Skip to content

[TASK]: bump symfony/dependency-injection from 7.3.11 to 7.4.23 in /ci - #612

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/ci/symfony/dependency-injection-7.4.23
Open

[TASK]: bump symfony/dependency-injection from 7.3.11 to 7.4.23 in /ci#612
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/ci/symfony/dependency-injection-7.4.23

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor

Bumps symfony/dependency-injection from 7.3.11 to 7.4.23.

Release notes

Sourced from symfony/dependency-injection's releases.

v7.4.23

Changelog (symfony/dependency-injection@v7.4.22...v7.4.23)

[SECURITY] Security release

v7.4.22

Changelog (symfony/dependency-injection@v7.4.21...v7.4.22)

[SECURITY] Security release

v7.4.21

Changelog (symfony/dependency-injection@v7.4.20...v7.4.21)

v7.4.20

Changelog (symfony/dependency-injection@v7.4.17...v7.4.20)

v7.4.17

Changelog (symfony/dependency-injection@v7.4.16...v7.4.17)

... (truncated)

Changelog

Sourced from symfony/dependency-injection's changelog.

CHANGELOG

8.2

  • [BC BREAK] Make #[AutowireCallable] and #[AutowireMethodOf] lazy by default
  • Add the on_shutdown attribute on kernel.reset tags to pass a shutdown flag or call a method only on shutdown
  • Add argument $shutdown to Container::reset()
  • [BC BREAK] Add argument $shutdown to ServicesResetter::reset() and ServicesResetterInterface::reset()
  • [BC BREAK] Add return type void to ServicesResetterInterface::reset()
  • Mark ServicesResetter as @final
  • Make Container::reset() use only services_resetter when available
  • Add an autowiring alias for Symfony\Contracts\EventDispatcher\ListenerIntrospectionInterface
  • Deprecate the Symfony\Component\EventDispatcher\EventDispatcherInterface autowiring alias, type the one from the EventDispatcher contracts instead
  • Resolve env vars while the container is compiled for the configuration nodes declared with NodeDefinition::resolvesAtCompileTime()
  • Pass top-level extension values that are not arrays to the extension instead of replacing them with an empty array
  • Add the before and after tag attributes and #[AsTaggedItem] arguments to order tagged services, and BeforeAfterSorter
  • Add within and around to #[AsDecorator] and #[AsTagDecorator], the decoration_within and decoration_around keys and the container.decoration_order tag, to order decorators
  • [BC BREAK] Make AsDecorator::$priority and AsTagDecorator::$priority nullable, defaulting to null
  • Name the package to install when an extension is missing, for the configuration keys declared in the .container.extension_packages build parameter
  • Add the container.remove_if_missing tag to drop a definition when a service, a class or a package it needs is not there
  • Add ContainerBuilder::setExtensionConfig()
  • Forward the configuration of the nodes declared with NodeDefinition::aliasOf() to the extension with that alias in MergeExtensionConfigurationPass
  • Allow computing the attributes of tags and resource tags per class with #[AutoconfigureTag], #[AutoconfigureResourceTag], #[Autoconfigure] or _instanceof, by passing a \Closure or a [class-string, method] callable
  • Call #[Required] methods in the order defined by the attribute's $priority argument
  • Add support for injecting a service as a lazy proxy on a per-argument basis, using the !lazy_proxy YAML tag, the @~ reference prefix or the lazy_proxy() function in the PHP-DSL
  • Write a CACHEDIR.TAG file in the cache and build directories so backup tools can skip them
  • Add a factory argument to the #[Autoconfigure] attribute, and support the factory key under _instanceof
  • Add Preloader::ignore() to exclude classes or namespace prefixes from preloading
  • Add #[AutowireClassMap] attribute, TaggedClassMapArgument, the !tagged_class_map YAML tag and the tagged_class_map() PHP-DSL function to inject a map of classes found by resource tag name
  • Instantiate on demand the bundles that have nothing to do when the kernel boots, and add AbstractKernel::instantiateBundle() to control how they are created
  • Dump the container's compiler log in all environments, not only when debug mode is enabled
  • Add #[AsCallable] to expose a public method of a service as a service of its own
  • Reset the container in AbstractKernel::shutdown(), so that its services are released even when something still references the container
  • Release the listeners of the event_dispatcher service when the kernel shuts down
  • Generate JSON schema for YAML configuration of bundles

8.1

  • Support autowiring env vars as closures or Stringable when using #[Autowire(env: 'FOO')]
  • Add EnvClosureArgument and !env_closure YAML tag to inject env vars as closures or Stringable arguments
  • Add AddBehaviorDescribingTagsPass to allow bundles to extend the list of behavior-describing tags
  • Add Kernel and Bundle infrastructure in the Kernel\ subnamespace
  • Add $extensions parameter to MergeExtensionConfigurationPass to ensure registered extensions are implicitly loaded
  • Add support for using service stacks as decorators, including decorates_tag
  • Add support for decorating all services with a specific tag using the container.tag_decorator resource tag or #[AsTagDecorator]
  • Add support for SOURCE_DATE_EPOCH environment variable
  • Deprecate configuring options alias, parent, synthetic, file, arguments, properties, configurator or calls when using from_callable

... (truncated)

Commits
  • 4df0d83 [DependencyInjection] Fix #[Target] resolution when two names give the same...
  • f98a1b0 Merge branch '6.4' into 7.4
  • 6bcba54 [DependencyInjection] Tolerate the interface proxy trait of newer VarExporter...
  • 307c934 [DependencyInjection] Fix lazy closures for methods returning a nullable or u...
  • 35653f6 Merge branch '6.4' into 7.4
  • ea206a4 [DependencyInjection] Preserve XML schema temporary files in forked processes
  • bbf877e Merge branch '6.4' into 7.4
  • 5d75525 [DependencyInjection] Fix lazy closures for static and never-returning methods
  • f0b436c Merge branch '6.4' into 7.4
  • d4674f5 [DependencyInjection] Fix process() running twice on extensions also regist...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
[TASK]: bump symfony/dependency-injection from 7.3.11 to 7.4.23 in /ci
6427528 
Bumps [symfony/dependency-injection](https://github.com/symfony/dependency-injection) from 7.3.11 to 7.4.23.
- [Release notes](https://github.com/symfony/dependency-injection/releases)
- [Changelog](https://github.com/symfony/dependency-injection/blob/8.2/CHANGELOG.md)
- [Commits](symfony/dependency-injection@v7.3.11...v7.4.23)

---
updated-dependencies:
- dependency-name: symfony/dependency-injection
  dependency-version: 7.4.23
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Nov 11, 2026
@sonarqubecloud

sonarqubecloud Bot commented Nov 11, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants