Update symfony packages by renovate[bot] · Pull Request #230 · freifunk/calcifer

renovate · 2026-05-20T11:07:32Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
symfony/asset-mapper (source)	`7.4.11` → `7.4.20`
symfony/browser-kit (source)	`7.4.8` → `7.4.17`
symfony/console (source)	`7.4.11` → `7.4.20`
symfony/css-selector (source)	`7.4.9` → `7.4.18`
symfony/doctrine-messenger (source)	`7.4.6` → `7.4.20`
symfony/dotenv (source)	`7.4.11` → `7.4.18`
symfony/expression-language (source)	`7.4.8` → `7.4.18`
symfony/form (source)	`7.4.9` → `7.4.20`
symfony/framework-bundle (source)	`7.4.11` → `7.4.20`
symfony/http-client (source)	`7.4.9` → `7.4.20`
symfony/intl (source)	`7.4.8` → `7.4.17`
symfony/mailer (source)	`7.4.8` → `7.4.19`
symfony/mime (source)	`7.4.9` → `7.4.19`
symfony/notifier (source)	`7.4.8` → `7.4.17`
symfony/phpunit-bridge (source)	`7.4.8` → `7.4.18`
symfony/process (source)	`7.4.11` → `7.4.19`
symfony/property-access (source)	`7.4.8` → `7.4.16`
symfony/property-info (source)	`7.4.8` → `7.4.20`
symfony/runtime (source)	`7.4.8` → `7.4.14`
symfony/security-bundle (source)	`7.4.11` → `7.4.20`
symfony/serializer (source)	`7.4.10` → `7.4.20`
symfony/string (source)	`7.4.11` → `7.4.19`
symfony/translation (source)	`7.4.10` → `7.4.17`
symfony/twig-bundle (source)	`7.4.8` → `7.4.19`
symfony/validator (source)	`7.4.10` → `7.4.20`
symfony/web-profiler-bundle (source)	`7.4.11` → `7.4.20`
symfony/yaml (source)	`7.4.11` → `7.4.20`

Release Notes

symfony/asset-mapper (symfony/asset-mapper)

`v7.4.20`

Compare Source

Changelog (symfony/asset-mapper@v7.4.19...v7.4.20)

bug #66282 Fix CSS and JSON loaders breaking under es-module-shims (@nicolas-grekas)

`v7.4.19`

Compare Source

Changelog (symfony/asset-mapper@v7.4.17...v7.4.19)

bug #66027 Stop versioning the assets the mapper already resolved (@Amoifr)

`v7.4.17`

Compare Source

Changelog (symfony/asset-mapper@v7.4.15...v7.4.17)

bug #65262 Include front controller in dev asset URLs (@eissasoubhi)

`v7.4.15`

Compare Source

Changelog (symfony/asset-mapper@v7.4.14...v7.4.15)

bug #64972 Reset the mapped asset factory between requests (@pokki-deploy)
bug #64966 Avoid re-expanding bare importmap entries (@pokki-deploy)
bug #64707 Fix crash when a remote package depends on a locally-mapped importmap entry (@Amoifr)
bug #64930 Handle PHP 8.6 removing function arguments in error messages (@MatTheCat)

`v7.4.14`

Compare Source

Changelog (symfony/asset-mapper@v7.4.13...v7.4.14)

bug #64635 Fix stale dev asset cache in long-running runtimes (@adrianrudnik)
minor #64476 Unsafe unserialize phpstan rule (@jack-worman)
bug #64475 Render an empty import map as a JSON object (@ousamabenyounes)

`v7.4.13`

Compare Source

Changelog (symfony/asset-mapper@v7.4.11...v7.4.13)

bug #64208 Rewrite relative paths in export ... from statements (@ousamabenyounes)

symfony/browser-kit (symfony/browser-kit)

`v7.4.17`

Compare Source

Changelog (symfony/browser-kit@v7.4.14...v7.4.17)

bug #65507 Fix decoding raw cookie values that contain a plus sign (@nicolas-grekas)
bug #65520 Return the most specific cookie when several ones match (@nicolas-grekas)
bug #65367 Fix PHP 8.6 deprecations (@nicolas-grekas)

