fix(deps): require November Symfony security patches by brianvarskonst · Pull Request #32 · SymPress/kernel

brianvarskonst · 2026-11-06T08:24:27Z

Changes

Require Symfony Config, Filesystem, HttpFoundation, HttpKernel, Routing and Yaml 8.1.11 or later.
Verify that the real compiled route table rejects the crafted path in CVE-2026-118516. Document the cache rebuild after upgrading.
Update PHPUnit in a separate lockfile commit to keep the required Composer audit green.

Strict Composer validation, locked audit, platform requirements and local Composer QA.
Focused routing and security boundary tests, 18 tests and 35 assertions.

brianvarskonst added 2 commits November 6, 2026 09:22

fix(deps): apply November Symfony security updates

0a5f9fa

fix(test): patch PHPUnit advisory blocking Composer audit

aa99f44

brianvarskonst merged commit 624319c into main Nov 6, 2026
3 checks passed

brianvarskonst deleted the fix/symfony-security-20261104 branch November 6, 2026 08:26