Bump symfony/security-bundle from 6.4.2 to 7.0.5

[dependabot]

Bumps symfony/security-bundle from 6.4.2 to 7.0.5.

Release notes

Sourced from symfony/security-bundle's releases.

v7.0.5

Changelog (symfony/security-bundle@v7.0.4...v7.0.5)

• no significant changes

v7.0.4

Changelog (symfony/security-bundle@v7.0.3...v7.0.4)

• bug symfony/symfony#53913 [TwigBridge] Fix compat with Twig v3.9 (@​nicolas-grekas)
• bug symfony/symfony#53744 [SecurityBundle] add missing partition attribute to the schema definition (@​xabbuh)
• bug symfony/symfony#53703 [HttpFoundation] Fix clearing CHIPS cookies (@​misaert)

v7.0.3

Changelog (symfony/security-bundle@v7.0.2...v7.0.3)

• bug symfony/symfony#53656 [Form] Use self-closing <input /> syntax again, reverting #47715 (@​mpdude)
• bug symfony/symfony#53529 [Ldap] Use {user_identifier} over deprecated {username} in factories (@​tcitworld)

v7.0.2

Changelog (symfony/security-bundle@v7.0.1...v7.0.2)

• bug symfony/symfony#53172 [SecurityBundle] Prevent to login/logout without a request context (@​symfonyaml)
• bug symfony/symfony#52870 [SecurityBundle] Fix redeclaration of InternalSecurity class when opcache preload is active (@​kaznovac)

v7.0.0

Changelog (symfony/security-bundle@v7.0.0-RC2...v7.0.0)

• no significant changes

v7.0.0-RC1

Changelog (symfony/security-bundle@v7.0.0-BETA3...v7.0.0-RC1)

• no significant changes

v7.0.0-BETA3

Changelog (symfony/security-bundle@v7.0.0-BETA2...v7.0.0-BETA3)

• bug symfony/symfony#52506 [SecurityBundle] wire the secret for Symfony 6.4 compatibility (@​xabbuh)

v7.0.0-BETA2

Changelog (symfony/security-bundle@v7.0.0-BETA1...v7.0.0-BETA2)

• bug symfony/symfony#52308 [SecurityBundle] Fix missing login-link element in xsd schema (@​fancyweb)

v7.0.0-BETA1

Changelog (symfony/security-bundle@v6.3.6...v7.0.0-BETA1)

• feature symfony/symfony#52160 [DoctrineBridge] Change argument $lastUsed of DoctrineTokenProvider::updateToken() to accept DateTimeInterface (@​nicolas-grekas)
• feature symfony/symfony#51470 [FrameworkBundle][Serializer] Deprecate annotations (@​alexandre-daubois)
• feature symfony/symfony#50391 [FrameworkBundle][HttpKernel] Introduce $buildDir argument to WarmableInterface::warmup to warm read-only artefacts in build_dir (@​Okhoshi)

... (truncated)

Changelog

Sourced from symfony/security-bundle's changelog.

CHANGELOG

7.0

• Enabling SecurityBundle and not configuring it is not allowed
• Remove the enable_authenticator_manager config option
• Remove the security.firewalls.logout.csrf_token_generator config option, use security.firewalls.logout.csrf_token_manager instead
• Remove the require_previous_session config option from authenticators

6.4

• Deprecate Security::ACCESS_DENIED_ERROR, AUTHENTICATION_ERROR and LAST_USERNAME constants, use the ones on SecurityRequestAttributes instead
• Allow an array of pattern in firewall configuration
• Add $badges argument to Security::login
• Deprecate the require_previous_session config option. Setting it has no effect anymore
• Add LogoutRouteLoader

6.3

• Deprecate enabling bundle and not configuring it
• Add _stateless attribute to the request when firewall is stateless and the attribute is not already set
• Add StatelessAuthenticatorFactoryInterface for authenticators targeting stateless firewalls only and that don't require a user provider
• Modify "icon.svg" to improve accessibility for blind/low vision users
• Make Security::login() return the authenticator response
• Deprecate the security.firewalls.logout.csrf_token_generator config option, use security.firewalls.logout.csrf_token_manager instead
• Make firewalls event dispatcher traceable on debug mode
• Add TokenHandlerFactoryInterface, OidcUserInfoTokenHandlerFactory, OidcTokenHandlerFactory and ServiceTokenHandlerFactory for AccessTokenFactory

6.2

• Add the Security helper class
• Deprecate the Symfony\Component\Security\Core\Security service alias, use Symfony\Bundle\SecurityBundle\Security instead
• Add Security::getFirewallConfig() to help to get the firewall configuration associated to the Request
• Add Security::login() to login programmatically
• Add Security::logout() to logout programmatically
• Add security.firewalls.logout.enable_csrf to enable CSRF protection using the default CSRF token generator
• Add RFC6750 Access Token support to allow token-based authentication
• Add security.firewalls.switch_user.target_route option to configure redirect target route on switch user
• Deprecate the security.enable_authenticator_manager config option

6.1

• The security.access_control now accepts a RequestMatcherInterface under the request_matcher option as scope configuration
• The security.access_control now accepts an attributes array to match request attributes in the RequestMatcher

... (truncated)

Commits

• 5d620bd Merge branch '6.4' into 7.0
• b7825ec Merge branch '5.4' into 6.4
• 6773ef1 [Security][Tests] Update functional tests to better reflect end-user scenarios
• 1755fb5 Merge branch '6.4' into 7.0
• dec0c2b Merge branch '5.4' into 6.4
• ce85db1 [TwigBridge] Fix compat with Twig v3.9
• 0deeed2 Merge branch '6.4' into 7.0
• a8f783d [SecurityBundle] Fix failing tests
• 382bfc2 Merge branch '6.4' into 7.0
• dfc7774 Merge branch '5.4' into 6.4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #158.