`v7.4.14`

Compare Source

Changelog (symfony/browser-kit@v7.4.9...v7.4.14)

minor #64476 Unsafe unserialize phpstan rule (@jack-worman)

symfony/console (symfony/console)

`v7.4.20`

Compare Source

Changelog (symfony/console@v7.4.19...v7.4.20)

bug #66141 Fix quadratic formatting of non-ASCII content (@a-muzyka)

`v7.4.19`

Compare Source

Changelog (symfony/console@v7.4.18...v7.4.19)

bug #66031 Report a validation error instead of a TypeError on numeric arguments and options (@tanguychenier)
bug #65976 Keep messages containing malformed UTF-8 when wrapping (@Meacue)
minor #65863 Type the autocompleter callback as returning a list (@nicolas-grekas)
minor #65860 Disambiguate the autocompleter callback return type (@SanderMuller)
bug #65818 Do not evaluate the command line in the zsh completion (@GromNaN, @nicolas-grekas)
minor #65815 Fix the bash completion of "--option=value" and of an aliased command (@GromNaN)
bug #65811 Fix the bash completion on macOS and cover more option modes (@GromNaN)
bug #65783 Test the shell completion scripts and fix the escaping (@GromNaN)

`v7.4.18`

Compare Source

Changelog (symfony/console@v7.4.17...v7.4.18)

bug #65692 Escape context strings written to the terminal (@nicolas-grekas)
bug #65637 Fix profiling a command stopped at ConsoleEvents::COMMAND (@Spomky)

`v7.4.17`

Compare Source

Changelog (symfony/console@v7.4.16...v7.4.17)

bug #65500 Keep backslashes preceding < and > when escaping text (@nicolas-grekas)
bug #65471 Fix clearing more lines than a section holds (@nicolas-grekas)
bug #65419 Consume the whole escape sequence when reading autocomplete input (@nicolas-grekas)
bug #65367 Fix PHP 8.6 deprecations (@nicolas-grekas)
bug #65263 Keep falsy answers when collecting an array with # (@sadiqk2)
bug #65258 Restore the catchExceptions state after running a command message (@KevinMartinsDev)

`v7.4.16`

Compare Source

Changelog (symfony/console@v7.4.15...v7.4.16)

bug #65065 Fix column widths when a row spans columns (@wazum)

`v7.4.15`

Compare Source

Changelog (symfony/console@v7.4.14...v7.4.15)

bug #64662 Decorate stdout and stderr independently when a formatter is injected (@jprivet-dev)
bug #64843 Fix table borders around colspan cells and header-less tables (@wazum)
bug #64886 Fix two ValueError crashes on multibyte / multi-column widths (@sadiqk2)
bug #64856 Fall back to "stty sane" when restoring the captured terminal state fails (@lyrixx)
bug #64849 Fix SymfonyStyle questions when using output sections (@javiereguiluz)

`v7.4.14`

Compare Source

Changelog (symfony/console@v7.4.13...v7.4.14)

minor #64614 use mb_convert_encoding() instead of mb_convert_variables() (@Girgias)
bug #64533 Render formatter tags in ChoiceQuestion default value (@ousamabenyounes)

`v7.4.13`

Compare Source

Changelog (symfony/console@v7.4.11...v7.4.13)

bug #64355 Format message in ConsoleSectionOutput::overwrite() (@nicolas-grekas)

symfony/css-selector (symfony/css-selector)

`v7.4.18`

Compare Source

Changelog (symfony/css-selector@v7.4.17...v7.4.18)

bug #65599 Fix quadratic token probing in Reader::findPattern() (@iliaal)
bug #65596 Cap the nesting depth of :is() and :where() (@iliaal)

`v7.4.17`

Compare Source

Changelog (symfony/css-selector@v7.4.9...v7.4.17)

bug #65582 Fix :disabled and :enabled inside nested fieldsets (@nicolas-grekas)

symfony/doctrine-messenger (symfony/doctrine-messenger)

`v7.4.20`

Compare Source

Changelog (symfony/doctrine-messenger@v7.4.19...v7.4.20)

bug #66264 Fix a doctrine/dbal 4.5 deprecation in DoctrinePostgreSqlFilterIntegrationTest (@nicolas-grekas)
bug #66223 Fix sub-second delays being lost by the Doctrine transport (@wimwinterberg)

`v7.4.19`

Compare Source

Changelog (symfony/doctrine-messenger@v7.4.18...v7.4.19)

bug #66034 Do not lose the signals raised while fetching (@nicolas-grekas)

`v7.4.18`

Compare Source

Changelog (symfony/doctrine-messenger@v7.4.15...v7.4.18)

minor #65724 Declare the polyfills needed by the code on PHP 7.2 (@nicolas-grekas)

`v7.4.15`

Compare Source

Changelog (symfony/doctrine-messenger@v7.4.14...v7.4.15)

bug #64917 Do not wrap the Doctrine transport keepalive in a transaction (@bendavies)

`v7.4.14`

Compare Source

Changelog (symfony/doctrine-messenger@v7.4.13...v7.4.14)

bug #64617 Restore compat with DBAL 4.5 (@nicolas-grekas)
bug #64588 Migrate table definitions to DBAL's TableEditor API (@nicolas-grekas)
bug #64389 Migrate configureSchema() to DBAL's editor API (@nicolas-grekas)

symfony/dotenv (symfony/dotenv)

`v7.4.18`

Compare Source

Changelog (symfony/dotenv@v7.4.15...v7.4.18)

minor #65724 Declare the polyfills needed by the code on PHP 7.2 (@nicolas-grekas)

`v7.4.15`

Compare Source

Changelog (symfony/dotenv@v7.4.14...v7.4.15)

bug #64971 Don't parse external env var values when resolving .env references (@nicolas-grekas)
bug #64895 Allow multiple underscores at start (@Sajito)

`v7.4.14`

Compare Source

Changelog (symfony/dotenv@v7.4.11...v7.4.14)

bug #64386 Don't truncate external env vars containing $ when referenced via ${...} indirection (@nicolas-grekas)

symfony/expression-language (symfony/expression-language)

`v7.4.18`

Compare Source

Changelog (symfony/expression-language@v7.4.14...v7.4.18)

minor #65724 Declare the polyfills needed by the code on PHP 7.2 (@nicolas-grekas)
bug #65690 Bound the nesting level of parsed expressions (@nicolas-grekas)

`v7.4.14`

Compare Source

Changelog (symfony/expression-language@v7.4.9...v7.4.14)

minor #64476 Unsafe unserialize phpstan rule (@jack-worman)

symfony/form (symfony/form)

`v7.4.20`

Compare Source

Changelog (symfony/form@v7.4.19...v7.4.20)

minor #66438 Review Dutch (nl) translations (@michelvelswijk)
minor #66363 Updating and improving Albanian translations (@gazi04)
minor #66225 Review Albanian translations (@gazi04)
minor #66312 Remove needs-review-translation state from Spanish translations (@abp002)
minor #66286 reviewed Polish translation unit 130 (@thunderer)
bug #66283 Stop using the deprecated any() matcher in ValidatorExtensionTrait (@mbabker)
minor #66259 Update Swedish translation #64518 (@H4wKs)
minor #66186 Review Brazilian Portuguese validator messages (@Kaemiemi)
minor #66205 Review Macedonian (mk) translations (@KalimeroMK)
bug #66164 Fix FormFlow creation, step fallback, backward navigation and reset (@yceruto)
minor #66163 Remove needs-review-translation flag for Russian validators (@theprogrammist)
minor #66147 translation: Serbian Translation of issues 66107,66108 (@Trysha-rbrn)
minor #66148 Review Indonesian translation for validators (@Yoruxyv)
minor #66139 Add missing Arabic translation for validation units (@EmanFateen)
minor #66128 Missing translations for Croatian (hr) (@gjuric)
minor #66115 Review Italian translation for validators (@GiuseppePuleri)
minor #66113 Review French translation for range bound validator (@rooneyi)

