Skip to content

Bump symfony/http-foundation from 7.2.3 to 7.4.19 - #16

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/app-044530d861
Closed

Bump symfony/http-foundation from 7.2.3 to 7.4.19#16
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/app-044530d861

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Contributor

Bumps symfony/http-foundation from 7.2.3 to 7.4.19.

Release notes

Sourced from symfony/http-foundation's releases.

v7.4.19

Changelog (symfony/http-foundation@v7.4.18...v7.4.19)

v7.4.18

Changelog (symfony/http-foundation@v7.4.17...v7.4.18)

v7.4.17

Changelog (symfony/http-foundation@v7.4.16...v7.4.17)

v7.4.16

Changelog (symfony/http-foundation@v7.4.15...v7.4.16)

  • bug #65187 Treat a UriSigner expiration of 0 as a date, not as no expiry (@​sadiqk2)

v7.4.15

Changelog (symfony/http-foundation@v7.4.14...v7.4.15)

v7.4.14

Changelog (symfony/http-foundation@v7.4.13...v7.4.14)

... (truncated)

Changelog

Sourced from symfony/http-foundation's changelog.

CHANGELOG

8.2

  • Add five not-globally-reachable ranges to IpUtils::PRIVATE_SUBNETS: 192.0.0.0/24, 192.88.99.0/24, 224.0.0.0/4, 100::/64 and ff00::/8
  • Add Response::cacheControl() to set the targeted cache directives defined by RFC 9213, e.g. CDN-Cache-Control
  • Deprecate not passing an expiry to UriSigner::sign()
  • Add the $defaultExpiration argument to UriSigner::__construct()
  • Add argument $version to UriSigner::sign(), UriSigner::check(), UriSigner::checkRequest(), and UriSigner::verify() to bind a signed URI to a state token, folded into the signature
  • Add ParameterBag::filterCallback() to filter a parameter value through a callback
  • Reject a Cookie whose name uses the __Secure-/__Host- prefix when its attributes break the prefix contract
  • Deprecate the Request::$trustedHosts property, it is never populated anymore
  • Report the actual header value when the ResponseHeaderSame constraint fails
  • Add ClearableSessionHandlerInterface for clearing all session data
  • Add Request::getStructuredSuffixFormat() to resolve a mime type to the format of its structured syntax suffix, e.g. application/vnd.api+json to json

8.1

  • Add BinaryFileResponse::shouldDeleteFileAfterSend()
  • Deprecate setting public properties of Request and Response objects directly; use setters or constructor arguments instead
  • Add SessionHasFlashMessage test constraint
  • Response::__construct() now accepts a ResponseHeaderBag as its third argument
  • ParameterBag::getInt() and ParameterBag::getBoolean() now throw UnexpectedValueException instead of silently returning 0/false when the value cannot be converted

8.0

  • Drop HTTP method override support for methods GET, HEAD, CONNECT and TRACE
  • Add argument $subtypeFallback to Request::getFormat()
  • Remove the following deprecated session options from NativeSessionStorage: referer_check, use_only_cookies, use_trans_sid, sid_length, sid_bits_per_character, trans_sid_hosts, trans_sid_tags
  • Trigger PHP warning when using Request::sendHeaders() after headers have already been sent; use a StreamedResponse instead
  • Add arguments $v4Bytes and $v6Bytes to IpUtils::anonymize()
  • Add argument $partitioned to ResponseHeaderBag::clearCookie()
  • Add argument $expiration to UriSigner::sign()
  • Remove Request::get(), use properties ->attributes, query or request directly instead
  • Remove accepting null $format argument to Request::setFormat()

7.4

  • Add #[WithHttpStatus] to define status codes: 404 for SignedUriException and 403 for ExpiredSignedUriException
  • Add support for the QUERY HTTP method
  • Add support for structured MIME suffix
  • Add Request::set/getAllowedHttpMethodOverride() to list which HTTP methods can be overridden
  • Deprecate using Request::sendHeaders() after headers have already been sent; use a StreamedResponse instead
  • Deprecate method Request::get(), use properties ->attributes, query or request directly instead
  • Make Request::createFromGlobals() parse the body of PUT, DELETE, PATCH and QUERY requests

... (truncated)

Commits
  • f7b953b Merge branch '6.4' into 7.4
  • 08bbdd5 Merge branch '5.4' into 6.4
  • 94d8b4e [HttpFoundation] Remove the ambiguity that makes HeaderUtils::split() backtrack
  • c8c9a07 Merge branch '6.4' into 7.4
  • 7846e65 [HttpFoundation] Require the ffff marker when detecting IPv4-mapped addresses
  • f22c90e [HttpFoundation] Fix IpUtils::anonymize() for non-canonical IPv4-mapped addre...
  • f43bbad Merge branch '6.4' into 7.4
  • b2951f1 [Semaphore][HttpFoundation] Stop flushing the shared Redis database in tests
  • 3e52f3a Merge branch '6.4' into 7.4
  • b62a1c2 [HttpFoundation] Drop a setAccessible() call that came up from 5.4
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump symfony/http-foundation from 7.2.3 to 7.4.19
82e3b53 
Bumps [symfony/http-foundation](https://github.com/symfony/http-foundation) from 7.2.3 to 7.4.19.
- [Release notes](https://github.com/symfony/http-foundation/releases)
- [Changelog](https://github.com/symfony/http-foundation/blob/8.2/CHANGELOG.md)
- [Commits](symfony/http-foundation@v7.2.3...v7.4.19)

---
updated-dependencies:
- dependency-name: symfony/http-foundation
  dependency-version: 7.4.19
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Oct 2, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #19.

@dependabot dependabot Bot closed this Oct 2, 2026
@dependabot
dependabot Bot deleted the dependabot/app-044530d861 branch October 2, 2026 21:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants