area51 Bump twig/twig from 3.10.3 to 3.11.1

Bumps twig/twig from 3.10.3 to 3.11.1.

Changelog

3.11.1 (2024-09-10)

Fix a security issue when an included sandboxed template has been loaded before without the sandbox context

3.11.0 (2024-08-08)

Add Twig\Cache\ChainCache and Twig\Cache\ReadOnlyFilesystemCache

Add the possibility to deprecate attributes and nodes on Node

Add the possibility to add a package and a version to the deprecated tag

Add the possibility to add a package for filter/function/test deprecations

Mark ConstantExpression as being @final

Add the find filter

Fix optimizer mode validation in OptimizerNodeVisitor

Add the possibility to yield from a generator in PrintNode

Add the shuffle filter

Add the singular and plural filters in StringExtension

Deprecate the second argument of Twig\Node\Expression\CallExpression::compileArguments()

Deprecate Twig\ExpressionParser\parseHashExpression() in favor of Twig\ExpressionParser::parseMappingExpression()

Deprecate Twig\ExpressionParser\parseArrayExpression() in favor of Twig\ExpressionParser::parseSequenceExpression()

Add sequence and mapping tests

Deprecate Twig\Node\Expression\NameExpression::isSimple() and Twig\Node\Expression\NameExpression::isSpecial()

Commits

ff063af Prepare the 3.11.1 release
41103dc Fix a security issue when an included sandboxed template has been loaded befo...
e80fb8e Prepare the 3.11.0 release
fe32121 Update CHANGELOG
0d524d3 feature #4182 Add the possibility to deprecate attributes and nodes on Node (...
18894cf Add the possibility to deprecate attributes and nodes on Node
90fbb9a feature #4183 Add support for package/version on deprecations (fabpot)
0ce79df Use trigger_deprecation() instead of trigger_error() for deprecations
839da16 Tweak docs
9252578 minor #4181 clarify that macros shadow other macros/functions (xabbuh)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

Sep 10 '24 17:09 dependabot[bot]

composer.lock

Package changes

Package	Operation	From	To	About
symfony/polyfill-php81	add	-	v1.31.0	view code - License: MIT License
symfony/polyfill-ctype	upgrade	v1.29.0	v1.31.0	diff
symfony/polyfill-mbstring	upgrade	v1.29.0	v1.31.0	diff
symfony/polyfill-php80	upgrade	v1.29.0	v1.31.0	diff
twig/twig	upgrade	v3.10.3 :warning:	v3.11.1 :warning:	diff

Settings · Docs · Powered by Private Packagist

Sep 10 '24 17:09 private-packagist[bot]

Superseded by #121.

Nov 06 '24 20:11 dependabot[bot]