(chore): Bump the composer group with 13 updates by dependabot[bot] · Pull Request #109 · yardinternet/wp-user-roles

dependabot · 2026-06-02T20:47:52Z

Bumps the composer group with 13 updates:

Package	From	To
symfony/console	`6.4.39`	`6.4.41`
symfony/http-foundation	`6.4.35`	`6.4.41`
symfony/http-kernel	`6.4.40`	`6.4.41`
symfony/mime	`6.4.40`	`6.4.41`
symfony/polyfill-intl-grapheme	`1.38.0`	`1.38.1`
symfony/polyfill-php83	`1.38.0`	`1.38.1`
symfony/process	`6.4.39`	`6.4.41`
symfony/routing	`6.4.40`	`6.4.41`
symfony/string	`7.4.11`	`7.4.13`
friendsofphp/php-cs-fixer	`3.95.2`	`3.95.3`
symfony/polyfill-php81	`1.37.0`	`1.38.1`
symfony/polyfill-php84	`1.38.0`	`1.38.1`
symfony/yaml	`6.4.40`	`6.4.41`

Updates symfony/console from 6.4.39 to 6.4.41

Release notes

Sourced from symfony/console's releases.

v6.4.41

Changelog (symfony/console@v6.4.39...v6.4.41)

bug #64355 Format message in ConsoleSectionOutput::overwrite() (@nicolas-grekas)

Commits

d21b17e [Console] Format message in ConsoleSectionOutput::overwrite()
See full diff in compare view

Updates symfony/http-foundation from 6.4.35 to 6.4.41

Release notes

Sourced from symfony/http-foundation's releases.

v6.4.41

Changelog (symfony/http-foundation@v6.4.35...v6.4.41)

security #cve-2026-48736 Block IPv6 transition forms in IpUtils::PRIVATE_SUBNETS (@nicolas-grekas)

Commits

48d76c2 security #cve-2026-48736 [HttpFoundation] Block IPv6 transition forms in IpUt...
10d5daa [HttpFoundation] Fix tests for PHP 8.6: session.cookie_samesite=Lax
3ebc78a [HttpFoundation] Block IPv6 transition forms in IpUtils::PRIVATE_SUBNETS
5402ad1 Remove wrong documentation
92eeee6 CS fixes - native_function_invocation & static_lambda
See full diff in compare view

Updates symfony/http-kernel from 6.4.40 to 6.4.41

Release notes

Sourced from symfony/http-kernel's releases.

v6.4.41

Changelog (symfony/http-kernel@v6.4.40...v6.4.41)

data #64371 Release v6.4.41

bug #64310 Check logs priority name for both WARNING and warning (@MatTheCat)

data #64302 Release v5.4.52

Commits

155f6c1 Update VERSION for 6.4.41
3629a32 [HttpKernel][WebProfilerBundle] Check logs priority name for both WARNING a...
bb9cc96 Bump Symfony version to 6.4.41
See full diff in compare view

Updates symfony/mime from 6.4.40 to 6.4.41

Release notes

Sourced from symfony/mime's releases.

v6.4.41

Changelog (symfony/mime@v6.4.40...v6.4.41)

bug #64343 Harden __unserialize against __toString trampolines (@nicolas-grekas)

Commits

5575d37 [Routing][RateLimiter][Mime][Security] Harden __unserialize against __toStrin...
See full diff in compare view

Updates symfony/polyfill-intl-grapheme from 1.38.0 to 1.38.1

Release notes

Sourced from symfony/polyfill-intl-grapheme's releases.

v1.38.1

Changelog (symfony/polyfill-intl-grapheme@v1.38.0...v1.38.1)

bug #616 Fix grapheme_str_split() on PCRE 8 (@GPHemsley)

Commits

e9247d2 bug #616 Fix grapheme_str_split() on PCRE 8 (GPHemsley)
4c2db01 Fix grapheme_str_split() on PCRE 8
60fa111 Fix grapheme_levenshtein() class in Intl/Grapheme/bootstrap.php
See full diff in compare view

Updates symfony/polyfill-php83 from 1.38.0 to 1.38.1

Release notes

Sourced from symfony/polyfill-php83's releases.

v1.38.1

Changelog (symfony/polyfill-php83@v1.38.0...v1.38.1)

bug #619 Isolate PHP 7 mb_* declarations into bootstrap72.php (@nicolas-grekas)

Commits

8339098 [Mbstring][Php83][Php84] Isolate PHP 7 mb_* declarations into bootstrap72.php
See full diff in compare view

Updates symfony/process from 6.4.39 to 6.4.41

Release notes

Sourced from symfony/process's releases.

v6.4.41

Changelog (symfony/process@v6.4.39...v6.4.41)

bug #64347 Stop leaking CGI/FastCGI request-context vars to subprocesses (@nicolas-grekas)

Commits

c8fc09b [Process] Stop leaking CGI/FastCGI request-context vars to subprocesses
See full diff in compare view

Updates symfony/routing from 6.4.40 to 6.4.41

Release notes

Sourced from symfony/routing's releases.

v6.4.41

Changelog (symfony/routing@v6.4.40...v6.4.41)

security #cve-2026-48784 Fix dot-segment encoding for chained "../" and "./" in generated URLs (@nicolas-grekas)

bug #64343 Harden __unserialize against __toString trampolines (@nicolas-grekas)

Commits

af04c79 Merge branch '5.4' into 6.4
be4ce34 [Routing][RateLimiter][Mime][Security] Harden __unserialize against __toStrin...
f4ca0c5 [Routing] Fix dot-segment encoding for chained "../" and "./" in generated URLs
See full diff in compare view

Updates symfony/string from 7.4.11 to 7.4.13

Release notes

Sourced from symfony/string's releases.

v7.4.13

Changelog (symfony/string@v7.4.11...v7.4.13)

bug #64345 Reject objects in typed-string properties during __unserialize (@nicolas-grekas)

Commits

9616830 [String][Mime] Reject objects in typed-string properties during __unserialize
See full diff in compare view

Updates friendsofphp/php-cs-fixer from 3.95.2 to 3.95.3

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.3 Adalbertus

What's Changed

fix: PhpdocLineSpanFixer - run after NoSuperfluousPhpdocTagsFixer by @gharlan in PHP-CS-Fixer/PHP-CS-Fixer#9615

fix: MultilinePromotedPropertiesFixer - fix for new in initializers by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9619

deps: bump crate-ci/typos from 1.46.0 to 1.46.1 in /.github/workflows in the all group across 1 directory by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9624

deps: upgrade misc deps by @keradus in PHP-CS-Fixer/PHP-CS-Fixer#9621

CI: replace PHP 8.6snapshot with nightly in matrix by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9628

deps: bump the phpstan group in /dev-tools with 2 updates by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9626

deps: bump ergebnis/composer-normalize from 2.51.0 to 2.52.0 in /dev-tools by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9627

refactor: AttributeBlockNoSpacesFixer - no need for loop when we already know bracket indices by @keradus in PHP-CS-Fixer/PHP-CS-Fixer#9446

deps: bump crate-ci/typos from 1.46.1 to 1.46.2 in /.github/workflows in the all group across 1 directory by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9631

CI: add generic phpstan/phpstan-deprecation-rules, so usage of old deprecated constants is detected by @keradus in PHP-CS-Fixer/PHP-CS-Fixer#9636

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.2...v3.95.3

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.3

fix: MultilinePromotedPropertiesFixer - fix for new in initializers (#9619)

fix: PhpdocLineSpanFixer - run after NoSuperfluousPhpdocTagsFixer (#9615)

CI: add generic phpstan/phpstan-deprecation-rules, so usage of old deprecated constants is detected (#9636)

CI: replace PHP 8.6snapshot with nightly in matrix (#9628)

deps: bump crate-ci/typos from 1.46.0 to 1.46.1 in /.github/workflows in the all group across 1 directory (#9624)

deps: bump crate-ci/typos from 1.46.1 to 1.46.2 in /.github/workflows in the all group across 1 directory (#9631)

deps: bump ergebnis/composer-normalize from 2.51.0 to 2.52.0 in /dev-tools (#9627)

deps: bump the phpstan group in /dev-tools with 2 updates (#9626)

deps: upgrade misc deps (#9621)

refactor: AttributeBlockNoSpacesFixer - no need for loop when we already know bracket indices (#9446)

