Commit 5fb64a95 authored by catch's avatar catch
Browse files

Issue #3503195 by alexpott, longwave, loopy1492: Twig needs updating for CVE-2025-24374

parent ab7f10d5

composer.lock

+9 −8
Original line number Diff line number Diff line
@@ -4265,16 +4265,16 @@ 
        },

        {

            "name": "twig/twig",

            "version": "v3.14.2",

            "version": "v3.19.0",

            "source": {

                "type": "git",

                "url": "https://github.com/twigphp/Twig.git",

                "reference": "0b6f9d8370bb3b7f1ce5313ed8feb0fafd6e399a"

                "reference": "d4f8c2b86374f08efc859323dbcd95c590f7124e"

            },

            "dist": {

                "type": "zip",

                "url": "https://api.github.com/repos/twigphp/Twig/zipball/0b6f9d8370bb3b7f1ce5313ed8feb0fafd6e399a",

                "reference": "0b6f9d8370bb3b7f1ce5313ed8feb0fafd6e399a",

                "url": "https://api.github.com/repos/twigphp/Twig/zipball/d4f8c2b86374f08efc859323dbcd95c590f7124e",

                "reference": "d4f8c2b86374f08efc859323dbcd95c590f7124e",

                "shasum": ""

            },

            "require": {
@@ -4285,6 +4285,7 @@ 
                "symfony/polyfill-php81": "^1.29"

            },

            "require-dev": {

                "phpstan/phpstan": "^2.0",

                "psr/container": "^1.0|^2.0",

                "symfony/phpunit-bridge": "^5.4.9|^6.4|^7.0"

            },
@@ -4328,7 +4329,7 @@ 
            ],

            "support": {

                "issues": "https://github.com/twigphp/Twig/issues",

                "source": "https://github.com/twigphp/Twig/tree/v3.14.2"

                "source": "https://github.com/twigphp/Twig/tree/v3.19.0"

            },

            "funding": [

                {
@@ -4340,7 +4341,7 @@ 
                    "type": "tidelift"

                }

            ],

            "time": "2024-11-07T12:36:22+00:00"

            "time": "2025-01-29T07:06:14+00:00"

        }

    ],

    "packages-dev": [
@@ -9336,8 +9337,8 @@ 
    },

    "prefer-stable": true,

    "prefer-lowest": false,

    "platform": {},

    "platform-dev": {},

    "platform": [],

    "platform-dev": [],

    "platform-overrides": {

        "php": "8.3.0"

    },

composer/Metapackage/CoreRecommended/composer.json

+1 −1
Original line number Diff line number Diff line
@@ -60,6 +60,6 @@ 
        "symfony/var-dumper": "~v7.1.3",

        "symfony/var-exporter": "~v7.1.2",

        "symfony/yaml": "~v7.1.1",

        "twig/twig": "~v3.14.2"

        "twig/twig": "~v3.19.0"

    }

}

core/.deprecation-ignore.txt

+3 −0
Original line number Diff line number Diff line
@@ -29,3 +29,6 @@ 


# Twig 3.

%Since twig/twig 3.12: Twig Filter "spaceless" is deprecated%

%Since twig/twig 3.15: Instantiating "Twig\\Node\\Node" directly is deprecated; the class will become abstract in 4.0.%

%Since twig/twig 3.15: Using the "deprecated", "deprecating_package", and "alternative" options is deprecated, pass a "deprecation_info" one instead.%

%Since twig/twig 3.15: The "Twig\\Node\\Expression\\NameExpression" class is deprecated, use "Twig\\Node\\Expression\\Variable\\ContextVariable" instead.%