Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 11 updates - #22

Merged
karatektus merged 1 commit into
mainfrom
dependabot/composer/minor-and-patch-0f25b512b8
Sep 25, 2026
Merged

chore(deps): Bump the minor-and-patch group across 1 directory with 11 updates#22
karatektus merged 1 commit into
mainfrom
dependabot/composer/minor-and-patch-0f25b512b8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 11 updates in the / directory:

Package From To
doctrine/orm 3.7.0 3.7.1
symfony/asset-mapper 8.1.5 8.1.7
symfony/form 8.1.6 8.1.7
symfony/http-client 8.1.5 8.1.7
symfony/mailer 8.1.5 8.1.7
symfony/stimulus-bundle 3.4.0 3.5.1
symfony/ux-autocomplete 3.4.0 3.5.1
symfony/ux-turbo 3.4.0 3.5.1
twig/extra-bundle 3.24.0 3.29.0
twig/twig 3.28.0 3.30.0
symfony/maker-bundle 1.67.0 1.68.0

Updates doctrine/orm from 3.7.0 to 3.7.1

Release notes

Sourced from doctrine/orm's releases.

3.7.1

Release Notes for 3.7.1

3.7.1

  • Total issues resolved: 0
  • Total pull requests resolved: 2
  • Total contributors: 1

Bugfixes

Commits
  • 037807a Merge pull request #12607 from greg0ire/fix-12606
  • e0f980f Merge pull request #12603 from greg0ire/single-dispatch
  • 7d857bf Merge pull request #12611 from doctrine/2.20.x
  • 68d6a26 Merge pull request #12610 from pawel-slowik/schema-tool-drop-database-docs
  • 3739443 Update documentation for SchemaTool DROP_DATABASE / dropDatabase
  • 1800016 Ensure ToolEvents::postGenerateSchema is called once
  • 58bda41 Avoid creating duplicate index for conflicting STI associations
  • e118419 Merge pull request #12601 from greg0ire/update-branch-metadata
  • 1b5410d Remove version with few downloads
  • 0e26f5b Update branch metadata
  • See full diff in compare view

Updates symfony/asset-mapper from 8.1.5 to 8.1.7

Release notes

Sourced from symfony/asset-mapper's releases.

v8.1.7

Changelog (symfony/asset-mapper@v8.1.5...v8.1.7)

  • bug #66027 Stop versioning the assets the mapper already resolved (@​Amoifr)
Commits
  • 6a583f9 Merge branch '7.4' into 8.1
  • 6875b00 Merge branch '6.4' into 7.4
  • f5c6514 [FrameworkBundle][AssetMapper] Stop versioning the assets the mapper already ...
  • See full diff in compare view

Updates symfony/form from 8.1.6 to 8.1.7

Release notes

Sourced from symfony/form's releases.

v8.1.7

Changelog (symfony/form@v8.1.6...v8.1.7)

Commits
  • 26ff09b Merge branch '7.4' into 8.1
  • ededc32 Merge branch '6.4' into 7.4
  • b0f1e86 [Form] Add the BoundsType compare message translation unit
  • f712ad7 Merge branch '7.4' into 8.1
  • 4e72be3 Merge branch '6.4' into 7.4
  • 644c86a [Form] Describe the options of a type extension registered on a type and its ...
  • 40fddf7 Merge branch '7.4' into 8.1
  • 6757334 Merge branch '6.4' into 7.4
  • f281151 [Form][Validator] Review Romanian (ro) translations
  • 5a22b38 Merge branch '7.4' into 8.1
  • Additional commits viewable in compare view

Updates symfony/http-client from 8.1.5 to 8.1.7

Release notes

Sourced from symfony/http-client's releases.

v8.1.7

Changelog (symfony/http-client@v8.1.6...v8.1.7)

v8.1.6

Changelog (symfony/http-client@v8.1.5...v8.1.6)

