GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Bump symfony/yaml from 7.4.22 to 7.4.23 by dependabot[bot] · Pull Request #311 · EngineScript/EngineScript

Conversation

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link

Copy Markdown

Contributor

Bumps symfony/yaml from 7.4.22 to 7.4.23.

Release notes

Sourced from symfony/yaml's releases.

v7.4.23

Changelog (symfony/yaml@v7.4.22...v7.4.23)

security #GHSA-hwfg-qwvh-2wfx Fix exponential and quadratic parse times (@nicolas-grekas)

security #GHSA-hwfg-qwvh-2wfx Fix quadratic parse times (@nicolas-grekas)

bug #67735 Strip the byte order mark at the start of a stream (@0xABCD01)

[SECURITY] Security release

Commits

1e60120 Merge branch '6.4' into 7.4
0dddc06 security #GHSA-hwfg-qwvh-2wfx [Yaml] Fix exponential and quadratic parse time...
9e936df [Yaml] Fix exponential and quadratic parse times
729d3d1 Merge branch '6.4' into 7.4
1f910bc [Yaml] Strip the byte order mark at the start of a stream
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          Bump symfony/yaml from 7.4.22 to 7.4.23

5eebe66

Bumps [symfony/yaml](https://github.com/symfony/yaml) from 7.4.22 to 7.4.23.
- [Release notes](https://github.com/symfony/yaml/releases)
- [Changelog](https://github.com/symfony/yaml/blob/8.2/CHANGELOG.md)
- [Commits](symfony/yaml@v7.4.22...v7.4.23)

---
updated-dependencies:
- dependency-name: symfony/yaml
  dependency-version: 7.4.23
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added automated dependencies maintenance php labels

Nov 9, 2026

sonarqubecloud Bot commented Nov 9, 2026

Copy link

Copy Markdown

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

github-actions Bot commented Nov 9, 2026

Copy link

Copy Markdown

Thanks for contributing to EngineScript! 🎉

If your PR fixes an issue or relates to a specific environment, please consider including the sanitized output
of es.debug to show the environment where you tested your changes.
Remember to remove any sensitive information before sharing.

We'll review your PR soon!

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

github-actions Bot commented Nov 9, 2026

Copy link

Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
composer/symfony/yaml	7.4.23	Unknown	Unknown

Scanned Files

composer.lock

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

codacy-production Bot commented Nov 9, 2026

Copy link

Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

automated dependencies maintenance php

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

0 participants

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.