Skip to content

[php] New version of symfony/http-foundation (8.1.10) broke the build - #5

Open
depfu[bot] wants to merge 1 commit into
mainfrom
depfu/check/composer/symfony/http-foundation-8.1.10
Open

depfu[bot] wants to merge 1 commit into
mainfrom
depfu/check/composer/symfony/http-foundation-8.1.10

Conversation

@depfu

@depfu depfu Bot commented Nov 2, 2026

Copy link
Copy Markdown

We've tested your project with an updated dependency and the build failed.

This version is either within the version range you specified or you haven't specified a version/range. To be able to test your project with the new version, we've taken the liberty of pinning the version for this branch and pull request.

name version specification new version
symfony/http-foundation ^5.2 ^6.0

Unfortunately, we encountered failing tests after pinning. This means that this new version is not compatible with your project and the test failure will potentially also happen on fresh installs.

If you have correctly specified a semantic versioning version range, you should probably also file an issue with the upstream project as they might have released an update that's breaking SemVer rules, which is not cool. (But then again, not all projects explicitly follow SemVer)

We've left the pull request open for you to investigate this issue. Please don't merge it as is, because, again, we've pinned the version of symfony/http-foundation for this test run.

What changed?

✳️ symfony/http-foundation (^5.2|^6.0|^7.0|^8.0 → 8.1.10) · Repo · Changelog

Release Notes

8.1.10

Changelog (v8.1.9...v8.1.10)

  • bug #67504 Ignore malformed and multiple ranges in BinaryFileResponse (@jack-worman)
  • bug #67501 Don't reject suffix ranges longer than the file in BinaryFileResponse (@jack-worman)
  • bug #67496 Match whole subtags in Request::getPreferredLanguage() (@nicolas-grekas)
  • bug #67296 Handle filter failures in array values (@nicolas-grekas)
  • bug #67345 Fix cookie names and header parsing (@nicolas-grekas)
  • bug #67126 Fix MigratingSessionHandler sending needless cookies to delete empty sessions (@nicolas-grekas)
  • bug #67123 Destroy empty sessions in updateTimestamp() of the Redis, Memcached, MongoDb and Pdo session handlers (@PhilETaylor)
  • bug #67125 Don't marshall empty session data in MarshallingSessionHandler (@nicolas-grekas)
  • bug #67059 Don't announce a Content-Length on non-successful BinaryFileResponse (@lazerg)
  • bug #67060 Register the session shutdown function only once in NativeSessionStorage (@lazerg)

[SECURITY] Security release

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 26 commits:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants