search

knpuniversity / symfony4

Screencast code, script and tandem bikes behind the "Stellar Development with Symfony 4" tutorial
https://symfonycasts.com/screencast/symfony
Other
79 stars 430 forks source link

Bump symfony/framework-bundle from 4.0.14 to 4.1.12 #21

Closed dependabot[bot] closed 5 years ago

dependabot[bot] commented 5 years ago

Bumps symfony/framework-bundle from 4.0.14 to 4.1.12.

Changelog *Sourced from [symfony/framework-bundle's changelog](https://github.com/symfony/framework-bundle/blob/master/CHANGELOG.md).* > CHANGELOG > ========= > > 5.0.0 > ----- > > * Removed support to load translation resources from the legacy directories `src/Resources/translations/` and `src/Resources//translations/` > * Removed `ControllerNameParser`. > * Removed `ResolveControllerNameSubscriber` > * Removed support for `bundle:controller:action` to reference controllers. Use `serviceOrFqcn::method` instead > * Removed support for PHP templating, use Twig instead > * Removed `Controller`, use `AbstractController` instead > * Removed `Client`, use `KernelBrowser` instead > * Removed `ContainerAwareCommand`, use dependency injection instead > * Removed the `validation.strict_email` option, use `validation.email_validation_mode` instead > * Removed the `cache.app.simple` service and its corresponding PSR-16 autowiring alias > * Removed cache-related compiler passes and `RequestDataCollector` > * Removed the `translator.selector` and `session.save_listener` services > * Removed `SecurityUserValueResolver`, use `UserValueResolver` instead > * Removed `routing.loader.service`. > * Service route loaders must be tagged with `routing.route_loader`. > * Added `slugger` service and `SluggerInterface` alias > * Removed the `lock.store.flock`, `lock.store.semaphore`, `lock.store.memcached.abstract` and `lock.store.redis.abstract` services. > > 4.4.0 > ----- > > * Added `lint:container` command to check that services wiring matches type declarations > * Added `MailerAssertionsTrait` > * Deprecated support for `templating` engine in `TemplateController`, use Twig instead > * Deprecated the `$parser` argument of `ControllerResolver::__construct()` and `DelegatingLoader::__construct()` > * Deprecated the `controller_name_converter` and `resolve_controller_name_subscriber` services > * The `ControllerResolver` and `DelegatingLoader` classes have been marked as `final` > * Added support for configuring chained cache pools > * Deprecated calling `WebTestCase::createClient()` while a kernel has been booted, ensure the kernel is shut down before calling the method > * Deprecated `routing.loader.service`, use `routing.loader.container` instead. > * Not tagging service route loaders with `routing.route_loader` has been deprecated. > * Overriding the methods `KernelTestCase::tearDown()` and `WebTestCase::tearDown()` without the `void` return-type is deprecated. > * Added new `error_controller` configuration to handle system exceptions > * Added sort option for `translation:update` command. > * [BC Break] The `framework.messenger.routing.senders` config key is not deep merged anymore. > * Added `secrets:*` commands and `%env(secret:...)%` processor to deal with secrets seamlessly. > * Made `framework.session.handler_id` accept a DSN > * Marked the `RouterDataCollector` class as `@final`. > > 4.3.0 > ----- > > * Deprecated the `framework.templating` option, configure the Twig bundle instead. > * Added `WebTestAssertionsTrait` (included by default in `WebTestCase`) > ... (truncated)
Commits - [`2bc4a9a`](https://github.com/symfony/framework-bundle/commit/2bc4a9a50b333ba08709c9007ec62b0345feac45) security #cve-2019-10909 [FrameworkBundle][Form] Fix XSS issues in the form t... - [`ed0bbe5`](https://github.com/symfony/framework-bundle/commit/ed0bbe55438f93c7a9e2c7a5fea6bac9243e6a3a) security #cve-2019-10912 [Cache][PHPUnit Bridge] Prevent destructors with sid... - [`c69ed3b`](https://github.com/symfony/framework-bundle/commit/c69ed3bf3159f6b71d1b4a01509ffc6652c86112) Fix XSS issues in the form theme of the PHP templating engine - [`7bcfcb8`](https://github.com/symfony/framework-bundle/commit/7bcfcb8a9559d91a801adcd369fee814e038888f) Merge branch '3.4' into 4.1 - [`20e35d7`](https://github.com/symfony/framework-bundle/commit/20e35d7cb1f802e38e5e8212387ad706907546e3) Add PackageNameTest to ConfigurationTest also add in the changelog the corres... - [`8913af4`](https://github.com/symfony/framework-bundle/commit/8913af42f8bf4b81f329222fb86db06b552061ce) Support use of hyphen in asset package name - [`355be2d`](https://github.com/symfony/framework-bundle/commit/355be2def23ac173a3a6f2394cb6cdf1d18d7d37) Replace gender by eye color in tests - [`1afa727`](https://github.com/symfony/framework-bundle/commit/1afa7277454b9f2bdd324b4e286be67f8e9abc09) Merge branch '3.4' into 4.1 - [`c4fc0f1`](https://github.com/symfony/framework-bundle/commit/c4fc0f11d9be8f4319706b46571d912de3646c89) bug [#29926](https://github-redirect.dependabot.com/symfony/framework-bundle/issues/29926) [Form] Changed UrlType input type to text when default_protocol is... - [`2892b1d`](https://github.com/symfony/framework-bundle/commit/2892b1d19c7ec3c08bc0cdb3e5d93e00a1875ba7) [Form] ensure compatibility with older PHPUnit mocks - Additional commits viewable in [compare view](https://github.com/symfony/framework-bundle/compare/v4.0.14...v4.1.12)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/knpuniversity/symfony4/network/alerts).
weaverryan commented 5 years ago

Closing. We can't upgrade over minor versions (4.0 to 4.1) on the tutorial repos

dependabot[bot] commented 5 years ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.