Skip to content

Bump symfony/yaml from 7.2.3 to 7.4.21 - #26

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/app-22bd0f984e
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/app-22bd0f984e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps symfony/yaml from 7.2.3 to 7.4.21.

Release notes

Sourced from symfony/yaml's releases.

v7.4.21

Changelog (symfony/yaml@v7.4.20...v7.4.21)

v7.4.20

Changelog (symfony/yaml@v7.4.18...v7.4.20)

v7.4.18

Changelog (symfony/yaml@v7.4.17...v7.4.18)

v7.4.17

Changelog (symfony/yaml@v7.4.15...v7.4.17)

v7.4.15

Changelog (symfony/yaml@v7.4.14...v7.4.15)

v7.4.14

Changelog (symfony/yaml@v7.4.13...v7.4.14)

v7.4.13

Changelog (symfony/yaml@v7.4.12...v7.4.13)

... (truncated)

Changelog

Sourced from symfony/yaml's changelog.

CHANGELOG

8.2

  • Add support for the !!null, !!bool and !!int tags, and accept quoted values for them and for !!float
  • Throw a ParseException when the value of a !!float tag is not a valid float, instead of casting it to 0.0
  • Add a gitlab output format to the lint:yaml command
  • Add the Schema namespace with SchemaValidatorInterface, SchemaResolverInterface and their SchemaValidator and FileHeaderSchemaResolver implementations, to validate data against a JSON Schema
  • Add JSON Schema validation to the lint:yaml command when opis/json-schema is installed, with the --check-schema/--no-check-schema and --schema options and the # yaml-language-server: $schema= / # $schema= file headers
  • Add support for parsing a block scalar, optionally tagged, as the root node of a document
  • Require the PARSE_CUSTOM_TAGS flag for custom tags on block scalars, as on other values
  • Resolve built-in tags on block scalars as on inline scalars, and throw on the ones that are not implemented

8.0

  • Remove support for parsing duplicate mapping keys whose value is null

7.3

  • Add compact nested mapping support by using the Yaml::DUMP_COMPACT_NESTED_MAPPING flag
  • Add the Yaml::DUMP_FORCE_DOUBLE_QUOTES_ON_VALUES flag to enforce double quotes around string values

7.2

  • Deprecate parsing duplicate mapping keys whose value is null
  • Add support for dumping null as an empty value by using the Yaml::DUMP_NULL_AS_EMPTY flag

7.1

  • Add support for getting all the enum cases with !php/enum Foo

7.0

  • Remove the !php/const: tag, use !php/const instead (without the colon)

6.3

  • Add support to dump int keys as strings by using the Yaml::DUMP_NUMERIC_KEY_AS_STRING flag

6.2

... (truncated)

Commits
  • 0449079 Merge branch '6.4' into 7.4
  • 91288fd [Yaml] Fix parsing timestamps with a fractional second before 1970
  • ec06f7d [Yaml] Throw a ParseException on keys starting with a NUL byte when parsing m...
  • 7214731 Merge branch '6.4' into 7.4
  • ae84b81 [Yaml] Fold trailing and leading white space of multi-line quoted scalars
  • 05d17f9 Merge branch '6.4' into 7.4
  • ba63f03 [Yaml] Do not treat quoted << keys as merge keys
  • 77d75e3 Merge branch '6.4' into 7.4
  • 344b5ef [Yaml] Quote the ... document end marker when dumping
  • 1d59acd Merge branch '6.4' into 7.4
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [symfony/yaml](https://github.com/symfony/yaml) from 7.2.3 to 7.4.21.
- [Release notes](https://github.com/symfony/yaml/releases)
- [Changelog](https://github.com/symfony/yaml/blob/8.2/CHANGELOG.md)
- [Commits](symfony/yaml@v7.2.3...v7.4.21)

---
updated-dependencies:
- dependency-name: symfony/yaml
  dependency-version: 7.4.21
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@Radiergummi

Copy link
Copy Markdown
Member

Superseded by #29, which refreshed the whole lock file.

@Radiergummi
Moritz Mazetti (Radiergummi) deleted the dependabot/app-22bd0f984e branch October 25, 2026 22:53
@dependabot @github

dependabot Bot commented on behalf of github Oct 25, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

1 participant