfony/pull/34322) > > ## v3.4.33 > **Changelog** (since https://github.com/symfony/symfony/compare/v3.4.32...v3.4.33) > > * bug [#33998](https://github-redirect.dependabot.com/symfony/symfony/issues/33998) [Config] Disable default alphabet sorting in glob function due of unstable sort ([@hurricane-voronin](https://github.com/hurricane-voronin)) > * bug [#34144](https://github-redirect.dependabot.com/symfony/symfony/issues/34144) [Serializer] Improve messages for unexpected resources values ([@fancyweb](https://github.com/fancyweb)) > * bug [#34080](https://github-redirect.dependabot.com/symfony/symfony/issues/34080) [SecurityBundle] correct types for default arguments for firewall configs ([@shieldo](https://github.com/shieldo)) > * bug [#33999](https://github-redirect.dependabot.com/symfony/symfony/issues/33999) [Form] Make sure to collect child forms created on *_SET_DATA events ([@yceruto](https://github.com/yceruto)) > * bug [#34021](https://github-redirect.dependabot.com/symfony/symfony/issues/34021) [TwigBridge] do not render errors for checkboxes twice ([@xabbuh](https://github.com/xabbuh)) > * bug [#34041](https://github-redirect.dependabot.com/symfony/symfony/issues/34041) [HttpKernel] fix wrong removal of the just generated container dir ([@nicolas-grekas](https://github.com/nicolas-grekas)) > * bug [#34023](https://github-redirect.dependabot.com/symfony/symfony/issues/34023) [Dotenv] allow LF in single-quoted strings ([@nicolas-grekas](https://github.com/nicolas-grekas)) > * bug [#33818](https://github-redirect.dependabot.com/symfony/symfony/issues/33818) [Yaml] Throw exception for tagged invalid inline elements ([@gharlan](https://github.com/gharlan)) > * bug [#33948](https://github-redirect.dependabot.com/symfony/symfony/issues/33948) [PropertyInfo] Respect property name case when guessing from public method name ([@antograssiot](https://github.com/antograssiot)) > * bug [#33962](https://github-redirect.dependabot.com/symfony/symfony/issues/33962) [Cache] fixed TagAwareAdapter returning invalid cache ([@v-m-i](https://github.com/v-m-i)) > * bug [#33965](https://github-redirect.dependabot.com/symfony/symfony/issues/33965) [HttpFoundation] Add plus character `+` to legal mime subtype ([@ilzrv](https://github.com/ilzrv)) > * bug [#32943](https://github-redirect.dependabot.com/symfony/symfony/issues/32943) [Dotenv] search variable values in ENV first then env file ([@soufianZantar](https://github.com/soufianZantar)) > * bug [#33943](https://github-redirect.dependabot.com/symfony/symfony/issues/33943) [VarDumper] fix resetting the "bold" state in CliDumper ([@nicolas-grekas](https://github.com/nicolas-grekas)) > > [PR] [symfony/symfony#34208](https://github-redirect.dependabot.com/symfony/symfony/pull/34208) > > ## v3.4.32 > **Changelog** (since https://github.com/symfony/symfony/compare/v3.4.31...v3.4.32) > > * bug [#33834](https://github-redirect.dependabot.com/symfony/symfony/issues/33834) [Validator] Fix ValidValidator group cascading usage ([@fancyweb](https://github.com/fancyweb)) > * bug [#33841](https://github-redirect.dependabot.com/symfony/symfony/issues/33841) [VarDumper] fix dumping uninitialized SplFileInfo ([@nicolas-grekas](https://github.com/nicolas-grekas)) > * bug [#33799](https://github-redirect.dependabot.com/symfony/symfony/issues/33799) [Security]: Don't let falsy usernames slip through impersonation ([@j4nr6n](https://github.com/j4nr6n)) > * bug [#33814](https://github-redirect.dependabot.com/symfony/symfony/issues/33814) [HttpFoundation] Check if data passed to SessionBagProxy::initialize is an array ([@mynameisbogdan](https://github.com/mynameisbogdan)) > * bug [#33805](https://github-redirect.dependabot.com/symfony/symfony/issues/33805) [FrameworkBundle] Fix wrong returned status code in ConfigDebugCommand ([@jschaedl](https://github.com/jschaedl)) > * bug [#33781](https://github-redirect.dependabot.com/symfony/symfony/issues/33781) [AnnotationCacheWarmer] add RedirectController to annotation cache ([@jenschude](https://github.com/jenschude)) > ... (truncated)Changelog
*Sourced from [symfony/symfony's changelog](https://github.com/symfony/symfony/blob/v3.4.35/CHANGELOG-3.4.md).* > * 3.4.35 (2019-11-13) > > * bug [#34344](https://github-redirect.dependabot.com/symfony/symfony/issues/34344) [Console] Constant STDOUT might be undefined (nicolas-grekas) > * security #cve-2019-18889 [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances (nicolas-grekas) > * security #cve-2019-18888 [HttpFoundation] fix guessing mime-types of files with leading dash (nicolas-grekas) > * security #cve-2019-18887 [HttpKernel] Use constant time comparison in UriSigner (stof) > > * 3.4.34 (2019-11-11) > > * bug [#34297](https://github-redirect.dependabot.com/symfony/symfony/issues/34297) [DI] fix locators with numeric keys (nicolas-grekas) > * bug [#34282](https://github-redirect.dependabot.com/symfony/symfony/issues/34282) [DI] Dont cache classes with missing parents (nicolas-grekas) > * bug [#34181](https://github-redirect.dependabot.com/symfony/symfony/issues/34181) [Stopwatch] Fixed bug in getDuration when counting multiple ongoing periods (TimoBakx) > * bug [#34179](https://github-redirect.dependabot.com/symfony/symfony/issues/34179) [Stopwatch] Fixed a bug in StopwatchEvent::getStartTime (TimoBakx) > * bug [#34203](https://github-redirect.dependabot.com/symfony/symfony/issues/34203) [FrameworkBundle] [HttpKernel] fixed correct EOL and EOM month (erics86) > > * 3.4.33 (2019-11-01) > > * bug [#33998](https://github-redirect.dependabot.com/symfony/symfony/issues/33998) [Config] Disable default alphabet sorting in glob function due of unstable sort (hurricane-voronin) > * bug [#34144](https://github-redirect.dependabot.com/symfony/symfony/issues/34144) [Serializer] Improve messages for unexpected resources values (fancyweb) > * bug [#34080](https://github-redirect.dependabot.com/symfony/symfony/issues/34080) [SecurityBundle] correct types for default arguments for firewall configs (shieldo) > * bug [#33999](https://github-redirect.dependabot.com/symfony/symfony/issues/33999) [Form] Make sure to collect child forms created on *_SET_DATA events (yceruto) > * bug [#34021](https://github-redirect.dependabot.com/symfony/symfony/issues/34021) [TwigBridge] do not render errors for checkboxes twice (xabbuh) > * bug [#34041](https://github-redirect.dependabot.com/symfony/symfony/issues/34041) [HttpKernel] fix wrong removal of the just generated container dir (nicolas-grekas) > * bug [#34023](https://github-redirect.dependabot.com/symfony/symfony/issues/34023) [Dotenv] allow LF in single-quoted strings (nicolas-grekas) > * bug [#33818](https://github-redirect.dependabot.com/symfony/symfony/issues/33818) [Yaml] Throw exception for tagged invalid inline elements (gharlan) > * bug [#33948](https://github-redirect.dependabot.com/symfony/symfony/issues/33948) [PropertyInfo] Respect property name case when guessing from public method name (antograssiot) > * bug [#33962](https://github-redirect.dependabot.com/symfony/symfony/issues/33962) [Cache] fixed TagAwareAdapter returning invalid cache (v-m-i) > * bug [#33965](https://github-redirect.dependabot.com/symfony/symfony/issues/33965) [HttpFoundation] Add plus character `+` to legal mime subtype (ilzrv) > * bug [#32943](https://github-redirect.dependabot.com/symfony/symfony/issues/32943) [Dotenv] search variable values in ENV first then env file (soufianZantar) > * bug [#33943](https://github-redirect.dependabot.com/symfony/symfony/issues/33943) [VarDumper] fix resetting the "bold" state in CliDumper (nicolas-grekas) > > * 3.4.32 (2019-10-07) > > * bug [#33834](https://github-redirect.dependabot.com/symfony/symfony/issues/33834) [Validator] Fix ValidValidator group cascading usage (fancyweb) > * bug [#33841](https://github-redirect.dependabot.com/symfony/symfony/issues/33841) [VarDumper] fix dumping uninitialized SplFileInfo (nicolas-grekas) > * bug [#33799](https://github-redirect.dependabot.com/symfony/symfony/issues/33799) [Security]: Don't let falsy usernames slip through impersonation (j4nr6n) > * bug [#33814](https://github-redirect.dependabot.com/symfony/symfony/issues/33814) [HttpFoundation] Check if data passed to