Commits
  • 099aae7 Merge branch '7.4' into 8.1
  • 3a523f3 Merge branch '6.4' into 7.4
  • 2027434 bug #65914 [HttpClient] Suppress warnings from failed DNS lookups (Toflar)
  • 9ac28e4 [HttpClient] Suppress warnings from failed DNS lookups
  • fe91dd1 Merge branch '7.4' into 8.1
  • 68d81f7 Merge branch '6.4' into 7.4
  • 149b874 Merge branch '5.4' into 6.4
  • 2dc660c [HttpClient] Reject decompression bombs
  • 5015ded [HttpClient] Reject https:// proxies that curl would connect to in cleartext
  • 18b514e bug #65731 [HttpClient] Don't send the original Host header on cross-authorit...
  • Additional commits viewable in compare view

Updates symfony/mailer from 8.1.5 to 8.1.7

Release notes

Sourced from symfony/mailer's releases.

v8.1.7

Changelog (symfony/mailer@v8.1.5...v8.1.7)

Commits
  • 8783380 Merge branch '7.4' into 8.1
  • 6f6f244 Merge branch '6.4' into 7.4
  • 21cc391 [Mailer] Run the assertions that follow the expected exception
  • 7cfac1d Merge branch '7.4' into 8.1
  • d6d5516 Merge branch '6.4' into 7.4
  • 7aa759f [Mailer] Reconnect when the server closed the transmission channel
  • See full diff in compare view

Updates symfony/stimulus-bundle from 3.4.0 to 3.5.1

Release notes

Sourced from symfony/stimulus-bundle's releases.

v3.5.1

No release notes provided.

v3.5.0

Changelog (symfony/stimulus-bundle@v3.4.0...v3.5.0)

Changelog

Sourced from symfony/stimulus-bundle's changelog.

CHANGELOG

3.5.0

  • Add support for Symfony 8.2's standalone AssetMapperBundle
  • Alias the StimulusHelper service to its class name so it can be autowired
  • Add support for Twig 4

3.3.0

  • Detect the stimulusFetch: 'lazy' directive inside preserved comments (/*! ... */)
  • Add support for the Symfony Reprise asset integration (Vite and Rsbuild)
  • Remove @symfony/stimulus-bridge from the npm peer dependencies; it is specific to Webpack Encore and must be installed manually there

3.0.0

  • Minimum required Symfony version is now 7.4
  • Minimum required PHP version is now 8.4
  • Remove Twig function ux_controller_link_tags(), which requires Symfony AssetMapper >=6.4

2.33

  • Change AssetMapper excluded_patterns from **/controllers.json to */controllers.json

2.30

  • Ensure compatibility with PHP 8.5

2.29.0

  • Add Symfony 8 support

2.20.1

  • Normalize Stimulus controller name in event name

2.14.2

  • Fix bug with finding UX Packages with non-standard project structure

2.14.1

  • Fixed bug with Stimulus controllers in subdirectories on Windows

2.14.0

  • Added Typescript controllers support

2.13.2

... (truncated)

Commits
  • 328b92c Bump npm packages to v3.5.1
  • c5ed7b6 Bump npm packages to v3.5.0
  • 2452a02 [Autocomplete][Cropperjs][Dropzone][Icons][LiveComponent][Map][Pagination][St...
  • ab74695 [Autocomplete][Chartjs][Cropperjs][Dropzone][LiveComponent][Map][Notify][Reac...
  • 0c13611 [StimulusBundle] Detect the standalone AssetMapper bundle
  • bf46045 [StimulusBundle] Bound the test kernel cache directory and drop dead phpunit ...
  • ce7a0e5 [StimulusBundle] Make StimulusHelper autowirable and document PHP usage
  • 8dbf6d2 Ignore the generated config/schema.json, and check .gitattributes stay in sync
  • c57db36 [StimulusBundle] Document loading different controllers per part of an app
  • 65cf5b7 [CI] Add void return type to PHPUnit test methods
  • Additional commits viewable in compare view

Updates symfony/ux-autocomplete from 3.4.0 to 3.5.1

Release notes

Sourced from symfony/ux-autocomplete's releases.

v3.5.1

No release notes provided.

v3.5.0

Changelog (symfony/ux-autocomplete@v3.4.0...v3.5.0)

Changelog

Sourced from symfony/ux-autocomplete's changelog.

CHANGELOG

3.5

  • Add support for Symfony 8.2's standalone AssetMapperBundle
  • Translate the optgroup labels returned by the AJAX endpoint, so group_by can use translation keys
  • Add EntityAutocompleterInterface::getTranslationDomain() to choose the translation domain used for the optgroup labels
  • Decouple the package from Doctrine ORM: add AutocompleterInterface, OptionsAwareAutocompleterInterface, AutocompleteChoiceType and #[AsAutocompleteField] so any data source can back an autocomplete field. The Doctrine ORM API stays fully supported
  • Add the ux_autocomplete route, served by AutocompleteController. The ux_entity_autocomplete route alias is deprecated
  • Add a max_options option to control how many options the dropdown displays at once
  • Add support for Twig 4

3.2

  • Fix the XSS vulnerability fix introduced in 3.1, which was broken on PostgreSQL. See section 2.36.2 below for details.

3.1

  • Use hash_equals() to compare the extra_options checksum to prevent timing attacks
  • Fix XSS vulnerability where data returned from AJAX endpoints was rendered without HTML escaping. See section 2.36 below for details.

3.0

  • Minimum required Symfony version is now 7.4
  • Minimum required PHP version is now 8.4
  • Remove ParentEntityAutocompleteType in favor of BaseEntityAutocompleteType
  • Remove ExtraLazyChoiceLoader in favor of Symfony\Component\Form\ChoiceList\Loader\LazyChoiceLoader from Symfony Form >=7.2
  • Add parameter $security to AutocompleteResultsExecutor::__construct()
  • Remove BC layer for EntityAutocompleterInterface::getAttributes() and EntityAutocompleterInterface::getGroupBy()

2.36.2

  • Fix the autocomplete search query throwing an exception on PostgreSQL because of the ESCAPE '\' clause introduced in 2.36; a backslash-free LIKE escape character is now used.

2.36

  • Escape LIKE wildcards (% and _) in the autocomplete search query so user input can no longer alter the matching behavior of the generated SQL query.

  • Fix XSS vulnerability where data returned from AJAX endpoints was rendered without HTML escaping. Values from the text field of AJAX responses are now escaped by default.

    Possible BC break: if your endpoint legitimately returns HTML in the text field (e.g., for rich content), opt in via the options_as_html option:

     #[AsEntityAutocompleteField]
 class IngredientAutocompleteType extends AbstractType
 {
     public function configureOptions(OptionsResolver $resolver): void

... (truncated)

Commits
  • e9ff3cf Bump npm packages to v3.5.1
  • e321c1e Bump npm packages to v3.5.0
  • 87b3f11 [Autocomplete][Cropperjs][Dropzone][Icons][LiveComponent][Map][Pagination][St...
  • 1085b15 [Autocomplete] Add a max_options option to control how many options the dropd...
  • 25df0ee [Autocomplete][Chartjs][Cropperjs][Dropzone][LiveComponent][Map][Notify][Reac...
  • 5e1d360 [Autocomplete] Make search test fixtures deterministic
  • e6b2560 [StimulusBundle] Detect the standalone AssetMapper bundle
  • 917ab3e Ignore the generated config/schema.json, and check .gitattributes stay in sync
  • 21bd48e [Autocomplete] Decouple from Doctrine ORM, support any data source
  • 682a5cb [Autocomplete] Translate the optgroup labels returned by the AJAX endpoint
  • Additional commits viewable in compare view

Updates symfony/ux-turbo from 3.4.0 to 3.5.1

Release notes

Sourced from symfony/ux-turbo's releases.

v3.5.1

No release notes provided.

v3.5.0

Changelog (symfony/ux-turbo@v3.4.0...v3.5.0)

Changelog

Sourced from symfony/ux-turbo's changelog.

CHANGELOG

3.5.0

  • Add support for Symfony 8.2's standalone AssetMapperBundle
  • Fix broadcasting an entity whose identifier is made of associations
  • Add support for Twig 4. On Twig 4, a Fully Qualified Class Name written with single backslashes in turbo_stream_from() or <twig:Turbo:Stream:From> resolves to the class it names, where Twig 3 dropped the backslashes and turned 'App\Entity\Book' into the unusable topic AppEntityBook. Templates already using the documented 'App\\Entity\\Book' form are unaffected.

3.2.0

  • Prevent installation alongside symfony/mercure 0.7.0 and 0.7.1, which are incompatible

3.1.0

  • Add a minimal layout for Turbo Frame responses, allowing head content like meta tags to work properly
  • Add TurboFrame service methods and Twig functions turbo_is_frame_request()/turbo_frame_request_id() to detect Turbo Frame requests
  • Add <turbo-mercure-stream-source> custom element, turbo_stream_from() Twig function and <twig:Turbo:Stream:From> Twig component
  • Deprecate turbo_stream_listen() Twig function, use turbo_stream_from() or the <twig:Turbo:Stream:From> Twig component instead
  • Deprecate Symfony\UX\Turbo\Twig\TurboStreamListenRendererInterface interface, use Symfony\UX\Turbo\StreamSourceRendererInterface instead
  • Deprecate Symfony\UX\Turbo\Bridge\Mercure\TurboStreamListenRenderer class, use Symfony\UX\Turbo\Bridge\Mercure\MercureStreamSourceRenderer instead
  • Deprecate Symfony\UX\Turbo\Bridge\Mercure\TopicSet class
  • Deprecate the mercure-turbo-stream Stimulus controller, use the <turbo-mercure-stream-source> custom element instead

3.0.0

  • Minimum required Symfony version is now 7.4
  • Minimum required PHP version is now 8.4
  • Remove old compatibility layer with deprecated StimulusTwigExtension from WebpackEncoreBundle ^1.0, use StimulusBundle instead
  • Remove BC layer for TurboStreamListenRendererInterface::renderTurboStreamListen() $eventSourceOptions parameter

2.35

  • Allow Symfony UX 3.x packages

2.32

  • Add support for MercureBundle ^0.4.1 and Mercure ^0.7.0

2.30

  • Ensure compatibility with PHP 8.5

2.29.0

  • Add Symfony 8 support

2.24.0

  • Add Twig Extensions for meta tags

... (truncated)

Commits
  • 9a125fa Bump npm packages to v3.5.1
  • f5334d4 Bump npm packages to v3.5.0
  • 8a51693 [Autocomplete][Cropperjs][Dropzone][Icons][LiveComponent][Map][Pagination][St...
  • 1e895e1 [Autocomplete][Chartjs][Cropperjs][Dropzone][LiveComponent][Map][Notify][Reac...
  • c2ab5f3 [StimulusBundle] Detect the standalone AssetMapper bundle
  • 1d634b7 [Turbo] Fix broadcasting an entity whose identifier is made of associations
  • c26075d Ignore the generated config/schema.json, and check .gitattributes stay in sync
  • 353b226 [Turbo] Restructure and standardize the documentation
  • 6d1dd78 [CI] Add void return type to PHPUnit test methods
  • See full diff in compare view

Updates twig/extra-bundle from 3.24.0 to 3.29.0

Release notes

Sourced from twig/extra-bundle's releases.

v3.29.0

Changelog (twigphp/twig-extra-bundle@v3.27.0...v3.29.0)

Commits
  • aaa2993 Fix wrapping the Twig cache pool in a second tag aware adapter
  • d8ee103 Restore void return type compatibility for extension points
  • 0c39e53 Test extra extension catalog against local sources
  • 5c8545f Register the missing extra callables in MissingExtensionSuggestor
  • 4e4ced8 Add void return type hint even in tests
  • c432607 Install a custom exception handler before bootstrapping KernelTestCase
  • See full diff in compare view

Updates twig/twig from 3.28.0 to 3.30.0

Release notes

Sourced from twig/twig's releases.

v3.30.0

Changelog (twigphp/Twig@v3.29.0...v3.30.0)

  • minor #4950 Fetch the escaper runtime once in the constructor of templates that escape (@​fabpot)
  • minor #4948 Compare the date formatter prototype pattern with the derived one once per pattern (@​fabpot)
  • bug #4946 Fix split trailing newline (@​fabpot)
  • minor #4945 Speed up adding extensions to an environment (@​nicolas-grekas)
  • minor #4940 Reuse the already resolved callable when compiling call arguments (@​fabpot)
  • minor #4939 Compile the generator guard as an unreachable yield instead of a yield from (@​fabpot)
  • feature #4938 Speed up loading a template that the environment has already loaded (@​fabpot)
  • bug #4937 Stop the escaping safe analysis from retaining every analyzed node (@​fabpot)
  • feature #4936 Allow to call TemplateWrapper::unwrap() without arguments (@​derrabus)
  • feature #4934 Expose the escaping strategy a template was compiled with (@​fabpot)
  • minor #4933 Improve macro call performance (@​fabpot)
  • bug #4932 Fix IntlExtension inheriting values derived by ICU from a date formatter prototype (@​fabpot)
  • bug #4931 Fix array access with a Stringable key on subclasses of ArrayObject and ArrayIterator (@​fabpot)
  • bug #4930 Report a clear error when a string cannot be split into characters (@​fabpot)
  • feature #4929 Deprecate cloning a Twig environment (@​fabpot)
  • minor #4928 Report the macro call parentheses deprecation once per call site and name the macro (@​fabpot)

v3.29.0

Changelog (twigphp/Twig@v3.28.0...v3.29.0)

  • feature #4910 Reject template wrappers from another environment (@​fabpot)
  • bug #4927 Report a clear error when using macros imported in a template body that was not rendered (@​fabpot)
  • feature #4926 Allow block chains to be composed of other block chains (@​fabpot)
  • feature #4925 Resolve block chains against the render context (@​fabpot)
  • bug #4924 Resolve constant parent templates once instead of on every lookup (@​fabpot)
  • bug #4923 Fix wrapping the Twig cache pool in a second tag aware adapter (@​nicolas-grekas)
  • feature #4917 Template runtime and block composition (@​fabpot)
  • bug #4918 Check that the use tag is allowed before resolving trait templates (@​fabpot)
  • bug #4922 Wrap dynamic parent expression errors (@​fabpot)
  • bug #4921 Fix TemplateWrapper::hasBlock() and TemplateWrapper::getBlockNames() omitting environment globals (@​fabpot)
  • bug #4916 Fix html_attr dropping style declarations whose value is zero (@​dylanpulver)
  • bug #4915 Fix the default filter fallback reusing a null-safe temporary variable (@​lazerg, @​fabpot)
  • minor #4908 Remove the documentation comments compilation overhead (@​fabpot)
  • minor #4904 Release destructuring temporaries after assignment (@​fabpot)
  • bug #4909 Report regular expression errors from the matches operator (@​fabpot)
  • bug #4906 Deprecate prefixed macro definedness checks (@​fabpot)
  • bug #4907 Fix duplicate macro deprecation wording (@​fabpot)
  • bug #4905 Throw when list formatting fails (@​fabpot)
  • feature #4902 Remove lazy macro import resolution (@​fabpot)
  • bug #4900 Honor date formatter prototype calendars (@​fabpot)
  • bug #4899 Fix Stringable keys for ArrayAccess implementations (@​fabpot)
  • bug #4901 Evaluate object destructuring expressions once (@​fabpot)
  • bug #4896 Restore void return type compatibility for extension points (@​fabpot)
  • bug #4898 Reject destructuring patterns containing no variables (@​fabpot)
  • feature #4895 Extract htmlAttrValue() from html_attr for standalone attribute rendering (@​Kocal)
  • bug #4894 Fix an empty destructuring pattern triggering a PHP fatal error instead of a SyntaxError (@​fabpot)
  • feature #4893 Fix array destructuring from a Traversable (@​iliaal, @​fabpot)

... (truncated)

Changelog

Sourced from twig/twig's changelog.

3.30.0 (2026-09-25)

  • Fix split, random, and shuffle merging a trailing newline into the last character of a string
  • Speed up splitting a string into characters in split, random, and shuffle
  • Speed up escaping by fetching the escaper runtime once per template
  • Speed up adding extensions to an environment
  • Fix the escaping safe analysis retaining every compiled template node for the lifetime of the environment
  • Speed up loading a template that the environment has already loaded
  • Speed up rendering by compiling a cheaper generator guard into templates
  • Speed up compiling filter, function, and test calls
  • Fix IntlExtension letting the pattern derived from a date formatter prototype override an explicit locale
  • Fix IntlExtension not honoring the locale of a date formatter prototype configured with no date and time styles
  • Speed up macro calls
  • Fix TemplateWrapper::unwrap() failing when called without arguments, which is now deprecated
  • Add TemplateWrapper::getDefaultEscapeStrategy() to know the escaping strategy a template was compiled with
  • Report a clear error when random, reverse, shuffle, and split receive a string that is not valid UTF-8
  • Fix the deprecation about omitting parentheses when calling a macro being reported twice for the same call
  • Add the macro name to the deprecation about omitting parentheses when calling a macro
  • Deprecate cloning a Twig\Environment instance
  • Fix array access with a Stringable key on subclasses of ArrayObject and ArrayIterator

3.29.0 (2026-09-18)

  • Fix the PHP warning and cryptic error when a block or a macro rendered on its own uses macros imported in the template body
  • Fix {% cache %} always missing in the Symfony bundle when framework.cache.app uses a natively tag aware adapter
  • Fix the sandbox resolving use trait templates before checking that the use tag is allowed
  • Fix html_attr dropping style declarations whose value is 0, 0.0 or '0'
  • Fix the default filter fallback emitting an undefined variable warning when it uses the null-safe operator
  • Fix the matches operator silently treating PCRE execution errors as non-matches; it now throws a RuntimeError
  • Fix TemplateWrapper::streamBlock(), TemplateWrapper::hasBlock(), and TemplateWrapper::getBlockNames() omitting environment globals
  • Fix exceptions from dynamic parent expressions escaping without template context
  • Add the BlockChain class to compose blocks from multiple templates without using template internals
  • Fix TemplateWrapper::hasBlock() and TemplateWrapper::getBlockNames() losing the extends line when the parent template does not exist
  • Fix an output buffer leak when a parent block rendered in an expression throws in non-yield mode
  • Add the HtmlExtension::htmlAttrValue() method to resolve a single HTML attribute value the way the html_attr function renders it
  • Fix html_attr JSON encoding a Stringable value in a data-* attribute instead of using its string representation
  • Add documentation comments to attach metadata to nodes (experimental)
  • Fix destructuring patterns containing no variables (empty patterns or sequences with only empty slots) triggering a PHP fatal error instead of a SyntaxError
  • Fix object and mapping destructuring evaluating the right-hand expression more than once
  • Fix sequence destructuring of iterators throwing a TypeError
  • Fix MissingExtensionSuggestor not suggesting the twig/*-extra package to install for some html-extra, intl-extra, and string-extra filters and functions
  • Add TempestMarkdown to use tempest/markdown as the markdown_to_html converter
  • Add the include_only function to render a template without giving it access to the current context
  • Add the Twig\Sandbox\SandboxInterface interface and Twig\Sandbox\Sandbox class to render untrusted templates through a dedicated, always-sandboxed environment crafted for it
  • Reject TemplateWrapper instances created by another Environment
  • Add the Twig\Extension\SandboxBridgeExtension to render sandboxed templates from trusted templates with an explicit output escaping strategy
  • Extract the sandbox runtime enforcement into a new internal Twig\Sandbox\SecurityChecker class used by compiled templates and CoreExtension
  • Mark SandboxExtension as internal, use Twig\Sandbox\Sandbox instead
  • Deprecate the sandboxed argument of the include function, use Twig\Sandbox\Sandbox instead
  • Deprecate SandboxExtension::enableSandbox(), disableSandbox(), and isSandboxedGlobally()

... (truncated)

Commits
  • 8c73707 Prepare the 3.30.0 release
  • 052c7ef minor #4950 Fetch the escaper runtime once in the constructor of templates th...
  • 3417f48 Fetch the escaper runtime once in the constructor of templates that escape
  • 9e198d7 minor #4948 Compare the date formatter prototype pattern with the derived one...
  • 22e3119 bug #4946 Fix split trailing newline (fabpot)
  • 00861d5 Fix split trailing newline
  • 81cc196 Bump version
  • 10fe980 Compare the date formatter prototype pattern with the derived one once per pa...
  • c8d782e Deprecate calling TemplateWrapper::unwrap() without arguments as of 3.30 and ...
  • 9c3d58e Fix coding standards
  • Additional commits viewable in compare view

Updates symfony/maker-bundle from 1.67.0 to 1.68.0

Release notes

Sourced from symfony/maker-bundle's releases.

v1.68.0

Highlights

  • Bump the minimum requirements to Symfony 7.4+ and PHP 8.2+
  • New make:decorator maker to create service decorators.
  • make:command now creates invokable commands by default and asks for the arguments and options.
  • make:entity gains --field and --relation options to add fields and relations without prompting, adds PHP 8.4 property hooks support, and applies the generate_final_entities configuration to generated entities.
  • make:twig-extension now generates attribute-based Twig extensions.
  • make:crud adds a --controller-class option.
  • Fixed crashes under --no-interaction in several makers (CRUD, controller, custom security, form-login, registration-form, reset-password, schedule, twig-extension, webhook).

What's Changed

New Contributors

@dependabot
chore(deps): Bump the minor-and-patch group across 1 directory with 1…
ed04a00 
…1 updates

Bumps the minor-and-patch group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [doctrine/orm](https://github.com/doctrine/orm) | `3.7.0` | `3.7.1` |
| [symfony/asset-mapper](https://github.com/symfony/asset-mapper) | `8.1.5` | `8.1.7` |
| [symfony/form](https://github.com/symfony/form) | `8.1.6` | `8.1.7` |
| [symfony/http-client](https://github.com/symfony/http-client) | `8.1.5` | `8.1.7` |
| [symfony/mailer](https://github.com/symfony/mailer) | `8.1.5` | `8.1.7` |
| [symfony/stimulus-bundle](https://github.com/symfony/stimulus-bundle) | `3.4.0` | `3.5.1` |
| [symfony/ux-autocomplete](https://github.com/symfony/ux-autocomplete) | `3.4.0` | `3.5.1` |
| [symfony/ux-turbo](https://github.com/symfony/ux-turbo) | `3.4.0` | `3.5.1` |
| [twig/extra-bundle](https://github.com/twigphp/twig-extra-bundle) | `3.24.0` | `3.29.0` |
| [twig/twig](https://github.com/twigphp/Twig) | `3.28.0` | `3.30.0` |
| [symfony/maker-bundle](https://github.com/symfony/maker-bundle) | `1.67.0` | `1.68.0` |



Updates `doctrine/orm` from 3.7.0 to 3.7.1
- [Release notes](https://github.com/doctrine/orm/releases)
- [Commits](doctrine/orm@3.7.0...3.7.1)

Updates `symfony/asset-mapper` from 8.1.5 to 8.1.7
- [Release notes](https://github.com/symfony/asset-mapper/releases)
- [Changelog](https://github.com/symfony/asset-mapper/blob/8.2/CHANGELOG.md)
- [Commits](symfony/asset-mapper@v8.1.5...v8.1.7)

Updates `symfony/form` from 8.1.6 to 8.1.7
- [Release notes](https://github.com/symfony/form/releases)
- [Changelog](https://github.com/symfony/form/blob/8.2/CHANGELOG.md)
- [Commits](symfony/form@v8.1.6...v8.1.7)

Updates `symfony/http-client` from 8.1.5 to 8.1.7
- [Release notes](https://github.com/symfony/http-client/releases)
- [Changelog](https://github.com/symfony/http-client/blob/8.2/CHANGELOG.md)
- [Commits](symfony/http-client@v8.1.5...v8.1.7)

Updates `symfony/mailer` from 8.1.5 to 8.1.7
- [Release notes](https://github.com/symfony/mailer/releases)
- [Changelog](https://github.com/symfony/mailer/blob/8.2/CHANGELOG.md)
- [Commits](symfony/mailer@v8.1.5...v8.1.7)

Updates `symfony/stimulus-bundle` from 3.4.0 to 3.5.1
- [Release notes](https://github.com/symfony/stimulus-bundle/releases)
- [Changelog](https://github.com/symfony/stimulus-bundle/blob/3.x/CHANGELOG.md)
- [Commits](symfony/stimulus-bundle@v3.4.0...v3.5.1)

Updates `symfony/ux-autocomplete` from 3.4.0 to 3.5.1
- [Release notes](https://github.com/symfony/ux-autocomplete/releases)
- [Changelog](https://github.com/symfony/ux-autocomplete/blob/3.x/CHANGELOG.md)
- [Commits](symfony/ux-autocomplete@v3.4.0...v3.5.1)

Updates `symfony/ux-turbo` from 3.4.0 to 3.5.1
- [Release notes](https://github.com/symfony/ux-turbo/releases)
- [Changelog](https://github.com/symfony/ux-turbo/blob/3.x/CHANGELOG.md)
- [Commits](symfony/ux-turbo@v3.4.0...v3.5.1)

Updates `twig/extra-bundle` from 3.24.0 to 3.29.0
- [Release notes](https://github.com/twigphp/twig-extra-bundle/releases)
- [Commits](twigphp/twig-extra-bundle@v3.24.0...v3.29.0)

Updates `twig/twig` from 3.28.0 to 3.30.0
- [Release notes](https://github.com/twigphp/Twig/releases)
- [Changelog](https://github.com/twigphp/Twig/blob/3.x/CHANGELOG)
- [Commits](twigphp/Twig@v3.28.0...v3.30.0)

Updates `symfony/maker-bundle` from 1.67.0 to 1.68.0
- [Release notes](https://github.com/symfony/maker-bundle/releases)
- [Commits](symfony/maker-bundle@v1.67.0...1.68.0)

---
updated-dependencies:
- dependency-name: doctrine/orm
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: symfony/asset-mapper
  dependency-version: 8.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: symfony/form
  dependency-version: 8.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: symfony/http-client
  dependency-version: 8.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: symfony/mailer
  dependency-version: 8.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: symfony/stimulus-bundle
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: symfony/ux-autocomplete
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: symfony/ux-turbo
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: twig/extra-bundle
  dependency-version: 3.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: twig/twig
  dependency-version: 3.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: symfony/maker-bundle
  dependency-version: 1.68.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Sep 25, 2026
@karatektus
karatektus merged commit 61730fb into main Sep 25, 2026
8 checks passed
@karatektus
karatektus deleted the dependabot/composer/minor-and-patch-0f25b512b8 branch September 25, 2026 15:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@karatektus