[dependabot]

Bumps symfony/mime from 7.2.4 to 7.4.19.

Release notes

Sourced from symfony/mime's releases.

v7.4.19

Changelog (symfony/mime@v7.4.18...v7.4.19)

• bug #65844 Reject header names containing non-printable or non-ASCII characters (@​nicolas-grekas)
• bug #65778 Never emit a raw control character in a header (@​Spomky)
• bug #65777 Do not treat an "@" inside the domain as the addr-spec separator (@​Spomky)

v7.4.18

Changelog (symfony/mime@v7.4.17...v7.4.18)

• bug #65744 Reject an unquoted "@" in the local part of an email address (@​nicolas-grekas)

v7.4.17

Changelog (symfony/mime@v7.4.16...v7.4.17)

• bug #65541 Fix denormalizing mime messages typed as RawMessage (@​nicolas-grekas)
• bug #65509 Reject an unquoted "@" in the local part of an email address (@​nicolas-grekas)
• bug #65264 Do not drop the last line of a resource-backed message (@​sadiqk2)

v7.4.16

Changelog (symfony/mime@v7.4.15...v7.4.16)

• bug #65128 Escape backslashes in Address::getEncodedName() (@​munzzyy)
• bug #65062 Fix corrupted CID references when one is a prefix of another (@​MarcinOrlowski)

v7.4.15

Changelog (symfony/mime@v7.4.13...v7.4.15)

• bug #65025 Check the denormalized class is a Mime part in MimeMessageNormalizer (@​nicolas-grekas)
• bug #64741 Fix dropped whitespace between multiple encoded words (@​eyupcanakman)

v7.4.13

Changelog (symfony/mime@v7.4.12...v7.4.13)

• bug #64345 Reject objects in typed-string properties during __unserialize (@​nicolas-grekas)
• bug #64343 Harden __unserialize against __toString trampolines (@​nicolas-grekas)

v7.4.12

Changelog (symfony/mime@v7.4.9...v7.4.12)

• security #cve-2026-45067 Reject email addresses containing line breaks in Address (@​alexandre-daubois)

v7.4.9

Changelog (symfony/mime@v7.4.8...v7.4.9)

• bug #64047 Preserve inline part filename instead of overwriting it with the Content-ID (@​ousamabenyounes)
• bug #64044 Apply tagged MIME type guessers in File::getMimeType() (@​ousamabenyounes)

v7.4.8

Changelog (symfony/mime@v7.4.7...v7.4.8)

... (truncated)

Changelog

Sourced from symfony/mime's changelog.

CHANGELOG

8.2

• Add MimeBundle, which provides the MIME type guessing services previously provided by FrameworkBundle
• Support binary as a Content-Transfer-Encoding
• Add PGP/MIME signing and encryption support with the PgpSigner and PgpEncrypter classes
• Add AbstractPart::setContentTypeParameter()
• Add the Group class to put a group of mailboxes in a mailbox list header (RFC 5322 and RFC 6854)
• Add MailboxListHeader::getAddressList() and MailboxListHeader::createAddressList()
• Make Email::ensureBodyValid() protected to allow subclasses adjusting the body validation

8.0

• Replace __sleep/wakeup() by __(un)serialize() on AbstractPart implementations

7.4

• Deprecate implementing __sleep/wakeup() on AbstractPart implementations; use __(un)serialize() instead

7.0

• Remove Email::attachPart(), use Email::addPart() instead
• Argument $body is now required (at least null) in Message::setBody()
• Require explicit argument when calling Message::setBody()

6.3

• Support detection of related parts if Content-Id is used instead of the name
• Add TextPart::getDisposition()

6.2

• Add File
• Deprecate Email::attachPart(), use addPart() instead
• Deprecate calling Message::setBody() without arguments

6.1

• Add DataPart::getFilename() and DataPart::getContentType()

6.0

... (truncated)

Commits

• f8ac7d0 [Mime] Use the DataProvider attribute for two tests that came up from 5.4
• fc75b75 Merge branch '6.4' into 7.4
• e700a98 Merge branch '5.4' into 6.4
• 29be8da [Mime] Reject header names containing non-printable or non-ASCII characters
• 0aae6c1 Merge branch '6.4' into 7.4
• f76eeac Merge branch '5.4' into 6.4
• 0d88fa0 [Mime] Never emit a raw control character in a header
• 2eff72b [Mime] Do not treat an "@" inside the domain as the addr-spec separator
• 3f072ee [Mime] Reject an unquoted "@" in the local part of an email address
• 0a02345 [Mime][TwigBridge] Pin symfony/serializer below 6.4.44 for the tests
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[Moritz Mazetti (Radiergummi)]

Superseded by #29, which refreshed the whole lock file.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.