🚨 [Conductor] Security update symfony/http-foundation to v5.4.48

[private-packagist]

This PR was automatically generated by Conductor.

The PR contains the changes generated by running the following command:

composer update --with-all-dependencies --minimal-changes symfony/http-foundation:v5.4.48

Changelog

symfony/http-foundation (Source: GitHub Releases))

v5.4.48

Changelog (v5.4.47...v5.4.48)

• bug symfony/symfony#58836 Work around parse_url() bug (bis) (@​nicolas-grekas)

v5.4.46

Changelog (v5.4.45...v5.4.46)

• security symfony/symfony#cve-2024-50345 [HttpFoundation] Reject URIs that contain invalid characters (@​nicolas-grekas)

v5.4.45

Changelog (v5.4.44...v5.4.45)

• bug symfony/symfony#58619 [HttpFoundation][Lock] Ensure compatibility with ext-mongodb v2 (@​GromNaN)

v5.4.44

Changelog (v5.4.43...v5.4.44)

• bug symfony/symfony#58181 [HttpFoundation] Update links for X-Accel-Redirect and fail properly when X-Accel-Mapping is missing (@​nicolas-grekas)
• bug symfony/symfony#58218 Work around parse_url() bug (@​nicolas-grekas)

v5.4.42

Changelog (v5.4.41...v5.4.42)

• bug symfony/symfony#57585 [HttpFoundation] Fix MockArraySessionStorage to generate more conform ids (@​Seldaek)

v5.4.40

Changelog (v5.4.39...v5.4.40)

• bug symfony/symfony#54910 [HttpFoundation]  filter out empty HTTP header parts (@​xabbuh)
• bug symfony/symfony#54816 [Cache] Fix support for predis/predis:^2.0 (@​mfettig)

v5.4.39

Changelog (v5.4.38...v5.4.39)

• bug symfony/symfony#54506 [HttpFoundation] Set content-type header in RedirectResponse (@​smnandre)

v5.4.38

Changelog (v5.4.37...v5.4.38)

• no significant changes

v5.4.35

Changelog (v5.4.34...v5.4.35)

• bug symfony/symfony#53432 [HttpFoundation] Request without content-type or content-length header should result in null values, not empty strings (@​priyadi)

v5.4.34

Changelog (v5.4.33...v5.4.34)

• no significant changes

v5.4.32

Changelog (v5.4.31...v5.4.32)

• bug symfony/symfony#52459 [Cache][HttpFoundation][Lock] Fix PDO store not creating table + add tests (@​HypeMC)

v5.4.31

Changelog (v5.4.30...v5.4.31)

• bug symfony/symfony#52474 [HttpFoundation] ensure string type with mbstring func overloading enabled (@​xabbuh)
• bug symfony/symfony#52457 [Cache][HttpFoundation][Lock] Fix empty username/password for PDO PostgreSQL (@​HypeMC)
• bug symfony/symfony#52444 Remove full DSNs from exception messages (@​nicolas-grekas)

v5.4.30

Changelog (v5.4.29...v5.4.30)

• no significant changes

v5.4.28

Changelog (v5.4.27...v5.4.28)

• bug symfony/symfony#51424 [HttpFoundation] Fix base URI detection on IIS with UrlRewriteModule (@​derrabus)

v5.4.26

Changelog (v5.4.25...v5.4.26)

• bug symfony/symfony#51031 Fix deprecations on PHP 8.3 (@​nicolas-grekas)

v5.4.25

Changelog (v5.4.24...v5.4.25)

• bug symfony/symfony#50524 Fix Doctrine deprecations (@​nicolas-grekas)

v5.4.24

Changelog (v5.4.23...v5.4.24)

