Update dependency twig/twig to v3.19.0 [SECURITY]

[Spomky]

This PR contains the following updates:

Package	Type	Update	Change
twig/twig (source)	require	minor	3.16.0 -> 3.19.0

GitHub Vulnerability Alerts

CVE-2025-24374

When using the ?? operator, output escaping was missing for the expression on the left side of the operator.

---

Release Notes

twigphp/Twig (twig/twig)

v3.19.0

Compare Source

• Fix a security issue where escaping was missing when using ??
• Deprecate Token::getType(), use Token::test() instead
• Add Token::toEnglish()
• Add ForElseNode
• Deprecate Twig\ExpressionParser::parseOnlyArguments() and
  Twig\ExpressionParser::parseArguments() (use
  Twig\ExpressionParser::parseNamedArguments() instead)
• Fix constant() behavior when used with ??
• Add the invoke filter
• Make {} optional for the types tag
• Add LastModifiedExtensionInterface and implementation in AbstractExtension to track modification of runtime classes
• Ignore static properties when using the dot operator

v3.18.0

Compare Source

• Fix unary operator precedence change
• Ignore SyntaxError exceptions from undefined handlers when using the guard tag
• Add a way to stream template rendering (TemplateWrapper::stream() and TemplateWrapper::streamBlock())

v3.17.1

Compare Source

• Fix the null coalescing operator when the test returns null
• Fix the Elvis operator when used as '? :' instead of '?:'
• Support for invoking closures

v3.17.0

Compare Source

• Fix ArrayAccess with objects as keys
• Support underscores in number literals
• Deprecate ConditionalExpression and NullCoalesceExpression (use ConditionalTernary and NullCoalesceBinary instead)

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.