fix(deps): update symfony packages by renovate[bot] · Pull Request #440 · jeboehm/mailserver-admin

renovate · 2026-05-30T09:31:29Z

This PR contains the following updates:

Package	Change	Age	Confidence
doctrine/doctrine-bundle (source)	`3.2.2` → `3.2.4`
doctrine/orm (source)	`3.6.6` → `3.6.7`
easycorp/easyadmin-bundle	`v5.0.9` → `v5.0.13`
symfony/asset-mapper (source)	`8.0.11` → `8.1.0`
symfony/browser-kit (source)	`v8.0.8` → `v8.1.0`
symfony/console (source)	`v8.0.11` → `v8.1.0`
symfony/css-selector (source)	`v8.0.9` → `v8.1.0`
symfony/dotenv (source)	`v8.0.11` → `v8.1.0`
symfony/flex	`v2.10.0` → `v2.11.0`
symfony/form (source)	`8.0.9` → `8.1.0`
symfony/framework-bundle (source)	`v8.0.11` → `v8.1.0`
symfony/http-client (source)	`v8.0.9` → `v8.1.0`
symfony/intl (source)	`8.0.8` → `8.1.0`
symfony/phpunit-bridge (source)	`v8.0.8` → `v8.1.0`
symfony/runtime (source)	`v8.0.12` → `v8.1.0`
symfony/security-bundle (source)	`v8.0.12` → `v8.1.0`
symfony/serializer (source)	`v8.0.10` → `v8.1.0`
symfony/stimulus-bundle	`3.0.0` → `3.1.0`
symfony/stopwatch (source)	`v8.0.8` → `v8.1.0`
symfony/twig-bundle (source)	`v8.0.8` → `v8.1.0`
symfony/ux-chartjs (source)	`2.35.0` → `2.36.0`
symfony/validator (source)	`v8.0.10` → `v8.1.0`
symfony/web-profiler-bundle (source)	`v8.0.12` → `v8.1.0`
symfony/yaml (source)	`v8.0.12` → `v8.1.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

doctrine/DoctrineBundle (doctrine/doctrine-bundle)

`v3.2.4`

Compare Source

Release Notes for 3.2.4

3.2.x bugfix release (patch)

3.2.4

Total issues resolved: 0
Total pull requests resolved: 1
Total contributors: 1

Bug

2241: Avoid reporting error from unrelated call thanks to @greg0ire

`v3.2.3`

Compare Source

Release Notes for 3.2.3

3.2.x bugfix release (patch)

3.2.3

Total issues resolved: 0
Total pull requests resolved: 4
Total contributors: 4
2233: Fix coding standard issue on 3.2.x thanks to @Copilot

doctrine/orm (doctrine/orm)

`v3.6.7`

Compare Source

This release contains the changes from https://github.com/doctrine/orm/releases/tag/2.20.13

EasyCorp/EasyAdminBundle (easycorp/easyadmin-bundle)

`v5.0.13`: 5.0.13

Compare Source

This is a security release to fix this security issue:

Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField
GHSA-8559-gwj3-q37r

`v5.0.12`: 5.0.12

Compare Source

Bug fixes

[5961512] Fix vertical jump of icons in compact sidebar on hover (@lacatoire)
[4496bc2] Do not convert translatable enum choices into an associative array (@Seb33300)
[b4677a5] Misc doc fixes (Nicolas Walger)

`v5.0.11`: 5.0.11

Compare Source

This is a security release that fixes some issues that GitHub code scanner found on web assets:

[a6d211e] Fix scanning issues (@javiereguiluz)

`v5.0.10`: 5.0.10

Compare Source

This is a security release that contains a fix for this issue:

[565064b] Path traversal and reflected XSS in Flag and Icon Twig components

Full security advisory information: GHSA-2wwr-9x6f-88gp

symfony/asset-mapper (symfony/asset-mapper)

`v8.1.0`

Compare Source

Changelog (symfony/asset-mapper@v8.1.0-RC1...v8.1.0)

no significant changes

`v8.0.13`

Compare Source

Changelog (symfony/asset-mapper@v8.0.11...v8.0.13)

bug #64208 Rewrite relative paths in export ... from statements (@ousamabenyounes)

symfony/browser-kit (symfony/browser-kit)

`v8.1.0`

Compare Source

Changelog (symfony/browser-kit@v8.1.0-BETA1...v8.1.0)

no significant changes

symfony/console (symfony/console)

`v8.1.0`

Compare Source

Changelog (symfony/console@v8.1.0-RC1...v8.1.0)

no significant changes

`v8.0.13`

Compare Source

Changelog (symfony/console@v8.0.11...v8.0.13)

bug #64355 Format message in ConsoleSectionOutput::overwrite() (@nicolas-grekas)

symfony/css-selector (symfony/css-selector)

`v8.1.0`

Compare Source

Changelog (symfony/css-selector@v8.1.0-BETA3...v8.1.0)

no significant changes

symfony/dotenv (symfony/dotenv)

`v8.1.0`

Compare Source

Changelog (symfony/dotenv@v8.1.0-BETA2...v8.1.0)

bug #64386 Don't truncate external env vars containing $ when referenced via ${...} indirection (@nicolas-grekas)

symfony/flex (symfony/flex)

`v2.11.0`

Compare Source

What's Changed

Add --no-changelog option to recipes:update by @7ochem in #1087
Add SYMFONY_ALLOW_CONTRIB variable by @GromNaN in #1077
Remove recipe data from symfony.lock when the contrib recipe is not installed by @GromNaN in #1078
[MakefileConfigurator] Fix indentation of help target by @Kocal in #1080
Fix resolving aliases when running composer req by @nicolas-grekas in #1091
Fix "null as array offset" deprecation in DockerComposeConfigurator by @GromNaN in #1083
[DockerComposeConfigurator] Fix duplicate top-level key on reconfigure by @mistyfiky in #1090

New Contributors

@DNL-paris made their first contribution in #1082
@GromNaN made their first contribution in #1078
@Kocal made their first contribution in #1080
@7ochem made their first contribution in #1087
@mistyfiky made their first contribution in #1090

Full Changelog: symfony/flex@v2.10.0...v2.11.0

symfony/form (symfony/form)

`v8.1.0`

Compare Source

Changelog (symfony/form@v8.1.0-RC1...v8.1.0)

no significant changes

symfony/framework-bundle (symfony/framework-bundle)

`v8.1.0`

Compare Source

Changelog (symfony/framework-bundle@v8.1.0-RC1...v8.1.0)

bug #64102 Remove usage of Kernel::VERSION (@fabpot)

`v8.0.13`

Compare Source

Changelog (symfony/framework-bundle@v8.0.11...v8.0.13)

bug #64348 Allow to pass doctrine_open_transaction_logger’s entity manager name positionally (@MatTheCat)
bug #64341 Harden default IP allowlist for Postmark and Brevo webhook parsers (@nicolas-grekas)
bug #64309 Sign transports for unrouted messages too (@nicolas-grekas)

symfony/http-client (symfony/http-client)

`v8.1.0`

Compare Source

Changelog (symfony/http-client@v8.1.0-RC1...v8.1.0)

no significant changes

`v8.0.13`

Compare Source

Changelog (symfony/http-client@v8.0.9...v8.0.13)

security #cve-2026-48736 Block IPv6 transition forms in NoPrivateNetworkHttpClient (@nicolas-grekas)
bug #64349 ntlm regression on authPersistNonNTLM=false connections with reset() (@Dooij)
bug #64260 Various fixes and hardenings (@Lctrs)

symfony/intl (symfony/intl)

`v8.1.0`

Compare Source

Changelog (symfony/intl@v8.1.0-BETA1...v8.1.0)

no significant changes

symfony/phpunit-bridge (symfony/phpunit-bridge)

`v8.1.0`

Compare Source

Changelog (symfony/phpunit-bridge@v8.1.0-BETA1...v8.1.0)

no significant changes

symfony/runtime (symfony/runtime)

`v8.1.0`

Compare Source

Changelog (symfony/runtime@v8.1.0-RC1...v8.1.0)

bug #64102 Remove usage of Kernel::VERSION (@fabpot)

`v8.0.13`

Compare Source

Changelog (symfony/runtime@v8.0.12...v8.0.13)

bug #64346 Trust argv on CLI-like SAPIs to fix subprocess args (@nicolas-grekas)

symfony/security-bundle (symfony/security-bundle)

`v8.1.0`

Compare Source

Changelog (symfony/security-bundle@v8.1.0-RC1...v8.1.0)

no significant changes

`v8.0.13`

Compare Source

Changelog (symfony/security-bundle@v8.0.12...v8.0.13)

bug #64338 Fix Security::login() across firewalls (@ousamabenyounes)

symfony/serializer (symfony/serializer)

`v8.1.0`

Compare Source

Changelog (symfony/serializer@v8.1.0-BETA3...v8.1.0)

no significant changes

symfony/stimulus-bundle (symfony/stimulus-bundle)

`v3.1.0`

Compare Source

symfony/stopwatch (symfony/stopwatch)

`v8.1.0`

Compare Source

Changelog (symfony/stopwatch@v8.1.0-BETA1...v8.1.0)

no significant changes

symfony/twig-bundle (symfony/twig-bundle)

`v8.1.0`

Compare Source

Changelog (symfony/twig-bundle@v8.1.0-BETA3...v8.1.0)

bug #64102 Remove usage of Kernel::VERSION (@fabpot)

symfony/ux-chartjs (symfony/ux-chartjs)

`v2.36.0`

Compare Source

symfony/validator (symfony/validator)

`v8.1.0`

Compare Source

Changelog (symfony/validator@v8.1.0-RC1...v8.1.0)

no significant changes

symfony/web-profiler-bundle (symfony/web-profiler-bundle)

`v8.1.0`

Compare Source

Changelog (symfony/web-profiler-bundle@v8.1.0-RC1...v8.1.0)

bug #64102 Remove usage of Kernel::VERSION (@fabpot)

`v8.0.13`

Compare Source

Changelog (symfony/web-profiler-bundle@v8.0.11...v8.0.13)

bug #64310 Check logs priority name for both WARNING and warning (@MatTheCat)

symfony/yaml (symfony/yaml)

`v8.1.0`

Compare Source

Changelog (symfony/yaml@v8.1.0-RC1...v8.1.0)

bug #64388 Fix parsing inline anchored values (@nicolas-grekas)

`v8.0.13`

Compare Source

Changelog (symfony/yaml@v8.0.12...v8.0.13)

bug #64316 Allow trailing newlines after the end-of-document marker (@nicolas-grekas)

Configuration

📅 Schedule: (UTC)

Branch creation
- Only on Sunday and Saturday (* * * * 0,6)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-05-30T09:31:31Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock

Command failed: composer update doctrine/doctrine-bundle:3.2.4 doctrine/orm:3.6.7 easycorp/easyadmin-bundle:5.0.13 symfony/asset-mapper:8.1.0 symfony/browser-kit:8.1.0 symfony/console:8.1.0 symfony/css-selector:8.1.0 symfony/dotenv:8.1.0 symfony/flex:2.11.0 symfony/form:8.1.0 symfony/framework-bundle:8.1.0 symfony/http-client:8.1.0 symfony/intl:8.1.0 symfony/phpunit-bridge:8.1.0 symfony/runtime:8.1.0 symfony/security-bundle:8.1.0 symfony/serializer:8.1.0 symfony/stimulus-bundle:3.1.0 symfony/stopwatch:8.1.0 symfony/twig-bundle:8.1.0 symfony/ux-chartjs:2.36.0 symfony/validator:8.1.0 symfony/web-profiler-bundle:8.1.0 symfony/yaml:8.1.0 --with-all-dependencies --ignore-platform-req=ext-* --ignore-platform-req=lib-* --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires symfony/framework-bundle v8.1.0 -> satisfiable by symfony/framework-bundle[v8.1.0].
    - symfony/framework-bundle v8.1.0 requires symfony/dependency-injection ^8.1 -> found symfony/dependency-injection[v8.1.0] but these were not loaded, likely because it conflicts with another require.
  Problem 2
    - Root composer.json requires symfony/web-profiler-bundle v8.1.0 -> satisfiable by symfony/web-profiler-bundle[v8.1.0].
    - symfony/framework-bundle v8.1.0 requires symfony/dependency-injection ^8.1 -> found symfony/dependency-injection[v8.1.0] but these were not loaded, likely because it conflicts with another require.
    - symfony/web-profiler-bundle v8.1.0 requires symfony/framework-bundle ^7.4|^8.0 -> satisfiable by symfony/framework-bundle[v8.1.0].

renovate Bot force-pushed the renovate/symfony branch 13 times, most recently from c3336c6 to bbd35dd Compare June 6, 2026 08:49

renovate Bot force-pushed the renovate/symfony branch 2 times, most recently from 62ad9de to 688a01f Compare June 6, 2026 17:05

fix(deps): update symfony packages

ed633b2

renovate Bot force-pushed the renovate/symfony branch from 688a01f to ed633b2 Compare June 9, 2026 22:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update symfony packages#440

fix(deps): update symfony packages#440
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/symfony

renovate Bot commented May 30, 2026 •

edited

Loading

Uh oh!

renovate Bot commented May 30, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented May 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Release Notes for 3.2.4

3.2.4

Bug

Release Notes for 3.2.3

3.2.3

Improvement

Bugfix

CI

v5.0.13: 5.0.13

v5.0.12: 5.0.12

Bug fixes

v5.0.11: 5.0.11

v5.0.10: 5.0.10

What's Changed

New Contributors

Configuration

Uh oh!

renovate Bot commented May 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: composer.lock

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented May 30, 2026 •

edited

Loading

`v5.0.13`: 5.0.13

`v5.0.12`: 5.0.12

`v5.0.11`: 5.0.11

`v5.0.10`: 5.0.10

renovate Bot commented May 30, 2026 •

edited

Loading