Skip to content

Update symfony/yaml to 5.4.54 in build tooling - #585

Merged
gbiernacki-dropbox merged 1 commit into
mainfrom
symfony-yaml-update
Oct 26, 2026
Merged

gbiernacki-dropbox merged 1 commit into
mainfrom
symfony-yaml-update

Conversation

@gbiernacki-dropbox

Copy link
Copy Markdown
Contributor

What changed

  • symfony/yaml 5.4.3 / 5.4.10 → 5.4.54 in the build-tooling composer.lock files (root, dotnet, java-v1, java-v2, node, python, ruby)
  • Fixes CVE-2026-45133, CVE-2026-45304 and CVE-2026-45305 (fixed in 5.4.52)
  • symfony/deprecation-contracts → 2.5.4, symfony/polyfill-ctype → 1.37.0

Customer impact

None. Build tooling only; no SDK code changes and no release needed. SDK repos pick this up with their next release.

@gbiernacki-dropbox
gbiernacki-dropbox merged commit 1f70408 into main Oct 26, 2026
9 checks passed
@gbiernacki-dropbox
gbiernacki-dropbox deleted the symfony-yaml-update branch October 26, 2026 06:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants