search

s9y / Serendipity

A PHP blog software
https://s9y.org
BSD 3-Clause "New" or "Revised" License
209 stars 88 forks source link

Bump smarty/smarty from 4.5.1 to 5.3.1 #843

Open dependabot[bot] opened 5 months ago

dependabot[bot] commented 5 months ago

Bumps smarty/smarty from 4.5.1 to 5.3.1.

Release notes

Sourced from smarty/smarty's releases.

v5.3.1

  • Fixed error when using section with nocache #1034

v5.3.0

What's Changed

Full Changelog: https://github.com/smarty-php/smarty/compare/v5.2.0...v5.3.0

v5.2.0

What's Changed

Full Changelog: https://github.com/smarty-php/smarty/compare/v5.1.0...v5.2.0

v5.1.0

What's Changed

New Contributors

Full Changelog: https://github.com/smarty-php/smarty/compare/v5.0.0...v5.1.0

v5.0.2

What's Changed

Full Changelog: https://github.com/smarty-php/smarty/compare/v5.0.1...v5.0.2

v5.0.1

... (truncated)

Changelog

Sourced from smarty/smarty's changelog.

[5.3.1] - 2024-06-16

  • Fixed error when using section with nocache #1034

[5.3.0] - 2024-05-30

  • Fix warning when calling hasVariable for an undefined variable #977
  • Added $smarty->prependTemplateDir() method #1022

[5.2.0] - 2024-05-28

  • Fixed a code injection vulnerability in extends-tag. This addresses CVE-2024-35226.
  • Added $smarty->setCacheModifiedCheck() setter for cache_modified_check
  • Added a PSR-4 loading script to allow Smarty to be used without Composer #1017

[5.1.0] - 2024-04-22

  • Prevent deprecation notices during compilation in PHP8.3 #996
  • Fix that getTemplateVars would return an array of objects instead of the assigned variables values #994
  • Fix Smarty::assign() not returning $this when called with an array as first parameter #972
  • Documented support for {if $element is in $array} syntax #937
  • Added support for {if $element is not in $array} syntax #937
  • Using stream variables in templates now throws a deprecation notice #933
  • Internal compiler classes always return a string (the internal has_code flag has been removed for simplicity) #918
  • Fix invalid classnames in Runtime code for foreach #1000

[5.0.2] - 2024-03-28

  • Fix Smarty::assign() not returning $this when called with an array as first parameter #972

[5.0.1] - 2024-03-27

  • Fix error in Smarty\Smarty::compileAllTemplates() by including missing FilesystemIterator class #966

[5.0.0] - 2024-03-25

  • Fixed that scoped variables would overwrite parent scope #952
  • Removed publicly accessible $tpl->_var_stack variable

Fixed

  • Too many shorthand attributes error when using a modifier as a function with more than 3 parameters in an expression #949

Removed

  • Dropped support for undocumented {time()} added in v5.0.0 since we already have the documented {$smarty.now}

[5.0.0-rc3] - 2024-02-26

Added

  • PHP8.3 support #925
  • Backlink to GitHub in docs
  • Explain how to do escaping and set-up auto-escaping in docs #865
  • Link to variable scope page in the documentation for the assign tag #878
  • Add support for implode, substr and json_encode as modifiers/functions in templates #939
  • Add template path to CompilerException to enable rich debug features #935

... (truncated)

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)