From f46dca498651c6f99a0dc18c88d2afb77e2c686b Mon Sep 17 00:00:00 2001 From: andytson-inviqa Date: Wed, 19 Nov 2025 15:05:06 +0000 Subject: [PATCH] fix: upgrade twig to latest v2 version for CVE-2024-45411 --- composer.json | 2 +- composer.lock | 18 +++++++++--------- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/composer.json b/composer.json index 76fe6a0..1055378 100644 --- a/composer.json +++ b/composer.json @@ -12,7 +12,7 @@ "symfony/expression-language": "^6.1", "symfony/finder": "^6.1", "symfony/yaml": "^6.1", - "twig/twig": "^2.13", + "twig/twig": "^2.16.1", "composer/semver": "^3.4" }, "require-dev": { diff --git a/composer.lock b/composer.lock index 244bada..30d9558 100644 --- a/composer.lock +++ b/composer.lock @@ -4,7 +4,7 @@ "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies", "This file is @generated automatically" ], - "content-hash": "a3cbdc5d9e4963c86d775306b4eb9dfa", + "content-hash": "9b9f67d0458b0da16619fe17cc362d3f", "packages": [ { "name": "composer/semver", @@ -1888,16 +1888,16 @@ }, { "name": "twig/twig", - "version": "v2.15.3", + "version": "v2.16.1", "source": { "type": "git", "url": "https://github.com/twigphp/Twig.git", - "reference": "ab402673db8746cb3a4c46f3869d6253699f614a" + "reference": "19185947ec75d433a3ac650af32fc05649b95ee1" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/twigphp/Twig/zipball/ab402673db8746cb3a4c46f3869d6253699f614a", - "reference": "ab402673db8746cb3a4c46f3869d6253699f614a", + "url": "https://api.github.com/repos/twigphp/Twig/zipball/19185947ec75d433a3ac650af32fc05649b95ee1", + "reference": "19185947ec75d433a3ac650af32fc05649b95ee1", "shasum": "" }, "require": { @@ -1908,12 +1908,12 @@ }, "require-dev": { "psr/container": "^1.0", - "symfony/phpunit-bridge": "^4.4.9|^5.0.9|^6.0" + "symfony/phpunit-bridge": "^5.4.9|^6.3" }, "type": "library", "extra": { "branch-alias": { - "dev-master": "2.15-dev" + "dev-master": "2.16-dev" } }, "autoload": { @@ -1952,7 +1952,7 @@ ], "support": { "issues": "https://github.com/twigphp/Twig/issues", - "source": "https://github.com/twigphp/Twig/tree/v2.15.3" + "source": "https://github.com/twigphp/Twig/tree/v2.16.1" }, "funding": [ { @@ -1964,7 +1964,7 @@ "type": "tidelift" } ], - "time": "2022-09-28T08:40:08+00:00" + "time": "2024-09-09T17:53:56+00:00" } ], "packages-dev": [