f8009347c4
Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)
2022-07-13 16:03:29 +02:00
d1457a40b6
Allow inherited magic method to still run with calling class
...
If a static method cannot be resolved to the calling class, but the calling class has, or inherits, a `__callStatic` handler, this allows the `__callStatic` handler to be used with the calling class, and not the inherited class as would occur with reflection. This allows systems such as Laravel facades to still work.
Fixes https://github.com/twigphp/Twig/issues/3716
2022-07-06 10:46:46 +02:00
5b5aea4690
Merge branch '2.x' into 3.x
...
* 2.x:
chore: Set permissions for GitHub actions
2022-07-04 21:57:33 +02:00
c953a77b23
Merge branch 'pull/3713' into 2.x
...
* pull/3713:
chore: Set permissions for GitHub actions
2022-07-04 21:57:15 +02:00
188fd290c5
chore: Set permissions for GitHub actions
...
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com >
2022-07-04 21:55:50 +02:00
6448ca0617
chore: Included githubactions in the dependabot config
...
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.
Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot
GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com >
2022-06-27 01:30:05 +00:00
b6017005b3
Merge branch '2.x' into 3.x
...
* 2.x:
Bugfix typo in twig/intl-exta
2022-06-10 10:33:05 +02:00
40041cac12
bug #3711 Bugfix typo in twig/intl-exta (nyamsprod)
...
This PR was merged into the 2.x branch.
Discussion
----------
Bugfix typo in twig/intl-exta
Bugfix typo in text attribute name see https://github.com/twigphp/Twig/issues/3710
Commits
-------
fd2f6d42
2022-06-10 10:32:47 +02:00
fd2f6d4215
Bugfix typo in twig/intl-exta
...
Bugfix typo in text attribute name see https://github.com/twigphp/Twig/issues/3710
2022-06-07 10:14:11 +02:00
09760aa689
Merge branch '2.x' into 3.x
...
* 2.x:
Removed unneeded ext refs
2022-06-02 20:36:43 +02:00
3aba62185d
Removed unneeded ext refs
2022-06-02 20:36:38 +02:00
45a8317e61
Merge branch '2.x' into 3.x
...
* 2.x:
Fixes `CallExpression::reflectCallable()` throwing `TypeError`
2022-06-02 20:35:24 +02:00
55ce7242b1
bug #3707 Fixes CallExpression::reflectCallable() throwing TypeError (ju1ius)
...
This PR was submitted for the 3.x branch but it was squashed and merged into the 2.x branch instead.
Discussion
----------
Fixes `CallExpression::reflectCallable()` throwing `TypeError`
See #3708
Commits
-------
e333ccc9
2022-06-02 20:33:39 +02:00
e333ccc9f6
Fixes CallExpression::reflectCallable() throwing TypeError
2022-06-02 20:33:33 +02:00
a1f8d3f91a
Bump version
2022-05-17 07:49:32 +02:00
e939eae923
Prepare the 3.4.1 release
2022-05-17 07:48:52 +02:00
373c67e3e0
Merge branch '2.x' into 3.x
...
* 2.x:
Bump version
Prepare the 2.15.1 release
Update CHANGELOG
2022-05-17 07:48:09 +02:00
fcc900cf80
Bump version
2022-05-17 07:47:36 +02:00
3b7cedb2f7
Prepare the 2.15.1 release
2022-05-17 07:46:24 +02:00
1b5d977108
Update CHANGELOG
2022-05-17 07:45:45 +02:00
d90435f6be
Merge branch '2.x' into 3.x
...
* 2.x:
Fix optimizing non-public named closures
Bump version
Prepare the 2.15.0 release
2022-05-17 07:45:01 +02:00
e11c074a4d
bug #3704 Fix optimizing non-public named closures (nicolas-grekas)
...
This PR was merged into the 2.x branch.
Discussion
----------
Fix optimizing non-public named closures
Fix #3703
Commits
-------
dd34e9f5
2022-05-17 07:44:00 +02:00
dd34e9f5c9
Fix optimizing non-public named closures
2022-05-16 17:47:23 +02:00
9612dd4f13
Bump version
2022-05-15 08:26:19 +02:00
ed19f4bf9d
Prepare the 3.4.0 release
2022-05-15 08:25:28 +02:00
137b370376
Bump version
2022-05-15 08:24:02 +02:00
2fcc95728f
Prepare the 2.15.0 release
2022-05-15 08:21:48 +02:00
3fdd3b9532
Merge branch '2.x' into 3.x
...
* 2.x:
Update CHANGELOG
2022-05-15 08:20:57 +02:00
639c883086
Update CHANGELOG
2022-05-15 08:20:05 +02:00
9ca7fb8799
Merge branch '2.x' into 3.x
...
* 2.x:
Fix support for named closures
2022-05-15 08:11:13 +02:00
bb64a49441
feature #3702 Fix support for named closures (nicolas-grekas)
...
This PR was merged into the 2.x branch.
Discussion
----------
Fix support for named closures
As spotted by @stof on https://github.com/symfony/symfony/pull/46335#discussion_r872108567
Commits
-------
163f0740
2022-05-15 08:07:29 +02:00
163f07400a
Fix support for named closures
2022-05-13 17:01:54 +02:00
1cf610bd2a
Add @codeCoverageIgnore to untestable compiled methods
2022-04-30 04:49:45 -04:00
b4d6723715
Merge branch '2.x' into 3.x
...
* 2.x:
Tweak previous commit
[Documentation] Add note about simple string matching
2022-04-09 10:41:06 +02:00
ab36653962
Tweak previous commit
2022-04-09 10:41:02 +02:00
6860ca1569
minor #3676 [Documentation] Add note about simple string matching (Kern046)
...
This PR was merged into the 2.x branch.
Discussion
----------
[Documentation] Add note about simple string matching
During the Symfony Live we mentionned the need to update the documentation around string matching to mention that an approach was possible with the ``ìn`` operator was simpler.
As the documentation part about ``in`` was just below, I wasn't sure that an anchor link was relevant, nor a code example.
Happy to make this first tiny contribution, and available if there are more stuff to do for this PR :).
Commits
-------
5e26ce73
2022-04-09 10:38:51 +02:00
5e26ce7320
[Documentation] Add note about simple string matching
...
Mention the use of ``in`` operator when looking for a simple string instead of ``matches``. #Symfony_Live
2022-04-07 15:41:53 +02:00
321c5cbf20
Bump version
2022-04-06 08:48:37 +02:00
8442df056c
Prepare the 2.14.13 release
2022-04-06 08:47:41 +02:00
05c8eb54d8
Merge branch '2.x' into 3.x
...
* 2.x:
Bump version
Prepare the 2.14.13 release
2022-04-06 08:47:08 +02:00
f6bd36a694
Bump version
2022-04-06 08:46:17 +02:00
66856cd045
Prepare the 2.14.13 release
2022-04-06 08:45:17 +02:00
9fb8b8dc68
Merge branch '2.x' into 3.x
...
* 2.x:
Enable bytecode invalidation with auto_reload
2022-04-05 18:27:22 +02:00
8fa2c9a2b2
bug #3675 Enable cache invalidation when auto_reload=true (GromNaN)
...
This PR was merged into the 2.x branch.
Discussion
----------
Enable cache invalidation when auto_reload=true
Related to https://github.com/symfony/symfony-docs/pull/16671
Enabling `auto_reload` is not effective when `opcache.validate_timestamps=0`.
Commits
-------
ef8ae9cb
2022-04-05 18:27:00 +02:00
ef8ae9cb61
Enable bytecode invalidation with auto_reload
2022-04-05 18:17:00 +02:00
393ea10efd
Merge branch '2.x' into 3.x
...
* 2.x:
Fix docs about the deprecated tag
2022-03-26 12:00:50 +01:00
1dd5c10e73
minor #3672 Fix docs about the deprecated tag (fabpot)
...
This PR was submitted for the 3.x branch but it was merged into the 2.x branch instead.
Discussion
----------
Fix docs about the deprecated tag
Closes #3594
Commits
-------
17142af9
2022-03-26 12:00:29 +01:00
17142af9f8
Fix docs about the deprecated tag
2022-03-26 11:37:03 +01:00
009bb4fd82
Add "some" and "every" filters
2022-03-25 11:04:50 +01:00
9459614141
Bump version
2022-03-25 10:38:42 +01:00
Fabien Potencier
Ben Thomson
naveen
ignace nyamagana butera
ju1ius
Nicolas Grekas
Mark Huot
Axel Venet
Jérôme Tamarelle
hubert.lenoir