fix(deps): update dependency symfony/flex to v2 #39

renovate · 2025-03-13T18:56:35Z

This PR contains the following updates:

Package	Change	Age	Confidence
symfony/flex	`1.12.2` -> `2.10.0`

Release Notes

symfony/flex (symfony/flex)

`v2.10.0`

Compare Source

What's Changed

Bump symfony/dotenv to v5.4 minimum by @nicolas-grekas in #1071
Fix dump-env command when .env files reference other env vars by @nicolas-grekas in #1070

Full Changelog: symfony/flex@v2.9.0...v2.10.0

`v2.9.0`

Compare Source

What's Changed

Some love for tests - fix Symfony 8 support by @nicolas-grekas in #1065
Fix ignoring unstable releases with --prefer-lowest and --prefer-stable by @nicolas-grekas in #1066
Bump deps, PHP >= 8.1 by @nicolas-grekas in #1067
Leverage COMPOSER_PREFER_DEV_OVER_PRERELEASE when possible by @nicolas-grekas in #1068

Full Changelog: symfony/flex@v2.8.2...v2.9.0

What's Changed

CS modernize_strpos by @rosier in #1053
Don't remove still-referenced files when unconfiguring recipes by @nicolas-grekas in #1054

Full Changelog: symfony/flex@v2.7.0...v2.7.1

`v2.7.0`

Compare Source

What's Changed

Fix unpack logic by @nicolas-grekas in #1050
Allow to define entrypoint in importmap.php by @Jibbarth in #1026

New Contributors

@Jibbarth made their first contribution in #1026

Full Changelog: symfony/flex@v2.6.0...v2.7.0

`v2.6.0`

Compare Source

What's Changed

Handle phpunit.xml.dist as an alias of phpunit.dist.xml by @nicolas-grekas in #1045
fix jsonPath in ComposerScriptsConfigurator::update by @klkvsk in #1011
Add configurator for "composer-commands" entries in recipes by @morawskim in #930
Resolve directories for copy from recipe in update case by @shyim in #950
Don't run git hooks when running recipes:update by @nicolas-grekas in #1046
Ignore warnings related to opcache.restrict_api by @nicolas-grekas in #1047
Add --yes flag to recipes:install command to overwrite all files without asking by @shyim in #963
Fix needless call to flex API on composer i by @nicolas-grekas in #1048
Don't copy constraint from framework-bundle when installing a new symfony package by @nicolas-grekas in #1049

New Contributors

@klkvsk made their first contribution in #1011
@morawskim made their first contribution in #930

Full Changelog: symfony/flex@v2.5.1...v2.6.0

`v2.5.1`

Compare Source

What's Changed

Always include locked dev packages by @wouterj in #1044

Full Changelog: symfony/flex@v2.5.0...v2.5.1

`v2.5.0`

Compare Source

What's Changed

Do not synchronize package.json if symfony/flex is not installed by @leofeyer in #1039
Add ability to skip package.json synchronization by @wuchen90 in #1032

New Contributors

@leofeyer made their first contribution in #1039
@wuchen90 made their first contribution in #1032

Full Changelog: symfony/flex@v2.4.7...v2.5.0

`v2.4.7`

Compare Source

`v2.4.6`

Compare Source

`v2.4.5`

Compare Source

`v2.4.4`

Compare Source

`v2.4.3`

Compare Source

`v2.4.2`

Compare Source

`v2.4.1`

Compare Source

What's Changed

Fix keeping platform requirements when rebooting composer by @nicolas-grekas in #968
Decouple psr-http-message-bridge from extra.symfony.require for versions before 6.4 by @nicolas-grekas in #1003

Full Changelog: symfony/flex@v2.4.0...v2.4.1

`v2.4.0`

Compare Source

`v2.3.3`

Compare Source

`v2.3.2`

Compare Source

`v2.3.1`

Compare Source

`v2.3.0`

Compare Source

`v2.2.5`

Compare Source

`v2.2.4`

Compare Source

`v2.2.3`

Compare Source

`v2.2.2`

Compare Source

Revert "Deprecate "flex-require" sections"

`v2.2.1`

Compare Source

Read from symfony.lock when checking for recipe updates

`v2.2.0`

Compare Source

`v2.1.8`

Compare Source

#907 Re-run composer when flex is installed after deps are resolved (nicolas-grekas)
#903 Fix relative URLs in index.json not working (salmen)

`v2.1.7`

Compare Source

#885 fix: Recipe update skip ignored files (maxime-aknin, Max)
#895 [recipes:update] Fixing bug where files failed to delete that were modified previously (weaverryan)
#883 Fix problem of overwriting envs (alexander-schranz)
#878 Fix parsing docker-composer files with no "version" (CountZero1981)

`v2.1.6`

Compare Source

#842 Pass GitHub access token when accessing raw.githubusercontent.com in case of private recipes (aivus)
#872 Use relative URLs when index.json provides them (nicolas-grekas)
#871 Read recipe conflicts from index.json (nicolas-grekas)
#870 Honor --no-scripts (nicolas-grekas)
#869 Fix detecting new packages before installing their recipes (nicolas-grekas)
#867 Fix reading config for symfony/runtime (nicolas-grekas)
#866 Fix BC with upgrading from flex < 1.18 (nicolas-grekas)

`v2.1.5`

Compare Source

`v2.1.4`

Compare Source

`v2.1.3`

Compare Source

`v2.1.2`

Compare Source

`v2.1.1`

Compare Source

`v2.1.0`

Compare Source

`v2.0.1`

Compare Source

`v2.0.0`: Tag Flex v2 for composer 2.1+ and php 8.0+

Compare Source

`v1.22.0`

Compare Source

`v1.21.8`

Compare Source

`v1.21.7`

Compare Source

`v1.21.6`

Compare Source

`v1.21.5`

Compare Source

`v1.21.4`

Compare Source

`v1.21.3`

Compare Source

`v1.21.2`

Compare Source

What's Changed

Fix keeping platform requirements when rebooting composer by @nicolas-grekas in #968
Decouple psr-http-message-bridge from extra.symfony.require for versions before 6.4 by @nicolas-grekas in #1003

Full Changelog: symfony/flex@v1.21.1...v1.21.2

`v1.21.1`

Compare Source

`v1.21.0`

Compare Source

`v1.20.2`

Compare Source

`v1.20.1`

Compare Source

`v1.20.0`

Compare Source

`v1.19.5`

Compare Source

`v1.19.4`

Compare Source

`v1.19.3`

Compare Source

`v1.19.2`

Compare Source

Revert "Deprecate "flex-require" sections"

`v1.19.1`

Compare Source

Read from symfony.lock when checking for recipe updates
Fix PHP warning when using Composer 1

`v1.19.0`

Compare Source

`v1.18.7`

Compare Source

#907 Re-run composer when flex is installed after deps are resolved (nicolas-grekas)
#906 Fix compat with old composer versions (nicolas-grekas)
#874 Add some native return types (PhilETaylor)
#903 Fix relative URLs in index.json not working (salmen)

`v1.18.6`

Compare Source

#885 fix: Recipe update skip ignored files (maxime-aknin, Max)
#895 [recipes:update] Fixing bug where files failed to delete that were modified previously (weaverryan)
#883 Fix problem of overwriting envs (alexander-schranz)
#878 Fix parsing docker-composer files with no "version" (CountZero1981)

`v1.18.5`

Compare Source

#842 Pass GitHub access token when accessing raw.githubusercontent.com in case of private recipes (aivus)
#872 Use relative URLs when index.json provides them (nicolas-grekas)
#871 Read recipe conflicts from index.json (nicolas-grekas)
#870 Honor --no-scripts (nicolas-grekas)
#869 Fix detecting new packages before installing their recipes (nicolas-grekas)
#867 Fix reading config for symfony/runtime (nicolas-grekas)
#866 Fix BC with upgrading from flex < 1.18 (nicolas-grekas)

