• 0.2.2 daf025598f

    [0.2.2] - 2026-10-23
    Tests / build-dev (push) Failing after 7m47s
    Tests / build-prod (push) Skipped
    Stable

    haylan released this 2026-10-24 08:28:47 +00:00 | 8 commits to main since this release

    Changed

    • Added symfony/flex so extra.symfony.require: "7.4.*" is enforced — every Symfony component, including transitive ones, now stays on 7.4 LTS
    • Renovate groups all Symfony components into a single PR and restricts them to ~7.4
    • Dependency updates:
      • Symfony components 7.4.x → latest 7.4 patch (cache, console, framework-bundle, http-client, http-kernel, yaml, … → 7.4.20)
      • symfony/dependency-injection back to 7.4.20 (a transitive update had pulled in 8.0.15)
      • symfony/monolog-bundle 4.0.2 → 4.1.0
      • monolog/monolog 3.10.0 → 3.12.1
      • phpstan/phpstan 2.2.5 → 2.2.16
    • Docker builds copy symfony.lock so Flex doesn't re-apply recipes during composer install

    Fixed

    • Renovate no longer pins symfony/monolog-bundle to ~7.4 — it is versioned independently (4.x) and was blocked from updates (#39)

    Security

    • Release images are built against the latest PHP 8.4.27 for CVE-2026-109618 and CVE-2026-109619 (critical RCE)
    Downloads