Bump the minor-patch group across 1 directory with 4 updates

[dependabot]

Bumps the minor-patch group with 3 updates in the / directory: composer/composer, twig/twig and twig/html-extra.

Updates composer/composer from 2.8.4 to 2.8.5

Release notes

Sourced from composer/composer's releases.

2.8.5

• Added build provenance attestation so you can also now download and verify phar files from GitHub releases:

  gh release --repo composer/composer download --pattern composer.phar
  gh attestation verify --repo composer/composer composer.phar
  

• Fixed unsupported funding values causing parse errors in packages (#12247)

• Fixed support for a few newer funding formats (#12257)

• Fixed InstalledVersions regression from 2.8.4 when reload() is used (#12269)

• Fixed psr-0/psr-4 rules having unstable order in vendor/composer/autoload*.php (#12263)

• Fixed a few warnings happening incorrectly in edge cases (#12284, #12268, #12283)

Full Changelog: composer/composer@2.8.4...2.8.5

Changelog

Sourced from composer/composer's changelog.

[2.8.5] 2025-01-21

• Added build provenance attestation so you can also now download and verify phar files from GitHub releases:

  gh release --repo composer/composer download --pattern composer.phar
  gh attestation verify --repo composer/composer composer.phar
  

• Fixed unsupported funding values causing parse errors in packages (#12247)

• Fixed support for a few newer funding formats (#12257)

• Fixed InstalledVersions regression from 2.8.4 when reload() is used (#12269)

• Fixed psr-0/psr-4 rules having unstable order in vendor/composer/autoload*.php (#12263)

• Fixed a few warnings happening incorrectly in edge cases (#12284, #12268, #12283)

Commits

• ae208dc Release 2.8.5
• a0fa616 Update changelog
• 885dd9b Update deps
• 30e5825 Merge pull request #12266 from Seldaek/copy_src_to_dist_ref
• 0626efa Merge pull request #12269 from Seldaek/fix_installed_regr
• d2cd6de Add workaround for InstalledVersion to ensure we always run last version
• f12d2f5 Merge pull request #12284 from Seldaek/init_validate_name
• ee6dc33 Fix regression from #12233 in InstalledVersions when reload is used, fixes #1...
• 8d8f4e8 Sanitize guessed name and vendor name before suggesting it in init command, f...
• d9a158d Merge pull request #12268 from Seldaek/suppress_dev_hint_on_global
• Additional commits viewable in compare view

Updates twig/twig from 3.18.0 to 3.19.0

Changelog

Sourced from twig/twig's changelog.

3.19.0 (2025-01-28)

• Fix a security issue where escaping was missing when using ??
• Deprecate Token::getType(), use Token::test() instead
• Add Token::toEnglish()
• Add ForElseNode
• Deprecate Twig\ExpressionParser::parseOnlyArguments() and Twig\ExpressionParser::parseArguments() (use Twig\ExpressionParser::parseNamedArguments() instead)
• Fix constant() behavior when used with ??
• Add the invoke filter
• Make {} optional for the types tag
• Add LastModifiedExtensionInterface and implementation in AbstractExtension to track modification of runtime classes
• Ignore static properties when using the dot operator

Commits

• d4f8c2b Prepare the 3.19.0 release
• 38576b1 security #cve-2025-24374 [SECURITY] Fix a security issue where escaping was m...
• 445f74c [SECURITY] Fix a security issue where escaping was missing when using ??
• b638637 minor #4560 Fix typo for html_cva code example (matthieupetel)
• 83da53c Fix typo for html_cva code example
• 48d167a minor #4558 Fix CS (fabpot)
• f594248 Fix CS
• fcd0332 minor #4557 Fix Token::__toString() (fabpot)
• 11535e9 Fix Token::__toString()
• b680354 minor #4556 fix intl-extra tests (xabbuh)
• Additional commits viewable in compare view

Updates twig/html-extra from 3.18.0 to 3.19.0

Commits

• See full diff in compare view

Updates symfony/mime from 7.2.1 to 7.2.3

Release notes

Sourced from symfony/mime's releases.

v7.2.3

Changelog (symfony/mime@v7.2.2...v7.2.3)

• bug symfony/symfony#59598 [Mime] Fix body validity check in Email when using Message::setBody() (@​alexandre-daubois)

Commits

• 2fc3b4b Merge branch '7.1' into 7.2
• c252e20 Merge branch '6.4' into 7.1
• 917d779 [Mime] Fix body validity check in Email when using Message::setBody()
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[private-packagist]

composer.lock

Package changes

Package	Operation	From	To	About
composer/composer	upgrade	2.8.4	2.8.5	diff
symfony/mime	upgrade	v7.2.1	v7.2.3	diff
twig/html-extra	upgrade	v3.18.0	v3.19.0	diff
twig/twig	upgrade	v3.18.0 ⚠️	v3.19.0 ✅	diff

---

Settings · Docs · Powered by Private Packagist