• bug symfony/symfony#50315 [Translation] Fix handling of null messages in ArrayLoader (@​rob006)
• bug symfony/symfony#50338 [Console] Remove exec and replace it by shell_exec (@​maxbeckers)
• bug symfony/symfony#50362 [FrameworkBundle] Fix Workflow without a marking store definition uses marking store definition of previously defined workflow (@​krciga22)
• bug symfony/symfony#50309 [HttpFoundation] UrlHelper is now aware of RequestContext changes (@​giosh94mhz)
• bug symfony/symfony#50309 [HttpFoundation] UrlHelper is now aware of RequestContext changes (@​giosh94mhz)
• bug symfony/symfony#49063 [Messenger] Respect isRetryable decision of the retry strategy for re-delivery (@​FlyingDR)
• bug symfony/symfony#50266 [HttpFoundation] Fix file streaming after connection aborted (@​rlshukhov)
• bug symfony/symfony#49557 [PropertyInfo] Fix phpDocExtractor nullable array value type (@​fabpot)

v5.4.23

Changelog (v5.4.22...v5.4.23)

• bug #48972 Fix memory limit problems in BinaryFileResponse (glady)

v5.4.22

Changelog (v5.4.21...v5.4.22)

• bug #49758 Use separate caches for IpUtils checkIp4 and checkIp6 (danielburger1337)
• bug #49745 Fix wiring session.handler when handler_id is null (nicolas-grekas)

v5.4.21

Changelog (v5.4.20...v5.4.21)

• bug #48880 getMaxAge() returns non-negative integer (pkruithof, fabpot)

v5.4.20

Changelog (v5.4.19...v5.4.20)

• bug #49141 Fix bad return type in IpUtils::checkIp4() (tristankretzer)

v5.4.19

Changelog (v5.4.18...v5.4.19)

• no significant changes

v5.4.17

Changelog (v5.4.16...v5.4.17)

• bug #48635 Use relative timestamps with MemcachedSessionHandler (tvlooy)
• bug #48628 Fix dumping array cookies (nicolas-grekas)
• bug #48421 IPv4-mapped IPv6 addresses incorrectly rejected (bonroyage)

v5.4.16

Changelog (v5.4.15...v5.4.16)

• bug #48112 Compare cookie with null value as empty string in ResponseCookieValueSame (fancyweb)
• bug #48050 Check IPv6 is valid before comparing it (PhilETaylor)

v5.4.15

Changelog (v5.4.14...v5.4.15)

• no significant changes

v5.4.14

Changelog (v5.4.13...v5.4.14)

• bug #47746 Fix BinaryFileResponse content type detection logic (X-Coder264)

v5.4.13

Changelog (v5.4.12...v5.4.13)

• bug #47516 Prevent BinaryFileResponse::prepare from adding content type if no content is sent (naitsirch)
• bug #47530 Always return strings from accept headers (ausi)
• bug #47434 move flushing outside of Response::closeOutputBuffers (nicolas-grekas)

v5.4.12

Changelog (v5.4.11...v5.4.12)

• bug #47283 Prevent accepted rate limits with no remaining token to be preferred over denied ones (MatTheCat)
• bug #47273 Do not send Set-Cookie header twice for deleted session cookie (X-Coder264)
• bug #47130 Fix invalid ID not regenerated with native PHP file sessions (BrokenSourceCode)

v5.4.11

Changelog (v5.4.10...v5.4.11)

• bug #46931 Flush backend output buffer after closing. (bradjones1)
• bug #42033 Fix deleteFileAfterSend on client abortion (nerg4l)
• bug #46790 Prevent PHP Warning: Session ID is too long or contains illegal characters (BrokenSourceCode)
• bug #46808 Fix TypeError on null $_SESSION in NativeSessionStorage::save() (chalasr)

v5.4.10

Changelog (v5.4.9...v5.4.10)

• bug #46678 Update "[Session] Overwrite invalid session id" to only validate when files session storage is used (alexpott)
• bug #46676 Extend type guessing on enum fields (Gigino Chianese)

v5.4.9

Changelog (v5.4.8...v5.4.9)

• bug #46249 Regenerate invalid session id (peter17)

v5.4.8

Changelog (v5.4.7...v5.4.8)

• no significant changes

v5.4.6

Changelog (v5.4.5...v5.4.6)

• bug #45631 Fix PHP 8.1 deprecation in Response::isNotModified (HypeMC)

v5.4.5

Changelog (v5.4.4...v5.4.5)

• bug #45495 Fix missing ReturnTypeWillChange attributes (luxemate)
• bug #45281 Fix connecting to Redis via a socket file (alebedev80)

v5.4.3

Changelog (v5.4.2...v5.4.3)

• no significant changes

v5.4.2

Changelog (v5.4.1...v5.4.2)

• bug #44759 Fix notice when HTTP_PHP_AUTH_USER passed without pass (Vitali Tsyrkin)

v5.4.1

Changelog (v5.4.0...v5.4.1)

• bug #44502 do not call preg_match() on null (xabbuh)
• bug #44378 fix SessionHandlerFactory using connections (dmaicher)

v5.4.0

Changelog (v5.4.0-RC1...v5.4.0)

• no significant changes

v5.4.0-RC1

Changelog (v5.4.0-BETA3...v5.4.0-RC1)

• no significant changes

v5.4.0-BETA1

Changelog (v5.3.10...v5.4.0-BETA1)

• feature #42471 Add generic types to traversable implementations (derrabus)
• feature #43671 add ResponseIsUnprocessable (garak)
• feature #41268 Allow setting session options via DSN (makraz)
• feature #43411 Deprecate passing null as $requestIp in IpUtils (W0rma)
• feature #43378 Deprecate upload_progress.* and url_rewriter.tags session options (Matthew Covey)
• feature #43017 Map multipart/form-data as form Content-Type (keichinger)
• feature #42957 remove @​experimental flag (nicolas-grekas)
• feature #42900 Add a flag to hasSession to distinguished session from factory (jderusse)
• feature #41390 Add session cookie handling in cli context (alexander-schranz, Nyholm)
• feature #42332 Add litespeed_finish_request to Response (thomas2411)
• feature #42392 Mark Request::get() internal (ro0NL)
• feature #42286 Add SessionFactoryInterface (kbond)

v5.3.14

Changelog (v5.3.13...v5.3.14)

• no significant changes

v5.3.13

Changelog (v5.3.12...v5.3.13)

• bug #44759 Fix notice when HTTP_PHP_AUTH_USER passed without pass (Vitali Tsyrkin)
• bug #44502 do not call preg_match() on null (xabbuh)

v5.3.11

Changelog (v5.3.10...v5.3.11)

• no significant changes

v5.3.10

Changelog (v5.3.9...v5.3.10)

• no significant changes

v5.3.7

Changelog (v5.3.6...v5.3.7)

• bug #42753 Cast ini_get to an integer to match expected type (natewiebe13)
• bug #42380 Don't pass null to strpos() (derrabus)
• bug #42260 Fix return types for PHP 8.1 (derrabus)

v5.3.6

Changelog (v5.3.5...v5.3.6)

• bug #42289 Fixed type mismatch (Toflar)

v5.3.4

Changelog (v5.3.3...v5.3.4)

• bug #42112 fix FileBag under PHP 8.1 (alexpott)
• bug #42114 Fix return types of SessionHandler::gc() (derrabus)
• bug #41384 Fix SkippedTestSuite (jderusse)

v5.3.3

Changelog (v5.3.2...v5.3.3)

• bug #41670 allow savePath of NativeFileSessionHandler to be null (simon.chrzanowski)

v5.3.2

Changelog (v5.3.1...v5.3.2)

• no significant changes

v5.3.1

Changelog (v5.3.0...v5.3.1)

• bug #41495 Add ReturnTypeWillChange to SessionHandlers (nikic)

v5.3.0

Changelog (v5.3.0-RC1...v5.3.0)

• no significant changes

v5.3.0-RC1

Changelog (v5.3.0-BETA4...v5.3.0-RC1)

• no significant changes

v5.3.0-BETA3

Changelog (v5.3.0-BETA2...v5.3.0-BETA3)

• no significant changes

v5.3.0-BETA2

Changelog (v5.3.0-BETA1...v5.3.0-BETA2)

• bug #40964 Fixes for PHP 8.1 deprecations (jrmajor)

v5.2.14

Changelog (v5.2.13...v5.2.14)

• bug #42289 Fixed type mismatch (Toflar)

v5.2.12

Changelog (v5.2.11...v5.2.12)

• bug #42112 fix FileBag under PHP 8.1 (alexpott)
• bug #42114 Fix return types of SessionHandler::gc() (derrabus)
• bug #41384 Fix SkippedTestSuite (jderusse)

v5.2.11

Changelog (v5.2.10...v5.2.11)

• bug #41670 allow savePath of NativeFileSessionHandler to be null (simon.chrzanowski)
• bug #41495 Add ReturnTypeWillChange to SessionHandlers (nikic)

v5.2.10

Changelog (v5.2.9...v5.2.10)

• no significant changes

v5.2.8

Changelog (v5.2.7...v5.2.8)

• no significant changes

v5.2.7

Changelog (v5.2.6...v5.2.7)

• bug #40964 Fixes for PHP 8.1 deprecations (jrmajor)
• bug #40807 RequestMatcher issue when _controller is a closure (Plopix)
• bug #40610 Fixed bugs found by psalm (Nyholm)

v5.2.4

Changelog (v5.2.3...v5.2.4)

• bug #40231 Configure session.cookie_secure earlier (tamcy)
• bug #40188 Fix PHP 8.1 null values (kylekatarnls)
• bug #40043 Setting REQUEST_TIME_FLOAT when constructing a Request object (ctasada)

v5.2.3

Changelog (v5.2.2...v5.2.3)

• no changes

v5.2.2

Changelog (v5.2.1...v5.2.2)

• bug #39633 Drop int return type from parseFilesize() (LukeTowers)
• bug #39886 Revert #38614 and add assert to avoid regressions (BafS)
• bug #39816 use atomic writes in MockFileSessionStorage (nicolas-grekas)
• bug #39681 parse cookie values containing the equal sign (xabbuh)

v5.2.1

Changelog (v5.2.0...v5.2.1)

• bug #39550 keep turning dots to underscores when using Request::create() (nicolas-grekas)
• bug #39298 Fixed incorrect usage of UNLINK with PHPRedis with Redis < 4.0 (wickex)
• bug #39271 Fix TypeError: Argument 1 passed to JsonResponse::setJson() must be of the type string, object given (sidz)
• bug #39358 fix parsing some special chars with HeaderUtils::parseQuery() (nicolas-grekas)

v5.2.0

Changelog (v5.2.0-RC2...v5.2.0)

• feature #39128 Deprecate BinaryFileResponse::create() (derrabus)

v5.2.0-RC2

Changelog (v5.2.0-RC1...v5.2.0-RC2)

• bug #38614 Fix for virtualhosts based on URL path (mvorisek)

v5.2.0-RC1

Changelog (v5.2.0-BETA3...v5.2.0-RC1)

• feature #38954 Deprecate the HEADER_X_FORWARDED_ALL constant (jderusse)
• feature #38859 Deprecate not passing a Closure together with FILTER_CALLBACK to ParameterBag::filter() (nicolas-grekas)
• bug #38894 Remove Symfony 3 compatibility code (derrabus)

v5.1.11

Changelog (v5.1.10...v5.1.11)

• bug #39633 Drop int return type from parseFilesize() (LukeTowers)
• bug #39886 Revert #38614 and add assert to avoid regressions (BafS)
• bug #39816 use atomic writes in MockFileSessionStorage (nicolas-grekas)
• bug #39681 parse cookie values containing the equal sign (xabbuh)

v5.1.10

Changelog (v5.1.9...v5.1.10)

• bug #39271 Fix TypeError: Argument 1 passed to JsonResponse::setJson() must be of the type string, object given (sidz)

v5.1.9

Changelog (v5.1.8...v5.1.9)

• bug #38614 Fix for virtualhosts based on URL path (mvorisek)
• bug #38894 Remove Symfony 3 compatibility code (derrabus)

Task options

• Recreate commit - Conductor recreates the update commit and overwrites all additional changes made in this branch.
• Details
• Skip - Conductor won't attempt to update the dependency to this exact version again.
• All tasks
• Settings
• Docs

If you close the PR, the task will be skipped and Conductor will schedule the next task. Clicking the "Skip" button in the UI has the same effect. Conductor won't attempt to update the dependency to this exact version again but it will schedule updates to newer versions.

---

Powered by Private Packagist

[private-packagist]

composer.lock

Package changes

Package	Operation	From	To	About
symfony/http-foundation	upgrade	v5.1.8 ⚠️	v5.4.48 ✅	diff

---

Settings · Docs · Powered by Private Packagist