search

ungdev / EtuUTT

Site étudiant de l'UTT
http://etu.utt.fr
MIT License
19 stars 14 forks source link

chore(deps): bump symfony/symfony from 3.2.14 to 3.4.49 #277

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps symfony/symfony from 3.2.14 to 3.4.49.

Changelog

Sourced from symfony/symfony's changelog.

  • 3.4.49 (2021-05-19)

  • security #cve-2021-21424 [Security\Core] Fix user enumeration via response body on invalid credentials (chalasr)

  • 3.4.48 (2021-05-12)

  • security #cve-2021-21424 [Security][Guard] Prevent user enumeration (chalasr)

  • 3.4.47 (2020-11-27)

  • bug #38628 [DoctrineBridge] indexBy could reference to association columns (juanmiguelbesada)

  • 3.4.46 (2020-10-28)

  • bug #38669 [Serializer] fix decoding float XML attributes starting with 0 (Marcin Kruk)

  • bug #38595 [TwigBridge] do not translate null placeholders or titles (xabbuh)

  • bug #38652 [Filesystem] Check if failed unlink was caused by permission denied (Nyholm)

  • bug #38604 [DoctrineBridge] indexBy does not refer to attributes, but to column names (xabbuh)

  • bug #38606 [WebProfilerBundle] Hide debug toolbar in print view (jt2k)

  • bug #38582 [DI] Fix Reflection file name with eval()'d code (maxime-aknin)

  • bug #38516 [HttpFoundation] Fix Range Requests (BattleRattle)

  • bug #38510 [PropertyInfo] Support for the mixed type (derrabus)

  • bug #38444 [PhpUnitBridge] fix running parallel tests with phpunit 9 (nicolas-grekas)

  • bug #38442 [VarDumper] fix truncating big arrays (nicolas-grekas)

  • bug #38380 [Form] propagate validation groups to subforms (johanderuijter, xabbuh)

  • bug #38360 [BrowserKit] Cookie expiration at current timestamp (iquito)

  • 3.4.45 (2020-09-27)

  • bug #38228 [Yaml Parser] Fix edge cases when parsing multiple documents (digilist)

  • bug #38229 [Yaml] fix parsing comments not prefixed by a space (xabbuh)

  • bug #38131 [Validator] allow consumers to mock all methods (xabbuh)

  • bug #37097 DateTime validator support for trailing data (stefankleff)

  • bug #38116 [Console] Silence warnings on sapi_windows_cp_set() call (chalasr)

  • bug #38114 [Console] guard $argv + $token against null, preventing unnecessary exceptions (bilogic)

  • bug #38099 Prevent parsing invalid octal digits as octal numbers (julienfalque)

  • bug #38091 [DI] fix ContainerBuilder on PHP8 (nicolas-grekas)

  • bug #38080 [Console] Make sure $maxAttempts is an int or null (derrabus)

  • bug #38073 [VarDumper] Fix caster for invalid SplFileInfo objects on php 8 (derrabus)

  • bug #38071 [PhpUnitBridge] Adjust output parsing of CoverageListenerTrait for PHPUnit 9.3 (sanmai, derrabus)

  • bug #38049 [Debug] Parse "x not found" errors correctly on php 8 (derrabus)

  • bug #38024 [Console] Fix undefined index for inconsistent command name definition (chalasr)

  • 3.4.44 (2020-08-31)

  • bug #37949 [Yaml] fix more numeric cases changing in PHP 8 (xabbuh)

  • bug #37921 [Yaml] account for is_numeric() behavior changes in PHP 8 (xabbuh)

  • bug #37912 [ExpressionLanguage] fix passing arguments to call_user_func_array() on PHP 8 (xabbuh)

  • bug #37853 [Validator] ensure that the validator is a mock object for backwards-compatibility (xabbuh)

  • bug #37845 [Serializer] Fix variadic support when using type hints (fabpot)

... (truncated)

Commits
  • ba0e346 Merge pull request #41276 from fabpot/release-3.4.49
  • 13af892 Update VERSION for 3.4.49
  • 184bd68 Update CHANGELOG for 3.4.49
  • 1ad13fe security #cve-2021-21424 [Security\Core] Fix user enumeration via response bo...
  • e850700 [Security\Core] Fix user enumeration via response body on invalid credentials
  • d0d17db Merge pull request #41193 from fabpot/release-3.4.48
  • fd84b53 Update VERSION for 3.4.48
  • 684ab1f Update CHANGELOG for 3.4.48
  • 2a581d2 security #cve-2021-21424 [Security][Guard] Prevent user enumeration (chalasr)
  • f012eee [Security][Guard] Prevent user enumeration via response content
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ungdev/EtuUTT/network/alerts).
guardrails[bot] commented 1 year ago

:warning: We detected 1 security issue in this pull request:

Vulnerable Libraries (1)
Severity | Details :-: | :-- Low | [pkg:composer/symfony/symfony@v3.4.49@v3.4.49](https://github.com/ungdev/EtuUTT/blob/9a7dd5c17d80526ea9321a5b274995af5d37561f/composer.lock#L7672) - **no patch available** More info on how to fix Vulnerable Libraries in [PHP](https://docs.guardrails.io/docs/en/vulnerabilities/php/using_vulnerable_libraries.html?utm_source=ghpr).

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.