Skip to content

chore(deps): bump the symfony group with 16 updates - #407

Merged
froozeify merged 1 commit into
mainfrom
dependabot/composer/symfony-1fa7904aeb
Oct 18, 2026
Merged

froozeify merged 1 commit into
mainfrom
dependabot/composer/symfony-1fa7904aeb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the symfony group with 16 updates:

Package From To
symfony/console 8.1.8 8.1.9
symfony/doctrine-messenger 8.1.8 8.1.9
symfony/expression-language 8.1.6 8.1.9
symfony/filesystem 8.1.6 8.1.9
symfony/framework-bundle 8.1.8 8.1.9
symfony/http-foundation 8.1.8 8.1.9
symfony/http-kernel 8.1.8 8.1.9
symfony/lock 8.1.8 8.1.9
symfony/messenger 8.1.8 8.1.9
symfony/psr-http-message-bridge 8.1.0 8.1.9
symfony/routing 8.1.8 8.1.9
symfony/runtime 8.1.0 8.1.9
symfony/security-core 8.1.8 8.1.9
symfony/serializer 8.1.8 8.1.9
symfony/twig-bundle 8.1.7 8.1.9
symfony/yaml 8.1.8 8.1.9

Updates symfony/console from 8.1.8 to 8.1.9

Release notes

Sourced from symfony/console's releases.

v8.1.9

Changelog (symfony/console@v8.1.8...v8.1.9)

Commits
  • 630e741 Merge branch '7.4' into 8.1
  • 21f1bc2 [Console] Fix the usages of invokable commands registered as services
  • c367a67 [Console] Use the clock to resolve relative dates in DateTimeValueResolver
  • 0a2a20e Merge branch '7.4' into 8.1
  • ac3d93e Merge branch '6.4' into 7.4
  • c9c4cf6 [Console] Build the lazy signal listeners before a signal can interrupt an au...
  • 61c34aa [Console] Fix variadic arguments and options typed with a backed enum, a uid ...
  • c340e2d Merge branch '7.4' into 8.1
  • 2759090 Merge branch '6.4' into 7.4
  • 051e665 [String] Fix the width of emoji sequences and conjoining Hangul jamo
  • See full diff in compare view

Updates symfony/doctrine-messenger from 8.1.8 to 8.1.9

Release notes

Sourced from symfony/doctrine-messenger's releases.

v8.1.9

Changelog (symfony/doctrine-messenger@v8.1.8...v8.1.9)

  • bug #66825 Fix PostgreSqlNotifyOnIdleListener missing delayed messages when the timezone is ahead of UTC (@​nicolas-grekas)
  • bug #66549 Fix the Doctrine transport masking commit failures (@​lazerg)
Commits
  • 752f76a [Messenger] Fix the tests of PostgreSqlNotifyOnIdleListener on DBAL 4.6
  • f943df7 [Messenger] Fix PostgreSqlNotifyOnIdleListener missing delayed messages whe...
  • e1f4f65 Merge branch '7.4' into 8.1
  • 512464b Merge branch '6.4' into 7.4
  • 00113d8 [Messenger] Fix the Doctrine transport masking commit failures
  • See full diff in compare view

Updates symfony/expression-language from 8.1.6 to 8.1.9

Release notes

Sourced from symfony/expression-language's releases.

v8.1.9

Changelog (symfony/expression-language@v8.1.6...v8.1.9)

Commits
  • 9c2729b Merge branch '7.4' into 8.1
  • 51c5281 Merge branch '6.4' into 7.4
  • 4a38ae0 [ExpressionLanguage] Fix discrepancies between evaluated and compiled express...
  • 9bd3f66 Merge branch '7.4' into 8.1
  • 07f404e Merge branch '6.4' into 7.4
  • 7f597ea Merge branch '5.4' into 6.4
  • f371786 bug #66723 [ExpressionLanguage] Bound the depth of the parsed node tree (nico...
  • 7dcd26f [ExpressionLanguage] Bound the depth of the parsed node tree
  • f91c9d1 [ExpressionLanguage] Fix nesting level of chained ternaries
  • 76b4736 Merge branch '7.4' into 8.1
  • Additional commits viewable in compare view

Updates symfony/filesystem from 8.1.6 to 8.1.9

Release notes

Sourced from symfony/filesystem's releases.

v8.1.9

Changelog (symfony/filesystem@v8.1.6...v8.1.9)

Commits

Updates symfony/framework-bundle from 8.1.8 to 8.1.9

Release notes

Sourced from symfony/framework-bundle's releases.

v8.1.9

Changelog (symfony/framework-bundle@v8.1.8...v8.1.9)

Commits
  • 57a5af0 Merge branch '7.4' into 8.1
  • 62b38e9 Merge branch '6.4' into 7.4
  • 53c3853 [FrameworkBundle] Fix the "Cannot unset string offsets" crash in the configur...
  • eeb820c Merge branch '7.4' into 8.1
  • 9e40099 [FrameworkBundle] Test the meta files written by the JsonStreamer cache warme...
  • c548d17 [FrameworkBundle] Inject the clock into comparison and range validators
  • 6e40007 Merge branch '7.4' into 8.1
  • 68669a0 Merge branch '6.4' into 7.4
  • f14e6b1 [FrameworkBundle] Don't let Monolog override php_errors.log: false
  • cd3bdfa Merge branch '7.4' into 8.1
  • Additional commits viewable in compare view

Updates symfony/http-foundation from 8.1.8 to 8.1.9

Release notes

Sourced from symfony/http-foundation's releases.

v8.1.9

Changelog (symfony/http-foundation@v8.1.8...v8.1.9)

Commits
  • 7850897 Merge branch '7.4' into 8.1
  • 58c8914 Merge branch '6.4' into 7.4
  • b1721ca [HttpFoundation] Don't warn about request input keys nested too deeply
  • c05fe6f Merge branch '7.4' into 8.1
  • 2475130 [HttpFoundation] Send the RFC 10036 Incremental header from EventStreamResponse
  • fa4ba6b Merge branch '7.4' into 8.1
  • 90b39b8 Merge branch '6.4' into 7.4
  • 9ade8f6 [HttpFoundation] Report Predis error replies as failed session reads
  • 5ae495d [HttpFoundation] Keep the session ID when the session handler fails to read
  • f6aef0a Merge branch '7.4' into 8.1
  • Additional commits viewable in compare view

Updates symfony/http-kernel from 8.1.8 to 8.1.9

Release notes

Sourced from symfony/http-kernel's releases.

v8.1.9

Changelog (symfony/http-kernel@v8.1.8...v8.1.9)

Commits
  • 55c6935 Update VERSION for 8.1.9
  • d43ebbe Merge branch '7.4' into 8.1
  • 4298878 Merge branch '6.4' into 7.4
  • e940711 [HttpKernel] Use the clock to resolve relative dates in DateTimeValueResolver
  • 9fda36e Merge branch '7.4' into 8.1
  • 0ff229e Merge branch '6.4' into 7.4
  • 6a24919 [HttpKernel] Do not trace StreamedResponse and BinaryFileResponse as stored i...
  • 1be0b3c [HttpKernel] Allow using #[Serialize] on controller classes
  • 07e5993 Merge branch '7.4' into 8.1
  • 1913ace Merge branch '6.4' into 7.4
  • Additional commits viewable in compare view

Updates symfony/lock from 8.1.8 to 8.1.9

Release notes

Sourced from symfony/lock's releases.

v8.1.9

Changelog (symfony/lock@v8.1.8...v8.1.9)

Commits
  • 2b3f8c2 Merge branch '7.4' into 8.1
  • a349566 [Lock] Release the locks that the store tests leave behind
  • 940fe68 Merge branch '7.4' into 8.1
  • 4f2f0c8 Merge branch '6.4' into 7.4
  • bb18c2a [Lock] Use constant key names in the tests of failed promotions
  • 2febf65 bug #66604 [Lock] Fix auto-release after a failed promotion or demotion (nico...
  • 6ac56ee [Lock] Fix auto-release after a failed promotion or demotion
  • 9eb4947 [Lock] Fix the PostgreSQL stores losing track of a lock after a failed promot...
  • 4a40f09 [Lock] Fix FlockStore keeping a closed handle after a failed promotion
  • 08dcfe9 Merge branch '7.4' into 8.1
  • Additional commits viewable in compare view

