chore(deps): update symfony to v7.4.23 #48

Open

renovate Bot wants to merge 1 commits from renovate/symfony into main

pull from: renovate/symfony

merge into: haylan:main

haylan:main

haylan:renovate/phpstan-packages

Conversation 1 Commits 1 Files Changed 1

+112 -80

renovate Bot commented 2026-11-04 12:03:36 +00:00

Copy link

Copy source

This PR contains the following updates:

Package	Change	Age	Confidence
symfony/cache (source)	7.4.22 → 7.4.23
symfony/console (source)	7.4.22 → 7.4.23
symfony/framework-bundle (source)	7.4.22 → 7.4.23
symfony/http-client (source)	7.4.22 → 7.4.23
symfony/runtime (source)	7.4.22 → 7.4.23
symfony/yaml (source)	7.4.22 → 7.4.23

---

Release Notes

symfony/cache (symfony/cache)

v7.4.23

Compare Source

Changelog (https://github.com/symfony/cache/compare/v7.4.22...v7.4.23)

• bug #​67759 Fix FilesystemTagAwareAdapter::deleteItems() returning true when some items could not be deleted (@​nicolas-grekas)
• minor #​67744 Mark connection options as # (@​nicolas-grekas)
• bug #​67741 Fix Redis deleteItems() returning true when some items could not be deleted (@​nicolas-grekas)
• bug #​67736 Fix tag-aware deleteItems() returning false when the per-item retry succeeds (@​nicolas-grekas)
• bug #​67720 Retry failed early expiration callbacks (@​nicolas-grekas)
• bug #​67703 Honor the $save flag set by the callback in EarlyExpirationHandler (@​BenMacha)
• bug #​67714 Preserve null results from synchronous early recomputation (@​nicolas-grekas)
• bug #​67681 Add support for relay 0.61 (@​nicolas-grekas)

[SECURITY] Security release

symfony/console (symfony/console)

v7.4.23

Compare Source

Changelog (https://github.com/symfony/console/compare/v7.4.22...v7.4.23)

• bug #​67832 Fix ProgressBar::iterate() keeping the max of a previous iterable for a non-countable one (@​nicolas-grekas)
• bug #​67831 Fix ProgressBar's percent after finish() on undecorated output without a max (@​nicolas-grekas)
• bug #​67830 Fix ProgressBar::finish() with a lowered max and restarting a finished bar without a max (@​jack-worman)
• bug #​67823 Fix ProgressBar frames on undecorated output when resuming, restarting or finishing (@​jack-worman)
• bug #​67811 Fix ProgressBar::setMaxSteps() not updating the percentage (@​nicolas-grekas)
• bug #​67805 Fix ProgressBar::start() computing the percentage against the previous max (@​jack-worman)
• bug #​67769 Fix text ending with a backslash escaping the closing tag that follows it (@​nicolas-grekas)
• bug #​67762 Keep an escaped tag delimiter with its backslash when wrapping text (@​initd-it)
• bug #​67634 Fix setRow(), setColumnMaxWidth() and consecutive rowspans in Table (@​nicolas-grekas)
• bug #​67633 Fix Table cells that span rows when they follow a cell that spans columns (@​ybai08)

[SECURITY] Security release

symfony/framework-bundle (symfony/framework-bundle)

v7.4.23

Compare Source

Changelog (https://github.com/symfony/framework-bundle/compare/v7.4.22...v7.4.23)

• security #ghsa-xg2q-4rrq-657q Split the private ranges usable as trusted proxies from the deny list of private subnets (@​nicolas-grekas)

[SECURITY] Security release

symfony/http-client (symfony/http-client)

v7.4.23

Compare Source

Changelog (https://github.com/symfony/http-client/compare/v7.4.22...v7.4.23)

• security #ghsa-c7hm-wqwp-f9v8 Pin the IP of cached hosts in NoPrivateNetworkHttpClient (@​nicolas-grekas)
• security #ghsa-gq53-v8w2-gjhj Don't send the options of the default scope to other origins in ScopingHttpClient (@​nicolas-grekas)
• bug #​67619 Let PHP destruct the response decorated by TraceableResponse (@​nicolas-grekas)
• bug #​67612 Fix AsyncResponse throwing a LogicException when it is canceled while streaming (@​nicolas-grekas)
• bug #​67610 Fix getContent() returning a truncated body when the response is canceled while it reads it (@​nicolas-grekas)
• bug #​67599 Fix reading a traced CurlResponse as a stream after its decorator is destructed (@​PhilETaylor)
• bug #​67609 Fix CurlHttpClient writing the body of a response to stdout when it is canceled during stream() (@​nicolas-grekas)
• bug #​67605 Fix clearing the DNS cache of pending requests when a traced response is destructed (@​nicolas-grekas)

[SECURITY] Security release

symfony/runtime (symfony/runtime)

v7.4.23

Compare Source

Changelog (https://github.com/symfony/runtime/compare/v7.4.22...v7.4.23)

• bug #​67679 Terminate the kernel within the FrankenPHP request callback (@​pokorny344)

[SECURITY] Security release

symfony/yaml (symfony/yaml)

v7.4.23

Compare Source

Changelog (https://github.com/symfony/yaml/compare/v7.4.22...v7.4.23)

• security #ghsa-hwfg-qwvh-2wfx Fix exponential and quadratic parse times (@​nicolas-grekas)
• security #ghsa-hwfg-qwvh-2wfx Fix quadratic parse times (@​nicolas-grekas)
• bug #​67735 Strip the byte order mark at the start of a stream (@​0xABCD01)

[SECURITY] Security release

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [symfony/cache](https://symfony.com) ([source](https://github.com/symfony/cache)) | `7.4.22` → `7.4.23` |  |  | | [symfony/console](https://symfony.com) ([source](https://github.com/symfony/console)) | `7.4.22` → `7.4.23` |  |  | | [symfony/framework-bundle](https://symfony.com) ([source](https://github.com/symfony/framework-bundle)) | `7.4.22` → `7.4.23` |  |  | | [symfony/http-client](https://symfony.com) ([source](https://github.com/symfony/http-client)) | `7.4.22` → `7.4.23` |  |  | | [symfony/runtime](https://symfony.com) ([source](https://github.com/symfony/runtime)) | `7.4.22` → `7.4.23` |  |  | | [symfony/yaml](https://symfony.com) ([source](https://github.com/symfony/yaml)) | `7.4.22` → `7.4.23` |  |  | --- ### Release Notes <details> <summary>symfony/cache (symfony/cache)</summary> ### [`v7.4.23`](https://github.com/symfony/cache/releases/tag/v7.4.23) [Compare Source](https://github.com/symfony/cache/compare/v7.4.22...v7.4.23) **Changelog** (<https://github.com/symfony/cache/compare/v7.4.22...v7.4.23>) - bug [#&#8203;67759](https://github.com/symfony/cache/issues/67759) Fix FilesystemTagAwareAdapter::deleteItems() returning true when some items could not be deleted ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - minor [#&#8203;67744](https://github.com/symfony/cache/issues/67744) Mark connection options as # ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67741](https://github.com/symfony/cache/issues/67741) Fix Redis deleteItems() returning true when some items could not be deleted ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67736](https://github.com/symfony/cache/issues/67736) Fix tag-aware deleteItems() returning false when the per-item retry succeeds ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67720](https://github.com/symfony/cache/issues/67720) Retry failed early expiration callbacks ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67703](https://github.com/symfony/cache/issues/67703) Honor the $save flag set by the callback in EarlyExpirationHandler ([@&#8203;BenMacha](https://github.com/BenMacha)) - bug [#&#8203;67714](https://github.com/symfony/cache/issues/67714) Preserve null results from synchronous early recomputation ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67681](https://github.com/symfony/cache/issues/67681) Add support for relay 0.61 ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) \[SECURITY] Security release </details> <details> <summary>symfony/console (symfony/console)</summary> ### [`v7.4.23`](https://github.com/symfony/console/releases/tag/v7.4.23) [Compare Source](https://github.com/symfony/console/compare/v7.4.22...v7.4.23) **Changelog** (<https://github.com/symfony/console/compare/v7.4.22...v7.4.23>) - bug [#&#8203;67832](https://github.com/symfony/console/issues/67832) Fix ProgressBar::iterate() keeping the max of a previous iterable for a non-countable one ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67831](https://github.com/symfony/console/issues/67831) Fix ProgressBar's percent after finish() on undecorated output without a max ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67830](https://github.com/symfony/console/issues/67830) Fix ProgressBar::finish() with a lowered max and restarting a finished bar without a max ([@&#8203;jack-worman](https://github.com/jack-worman)) - bug [#&#8203;67823](https://github.com/symfony/console/issues/67823) Fix ProgressBar frames on undecorated output when resuming, restarting or finishing ([@&#8203;jack-worman](https://github.com/jack-worman)) - bug [#&#8203;67811](https://github.com/symfony/console/issues/67811) Fix ProgressBar::setMaxSteps() not updating the percentage ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67805](https://github.com/symfony/console/issues/67805) Fix ProgressBar::start() computing the percentage against the previous max ([@&#8203;jack-worman](https://github.com/jack-worman)) - bug [#&#8203;67769](https://github.com/symfony/console/issues/67769) Fix text ending with a backslash escaping the closing tag that follows it ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67762](https://github.com/symfony/console/issues/67762) Keep an escaped tag delimiter with its backslash when wrapping text ([@&#8203;initd-it](https://github.com/initd-it)) - bug [#&#8203;67634](https://github.com/symfony/console/issues/67634) Fix `setRow()`, `setColumnMaxWidth()` and consecutive rowspans in `Table` ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67633](https://github.com/symfony/console/issues/67633) Fix `Table` cells that span rows when they follow a cell that spans columns ([@&#8203;ybai08](https://github.com/ybai08)) \[SECURITY] Security release </details> <details> <summary>symfony/framework-bundle (symfony/framework-bundle)</summary> ### [`v7.4.23`](https://github.com/symfony/framework-bundle/releases/tag/v7.4.23) [Compare Source](https://github.com/symfony/framework-bundle/compare/v7.4.22...v7.4.23) **Changelog** (<https://github.com/symfony/framework-bundle/compare/v7.4.22...v7.4.23>) - security #ghsa-xg2q-4rrq-657q Split the private ranges usable as trusted proxies from the deny list of private subnets ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) \[SECURITY] Security release </details> <details> <summary>symfony/http-client (symfony/http-client)</summary> ### [`v7.4.23`](https://github.com/symfony/http-client/releases/tag/v7.4.23) [Compare Source](https://github.com/symfony/http-client/compare/v7.4.22...v7.4.23) **Changelog** (<https://github.com/symfony/http-client/compare/v7.4.22...v7.4.23>) - security #ghsa-c7hm-wqwp-f9v8 Pin the IP of cached hosts in NoPrivateNetworkHttpClient ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - security #ghsa-gq53-v8w2-gjhj Don't send the options of the default scope to other origins in ScopingHttpClient ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67619](https://github.com/symfony/http-client/issues/67619) Let PHP destruct the response decorated by TraceableResponse ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67612](https://github.com/symfony/http-client/issues/67612) Fix AsyncResponse throwing a LogicException when it is canceled while streaming ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67610](https://github.com/symfony/http-client/issues/67610) Fix getContent() returning a truncated body when the response is canceled while it reads it ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67599](https://github.com/symfony/http-client/issues/67599) Fix reading a traced CurlResponse as a stream after its decorator is destructed ([@&#8203;PhilETaylor](https://github.com/PhilETaylor)) - bug [#&#8203;67609](https://github.com/symfony/http-client/issues/67609) Fix CurlHttpClient writing the body of a response to stdout when it is canceled during stream() ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67605](https://github.com/symfony/http-client/issues/67605) Fix clearing the DNS cache of pending requests when a traced response is destructed ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) \[SECURITY] Security release </details> <details> <summary>symfony/runtime (symfony/runtime)</summary> ### [`v7.4.23`](https://github.com/symfony/runtime/releases/tag/v7.4.23) [Compare Source](https://github.com/symfony/runtime/compare/v7.4.22...v7.4.23) **Changelog** (<https://github.com/symfony/runtime/compare/v7.4.22...v7.4.23>) - bug [#&#8203;67679](https://github.com/symfony/runtime/issues/67679) Terminate the kernel within the FrankenPHP request callback ([@&#8203;pokorny344](https://github.com/pokorny344)) \[SECURITY] Security release </details> <details> <summary>symfony/yaml (symfony/yaml)</summary> ### [`v7.4.23`](https://github.com/symfony/yaml/releases/tag/v7.4.23) [Compare Source](https://github.com/symfony/yaml/compare/v7.4.22...v7.4.23) **Changelog** (<https://github.com/symfony/yaml/compare/v7.4.22...v7.4.23>) - security #ghsa-hwfg-qwvh-2wfx Fix exponential and quadratic parse times ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - security #ghsa-hwfg-qwvh-2wfx Fix quadratic parse times ([@&#8203;nicolas-grekas](https://github.com/nicolas-grekas)) - bug [#&#8203;67735](https://github.com/symfony/yaml/issues/67735) Strip the byte order mark at the start of a stream ([@&#8203;0xABCD01](https://github.com/0xABCD01)) \[SECURITY] Security release </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNC43IiwidXBkYXRlZEluVmVyIjoiNDQuMTQuNyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

renovate Bot added 1 commit 2026-11-04 12:03:36 +00:00

chore(deps): update symfony to v7.4.23 d7bca343a0

PR-Agent Bot commented 2026-11-04 12:03:54 +00:00

Copy link

Copy source

PR Code Suggestions ✨

No code suggestions found for the PR.

## PR Code Suggestions ✨ <!-- pr-agent:improve:no-suggestions --> No code suggestions found for the PR.

All checks were successful

Hide all checks

Tests / build-dev (push) Skipped

Required

Tests / build-prod (push) Skipped

Required

Tests / build-dev (pull_request) Successful in 2m57s

Required

Details

Tests / build-prod (pull_request) Successful in 3m32s

Required

Details

You are not authorized to merge this pull request.

This pull request can be merged automatically.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/symfony:renovate/symfony

git checkout renovate/symfony

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

Gitea Bot renovate Bot haylan (Arthur Erlich)

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: haylan/git-contribution-graph#48