Skip to content

Bump the composer-non-major group with 7 updates - #10

Closed
dependabot[bot] wants to merge 1 commit into
1.0from
dependabot/composer/composer-non-major-c04fc22913
Closed

dependabot[bot] wants to merge 1 commit into
1.0from
dependabot/composer/composer-non-major-c04fc22913

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the composer-non-major group with 7 updates:

Package From To
symfony/expression-language 8.1.1 8.1.6
symfony/form 8.1.5 8.1.6
symfony/framework-bundle 8.1.5 8.1.6
symfony/http-client 8.1.5 8.1.6
symfony/security-bundle 8.1.2 8.1.6
symfony/validator 8.1.5 8.1.6
symfony/yaml 8.1.5 8.1.6

Updates symfony/expression-language from 8.1.1 to 8.1.6

Release notes

Sourced from symfony/expression-language's releases.

v8.1.6

Changelog (symfony/expression-language@v8.1.1...v8.1.6)

Commits
  • bda5b15 Merge branch '7.4' into 8.1
  • b738665 Merge branch '6.4' into 7.4
  • 91edabb Merge branch '5.4' into 6.4
  • 5a4915a [ExpressionLanguage] Bound the nesting level of parsed expressions
  • 87b505f Merge branch '7.4' into 8.1
  • 517821b Check arrays and bools directly instead of comparing them to count()/true/fal...
  • 16e3473 Merge branch '7.4' into 8.1
  • 92c24e8 Merge branch '6.4' into 7.4
  • d033441 Check arrays and bools directly instead of comparing them to count()/true/fal...
  • See full diff in compare view

Updates symfony/form from 8.1.5 to 8.1.6

Release notes

Sourced from symfony/form's releases.

v8.1.6

Changelog (symfony/form@v8.1.5...v8.1.6)

Commits
  • fa484bd Merge branch '7.4' into 8.1
  • 14bbbc3 Merge branch '6.4' into 7.4
  • 0381045 [Translation] Fix Persian (fa) translations for Form and Validator components
  • d8a406f Merge branch '7.4' into 8.1
  • c9c56d5 Merge branch '6.4' into 7.4
  • 395b2a7 [Form][Validator] Review Dutch (nl) translations
  • 35913c9 Review translations for Estonian (et)
  • See full diff in compare view

Updates symfony/framework-bundle from 8.1.5 to 8.1.6

Release notes

Sourced from symfony/framework-bundle's releases.

v8.1.6

Changelog (symfony/framework-bundle@v8.1.5...v8.1.6)

Commits
  • 18ea259 Merge branch '7.4' into 8.1
  • 45d6d66 Merge branch '6.4' into 7.4
  • a19f20a Merge branch '5.4' into 6.4
  • af61a85 Revert "Give the Redis test probes an explicit connect timeout"
  • 608e729 Merge branch '7.4' into 8.1
  • 859a180 Merge branch '6.4' into 7.4
  • c658a54 Merge branch '5.4' into 6.4
  • 7179635 Give the Redis test probes an explicit connect timeout
  • 530edfd Declare the polyfills needed by the code on PHP 7.2
  • f7e55a4 Merge branch '7.4' into 8.1
  • Additional commits viewable in compare view

Updates symfony/http-client from 8.1.5 to 8.1.6

Release notes

Sourced from symfony/http-client's releases.

v8.1.6

Changelog (symfony/http-client@v8.1.5...v8.1.6)

Commits
  • fe91dd1 Merge branch '7.4' into 8.1
  • 68d81f7 Merge branch '6.4' into 7.4
  • 149b874 Merge branch '5.4' into 6.4
  • 2dc660c [HttpClient] Reject decompression bombs
  • 5015ded [HttpClient] Reject https:// proxies that curl would connect to in cleartext
  • 18b514e bug #65731 [HttpClient] Don't send the original Host header on cross-authorit...
  • faeff94 [HttpClient] Reject 3xx pushed responses
  • 9952de7 [HttpClient] Don't send the original Host header on cross-authority redirects
  • c2033b4 Merge branch '7.4' into 8.1
  • 8471df5 Merge branch '6.4' into 7.4
  • Additional commits viewable in compare view

Updates symfony/security-bundle from 8.1.2 to 8.1.6

Release notes

Sourced from symfony/security-bundle's releases.

v8.1.6

Changelog (symfony/security-bundle@v8.1.2...v8.1.6)

Commits
  • b5830ac Merge branch '7.4' into 8.1
  • caaa8b9 [Security] Stop calling the APIs that web-token/jwt-framework 4.3 deprecates
  • 4bd12b7 Merge branch '7.4' into 8.1
  • e9b3f2b Merge branch '6.4' into 7.4
  • de06cd0 [SecurityBundle] Un-skip the explicit lock factory login throttling test
  • da7eb83 Merge branch '7.4' into 8.1
  • 524649d Merge branch '6.4' into 7.4
  • 7984320 Merge branch '5.4' into 6.4
  • 06c3aba [SecurityBundle] Use a lock for login throttling by default
  • 7b0c144 [SecurityBundle] Make the remember-me cookie follow the session cookie defaults
  • Additional commits viewable in compare view

Updates symfony/validator from 8.1.5 to 8.1.6

Release notes

Sourced from symfony/validator's releases.

v8.1.6

Changelog (symfony/validator@v8.1.5...v8.1.6)

Commits
  • 597f234 Merge branch '7.4' into 8.1
  • 976bd87 Merge branch '6.4' into 7.4
  • 8acf2af Merge branch '5.4' into 6.4
  • d7306fd Merge branch '5.4' into 6.4
  • c9ac623 [Validator] Remove the test that depends on the ExpressionLanguage nesting limit
  • e734df4 [Translation] Fix Persian (fa) translations for Form and Validator components
  • 3c6593d [Validator] Review and finalize Indonesian (id) translation messages
  • 920f591 Merge branch '7.4' into 8.1
  • 17fe0a1 Merge branch '6.4' into 7.4
  • 756423a [ExpressionLanguage] Bound the nesting level of parsed expressions
  • Additional commits viewable in compare view

Updates symfony/yaml from 8.1.5 to 8.1.6

Release notes

Sourced from symfony/yaml's releases.

v8.1.6

Changelog (symfony/yaml@v8.1.5...v8.1.6)

Commits
  • 0b4aa53 Merge branch '7.4' into 8.1
  • 4cef939 Merge branch '6.4' into 7.4
  • a778aba Merge branch '5.4' into 6.4
  • b1903f4 Merge branch '7.4' into 8.1
  • f0e9861 Merge branch '6.4' into 7.4
  • 12c6b4f [Yaml] Bound recursion depth in the inline lexer
  • 7b18a2a [Yaml] Quote strings that look like octal numbers when dumping
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the composer-non-major group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [symfony/expression-language](https://github.com/symfony/expression-language) | `8.1.1` | `8.1.6` |
| [symfony/form](https://github.com/symfony/form) | `8.1.5` | `8.1.6` |
| [symfony/framework-bundle](https://github.com/symfony/framework-bundle) | `8.1.5` | `8.1.6` |
| [symfony/http-client](https://github.com/symfony/http-client) | `8.1.5` | `8.1.6` |
| [symfony/security-bundle](https://github.com/symfony/security-bundle) | `8.1.2` | `8.1.6` |
| [symfony/validator](https://github.com/symfony/validator) | `8.1.5` | `8.1.6` |
| [symfony/yaml](https://github.com/symfony/yaml) | `8.1.5` | `8.1.6` |


Updates `symfony/expression-language` from 8.1.1 to 8.1.6
- [Release notes](https://github.com/symfony/expression-language/releases)
- [Changelog](https://github.com/symfony/expression-language/blob/8.2/CHANGELOG.md)
- [Commits](symfony/expression-language@v8.1.1...v8.1.6)

Updates `symfony/form` from 8.1.5 to 8.1.6
- [Release notes](https://github.com/symfony/form/releases)
- [Changelog](https://github.com/symfony/form/blob/8.2/CHANGELOG.md)
- [Commits](symfony/form@v8.1.5...v8.1.6)

Updates `symfony/framework-bundle` from 8.1.5 to 8.1.6
- [Release notes](https://github.com/symfony/framework-bundle/releases)
- [Changelog](https://github.com/symfony/framework-bundle/blob/8.2/CHANGELOG.md)
- [Commits](symfony/framework-bundle@v8.1.5...v8.1.6)

Updates `symfony/http-client` from 8.1.5 to 8.1.6
- [Release notes](https://github.com/symfony/http-client/releases)
- [Changelog](https://github.com/symfony/http-client/blob/8.2/CHANGELOG.md)
- [Commits](symfony/http-client@v8.1.5...v8.1.6)

Updates `symfony/security-bundle` from 8.1.2 to 8.1.6
- [Release notes](https://github.com/symfony/security-bundle/releases)
- [Changelog](https://github.com/symfony/security-bundle/blob/8.2/CHANGELOG.md)
- [Commits](symfony/security-bundle@v8.1.2...v8.1.6)

Updates `symfony/validator` from 8.1.5 to 8.1.6
- [Release notes](https://github.com/symfony/validator/releases)
- [Changelog](https://github.com/symfony/validator/blob/8.2/CHANGELOG.md)
- [Commits](symfony/validator@v8.1.5...v8.1.6)

Updates `symfony/yaml` from 8.1.5 to 8.1.6
- [Release notes](https://github.com/symfony/yaml/releases)
- [Changelog](https://github.com/symfony/yaml/blob/8.2/CHANGELOG.md)
- [Commits](symfony/yaml@v8.1.5...v8.1.6)

---
updated-dependencies:
- dependency-name: symfony/expression-language
  dependency-version: 8.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: symfony/form
  dependency-version: 8.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: symfony/framework-bundle
  dependency-version: 8.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: symfony/http-client
  dependency-version: 8.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: symfony/security-bundle
  dependency-version: 8.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: symfony/validator
  dependency-version: 8.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: symfony/yaml
  dependency-version: 8.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Sep 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 15, 2026
@dependabot
dependabot Bot deleted the dependabot/composer/composer-non-major-c04fc22913 branch September 15, 2026 04:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants