Renovate Config Bug #39

New Issue

2026-10-14T09:07:43Z

haylan commented

2026-10-14 09:07:43 +00:00

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review

Renovate config bug

The new Symfony package rule applies allowedVersions: "~7.4" to all symfony/* packages except Flex, polyfills, and contracts. symfony/monolog-bundle is versioned independently (currently ^4.0) and has no 7.4 releases, so Renovate will not update it to newer 4.x versions. Exclude symfony/monolog-bundle or match only core Symfony components.

{
  "groupName": "symfony",
  "allowedVersions": "~7.4",
  "description": "Keep all Symfony components on 7.4 LTS and update them together (symfony/flex enforces extra.symfony.require for transitive ones)",
  "matchPackageNames": [
    "/^symfony//",
    "!symfony/flex",
    "!/^symfony/polyfill-/",
    "!/-contracts$/"
  ]
},

Originally posted by @PR-Agent in #35 (comment)

## PR Reviewer Guide 🔍  Here are some key observations to aid the review process: <table> <tr><td>⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪</td></tr> <tr><td>🧪 No relevant tests</td></tr> <tr><td>🔒 No security concerns identified</td></tr> <tr><td>⚡ Recommended focus areas for review <details><summary><a href='https://git.arthurerlich.de/haylan/git-contribution-graph/src/branch/chore/update-changelog/renovate.json#L11-L21'>Renovate config bug</a> The new Symfony package rule applies `allowedVersions: "~7.4"` to all `symfony/*` packages except Flex, polyfills, and contracts. `symfony/monolog-bundle` is versioned independently (currently `^4.0`) and has no 7.4 releases, so Renovate will not update it to newer 4.x versions. Exclude `symfony/monolog-bundle` or match only core Symfony components. </summary> ```json { "groupName": "symfony", "allowedVersions": "~7.4", "description": "Keep all Symfony components on 7.4 LTS and update them together (symfony/flex enforces extra.symfony.require for transitive ones)", "matchPackageNames": [ "/^symfony//", "!symfony/flex", "!/^symfony/polyfill-/", "!/-contracts$/" ] }, ``` </details> </td></tr> </table> _Originally posted by @PR-Agent in https://git.arthurerlich.de/haylan/git-contribution-graph/pulls/35#issuecomment-4554_

haylan referenced this issue from a commit

2026-10-22 21:59:27 +00:00

fix(renovate): exclude symfony/monolog-bundle from the ~7.4 Symfony rule

haylan referenced a pull request that will close this issue

2026-10-22 22:01:57 +00:00

fix: Renovate monolog-bundle rule (#39) and PHP 8.4 security base image #40

haylan closed this issue

2026-10-22 22:07:35 +00:00

haylan referenced this issue from a commit

2026-10-22 22:07:36 +00:00

Merge pull request 'fix: Renovate monolog-bundle rule (#39) and PHP 8.4 security base image' (#40) from fix/renovate-monolog-bundle into main

Sign in to join this conversation.