Fix a security issue when an included sandboxed template has been loaded before without the sandbox context
3.11.0 (2024-08-08)
Add Twig\Cache\ChainCache and Twig\Cache\ReadOnlyFilesystemCache
Add the possibility to deprecate attributes and nodes on Node
Add the possibility to add a package and a version to the deprecated tag
Add the possibility to add a package for filter/function/test deprecations
Mark ConstantExpression as being @final
Add the find filter
Fix optimizer mode validation in OptimizerNodeVisitor
Add the possibility to yield from a generator in PrintNode
Add the shuffle filter
Add the singular and plural filters in StringExtension
Deprecate the second argument of Twig\Node\Expression\CallExpression::compileArguments()
Deprecate Twig\ExpressionParser\parseHashExpression() in favor of
Twig\ExpressionParser::parseMappingExpression()
Deprecate Twig\ExpressionParser\parseArrayExpression() in favor of
Twig\ExpressionParser::parseSequenceExpression()
Add sequence and mapping tests
Deprecate Twig\Node\Expression\NameExpression::isSimple() and
Twig\Node\Expression\NameExpression::isSpecial()
3.10.3 (2024-05-16)
Fix missing ; in generated code
3.10.2 (2024-05-14)
Fix support for the deprecated escaper signature
3.10.1 (2024-05-12)
Fix BC break on escaper extension
Fix constant return type
3.10.0 (2024-05-11)
Make CoreExtension::formatDate, CoreExtension::convertDate, and
CoreExtension::formatNumber part of the public API
Add needs_charset option for filters and functions
Extract the escaping logic from the EscaperExtension class to a new
EscaperRuntime class.
The following methods from Twig\\Extension\\EscaperExtension are
deprecated: setEscaper(), getEscapers(), setSafeClasses,
addSafeClasses(). Use the same methods on the
Twig\\Runtime\\EscaperRuntime class instead.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/benetech/Imageshare/network/alerts).
Bumps twig/twig from 3.0.3 to 3.11.1.
Changelog
Sourced from twig/twig's changelog.
... (truncated)
Commits
ff063af
Prepare the 3.11.1 release41103dc
Fix a security issue when an included sandboxed template has been loaded befo...e80fb8e
Prepare the 3.11.0 releasefe32121
Update CHANGELOG0d524d3
feature #4182 Add the possibility to deprecate attributes and nodes on Node (...18894cf
Add the possibility to deprecate attributes and nodes on Node90fbb9a
feature #4183 Add support for package/version on deprecations (fabpot)0ce79df
Use trigger_deprecation() instead of trigger_error() for deprecations839da16
Tweak docs9252578
minor #4181 clarify that macros shadow other macros/functions (xabbuh)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show