Updates symfony/messenger from 8.1.8 to 8.1.9

Release notes

Sourced from symfony/messenger's releases.

v8.1.9

Changelog (symfony/messenger@v8.1.8...v8.1.9)

Commits
  • 10cd7a8 [Messenger] Restore two assertions of SigningSerializerTest
  • d6ef56d Merge branch '7.4' into 8.1
  • 9eac56e [Messenger] Fix PhpSerializer::getMessageType() when a stamp holds the message
  • 45f5e49 [Messenger] do not treat ack failures as handling failures
  • 42655c2 Merge branch '7.4' into 8.1
  • e765a25 Merge branch '6.4' into 7.4
  • 406bce3 Merge branch '5.4' into 6.4
  • 1787d89 [Messenger] Fix losing delayed messages when retrying the message that dispat...
  • 9c5033f [Messenger] Add the default stamps of a message to its replayed decoding failure
  • 0c1efcd [Messenger] Drop non-sendable stamps when decoding instead of rejecting the m...
  • Additional commits viewable in compare view

Updates symfony/psr-http-message-bridge from 8.1.0 to 8.1.9

Release notes

Sourced from symfony/psr-http-message-bridge's releases.

v8.1.9

Changelog (symfony/psr-http-message-bridge@v8.1.0...v8.1.9)

Commits
  • cfa8f3a Merge branch '7.4' into 8.1
  • b05964a Merge branch '6.4' into 7.4
  • 6bd9a17 [PsrHttpMessageBridge] use the empty string instead of null as an array offset
  • 0de2028 Merge branch '8.0' into 8.1
  • 3a45cad Merge branch '7.4' into 8.0
  • ae0d2e3 Merge branch '6.4' into 7.4
  • cad2ce0 Drop PR warning and auto-closing on subtree splits
  • See full diff in compare view

Updates symfony/routing from 8.1.8 to 8.1.9

Release notes

Sourced from symfony/routing's releases.

v8.1.9

Changelog (symfony/routing@v8.1.8...v8.1.9)

Commits
  • edb06fb Merge branch '7.4' into 8.1
  • 7a344cf [Routing] Align the JSON schema of route files with what the YAML loader accepts
  • See full diff in compare view

Updates symfony/runtime from 8.1.0 to 8.1.9

Release notes

Sourced from symfony/runtime's releases.

v8.1.9

Changelog (symfony/runtime@v8.1.0...v8.1.9)

Commits
  • 8670c7b Merge branch '7.4' into 8.1
  • e3ca615 [Runtime] Fix leaked server globals in FrankenPHP worker test
  • 8d544b5 Merge branch '8.0' into 8.1
  • a1319f8 Merge branch '7.4' into 8.0
  • 15497f7 Merge branch '6.4' into 7.4
  • b0eb951 Drop PR warning and auto-closing on subtree splits
  • See full diff in compare view

Updates symfony/security-core from 8.1.8 to 8.1.9

Release notes

Sourced from symfony/security-core's releases.

v8.1.9

Changelog (symfony/security-core@v8.1.8...v8.1.9)

Commits

Updates symfony/serializer from 8.1.8 to 8.1.9

Release notes

Sourced from symfony/serializer's releases.

v8.1.9

Changelog (symfony/serializer@v8.1.8...v8.1.9)

  • bug #66862 Rebuild the container when attributes on non-public members change (@​nicolas-grekas)
  • bug #66589 Fix normalizers and encoders defined as child definitions for a named serializer (@​HypeMC)
Commits
  • bc6f84d Merge branch '7.4' into 8.1
  • 2966bc5 [Serializer][Validator] Fix tests on Windows
  • d688ee6 [Serializer][Validator] Rebuild the container when attributes on non-public m...
  • 3d39ec2 Merge branch '7.4' into 8.1
  • 1476013 [Serializer] Fix normalizers and encoders defined as child definitions for a ...
  • See full diff in compare view

Updates symfony/twig-bundle from 8.1.7 to 8.1.9

Release notes

Sourced from symfony/twig-bundle's releases.

v8.1.9

Changelog (symfony/twig-bundle@v8.1.7...v8.1.9)

Commits
  • 127b678 Merge branch '7.4' into 8.1
  • 9915861 Merge branch '6.4' into 7.4
  • 031fe10 [TwigBundle] Sort the templates listed by TemplateIterator
  • See full diff in compare view

Updates symfony/yaml from 8.1.8 to 8.1.9

Release notes

Sourced from symfony/yaml's releases.

v8.1.9

Changelog (symfony/yaml@v8.1.8...v8.1.9)

Commits
  • 6107ee2 Merge branch '7.4' into 8.1
  • 0449079 Merge branch '6.4' into 7.4
  • 91288fd [Yaml] Fix parsing timestamps with a fractional second before 1970
  • ec06f7d [Yaml] Throw a ParseException on keys starting with a NUL byte when parsing m...
  • 39f073d Merge branch '7.4' into 8.1
  • 7214731 Merge branch '6.4' into 7.4
  • ae84b81 [Yaml] Fold trailing and leading white space of multi-line quoted scalars
  • fb7cdf9 Merge branch '7.4' into 8.1
  • 05d17f9 Merge branch '6.4' into 7.4
  • ba63f03 [Yaml] Do not treat quoted << keys as merge keys
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the symfony group with 16 updates:

| Package | From | To |
| --- | --- | --- |
| [symfony/console](https://github.com/symfony/console) | `8.1.8` | `8.1.9` |
| [symfony/doctrine-messenger](https://github.com/symfony/doctrine-messenger) | `8.1.8` | `8.1.9` |
| [symfony/expression-language](https://github.com/symfony/expression-language) | `8.1.6` | `8.1.9` |
| [symfony/filesystem](https://github.com/symfony/filesystem) | `8.1.6` | `8.1.9` |
| [symfony/framework-bundle](https://github.com/symfony/framework-bundle) | `8.1.8` | `8.1.9` |
| [symfony/http-foundation](https://github.com/symfony/http-foundation) | `8.1.8` | `8.1.9` |
| [symfony/http-kernel](https://github.com/symfony/http-kernel) | `8.1.8` | `8.1.9` |
| [symfony/lock](https://github.com/symfony/lock) | `8.1.8` | `8.1.9` |
| [symfony/messenger](https://github.com/symfony/messenger) | `8.1.8` | `8.1.9` |
| [symfony/psr-http-message-bridge](https://github.com/symfony/psr-http-message-bridge) | `8.1.0` | `8.1.9` |
| [symfony/routing](https://github.com/symfony/routing) | `8.1.8` | `8.1.9` |
| [symfony/runtime](https://github.com/symfony/runtime) | `8.1.0` | `8.1.9` |
| [symfony/security-core](https://github.com/symfony/security-core) | `8.1.8` | `8.1.9` |
| [symfony/serializer](https://github.com/symfony/serializer) | `8.1.8` | `8.1.9` |
| [symfony/twig-bundle](https://github.com/symfony/twig-bundle) | `8.1.7` | `8.1.9` |
| [symfony/yaml](https://github.com/symfony/yaml) | `8.1.8` | `8.1.9` |


Updates `symfony/console` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/symfony/console/releases)
- [Changelog](https://github.com/symfony/console/blob/8.2/CHANGELOG.md)
- [Commits](symfony/console@v8.1.8...v8.1.9)

Updates `symfony/doctrine-messenger` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/symfony/doctrine-messenger/releases)
- [Changelog](https://github.com/symfony/doctrine-messenger/blob/8.2/CHANGELOG.md)
- [Commits](symfony/doctrine-messenger@v8.1.8...v8.1.9)

Updates `symfony/expression-language` from 8.1.6 to 8.1.9
- [Release notes](https://github.com/symfony/expression-language/releases)
- [Changelog](https://github.com/symfony/expression-language/blob/8.2/CHANGELOG.md)
- [Commits](symfony/expression-language@v8.1.6...v8.1.9)

Updates `symfony/filesystem` from 8.1.6 to 8.1.9
- [Release notes](https://github.com/symfony/filesystem/releases)
- [Changelog](https://github.com/symfony/filesystem/blob/8.2/CHANGELOG.md)
- [Commits](symfony/filesystem@v8.1.6...v8.1.9)

Updates `symfony/framework-bundle` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/symfony/framework-bundle/releases)
- [Changelog](https://github.com/symfony/framework-bundle/blob/8.2/CHANGELOG.md)
- [Commits](symfony/framework-bundle@v8.1.8...v8.1.9)

Updates `symfony/http-foundation` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/symfony/http-foundation/releases)
- [Changelog](https://github.com/symfony/http-foundation/blob/8.2/CHANGELOG.md)
- [Commits](symfony/http-foundation@v8.1.8...v8.1.9)

Updates `symfony/http-kernel` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/symfony/http-kernel/releases)
- [Changelog](https://github.com/symfony/http-kernel/blob/8.2/CHANGELOG.md)
- [Commits](symfony/http-kernel@v8.1.8...v8.1.9)

Updates `symfony/lock` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/symfony/lock/releases)
- [Changelog](https://github.com/symfony/lock/blob/8.2/CHANGELOG.md)
- [Commits](symfony/lock@v8.1.8...v8.1.9)

Updates `symfony/messenger` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/symfony/messenger/releases)
- [Changelog](https://github.com/symfony/messenger/blob/8.2/CHANGELOG.md)
- [Commits](symfony/messenger@v8.1.8...v8.1.9)

Updates `symfony/psr-http-message-bridge` from 8.1.0 to 8.1.9
- [Release notes](https://github.com/symfony/psr-http-message-bridge/releases)
- [Changelog](https://github.com/symfony/psr-http-message-bridge/blob/8.2/CHANGELOG.md)
- [Commits](symfony/psr-http-message-bridge@v8.1.0...v8.1.9)

Updates `symfony/routing` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/symfony/routing/releases)
- [Changelog](https://github.com/symfony/routing/blob/8.2/CHANGELOG.md)
- [Commits](symfony/routing@v8.1.8...v8.1.9)

Updates `symfony/runtime` from 8.1.0 to 8.1.9
- [Release notes](https://github.com/symfony/runtime/releases)
- [Changelog](https://github.com/symfony/runtime/blob/8.2/CHANGELOG.md)
- [Commits](symfony/runtime@v8.1.0...v8.1.9)

Updates `symfony/security-core` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/symfony/security-core/releases)
- [Changelog](https://github.com/symfony/security-core/blob/8.2/CHANGELOG.md)
- [Commits](symfony/security-core@v8.1.8...v8.1.9)

Updates `symfony/serializer` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/symfony/serializer/releases)
- [Changelog](https://github.com/symfony/serializer/blob/8.2/CHANGELOG.md)
- [Commits](symfony/serializer@v8.1.8...v8.1.9)

Updates `symfony/twig-bundle` from 8.1.7 to 8.1.9
- [Release notes](https://github.com/symfony/twig-bundle/releases)
- [Changelog](https://github.com/symfony/twig-bundle/blob/8.2/CHANGELOG.md)
- [Commits](symfony/twig-bundle@v8.1.7...v8.1.9)

Updates `symfony/yaml` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/symfony/yaml/releases)
- [Changelog](https://github.com/symfony/yaml/blob/8.2/CHANGELOG.md)
- [Commits](symfony/yaml@v8.1.8...v8.1.9)

---
updated-dependencies:
- dependency-name: symfony/console
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/doctrine-messenger
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/expression-language
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/filesystem
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/framework-bundle
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/http-foundation
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/http-kernel
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/lock
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/messenger
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/psr-http-message-bridge
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/routing
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/runtime
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/security-core
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/serializer
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/twig-bundle
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
- dependency-name: symfony/yaml
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

Copy link
Copy Markdown
Contributor

✅ PHPUnit Summary

Tests: 566, Assertions: 2258, Skipped: 1.
Time: 05:15.796, Memory: 50.50 MB

✅ No PHPUnit Deprecations Found

@froozeify
froozeify merged commit cbefa0c into main Oct 18, 2026
4 checks passed
@froozeify
froozeify deleted the dependabot/composer/symfony-1fa7904aeb branch October 18, 2026 12:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant