Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the composer group with 4 updates #382

Open
wants to merge 5 commits into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 26, 2024

Bumps the composer group with 4 updates: laravel/framework, phpoffice/phpspreadsheet, symfony/http-foundation and symfony/process.

Updates laravel/framework from 10.33.0 to 10.48.23

Release notes

Sourced from laravel/framework's releases.

v10.48.23

v10.48.22

No release notes provided.

v10.48.21

v10.48.20

v10.48.19

v10.48.18

v10.48.17

v10.48.16

v10.48.15

v10.48.14

v10.48.13

v10.48.12

... (truncated)

Commits
  • 625269c Update version to v10.48.23
  • 8c07b63 check for running in console
  • 7ccb4dc [10.x] Fix append and prepend batch to chain (#53455)
  • 646520a Ensure headers are only attached to illuminate responses (#53019)
  • 1b3ef8f Update CHANGELOG
  • c4ea52b Update version to v10.48.22
  • 0124751 wip
  • 58c2053 Fix arguments passed to artisan commands that start with 'env' (#52748)
  • 80cdd87 [10.x] Fixes whereDate, whereDay, whereMonth, whereTime, whereYear ...
  • 05a9554 Update CHANGELOG
  • Additional commits viewable in compare view

Updates phpoffice/phpspreadsheet from 1.29.0 to 1.29.4

Release notes

Sourced from phpoffice/phpspreadsheet's releases.

1.29.4 - 2024-11-10

Fixed

Added

1.29.2 - 2024-09-29

Fixed

  • Backported security patches.
  • Support for Php8.4.
  • Change to Csv Reader (see below under Deprecated). Backport of PR #4162 intended for 3.0.0. [Issue #4161](PHPOffice/PhpSpreadsheet#4161)
  • Tweaks to ROUNDUP, ROUNDDOWN, TRUNC, AMORDEGRC (results had been different under 8.4).

Changed

  • Images will not be added to spreadsheet if they cannot be validated as images.

Security Patch

1.29.1 - 2024-09-03

Fixed

  • Backported security patches from PR #4119 and PR #3957.
Changelog

Sourced from phpoffice/phpspreadsheet's changelog.

1.29.4 - 2024-11-10

Fixed

Added

1.29.2 - 2024-09-29

Fixed

  • Backported security patches.
  • Support for Php8.4.
  • Change to Csv Reader (see below under Deprecated). Backport of PR #4162 intended for 3.0.0. [Issue #4161](PHPOffice/PhpSpreadsheet#4161)
  • Tweaks to ROUNDUP, ROUNDDOWN, TRUNC, AMORDEGRC (results had been different under 8.4).

Changed

  • Images will not be added to spreadsheet if they cannot be validated as images.

Deprecated

  • Php8.4 will deprecate the escape parameter of fgetcsv. Csv Reader is affected by this; code is changed to be unaffected, but this will mean a breaking change is coming with Php9. Any code which uses the default escape value of backslash will fail in Php9. It is recommended to explicitly set the escape value to null string before then.

1.29.1 - 2024-09-03

Fixed

  • Backported security patches.
Commits

Updates symfony/http-foundation from 6.3.8 to 6.4.15

Release notes

Sourced from symfony/http-foundation's releases.

v6.4.15

Changelog (symfony/http-foundation@v6.4.14...v6.4.15)

  • no significant changes

v6.4.14

Changelog (symfony/http-foundation@v6.4.13...v6.4.14)

v6.4.13

Changelog (symfony/http-foundation@v6.4.12...v6.4.13)

v6.4.12

Changelog (symfony/http-foundation@v6.4.11...v6.4.12)

v6.4.10

Changelog (symfony/http-foundation@v6.4.9...v6.4.10)

v6.4.8

Changelog (symfony/http-foundation@v6.4.7...v6.4.8)

v6.4.7

Changelog (symfony/http-foundation@v6.4.6...v6.4.7)

v6.4.4

Changelog (symfony/http-foundation@v6.4.3...v6.4.4)

v6.4.3

Changelog (symfony/http-foundation@v6.4.2...v6.4.3)

  • bug symfony/symfony#53432 [HttpFoundation] Request without content-type or content-length header should result in null values, not empty strings (@​priyadi)

v6.4.2

Changelog (symfony/http-foundation@v6.4.1...v6.4.2)

... (truncated)

Changelog

Sourced from symfony/http-foundation's changelog.

CHANGELOG

7.1

  • Add optional $expirationParameter argument to UriSigner::__construct()
  • Add optional $expiration argument to UriSigner::sign()
  • Rename $parameter argument of UriSigner::__construct() to $hashParameter
  • Add UploadedFile::getClientOriginalPath()
  • Add QueryParameterRequestMatcher
  • Add HeaderRequestMatcher
  • Add support for \SplTempFileObject in BinaryFileResponse
  • Add verbose argument to response test constraints

7.0

  • Calling ParameterBag::filter() throws an UnexpectedValueException on invalid value, unless flag FILTER_NULL_ON_FAILURE is set
  • Calling ParameterBag::getInt() and ParameterBag::getBool() throws an UnexpectedValueException on invalid value
  • Remove classes RequestMatcher and ExpressionRequestMatcher
  • Remove Request::getContentType(), use Request::getContentTypeFormat() instead
  • Throw an InvalidArgumentException when calling Request::create() with a malformed URI
  • Require explicit argument when calling JsonResponse::setCallback(), Response::setExpires/setLastModified/setEtag(), MockArraySessionStorage/NativeSessionStorage::setMetadataBag(), NativeSessionStorage::setSaveHandler()
  • Add argument $statusCode to Response::sendHeaders() and StreamedResponse::sendHeaders()

6.4

  • Make HeaderBag::getDate(), Response::getDate(), getExpires() and getLastModified() return a DateTimeImmutable
  • Support root-level Generator in StreamedJsonResponse
  • Add UriSigner from the HttpKernel component
  • Add partitioned flag to Cookie (CHIPS Cookie)
  • Add argument bool $flush = true to Response::send()
  • Make MongoDbSessionHandler instantiable with the mongodb extension directly

6.3

  • Calling ParameterBag::getDigit(), getAlnum(), getAlpha() on an array throws a UnexpectedValueException instead of a TypeError
  • Add ParameterBag::getString() to convert a parameter into string and throw an exception if the value is invalid
  • Add ParameterBag::getEnum()
  • Create migration for session table when pdo handler is used
  • Add support for Relay PHP extension for Redis
  • The Response::sendHeaders() method now takes an optional HTTP status code as parameter, allowing to send informational responses such as Early Hints responses (103 status code)
  • Add IpUtils::isPrivateIp()
  • Add Request::getPayload(): InputBag
  • Deprecate conversion of invalid values in ParameterBag::getInt() and ParameterBag::getBoolean(),
  • Deprecate ignoring invalid values when using ParameterBag::filter(), unless flag FILTER_NULL_ON_FAILURE is set

... (truncated)

Commits
  • 9b3165e require Cache component versions compatible with Redis 6.1
  • ba020a3 Merge branch '5.4' into 6.4
  • 168b77c security #cve-2024-50345 [HttpFoundation] Reject URIs that contain invalid ch...
  • 4875486 Merge branch '5.4' into 6.4
  • 32310ff [HttpFoundation] Reject URIs that contain invalid characters
  • 38bd9bc [HttpFoundation] Remove invalid HTTP method from exception message
  • 3f38426 Ensure compatibility with mongodb v2
  • 4c0341b Merge branch '5.4' into 6.4
  • 35f7b4c session names must not be empty
  • 3363819 Merge branch '5.4' into 6.4
  • Additional commits viewable in compare view

Updates symfony/process from 6.3.4 to 6.4.15

Release notes

Sourced from symfony/process's releases.

v6.4.15

Changelog (symfony/process@v6.4.14...v6.4.15)

  • no significant changes

v6.4.14

Changelog (symfony/process@v6.4.13...v6.4.14)

v6.4.13

Changelog (symfony/process@v6.4.12...v6.4.13)

  • no significant changes

v6.4.12

Changelog (symfony/process@v6.4.11...v6.4.12)

v6.4.8

Changelog (symfony/process@v6.4.7...v6.4.8)

v6.4.7

Changelog (symfony/process@v6.4.6...v6.4.7)

  • no significant changes

v6.4.4

Changelog (symfony/process@v6.4.3...v6.4.4)

v6.4.3

Changelog (symfony/process@v6.4.2...v6.4.3)

v6.4.2

Changelog (symfony/process@v6.4.1...v6.4.2)

... (truncated)

Changelog

Sourced from symfony/process's changelog.

CHANGELOG

7.1

  • Add Process::setIgnoredSignals() to disable signal propagation to the child process

6.4

  • Add PhpSubprocess to handle PHP subprocesses that take over the configuration from their parent
  • Add RunProcessMessage and RunProcessMessageHandler

5.2.0

  • added Process::setOptions() to set Process specific options
  • added option create_new_console to allow a subprocess to continue to run after the main script exited, both on Linux and on Windows

5.1.0

  • added Process::getStartTime() to retrieve the start time of the process as float

5.0.0

  • removed Process::inheritEnvironmentVariables()
  • removed PhpProcess::setPhpBinary()
  • Process must be instantiated with a command array, use Process::fromShellCommandline() when the command should be parsed by the shell
  • removed Process::setCommandLine()

4.4.0

  • deprecated Process::inheritEnvironmentVariables(): env variables are always inherited.
  • added Process::getLastOutputTime() method

4.2.0

  • added the Process::fromShellCommandline() to run commands in a shell wrapper
  • deprecated passing a command as string when creating a Process instance
  • deprecated the Process::setCommandline() and the PhpProcess::setPhpBinary() methods
  • added the Process::waitUntil() method to wait for the process only for a specific output, then continue the normal execution of your application

... (truncated)

Commits
  • 3cb242f Merge branch '5.4' into 6.4
  • 5d1662f normalize paths to avoid failures if a path is referenced by different names
  • 25214ad Merge branch '5.4' into 6.4
  • 0190687 [Process] Fix test
  • 88638b9 Merge branch '5.4' into 6.4
  • ee75984 security #cve-2024-51736 [Process] Use %PATH% before %CD% to load the shell o...
  • 05c2ccc [Process] Use %PATH% before %CD% to load the shell on Windows
  • 0776b99 Merge branch '5.4' into 6.4
  • d94dda5 [Process] Fix escaping /X arguments on Windows
  • 836d34f Merge branch '5.4' into 6.4
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the composer group with 4 updates: [laravel/framework](https://github.com/laravel/framework), [phpoffice/phpspreadsheet](https://github.com/PHPOffice/PhpSpreadsheet), [symfony/http-foundation](https://github.com/symfony/http-foundation) and [symfony/process](https://github.com/symfony/process).


Updates `laravel/framework` from 10.33.0 to 10.48.23
- [Release notes](https://github.com/laravel/framework/releases)
- [Changelog](https://github.com/laravel/framework/blob/11.x/CHANGELOG.md)
- [Commits](laravel/framework@v10.33.0...v10.48.23)

Updates `phpoffice/phpspreadsheet` from 1.29.0 to 1.29.4
- [Release notes](https://github.com/PHPOffice/PhpSpreadsheet/releases)
- [Changelog](https://github.com/PHPOffice/PhpSpreadsheet/blob/1.29.4/CHANGELOG.md)
- [Commits](PHPOffice/PhpSpreadsheet@1.29.0...1.29.4)

Updates `symfony/http-foundation` from 6.3.8 to 6.4.15
- [Release notes](https://github.com/symfony/http-foundation/releases)
- [Changelog](https://github.com/symfony/http-foundation/blob/7.1/CHANGELOG.md)
- [Commits](symfony/http-foundation@v6.3.8...v6.4.15)

Updates `symfony/process` from 6.3.4 to 6.4.15
- [Release notes](https://github.com/symfony/process/releases)
- [Changelog](https://github.com/symfony/process/blob/7.1/CHANGELOG.md)
- [Commits](symfony/process@v6.3.4...v6.4.15)

---
updated-dependencies:
- dependency-name: laravel/framework
  dependency-type: direct:production
  dependency-group: composer
- dependency-name: phpoffice/phpspreadsheet
  dependency-type: direct:production
  dependency-group: composer
- dependency-name: symfony/http-foundation
  dependency-type: indirect
  dependency-group: composer
- dependency-name: symfony/process
  dependency-type: indirect
  dependency-group: composer
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Nov 26, 2024
Copy link

codecov bot commented Nov 26, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 30.33%. Comparing base (1081438) to head (b8d96f5).

Additional details and impacted files
@@            Coverage Diff            @@
##             master     #382   +/-   ##
=========================================
  Coverage     30.33%   30.33%           
  Complexity      523      523           
=========================================
  Files            79       79           
  Lines          2001     2001           
=========================================
  Hits            607      607           
  Misses         1394     1394           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file php Pull requests that update Php code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant