slimphp / Twig-View

Slim Framework view helper built on top of the Twig templating component
http://slimframework.com
MIT License
359 stars 87 forks source link

Update twig/twig requirement from ^3.4 to ^3.5 #278

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Updates the requirements on twig/twig to permit the latest version.

Changelog

Sourced from twig/twig's changelog.

3.5.0 (2022-12-27)

  • Make Twig\ExpressionParser non-internal
  • Add "has some" and "has every" operators
  • Add Compile::reset()
  • Throw a better runtime error when the "matches" regexp is not valid
  • Add "twig *_names" intl functions
  • Fix optimizing closures callbacks
  • Add a better exception when getting an undefined constant via constant
  • Fix if nodes when outside of a block and with an empty body

3.4.3 (2022-09-28)

  • Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)

3.4.2 (2022-08-12)

  • Allow inherited magic method to still run with calling class
  • Fix CallExpression::reflectCallable() throwing TypeError
  • Fix typo in naming (currency_code)

3.4.1 (2022-05-17)

  • Fix optimizing non-public named closures

3.4.0 (2022-05-22)

  • Add support for named closures

3.3.10 (2022-04-06)

  • Enable bytecode invalidation when auto_reload is enabled

3.3.9 (2022-03-25)

  • Fix custom escapers when using multiple Twig environments
  • Add support for "constant('class', object)"
  • Do not reuse internally generated variable names during parsing

3.3.8 (2022-02-04)

  • Fix a security issue when in a sandbox: the sort filter must require a Closure for the arrow parameter
  • Fix deprecation notice on round
  • Fix call to deprecated convertToHtml method

3.3.7 (2022-01-03)

  • Allow more null support when Twig expects a string (for better 8.1 support)
  • Only use Commonmark extensions if markdown enabled

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)