`v7.4.19`

Compare Source

Changelog (symfony/form@v7.4.18...v7.4.19)

minor #66060 Add the BoundsType compare message translation unit (@seb-jean)
bug #66041 Describe the options of a type extension registered on a type extension (@fabpot)
minor #65926 Review Romanian (ro) translations (@robertiulianstoica)
minor #65856 Review Catalan validator translations (@Victor-369)
bug #65780 Accept UTC-equivalent timezones for date and time model data (@ousamabenyounes)
minor #65756 Stop capturing Options in the upload_max_size_message closure (@bendavies)

`v7.4.18`

Compare Source

Changelog (symfony/form@v7.4.17...v7.4.18)

minor #65705 Fix Persian (fa) translations for Form and Validator components (@amirreza-khaleghverdi)
minor #65671 Review Dutch (nl) translations (@andrewo0)
minor #65646 Review translations for Estonian (et) (@erkia)

`v7.4.17`

Compare Source

Changelog (symfony/form@v7.4.16...v7.4.17)

bug #65584 Map violations to child forms named after the snake cased property (@nicolas-grekas)
bug #65538 Fix rendering and parsing dates before the Gregorian cutover (@nicolas-grekas)
bug #65530 Apply the configured rounding mode when no scale is set (@nicolas-grekas)
bug #65522 Do not inherit translation parameters for translatable labels and help messages (@nicolas-grekas)
bug #65479 Fix generating the CSRF token when the form attributes are replaced (@nicolas-grekas)
bug #65578 Apply the guessed "pattern" and "maxlength" attributes to the types rendered as text inputs (@nicolas-grekas)
bug #65505 Apply the guessed "pattern" and "maxlength" attributes to text inputs only (@nicolas-grekas)
bug #65478 Replace the {{ max }} placeholder in the post_max_size error message (@nicolas-grekas)
bug #65480 Fix the money pattern for locales that do not use ASCII digits (@nicolas-grekas)
bug #65367 Fix PHP 8.6 deprecations (@nicolas-grekas)

`v7.4.16`

Compare Source

Changelog (symfony/form@v7.4.15...v7.4.16)

bug #65184 Distinguish active_at from not_active_at in the CurrencyType choice list cache (@sadiqk2)
minor #65165 Added missing Slovak translations (@dtokos)
minor #65097 Review Lithuanian (lt) translations (@MariusVarna)

`v7.4.15`

Compare Source

Changelog (symfony/form@v7.4.14...v7.4.15)

minor #65000 Review Italian validator translations (@JJordan0C)
minor #64981 Review Turkish (tr) translations (@mmustafaAydogan)
minor #64950 Updated danish translations (@jekuaitk)
minor #64882 Finalize Urdu (ur) translations (@sadiqk2)
minor #64821 Review Bosnian (bs) translations (@pkranjcecx)
minor #64792 Review Brazilian Portuguese translations (@joao-ramajo)
minor #64784 Review Uzbek (uz) translations (@lazerg)
minor #64713 Update Chinese (zh-TW) translations (@Link1515)
minor #64737 Improve Croatian translations (@HypeMC)
minor #64755 Review Albanian translations (@gazi04)
minor #64742 review German translations (@xabbuh)

`v7.4.14`

Compare Source

Changelog (symfony/form@v7.4.9...v7.4.14)

data #64602 Review Hungarian translations (@antalaron)
data #64626 Ukrainian translation review and update (@VladyslavChernyshov)
data #64597 Review Indonesian (id) translations (@sawirricardo)
data #64607 Verify Tagalog (tl) validator strings and remove needs-… (@Jerdon07)
data #64578 Review Bulgarian (bg) translations (@moynzzz)
data #64564 Remove review state from Serbian translations (@Trysha-rbrn)
data #64565 Remove review state from Russian translations #64512 (@centaur-vova)
data #64551 reviewed Polish translation unit 129 (@thunderer)
data #64542 Update Spanish translations (@ThiagoMirandaLiotto)
data #64543 Review Croatian translations (@HypeMC)
data #64526 Review and correct Arabic translation (@ayyoub-afwallah)
minor #64524 Make tests compatible with PHPUnit 13.2 and Twig 3.28 (@nicolas-grekas)
bug #64424 Translate TranslatableInterface label in violation messages (@Amoifr)
data #64451 Add missing translation for invalid UUID (@jmsche)

symfony/framework-bundle (symfony/framework-bundle)

`v7.4.20`

Compare Source

Changelog (symfony/framework-bundle@v7.4.19...v7.4.20)

minor #66430 Fix the description of an empty webhook routing secret (@nicolas-grekas)
bug #66359 Disable HTTP/2 push on the default HTTP client (@Amoifr)
bug #66220 Fix DotenvVault corrupting a value that contains a back-reference (@lazerg)
bug #66137 Cache the serializer metadata in debug mode when it comes from mapping files (@nicolas-grekas)

`v7.4.19`

Compare Source

Changelog (symfony/framework-bundle@v7.4.18...v7.4.19)

bug #66027 Stop versioning the assets the mapper already resolved (@Amoifr)
bug #66003 Escape percent signs in kernel path parameters (@nicolas-grekas)
bug #65974 Fix the fatal when a cache pool cannot be cleared (@nicolas-grekas)
bug #65906 Fix configuring the S/MIME encrypter cipher (@nicolas-grekas)
bug #65889 Fix HTTP client request assertion matching (@X-Coder264)
bug #65890 Fix referencing "lock.factory" when no default lock resource is configured (@nicolas-grekas)
bug #65883 Fix the "framework.remote-event" config node being impossible to set (@nicolas-grekas)
minor #65762 Describe the webhook routing secret in the config reference (@nicolas-grekas)

`v7.4.18`

Compare Source

Changelog (symfony/framework-bundle@v7.4.17...v7.4.18)

minor #65724 Declare the polyfills needed by the code on PHP 7.2 (@nicolas-grekas)
bug #65637 Fix profiling a command stopped at ConsoleEvents::COMMAND (@Spomky)

`v7.4.17`

Compare Source

Changelog (symfony/framework-bundle@v7.4.16...v7.4.17)

bug #65533 Reject canceled scheduled messages so async transports do not redeliver them (@nicolas-grekas)
bug #65525 Fix lint:container skipping services matched by tagged iterators (@nicolas-grekas)
bug #65517 Fix dispatching console events after cache:clear (@nicolas-grekas)
bug #65483 Show the effective priority of tagged services in debug:container (@nicolas-grekas)
bug #65482 Fix ignored --raw option of debug:router (@nicolas-grekas)
bug #65481 Fix debug:config and config:dump-reference when a bundle registers services in its build method (@nicolas-grekas)
bug #65303 Do not leak the response body from assertResponseRedirects() when not verbose (@nicolas-grekas)
minor #65290 Tolerate a newer DependencyInjection InstanceofType shape in the reference fixture (@nicolas-grekas)
bug #65274 Avoid retaining messages without the profiler (@eissasoubhi)
bug #65278 Reset the notification logger listener between messages (@nicolas-grekas)
bug #65262 Include front controller in dev asset URLs (@eissasoubhi)

`v7.4.16`

Compare Source

Changelog (symfony/framework-bundle@v7.4.15...v7.4.16)

bug #65131 Fix "cache:clear" failing when the cache dir is rebuilt concurrently (@ousamabenyounes)

`v7.4.15`

Compare Source

Changelog (symfony/framework-bundle@v7.4.14...v7.4.15)

bug #64972 Reset the mapped asset factory between requests (@pokki-deploy)
bug #64751 Make WebTestCase enable web mode by default (@MatTheCat)
bug #64828 Add supported literal option not_found for imports..ignore_errors in services.schema and AppReference (@kaznovac)
bug #64831 Fix valkey cache adapters ignoring default_valkey_provider (@lazerg)
minor #64816 Allow Twig 4 (@xabbuh)
bug #64843 Fix table borders around colspan cells and header-less tables (@wazum)

`v7.4.14`

Compare Source

Changelog (symfony/framework-bundle@v7.4.13...v7.4.14)

minor #64694 Fix service _instanceof type (@philbates35)
minor #64647 Relax test assertions for generated _fragment URI (@nicolas-grekas)
bug #63800 Detect env placeholders in resolved route parameter values (@Amoifr)
bug #64566 Harden __toString trampolines via __unserialize() (@nicolas-grekas)
minor #64476 Unsafe unserialize phpstan rule (@jack-worman)
bug #64102 Remove usage of Kernel::VERSION (@fabpot)

`v7.4.13`

Compare Source

Changelog (symfony/framework-bundle@v7.4.11...v7.4.13)

bug #64348 Allow to pass doctrine_open_transaction_logger’s entity manager name positionally (@MatTheCat)
bug #64341 Harden default IP allowlist for Postmark and Brevo webhook parsers (@nicolas-grekas)
bug #64309 Sign transports for unrouted messages too (@nicolas-grekas)

symfony/http-client (symfony/http-client)

`v7.4.20`

Compare Source

Changelog (symfony/http-client@v7.4.19...v7.4.20)

bug #66266 Fix NativeHttpClient::stream() skipping responses not opened yet (@nicolas-grekas)
bug #66270 Don't reject highly compressed responses (@nicolas-grekas)
bug #66233 Don't set CURLOPT_WRITEFUNCTION from within the write callback (@nicolas-grekas)
bug #66080 Add missing non-routable ranges to NoPrivateNetworkHttpClient (@nicolas-grekas)

`v7.4.19`

Compare Source

Changelog (symfony/http-client@v7.4.18...v7.4.19)

bug #65914 Suppress warnings from failed DNS lookups (@Toflar)

`v7.4.18`

Compare Source

Changelog (symfony/http-client@v7.4.17...v7.4.18)

bug #65751 Reject decompression bombs ([@nico

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "after 6am every weekday"
Automerge
- "after 7am every weekday"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot force-pushed the renovate/symfony branch 6 times, most recently from a09045f to b83a618 Compare May 27, 2026 11:01

renovate Bot changed the title ~~Update symfony packages to v7.4.12~~ Update symfony packages to v7.4.13 May 27, 2026

renovate Bot force-pushed the renovate/symfony branch 3 times, most recently from 9549cf9 to e9ad05f Compare May 29, 2026 15:01

renovate Bot force-pushed the renovate/symfony branch from e9ad05f to b39e470 Compare July 26, 2026 01:08

renovate Bot changed the title ~~Update symfony packages to v7.4.13~~ Update symfony packages Jul 26, 2026

renovate Bot force-pushed the renovate/symfony branch 11 times, most recently from 6d39156 to 2bec42f Compare July 29, 2026 16:40

renovate Bot force-pushed the renovate/symfony branch 3 times, most recently from 6d9869e to f47f34c Compare August 7, 2026 21:10

renovate Bot force-pushed the renovate/symfony branch 2 times, most recently from e7763cd to b072c3d Compare August 22, 2026 19:54

renovate Bot force-pushed the renovate/symfony branch 2 times, most recently from 1900edb to 17c3c16 Compare August 30, 2026 02:16

renovate Bot force-pushed the renovate/symfony branch 5 times, most recently from a3db111 to ff843f7 Compare September 3, 2026 01:35

renovate Bot changed the title ~~Update symfony packages~~ Update symfony packages to v7.4.17 Sep 3, 2026

renovate Bot force-pushed the renovate/symfony branch from ff843f7 to 7747f52 Compare September 3, 2026 06:11

renovate Bot changed the title ~~Update symfony packages to v7.4.17~~ Update symfony packages Sep 3, 2026

renovate Bot force-pushed the renovate/symfony branch 19 times, most recently from a67b8cb to 5a63de7 Compare September 9, 2026 22:49

renovate Bot force-pushed the renovate/symfony branch from 5a63de7 to 89979b3 Compare September 20, 2026 01:00

Update symfony packages

79693a2

renovate Bot force-pushed the renovate/symfony branch from 89979b3 to 79693a2 Compare October 3, 2026 20:19

Navigation Menu

Update symfony packages - #230

Update symfony packages#230
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/symfony

renovate Bot commented May 20, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented May 20, 2026 •

edited

Loading