-
[0.2.2] - 2026-10-23 Stable
released this
2026-10-24 08:28:47 +00:00 | 8 commits to main since this releaseChanged
- Added
symfony/flexsoextra.symfony.require: "7.4.*"is enforced — every Symfony component, including transitive ones, now stays on 7.4 LTS - Renovate groups all Symfony components into a single PR and restricts them to
~7.4 - Dependency updates:
- Symfony components 7.4.x → latest 7.4 patch (
cache,console,framework-bundle,http-client,http-kernel,yaml, … → 7.4.20) symfony/dependency-injectionback to 7.4.20 (a transitive update had pulled in 8.0.15)symfony/monolog-bundle4.0.2 → 4.1.0monolog/monolog3.10.0 → 3.12.1phpstan/phpstan2.2.5 → 2.2.16
- Symfony components 7.4.x → latest 7.4 patch (
- Docker builds copy
symfony.lockso Flex doesn't re-apply recipes duringcomposer install
Fixed
- Renovate no longer pins
symfony/monolog-bundleto~7.4— it is versioned independently (4.x) and was blocked from updates (#39)
Security
- Release images are built against the latest PHP 8.4.27 for CVE-2026-109618 and CVE-2026-109619 (critical RCE)
Downloads
- Added