Bump symfony/dotenv from 7.4.15 to 8.1.2 - #18
Closed
dependabot[bot] wants to merge 61 commits into
Closed
Conversation
Fixed by using a proxy
App fixes: - Cookie: strip port from HTTP_HOST in cookie domain (RFC 6265; broken cookie acceptance in Playwright and curl) - CGUtils: short-circuit isElasticAvailable() in TEST_MODE to avoid 5s connection timeout per page load - Appearance: skip updateIndex/clearIndex ES calls in TEST_MODE - CoreUtils: omit ws_server_host from Twig scope in TEST_MODE so the socket.io script tag is not rendered (prevented networkidle) - websocket.js: fix setupDegradedMode() referencing undefined $sidebar - Appearances.php: guard WHERE id NOT IN () when pinned list is empty - Event: null-safe getEntryRoleName() fallback and getWinnerHTML() guard - activerecord.php: route to TEST_DB_NAME when TEST_MODE=true Test infrastructure: - reset-test-db.sh: reset PG sequences after seeding so new rows don't collide with explicitly-seeded IDs - Browser/Pest.php: reset test DB in beforeAll hook for clean state - Correct test URLs (/show, /users/, /account) and assertion values Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Decouples test selectors from CSS classes and form attribute values,
following Playwright's getByTestId() convention. Dialog buttons get
auto-derived testids from their label (dialog-btn-save, etc.), with
explicit overrides for confirm/cancel (dialog-btn-confirm/-cancel)
regardless of display text ("Eeyup"/"Nope").
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Add pnpm-workspace.yaml with a 14-day minimumReleaseAge, update CI and the deploy post-receive hook to use pnpm, pin GitHub Actions to commit SHAs, and add Dependabot for npm/composer/actions updates. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Fixes CI failure caused by pnpm/action-setup picking a pnpm version that doesn't match the lockfile (generated with pnpm 11.5.1). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
eslint.config.js imports @eslint/js directly, but it was only a transitive dependency of eslint. npm's hoisting masked this; pnpm's strict node_modules layout does not, causing ESLint to fail with ERR_MODULE_NOT_FOUND. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
The React rewrite of $.Dialog dropped the old jQuery implementation's behavior of appending new content below the existing dialog content (with a visual separator) when a dialog is already open, instead always replacing it. Re-introduce this by tracking a history array of content blocks: each non-appending-to-request call while a dialog is open pushes a new block, updates the title (if provided), color, and buttons, while previous blocks remain visible.
CoreUtils::generateApiSchema() still listed source paths for controllers
that were deleted/moved during the API controller refactor, causing
Symfony Finder to throw on missing directories. Also restores a 404
response annotation on PUT /event/{id} that was dropped during the move.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Missing comma after security={} caused a Doctrine annotation parse
error, silently dropping /about/upcoming from the generated schema.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4.4.0 to 7.0.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@49933ea...8207627) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@34e1148...3d3c42e) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
…actions/checkout-7.0.1 Bump actions/checkout from 4.3.1 to 7.0.1
…actions/setup-node-7.0.0 Bump actions/setup-node from 4.4.0 to 7.0.0
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 6.0.8 to 6.0.9. - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](pnpm/action-setup@0e279bb...0ebf471) --- updated-dependencies: - dependency-name: pnpm/action-setup dependency-version: 6.0.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
…pnpm/action-setup-6.0.9 Bump pnpm/action-setup from 6.0.8 to 6.0.9
Move restcord/restcord to the v9 dev branch (pinned to a specific commit) so guzzlehttp/guzzle can update to 7.x - every 6.x release is now flagged by composer's advisory audit and by roave/security-advisories. The v9 branch's DiscordClient defaults 'logger' to null while typing it as non-nullable, and its service description lacks responseTypes for getGuildMember, so the SDK now returns a raw array-access Result instead of a typed model with auto-cast DateTimeImmutable fields. Adjusted DiscordMember::checkServerMembership() accordingly. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
DeviantArt moved app authorization management under Security and privacy settings; update the URL and pass it to the template directly instead of via a Twig constant() lookup. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 7.0.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...043fb46) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
…ctions/upload-artifact-7.0.1 Bump actions/upload-artifact from 4.6.2 to 7.0.1
dependabot
Bot
added
dependencies
The picker frame page never loaded the react lib, but dialog.jsx (used for every dialog on that page, including the file-open and paste-from-clipboard flows) calls ReactDOM.createRoot() at load time. That threw a ReferenceError which left $.Dialog permanently undefined, silently breaking both "Open..." and "Open from Clipboard..." with no visible error to the user. Also make the ElasticSearch client timeouts configurable via env vars so the browser test suite doesn't hang for 15s+ per request when ES is unreachable in the test environment. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
'dialog' depends on ReactDOM at module load time, but pages that opt out of default-libs (like picker-frame) had to remember to add react by hand -- exactly the mistake that broke picker-frame's dialogs. CoreUtils::loadPage now forces react into the resolved libs whenever 'dialog' is requested, so this can't silently regress on future pages. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Bumps [symfony/dotenv](https://github.com/symfony/dotenv) from 7.4.15 to 8.1.2. - [Release notes](https://github.com/symfony/dotenv/releases) - [Changelog](https://github.com/symfony/dotenv/blob/8.2/CHANGELOG.md) - [Commits](symfony/dotenv@v7.4.15...v8.1.2) --- updated-dependencies: - dependency-name: symfony/dotenv dependency-version: 8.1.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/composer/symfony/dotenv-8.1.2
branch
from
August 7, 2026 19:39
e373c84 to
c4e9785
Compare
Contributor
Author
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps symfony/dotenv from 7.4.15 to 8.1.2.
Release notes
Sourced from symfony/dotenv's releases.
... (truncated)
Changelog
Sourced from symfony/dotenv's changelog.
... (truncated)
Commits
4ea87b3Merge branch '8.0' into 8.160838c0Merge branch '7.4' into 8.04ed3349Merge branch '8.0' into 8.1fdf0017Merge branch '7.4' into 8.08147db3Merge branch '8.0' into 8.1c81558dMerge branch '7.4' into 8.07ed4e3aAdd call to backers in README filesd568734Merge branch '8.0' into 8.1c9db367Merge branch '7.4' into 8.03387db9Merge branch '8.0' into 8.1