Commits

3d68149 prepared the 3.95.3 release
b102b3b CI: add generic phpstan/phpstan-deprecation-rules, so usage of old deprecated...
9a38a90 deps: bump crate-ci/typos from 1.46.1 to 1.46.2 in /.github/workflows in the ...
ebae9f6 refactor: AttributeBlockNoSpacesFixer - no need for loop when we already know...
78212cb deps: bump ergebnis/composer-normalize from 2.51.0 to 2.52.0 in /dev-tools (#...
bdfe29e deps: bump the phpstan group in /dev-tools with 2 updates (#9626)
2af6d2c CI: replace PHP 8.6snapshot with nightly in matrix (#9628)
c909a21 fix: MultilinePromotedPropertiesFixer - fix for new in initializers (#9619)
f0f2d4e fix: PhpdocLineSpanFixer - run after NoSuperfluousPhpdocTagsFixer (#9615)
bb6a12a deps: upgrade misc deps (#9621)
Additional commits viewable in compare view

Updates symfony/polyfill-php81 from 1.37.0 to 1.38.1

Release notes

Sourced from symfony/polyfill-php81's releases.

v1.38.1

Changelog (symfony/polyfill-php81@v1.31.0...v1.38.1)

bug #617 Polyfill more cURL constants (@GPHemsley)

Commits

6bfb9c7 Polyfill more cURL constants
See full diff in compare view

Updates symfony/polyfill-php84 from 1.38.0 to 1.38.1

Release notes

Sourced from symfony/polyfill-php84's releases.

v1.38.1

Changelog (symfony/polyfill-php84@v1.38.0...v1.38.1)

bug #619 Isolate PHP 7 mb_* declarations into bootstrap72.php (@nicolas-grekas)

bug #617 Polyfill more cURL constants (@GPHemsley)

bug #618 fix: Correctly define MySQL constants (@mitelg)

bug #616 Fix grapheme_str_split() on PCRE 8 (@GPHemsley)

Commits

f4e1dfa [Mbstring][Php83][Php84] Isolate PHP 7 mb_* declarations into bootstrap72.php
073deee Polyfill more cURL constants
df1a8fe fix: Correctly define MySQL constants
19de4b0 Fix grapheme_str_split() on PCRE 8
See full diff in compare view

Updates symfony/yaml from 6.4.40 to 6.4.41

Release notes

Sourced from symfony/yaml's releases.

v6.4.41

Changelog (symfony/yaml@v6.4.40...v6.4.41)

bug #64316 Allow trailing newlines after the end-of-document marker (@nicolas-grekas)

