chore(deps): update symfony packages to v7.4.18 #27

2026-08-30T22:02:47Z

renovate-bot commented

2026-08-30 22:02:47 +00:00

This PR contains the following updates:

Package	Change	Age	Confidence
symfony/cache (source)	`7.4.17` → `7.4.18`
symfony/console (source)	`7.4.17` → `7.4.18`
symfony/framework-bundle (source)	`7.4.17` → `7.4.18`
symfony/http-client (source)	`7.4.17` → `7.4.18`
symfony/phpunit-bridge (source)	`7.4.17` → `7.4.18`
symfony/yaml (source)	`7.4.17` → `7.4.18`

Release Notes

symfony/cache (symfony/cache)

`v7.4.18`

Compare Source

Changelog (https://github.com/symfony/cache/compare/v7.4.17...v7.4.18)

bug #65684 Do not unmarshall values that SodiumMarshaller cannot decrypt (@nicolas-grekas)
bug #65660 Respect max_execution_time in LockRegistry's wait loop (@uncaught)
bug #65636 Fix authenticating to the master when using Redis Sentinel (@nicolas-grekas)

symfony/console (symfony/console)

`v7.4.18`

Compare Source

Changelog (https://github.com/symfony/console/compare/v7.4.17...v7.4.18)

bug #65692 Escape context strings written to the terminal (@nicolas-grekas)
bug #65637 Fix profiling a command stopped at ConsoleEvents::COMMAND (@Spomky)

symfony/framework-bundle (symfony/framework-bundle)

`v7.4.18`

Compare Source

Changelog (https://github.com/symfony/framework-bundle/compare/v7.4.17...v7.4.18)

minor #65724 Declare the polyfills needed by the code on PHP 7.2 (@nicolas-grekas)
bug #65637 Fix profiling a command stopped at ConsoleEvents::COMMAND (@Spomky)

symfony/http-client (symfony/http-client)

`v7.4.18`

Compare Source

Changelog (https://github.com/symfony/http-client/compare/v7.4.17...v7.4.18)

bug #65751 Reject decompression bombs (@nicolas-grekas)
bug #65740 Reject https:// proxies that curl would connect to in cleartext (@nicolas-grekas)
bug #65731 Don't send the original Host header on cross-authority redirects (@nicolas-grekas)
bug #65742 Reject 3xx pushed responses (@nicolas-grekas)
bug #65704 Drop credentials when a redirect changes the scheme (@nicolas-grekas)

symfony/phpunit-bridge (symfony/phpunit-bridge)

`v7.4.18`

Compare Source

Changelog (https://github.com/symfony/phpunit-bridge/compare/v7.4.17...v7.4.18)

bug #65754 Fix ClockMock::hrtime() when the clock is not mocked and when the nanoseconds have leading zeros (@nicolas-grekas)

symfony/yaml (symfony/yaml)

`v7.4.18`

Compare Source

Changelog (https://github.com/symfony/yaml/compare/v7.4.17...v7.4.18)