SessionBagProxy::initialize is an array (mynameisbogdan) > * bug [#33805](https://github-redirect.dependabot.com/symfony/symfony/issues/33805) [FrameworkBundle] Fix wrong returned status code in ConfigDebugCommand (jschaedl) > * bug [#33781](https://github-redirect.dependabot.com/symfony/symfony/issues/33781) [AnnotationCacheWarmer] add RedirectController to annotation cache (jenschude) > * bug [#33777](https://github-redirect.dependabot.com/symfony/symfony/issues/33777) Fix the :only-of-type pseudo class selector (jakzal) > * bug [#32051](https://github-redirect.dependabot.com/symfony/symfony/issues/32051) [Serializer] Add CsvEncoder tests for PHP 7.4 (ro0NL) > * feature [#33776](https://github-redirect.dependabot.com/symfony/symfony/issues/33776) Copy phpunit.xsd to a predictable path (julienfalque) > * bug [#33759](https://github-redirect.dependabot.com/symfony/symfony/issues/33759) [Security/Http] fix parsing X509 emailAddress (nicolas-grekas) > * bug [#33733](https://github-redirect.dependabot.com/symfony/symfony/issues/33733) [Serializer] fix denormalization of string-arrays with only one element (mkrauser) > * bug [#33754](https://github-redirect.dependabot.com/symfony/symfony/issues/33754) [Cache] fix known tag versions ttl check (SwenVanZanten) > * bug [#33646](https://github-redirect.dependabot.com/symfony/symfony/issues/33646) [HttpFoundation] allow additinal characters in not raw cookies (marie) > * bug [#33748](https://github-redirect.dependabot.com/symfony/symfony/issues/33748) [Console] Do not include hidden commands in suggested alternatives (m-vo) > * bug [#33625](https://github-redirect.dependabot.com/symfony/symfony/issues/33625) [DependencyInjection] Fix wrong exception when service is synthetic (k0d3r1s) > * bug [#32522](https://github-redirect.dependabot.com/symfony/symfony/issues/32522) [Validator] Accept underscores in the URL validator, as the URL will load (battye) > * bug [#32437](https://github-redirect.dependabot.com/symfony/symfony/issues/32437) Fix toolbar load when GET params are present in "_wdt" route (Molkobain) > ... (truncated)Commits
- [`2adc85d`](https://github.com/symfony/symfony/commit/2adc85d49cbe14e346068fa7e9c2e1f08ab31de6) Merge pull request [#34350](https://github-redirect.dependabot.com/symfony/symfony/issues/34350) from fabpot/release-3.4.35 - [`02257c8`](https://github.com/symfony/symfony/commit/02257c80981f1a30a8a5b13652161f97ad7b7c08) updated VERSION for 3.4.35 - [`3e25850`](https://github.com/symfony/symfony/commit/3e258504f6e66b5ede1c105f59ef93ca9dcaeb26) updated CHANGELOG for 3.4.35 - [`32bde39`](https://github.com/symfony/symfony/commit/32bde39f63cd6c190d57d77226e227b6d7de4bdd) bug [#34344](https://github-redirect.dependabot.com/symfony/symfony/issues/34344) [Console] Constant STDOUT might be undefined (nicolas-grekas) - [`53dc781`](https://github.com/symfony/symfony/commit/53dc7818142e39d85b50c58ea3b2e3198ad99353) minor [#34340](https://github-redirect.dependabot.com/symfony/symfony/issues/34340) Allow returning null from NormalizerInterface::normalize (teohha... - [`bb8c82c`](https://github.com/symfony/symfony/commit/bb8c82c0b5d89969aadd44d44873f69976d0233e) [Console] Constant STDOUT might be undefined. - [`1c8edc5`](https://github.com/symfony/symfony/commit/1c8edc55ad7d88c876c3facb8811c20db320fe18) Allow returning null from NormalizerInterface::normalize - [`4cc37df`](https://github.com/symfony/symfony/commit/4cc37df2fb74e9c6fa8630785fd14ec974ff2200) security #cve-2019-18889 [Cache] forbid serializing AbstractAdapter and TagAw... - [`b21025b`](https://github.com/symfony/symfony/commit/b21025b139962bfb87501b40ec43e7c3e4801435) security #cve-2019-18888 [HttpFoundation] fix guessing mime-types of files wi... - [`0102134`](https://github.com/symfony/symfony/commit/010213408e61620eb21ba5e5ef3bfba14a4ff689) security #cve-2019-18887 [HttpKernel] Use constant time comparison in UriSign... - Additional commits viewable in [compare view](https://github.com/symfony/symfony/compare/v3.4.27...v3.4.35)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/OpenConext/OpenConext-user-lifecycle/network/alerts).