fix(deps): require patched Symfony framework components by brianvarskonst · Pull Request #14 · SymPress/framework-bundle

brianvarskonst · 2026-11-06T08:25:09Z

Changes

Raise the affected direct Symfony component floors to 8.1.11 and update the tracked versions.
Exercise the updated Symfony FrameworkBundle and Yaml dependency boundaries.
Update the PHPUnit lock in a separate commit to resolve CVE-2026-119193 in the required audit.

Local strict Composer validation, locked audit, platform check and Composer QA.
The four local backend cases require services provisioned by the backend smoke workflow.

brianvarskonst added 3 commits November 6, 2026 09:23

fix(deps): apply November Symfony security updates

7cdb5dd

fix(test): patch PHPUnit advisory blocking Composer audit

890e395

fix(deps): require the patched Kernel release

142651e

brianvarskonst merged commit e1ed6cb into main Nov 6, 2026
4 checks passed

brianvarskonst deleted the fix/symfony-security-20261104 branch November 6, 2026 08:33