bug #65727 Fix a TypeError when "!!binary" is given an unparsable value (@nicolas-grekas)
bug #65688 Bound recursion depth in the inline lexer (@nicolas-grekas)
bug #65651 Quote strings that look like octal numbers when dumping (@lazerg)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [symfony/cache](https://symfony.com) ([source](https://github.com/symfony/cache)) | `7.4.17` → `7.4.18` | ![age](https://developer.mend.io/api/mc/badges/age/packagist/symfony%2fcache/7.4.18?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/packagist/symfony%2fcache/7.4.17/7.4.18?slim=true) | | [symfony/console](https://symfony.com) ([source](https://github.com/symfony/console)) | `7.4.17` → `7.4.18` | ![age](https://developer.mend.io/api/mc/badges/age/packagist/symfony%2fconsole/7.4.18?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/packagist/symfony%2fconsole/7.4.17/7.4.18?slim=true) | | [symfony/framework-bundle](https://symfony.com) ([source](https://github.com/symfony/framework-bundle)) | `7.4.17` → `7.4.18` | ![age](https://developer.mend.io/api/mc/badges/age/packagist/symfony%2fframework-bundle/7.4.18?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/packagist/symfony%2fframework-bundle/7.4.17/7.4.18?slim=true) | | [symfony/http-client](https://symfony.com) ([source](https://github.com/symfony/http-client)) | `7.4.17` → `7.4.18` | ![age](https://developer.mend.io/api/mc/badges/age/packagist/symfony%2fhttp-client/7.4.18?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/packagist/symfony%2fhttp-client/7.4.17/7.4.18?slim=true) | | [symfony/phpunit-bridge](https://symfony.com) ([source](https://github.com/symfony/phpunit-bridge)) | `7.4.17` → `7.4.18` | ![age](https://developer.mend.io/api/mc/badges/age/packagist/symfony%2fphpunit-bridge/7.4.18?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/packagist/symfony%2fphpunit-bridge/7.4.17/7.4.18?slim=true) | | [symfony/yaml](https://symfony.com) ([source](https://github.com/symfony/yaml)) | `7.4.17` → `7.4.18` | ![age](https://developer.mend.io/api/mc/badges/age/packagist/symfony%2fyaml/7.4.18?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/packagist/symfony%2fyaml/7.4.17/7.4.18?slim=true) | --- ### Release Notes <details> <summary>symfony/cache (symfony/cache)</summary> ### [`v7.4.18`](https://github.com/symfony/cache/releases/tag/v7.4.18) [Compare Source](https://github.com/symfony/cache/compare/v7.4.17...v7.4.18) **Changelog** (<https://github.com/symfony/cache/compare/v7.4.17...v7.4.18>) - bug [#65684](https://github.com/symfony/cache/issues/65684) Do not unmarshall values that SodiumMarshaller cannot decrypt ([@nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#65660](https://github.com/symfony/cache/issues/65660) Respect max\_execution\_time in LockRegistry's wait loop ([@uncaught](https://github.com/uncaught)) - bug [#65636](https://github.com/symfony/cache/issues/65636) Fix authenticating to the master when using Redis Sentinel ([@nicolas-grekas](https://github.com/nicolas-grekas)) </details> <details> <summary>symfony/console (symfony/console)</summary> ### [`v7.4.18`](https://github.com/symfony/console/releases/tag/v7.4.18) [Compare Source](https://github.com/symfony/console/compare/v7.4.17...v7.4.18) **Changelog** (<https://github.com/symfony/console/compare/v7.4.17...v7.4.18>) - bug [#65692](https://github.com/symfony/console/issues/65692) Escape context strings written to the terminal ([@nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#65637](https://github.com/symfony/console/issues/65637) Fix profiling a command stopped at ConsoleEvents::COMMAND ([@Spomky](https://github.com/Spomky)) </details> <details> <summary>symfony/framework-bundle (symfony/framework-bundle)</summary> ### [`v7.4.18`](https://github.com/symfony/framework-bundle/releases/tag/v7.4.18) [Compare Source](https://github.com/symfony/framework-bundle/compare/v7.4.17...v7.4.18) **Changelog** (<https://github.com/symfony/framework-bundle/compare/v7.4.17...v7.4.18>) - minor [#65724](https://github.com/symfony/framework-bundle/issues/65724) Declare the polyfills needed by the code on PHP 7.2 ([@nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#65637](https://github.com/symfony/framework-bundle/issues/65637) Fix profiling a command stopped at ConsoleEvents::COMMAND ([@Spomky](https://github.com/Spomky)) </details> <details> <summary>symfony/http-client (symfony/http-client)</summary> ### [`v7.4.18`](https://github.com/symfony/http-client/releases/tag/v7.4.18) [Compare Source](https://github.com/symfony/http-client/compare/v7.4.17...v7.4.18) **Changelog** (<https://github.com/symfony/http-client/compare/v7.4.17...v7.4.18>) - bug [#65751](https://github.com/symfony/http-client/issues/65751) Reject decompression bombs ([@nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#65740](https://github.com/symfony/http-client/issues/65740) Reject https\:// proxies that curl would connect to in cleartext ([@nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#65731](https://github.com/symfony/http-client/issues/65731) Don't send the original Host header on cross-authority redirects ([@nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#65742](https://github.com/symfony/http-client/issues/65742) Reject 3xx pushed responses ([@nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#65704](https://github.com/symfony/http-client/issues/65704) Drop credentials when a redirect changes the scheme ([@nicolas-grekas](https://github.com/nicolas-grekas)) </details> <details> <summary>symfony/phpunit-bridge (symfony/phpunit-bridge)</summary> ### [`v7.4.18`](https://github.com/symfony/phpunit-bridge/releases/tag/v7.4.18) [Compare Source](https://github.com/symfony/phpunit-bridge/compare/v7.4.17...v7.4.18) **Changelog** (<https://github.com/symfony/phpunit-bridge/compare/v7.4.17...v7.4.18>) - bug [#65754](https://github.com/symfony/phpunit-bridge/issues/65754) Fix ClockMock::hrtime() when the clock is not mocked and when the nanoseconds have leading zeros ([@nicolas-grekas](https://github.com/nicolas-grekas)) </details> <details> <summary>symfony/yaml (symfony/yaml)</summary> ### [`v7.4.18`](https://github.com/symfony/yaml/releases/tag/v7.4.18) [Compare Source](https://github.com/symfony/yaml/compare/v7.4.17...v7.4.18) **Changelog** (<https://github.com/symfony/yaml/compare/v7.4.17...v7.4.18>) - bug [#65727](https://github.com/symfony/yaml/issues/65727) Fix a TypeError when "!!binary" is given an unparsable value ([@nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#65688](https://github.com/symfony/yaml/issues/65688) Bound recursion depth in the inline lexer ([@nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#65651](https://github.com/symfony/yaml/issues/65651) Quote strings that look like octal numbers when dumping ([@lazerg](https://github.com/lazerg)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit 2026-08-31 20:06:32 +00:00

chore(deps): update symfony packages to v7.4.18

Tests / build-dev (push) Skipped

Tests / build-prod (push) Skipped

Tests / build-dev (pull_request) Successful in 3m18s

Details

Tests / build-prod (pull_request) Successful in 5m53s

Details

742a4bb112

renovate-bot force-pushed renovate/symfony from b9efbe078f to 742a4bb112

2026-08-31 20:06:32 +00:00

Compare

haylan merged commit e918ec5072 into main

2026-09-01 15:47:15 +00:00

haylan deleted branch renovate/symfony

2026-09-01 15:47:16 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: haylan/git-contribution-graph#27