Bump twig/twig from 3.4.1 to 3.5.1

[dependabot[bot]]

Bumps twig/twig from 3.4.1 to 3.5.1.

Changelog

Sourced from twig/twig's changelog.

3.5.1 (2023-02-08)

• Arrow functions passed to the "reduce" filter now accept the current key as a third argument
• Restores the leniency of the matches twig comparison
• Fix error messages in sandboxed mode for "has some" and "has every"

3.5.0 (2022-12-27)

• Make Twig\ExpressionParser non-internal
• Add "has some" and "has every" operators
• Add Compile::reset()
• Throw a better runtime error when the "matches" regexp is not valid
• Add "twig *_names" intl functions
• Fix optimizing closures callbacks
• Add a better exception when getting an undefined constant via constant
• Fix if nodes when outside of a block and with an empty body

3.4.3 (2022-09-28)

• Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)

3.4.2 (2022-08-12)

• Allow inherited magic method to still run with calling class
• Fix CallExpression::reflectCallable() throwing TypeError
• Fix typo in naming (currency_code)

Commits

• a6e0510 Prepare the 3.5.1 release
• 0752948 Update CHANGELOG
• 4650d37 Merge branch '2.x' into 3.x
• 872646a Fix LICENSE year
• 10a7bc1 bug #3809 Restores the leniency of the matches twig comparison (la5942)
• f136668 Restores the leniency of the matches twig comparison, allowing null subject...
• b3bdf6a Merge branch '2.x' into 3.x
• 2e99376 minor #3806 Minor: Fixing language (ThomasLandauer)
• f52b45d Minor: Fixing language
• 609794c feature #3803 pass the current key to reduce filter's callback (ju1ius)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)