Commits

e8fdf34 CS fix
69b7344 Merge branch '5.4' into 6.4
ae0bbb4 [Yaml] Allow trailing newlines after the end-of-document marker
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the composer group with 13 updates: | Package | From | To | | --- | --- | --- | | [symfony/console](https://github.com/symfony/console) | `6.4.39` | `6.4.41` | | [symfony/http-foundation](https://github.com/symfony/http-foundation) | `6.4.35` | `6.4.41` | | [symfony/http-kernel](https://github.com/symfony/http-kernel) | `6.4.40` | `6.4.41` | | [symfony/mime](https://github.com/symfony/mime) | `6.4.40` | `6.4.41` | | [symfony/polyfill-intl-grapheme](https://github.com/symfony/polyfill-intl-grapheme) | `1.38.0` | `1.38.1` | | [symfony/polyfill-php83](https://github.com/symfony/polyfill-php83) | `1.38.0` | `1.38.1` | | [symfony/process](https://github.com/symfony/process) | `6.4.39` | `6.4.41` | | [symfony/routing](https://github.com/symfony/routing) | `6.4.40` | `6.4.41` | | [symfony/string](https://github.com/symfony/string) | `7.4.11` | `7.4.13` | | [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) | `3.95.2` | `3.95.3` | | [symfony/polyfill-php81](https://github.com/symfony/polyfill-php81) | `1.37.0` | `1.38.1` | | [symfony/polyfill-php84](https://github.com/symfony/polyfill-php84) | `1.38.0` | `1.38.1` | | [symfony/yaml](https://github.com/symfony/yaml) | `6.4.40` | `6.4.41` | Updates `symfony/console` from 6.4.39 to 6.4.41 - [Release notes](https://github.com/symfony/console/releases) - [Changelog](https://github.com/symfony/console/blob/8.2/CHANGELOG.md) - [Commits](symfony/console@v6.4.39...v6.4.41) Updates `symfony/http-foundation` from 6.4.35 to 6.4.41 - [Release notes](https://github.com/symfony/http-foundation/releases) - [Changelog](https://github.com/symfony/http-foundation/blob/8.2/CHANGELOG.md) - [Commits](symfony/http-foundation@v6.4.35...v6.4.41) Updates `symfony/http-kernel` from 6.4.40 to 6.4.41 - [Release notes](https://github.com/symfony/http-kernel/releases) - [Changelog](https://github.com/symfony/http-kernel/blob/8.2/CHANGELOG.md) - [Commits](symfony/http-kernel@v6.4.40...v6.4.41) Updates `symfony/mime` from 6.4.40 to 6.4.41 - [Release notes](https://github.com/symfony/mime/releases) - [Changelog](https://github.com/symfony/mime/blob/8.2/CHANGELOG.md) - [Commits](symfony/mime@v6.4.40...v6.4.41) Updates `symfony/polyfill-intl-grapheme` from 1.38.0 to 1.38.1 - [Release notes](https://github.com/symfony/polyfill-intl-grapheme/releases) - [Commits](symfony/polyfill-intl-grapheme@v1.38.0...v1.38.1) Updates `symfony/polyfill-php83` from 1.38.0 to 1.38.1 - [Release notes](https://github.com/symfony/polyfill-php83/releases) - [Commits](symfony/polyfill-php83@v1.38.0...v1.38.1) Updates `symfony/process` from 6.4.39 to 6.4.41 - [Release notes](https://github.com/symfony/process/releases) - [Changelog](https://github.com/symfony/process/blob/8.2/CHANGELOG.md) - [Commits](symfony/process@v6.4.39...v6.4.41) Updates `symfony/routing` from 6.4.40 to 6.4.41 - [Release notes](https://github.com/symfony/routing/releases) - [Changelog](https://github.com/symfony/routing/blob/8.2/CHANGELOG.md) - [Commits](symfony/routing@v6.4.40...v6.4.41) Updates `symfony/string` from 7.4.11 to 7.4.13 - [Release notes](https://github.com/symfony/string/releases) - [Changelog](https://github.com/symfony/string/blob/8.2/CHANGELOG.md) - [Commits](symfony/string@v7.4.11...v7.4.13) Updates `friendsofphp/php-cs-fixer` from 3.95.2 to 3.95.3 - [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases) - [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md) - [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.2...v3.95.3) Updates `symfony/polyfill-php81` from 1.37.0 to 1.38.1 - [Release notes](https://github.com/symfony/polyfill-php81/releases) - [Commits](symfony/polyfill-php81@v1.37.0...v1.38.1) Updates `symfony/polyfill-php84` from 1.38.0 to 1.38.1 - [Release notes](https://github.com/symfony/polyfill-php84/releases) - [Commits](symfony/polyfill-php84@v1.38.0...v1.38.1) Updates `symfony/yaml` from 6.4.40 to 6.4.41 - [Release notes](https://github.com/symfony/yaml/releases) - [Changelog](https://github.com/symfony/yaml/blob/8.2/CHANGELOG.md) - [Commits](symfony/yaml@v6.4.40...v6.4.41) --- updated-dependencies: - dependency-name: symfony/console dependency-version: 6.4.41 dependency-type: indirect update-type: version-update:semver-patch dependency-group: composer - dependency-name: symfony/http-foundation dependency-version: 6.4.41 dependency-type: indirect update-type: version-update:semver-patch dependency-group: composer - dependency-name: symfony/http-kernel dependency-version: 6.4.41 dependency-type: indirect update-type: version-update:semver-patch dependency-group: composer - dependency-name: symfony/mime dependency-version: 6.4.41 dependency-type: indirect update-type: version-update:semver-patch dependency-group: composer - dependency-name: symfony/polyfill-intl-grapheme dependency-version: 1.38.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: composer - dependency-name: symfony/polyfill-php83 dependency-version: 1.38.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: composer - dependency-name: symfony/process dependency-version: 6.4.41 dependency-type: indirect update-type: version-update:semver-patch dependency-group: composer - dependency-name: symfony/routing dependency-version: 6.4.41 dependency-type: indirect update-type: version-update:semver-patch dependency-group: composer - dependency-name: symfony/string dependency-version: 7.4.13 dependency-type: indirect update-type: version-update:semver-patch dependency-group: composer - dependency-name: friendsofphp/php-cs-fixer dependency-version: 3.95.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: composer - dependency-name: symfony/polyfill-php81 dependency-version: 1.38.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: composer - dependency-name: symfony/polyfill-php84 dependency-version: 1.38.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: composer - dependency-name: symfony/yaml dependency-version: 6.4.41 dependency-type: indirect update-type: version-update:semver-patch dependency-group: composer ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-06-02T20:48:12Z

Composer package changes

Prod Packages	Operation	Base	Target	Link	License
symfony/console	Upgraded	v6.4.39	v6.4.41	Compare	MIT
symfony/http-foundation	Upgraded	v6.4.35	v6.4.41	Compare	MIT
symfony/http-kernel	Upgraded	v6.4.40	v6.4.41	Compare	MIT
symfony/mime	Upgraded	v6.4.40	v6.4.41	Compare	MIT
symfony/polyfill-intl-grapheme	Upgraded	v1.38.0	v1.38.1	Compare	MIT
symfony/polyfill-php83	Upgraded	v1.38.0	v1.38.1	Compare	MIT
symfony/process	Upgraded	v6.4.39	v6.4.41	Compare	MIT
symfony/routing	Upgraded	v6.4.40	v6.4.41	Compare	MIT
symfony/string	Upgraded	v7.4.11	v7.4.13	Compare	MIT

Dev Packages	Operation	Base	Target	Link	License
friendsofphp/php-cs-fixer	Upgraded	v3.95.2	v3.95.3	Compare	MIT
symfony/polyfill-php81	Upgraded	v1.37.0	v1.38.1	Compare	MIT
symfony/polyfill-php84	Upgraded	v1.38.0	v1.38.1	Compare	MIT
symfony/yaml	Upgraded	v6.4.40	v6.4.41	Compare	MIT

github-actions · 2026-06-02T20:48:34Z

Coverage report for commit: 83c53aa
File: coverage.xml

Cover ┌─────────────────────────┐ Freq.
   0% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  10% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  20% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  30% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  40% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  50% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  60% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  70% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  80% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  90% │ ████████░░░░░░░░░░░░░░░ │ 25.0%
 100% │ ███████████████████████ │ 75.0%
      └─────────────────────────┘
 *Legend:* █ = Current Distribution

Summary - Lines: 91.74% | Methods: 95.45%

Files	Lines	Methods	Branches
src/Console
UserRolesCommand.php	100.00%	100.00%	100.00%
src/Facades
UserRoles.php	100.00%	100.00%	100.00%
src
UserRoles.php	90.53%	94.12%	100.00%
UserRolesServiceProvider.php	100.00%	100.00%	100.00%

_{🤖 comment via lucassabreu/comment-coverage-clover}

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Jun 2, 2026

yard-bot approved these changes Jun 2, 2026

View reviewed changes

yard-bot merged commit 0aade85 into main Jun 2, 2026
4 checks passed

yard-bot deleted the dependabot/composer/composer-0dbae926ec branch June 2, 2026 20:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

(chore): Bump the composer group with 13 updates#109

(chore): Bump the composer group with 13 updates#109
yard-bot merged 1 commit into
mainfrom
dependabot/composer/composer-0dbae926ec

dependabot Bot commented on behalf of github Jun 2, 2026

Uh oh!

Uh oh!

github-actions Bot commented Jun 2, 2026

Uh oh!

github-actions Bot commented Jun 2, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 2, 2026

v6.4.41

v6.4.41

v6.4.41

v6.4.41

v1.38.1

v1.38.1

v6.4.41

v6.4.41

v7.4.13

v3.95.3 Adalbertus

What's Changed

Changelog for v3.95.3

v1.38.1

v1.38.1

v6.4.41

Uh oh!

Uh oh!

github-actions Bot commented Jun 2, 2026

Uh oh!

github-actions Bot commented Jun 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions Bot commented Jun 2, 2026 •

edited

Loading