`v1.18.4`

Compare Source

`v1.18.3`

Compare Source

`v1.18.2`

Compare Source

`v1.18.1`

Compare Source

`v1.18.0`

Compare Source

`v1.17.6`

Compare Source

`v1.17.5`

Compare Source

`v1.17.4`

Compare Source

`v1.17.3`

Compare Source

`v1.17.2`

Compare Source

`v1.17.1`

Compare Source

`v1.17.0`

Compare Source

`v1.16.3`

Compare Source

`v1.16.2`

Compare Source

`v1.16.1`

Compare Source

`v1.16.0`

Compare Source

`v1.15.4`

Compare Source

`v1.15.3`

Compare Source

`v1.15.2`

Compare Source

`v1.15.1`

Compare Source

`v1.15.0`

Compare Source

`v1.14.8`

Compare Source

`v1.14.7`

Compare Source

`v1.14.6`

Compare Source

`v1.14.5`: Install metarecipes first

Compare Source

`v1.14.4`

Compare Source

`v1.14.3`

Compare Source

`v1.14.2`: Deprecate not-unpacking, fix unpacking

Compare Source

`v1.14.1`

Compare Source

`v1.14.0`: Unpack entries from require-dev

Compare Source

Fix #654

`v1.13.4`

Compare Source

`v1.13.3`

Compare Source

`v1.13.2`

Compare Source

`v1.13.1`

Compare Source

`v1.13.0`: Improve management of UX packages

Compare Source

Require UX packages to have the "symfony-ux" keyword in their composer.json file
Copy peerDependencies to the root package.json
Deprecate symfony:generate-id as it's not used anymore

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-11-16T09:52:17Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock

Command failed: composer update symfony/flex:2.10.0 --with-dependencies --ignore-platform-req='ext-*' --ignore-platform-req='lib-*' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes Loading composer repositories with package information Updating dependencies Your requirements could not be resolved to an installable set of packages. Problem 1 - symfony/framework-bundle is locked to version v5.2.6 and an update of this package was not requested. - symfony/framework-bundle v5.2.6 requires symfony/http-foundation ^5.2.1 -> found symfony/http-foundation[v5.2.1, ..., v5.4.50] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-365x-2zjk-pt47", "PKSA-b35n-565h-rs4q") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config. Problem 2 - symfony/dotenv is locked to version v5.2.5 and an update of this package was not requested. - Root composer.json requires symfony/flex 2.10.0 -> satisfiable by symfony/flex[v2.10.0]. - symfony/flex v2.10.0 conflicts with symfony/dotenv <5.4. Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.

renovate bot force-pushed the renovate/symfony-flex-2.x branch from 5914c7b to fafbeee Compare May 10, 2025 14:46

renovate bot force-pushed the renovate/symfony-flex-2.x branch 2 times, most recently from 0cf29d3 to d977e2a Compare May 23, 2025 16:27

renovate bot force-pushed the renovate/symfony-flex-2.x branch from d977e2a to 6c91b0b Compare May 28, 2025 16:41

renovate bot force-pushed the renovate/symfony-flex-2.x branch 2 times, most recently from 5b4b664 to cda4f3d Compare July 5, 2025 09:09

renovate bot force-pushed the renovate/symfony-flex-2.x branch from cda4f3d to 6233e40 Compare August 22, 2025 11:10

renovate bot force-pushed the renovate/symfony-flex-2.x branch from 6233e40 to a215a48 Compare October 31, 2025 16:08

fix(deps): update dependency symfony/flex to v2

5f0b257

renovate bot force-pushed the renovate/symfony-flex-2.x branch from a215a48 to 5f0b257 Compare November 16, 2025 09:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update dependency symfony/flex to v2 #39

fix(deps): update dependency symfony/flex to v2 #39

Uh oh!

renovate bot commented Mar 13, 2025 •

edited

Loading

renovate bot commented Nov 16, 2025

Labels

1 participant

fix(deps): update dependency symfony/flex to v2 #39

Are you sure you want to change the base?

fix(deps): update dependency symfony/flex to v2 #39

Uh oh!

Conversation

renovate bot commented Mar 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

v2.0.0: Tag Flex v2 for composer 2.1+ and php 8.0+

What's Changed

v1.14.5: Install metarecipes first

v1.14.2: Deprecate not-unpacking, fix unpacking

v1.14.0: Unpack entries from require-dev

v1.13.0: Improve management of UX packages

Configuration

renovate bot commented Nov 16, 2025

⚠️ Artifact update problem

File name: composer.lock

Labels

1 participant

renovate bot commented Mar 13, 2025 •

edited

Loading

`v2.0.0`: Tag Flex v2 for composer 2.1+ and php 8.0+

`v1.14.5`: Install metarecipes first

`v1.14.2`: Deprecate not-unpacking, fix unpacking

`v1.14.0`: Unpack entries from require-dev

`v1.13.0`: Improve management of UX packages