Update dependency symfony/validator to v6.4.11 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
symfony/validator (source)	6.4.3 -> 6.4.11

GitHub Vulnerability Alerts

CVE-2024-50343

Description

It is possible to trick a Validator configured with a regular expression using the $ metacharacters, with an input ending with \n.

Resolution

Symfony now uses the D regex modifier to match the entire input.

The patch for this issue is available here for branch 5.4.

Credits

We would like to thank Offscript for reporting the issue and Alexandre Daubois for providing the fix.

---

Release Notes

symfony/validator (symfony/validator)

v6.4.11

Compare Source

Changelog (symfony/validator@v6.4.10...v6.4.11)

• bug symfony/symfony#58127 [Validator] synchronize IBAN formats (@​xabbuh)
• bug symfony/symfony#57984 [Validator] Add D regex modifier in relevant validators (@​alexandre-daubois)
• bug symfony/symfony#57925 [Validator] reset the validation context after validating nested constraints (@​xabbuh)
• bug symfony/symfony#57905 [Validator] allow more unicode characters in URL paths (@​xabbuh)

v6.4.10

Compare Source

Changelog (symfony/validator@v6.4.9...v6.4.10)

• bug symfony/symfony#57812 [Validator] treat uninitialized properties referenced by property paths as null (@​xabbuh)

v6.4.9

Compare Source

Changelog (symfony/validator@v6.4.8...v6.4.9)

• bug symfony/symfony#57213 [Validator] [UniqueValidator] Use correct variable as parameter in (custom) error message (@​seho-nl, Sebastien Hoek)

v6.4.8

Compare Source

Changelog (symfony/validator@v6.4.7...v6.4.8)

• bug symfony/symfony#57275 Fix autoload configs to avoid warnings when building optimized autoloaders (@​Seldaek)
• bug symfony/symfony#54924 [Validator] IBAN Check digits should always between 2 and 98 (@​karstennilsen)
• bug symfony/symfony#54834 [Validator] Check Locale class existence before using it (@​alexandre-daubois)
• bug symfony/symfony#54758 [Validator] handle edge cases when constructing constraints with named arguments (@​xabbuh)
• bug symfony/symfony#54760 [Validator] handle union and intersection types for cascaded validations (@​xabbuh)

v6.4.7

Compare Source

Changelog (symfony/validator@v6.4.6...v6.4.7)

• bug symfony/symfony#54750 [Validator] detect wrong usages of minMessage/maxMessage in options (@​xabbuh)
• bug symfony/symfony#54751 [Validator]  detect wrong e-mail validation modes (@​xabbuh)
• bug symfony/symfony#54487 [Validator] Accept Stringable in ExecutionContext::build/addViolation() (@​alexandre-daubois)

v6.4.6

Compare Source

Changelog (symfony/validator@v6.4.5...v6.4.6)

• bug symfony/symfony#54191 [Validator] add missing invalid extension error entry (@​xabbuh)
• bug symfony/symfony#54219 [Validator] Allow BICs’ first four characters to be digits (@​MatTheCat)
• bug symfony/symfony#54137 [Validator] UniqueValidator - normalize before reducing keys (@​Brajk19)

v6.4.4

Compare Source

Changelog (symfony/validator@v6.4.3...v6.4.4)

• bug symfony/symfony#53755 [Validator] Fix fields without constraints in Collection (@​xabbuh, @​HypeMC)

---

Configuration

📅 Schedule: Branch creation - "" in timezone America/New_York, Automerge - "before 4am on Monday" in timezone America/New_York.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.