[Dependency] Bump league/commonmark from 2.8.0 to 2.8.1 in /site in the composer group across 1 directory#12546
Merged
Conversation
Contributor
|
Looks correct overall |
QuackHonk
self-requested a review
March 20, 2026 20:53
automateprojectmangement
Bot
moved this from Seeking Reviewer
to In Review
in Submitty Development
QuackHonk
approved these changes
Mar 20, 2026
QuackHonk
left a comment
QuackHonk
left a comment
Contributor
There was a problem hiding this comment.
Looks good! Just a quick runthrough suggests all necessary updates have been made
github-project-automation
Bot
moved this from In Review
to Awaiting Maintainer Review
in Submitty Development
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #12546 +/- ##
============================================
- Coverage 22.24% 21.66% -0.59%
Complexity 9637 9637
============================================
Files 238 268 +30
Lines 33042 36222 +3180
Branches 0 487 +487
============================================
+ Hits 7350 7847 +497
- Misses 25692 27892 +2200
- Partials 0 483 +483
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
Member
|
@dependabot recreate |
Bumps the composer group with 1 update in the /site directory: [league/commonmark](https://github.com/thephpleague/commonmark). Updates `league/commonmark` from 2.8.0 to 2.8.1 - [Release notes](https://github.com/thephpleague/commonmark/releases) - [Changelog](https://github.com/thephpleague/commonmark/blob/2.8/CHANGELOG.md) - [Commits](thephpleague/commonmark@2.8.0...2.8.1) --- updated-dependencies: - dependency-name: league/commonmark dependency-version: 2.8.1 dependency-type: direct:production dependency-group: composer ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
Bot
force-pushed
the
dependabot/composer/site/composer-c28d45bab6
branch
from
March 23, 2026 00:08
1b12803 to
3c0bd72
Compare
williamjallen
approved these changes
Mar 23, 2026
github-project-automation
Bot
moved this from Awaiting Maintainer Review
to Done
in Submitty Development
GarvitKhandelwal31
pushed a commit
to GarvitKhandelwal31/Submitty
that referenced
this pull request
Mar 25, 2026
…he composer group across 1 directory (Submitty#12546) Bumps the composer group with 1 update in the /site directory: [league/commonmark](https://github.com/thephpleague/commonmark). Updates `league/commonmark` from 2.8.0 to 2.8.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/thephpleague/commonmark/releases">league/commonmark's releases</a>.</em></p> <blockquote> <h2>2.8.1</h2> <h2>What's Changed</h2> <p>This is a <strong>security release</strong> to address an issue where <code>DisallowedRawHtml</code> can be bypassed, resulting in a possible cross-site scripting (XSS) vulnerability.</p> <h3>Fixed</h3> <ul> <li>Fixed <code>DisallowedRawHtmlRenderer</code> not blocking raw HTML tags with trailing ASCII whitespace (<a href="https://github.com/thephpleague/commonmark/security/advisories/GHSA-4v6x-c7xx-hw9f">GHSA-4v6x-c7xx-hw9f</a>)</li> <li>Fixed PHP 8.5 deprecation (<a href="https://redirect.github.com/thephpleague/commonmark/issues/1107">#1107</a>)</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Kocal"><code>@Kocal</code></a> made their first contribution in <a href="https://redirect.github.com/thephpleague/commonmark/pull/1106">thephpleague/commonmark#1106</a></li> <li><a href="https://github.com/freost"><code>@freost</code></a> made their first contribution in <a href="https://redirect.github.com/thephpleague/commonmark/pull/1107">thephpleague/commonmark#1107</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/thephpleague/commonmark/compare/2.8.0...2.8.1">https://github.com/thephpleague/commonmark/compare/2.8.0...2.8.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/thephpleague/commonmark/blob/2.8/CHANGELOG.md">league/commonmark's changelog</a>.</em></p> <blockquote> <h2>[2.8.1] - 2026-03-05</h2> <p>This is a <strong>security release</strong> to address an issue where <code>DisallowedRawHtml</code> can be bypassed, resulting in a possible cross-site scripting (XSS) vulnerability.</p> <h3>Fixed</h3> <ul> <li>Fixed <code>DisallowedRawHtmlRenderer</code> not blocking raw HTML tags with trailing ASCII whitespace (GHSA-4v6x-c7xx-hw9f)</li> <li>Fixed PHP 8.5 deprecation (<a href="https://redirect.github.com/thephpleague/commonmark/issues/1107">#1107</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/thephpleague/commonmark/commit/84b1ca48347efdbe775426f108622a42735a6579"><code>84b1ca4</code></a> Almost forgot this entry</li> <li><a href="https://github.com/thephpleague/commonmark/commit/bcf54f5a38cf8e42cca45248b04caba13317459f"><code>bcf54f5</code></a> Merge commit from fork</li> <li><a href="https://github.com/thephpleague/commonmark/commit/7a68ed1c6765bd2650fed6d9857985bdfe655c71"><code>7a68ed1</code></a> Prepare to release 2.8.1</li> <li><a href="https://github.com/thephpleague/commonmark/commit/5c0c4c8fe5a31e8260be99e0afad7136a27c79e6"><code>5c0c4c8</code></a> Fix DisallowedRawHtml bypass via newline/tab in tag names</li> <li><a href="https://github.com/thephpleague/commonmark/commit/f6e74434dd1a91f195f80cb0184b746a4187272a"><code>f6e7443</code></a> Add regression test</li> <li><a href="https://github.com/thephpleague/commonmark/commit/0719b6744cc68bc8b037fb30db86b62ec370c557"><code>0719b67</code></a> Merge pull request <a href="https://redirect.github.com/thephpleague/commonmark/issues/1107">#1107</a> from freost/fix-php85-deprecation-error</li> <li><a href="https://github.com/thephpleague/commonmark/commit/63ff2e0b12742f379803b5f21aa6f5b50abcd412"><code>63ff2e0</code></a> Fix PHP 8.5 deprecation</li> <li><a href="https://github.com/thephpleague/commonmark/commit/8608e9c006d9f44acf8d983b126a813bd8def780"><code>8608e9c</code></a> Merge pull request <a href="https://redirect.github.com/thephpleague/commonmark/issues/1106">#1106</a> from Kocal/patch-1</li> <li><a href="https://github.com/thephpleague/commonmark/commit/10f246a4064731b8c46942237a26261484bba7f5"><code>10f246a</code></a> [Docs] Fix "rendering" page rendering</li> <li><a href="https://github.com/thephpleague/commonmark/commit/24b07741e26bfd7224acd5ec2342c25bab20a32a"><code>24b0774</code></a> Merge pull request <a href="https://redirect.github.com/thephpleague/commonmark/issues/1104">#1104</a> from thephpleague/renovate/major-symfony</li> <li>Additional commits viewable in <a href="https://github.com/thephpleague/commonmark/compare/2.8.0...2.8.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Submitty/Submitty/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
GarvitKhandelwal31
pushed a commit
to GarvitKhandelwal31/Submitty
that referenced
this pull request
Mar 29, 2026
…he composer group across 1 directory (Submitty#12546) Bumps the composer group with 1 update in the /site directory: [league/commonmark](https://github.com/thephpleague/commonmark). Updates `league/commonmark` from 2.8.0 to 2.8.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/thephpleague/commonmark/releases">league/commonmark's releases</a>.</em></p> <blockquote> <h2>2.8.1</h2> <h2>What's Changed</h2> <p>This is a <strong>security release</strong> to address an issue where <code>DisallowedRawHtml</code> can be bypassed, resulting in a possible cross-site scripting (XSS) vulnerability.</p> <h3>Fixed</h3> <ul> <li>Fixed <code>DisallowedRawHtmlRenderer</code> not blocking raw HTML tags with trailing ASCII whitespace (<a href="https://github.com/thephpleague/commonmark/security/advisories/GHSA-4v6x-c7xx-hw9f">GHSA-4v6x-c7xx-hw9f</a>)</li> <li>Fixed PHP 8.5 deprecation (<a href="https://redirect.github.com/thephpleague/commonmark/issues/1107">#1107</a>)</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Kocal"><code>@Kocal</code></a> made their first contribution in <a href="https://redirect.github.com/thephpleague/commonmark/pull/1106">thephpleague/commonmark#1106</a></li> <li><a href="https://github.com/freost"><code>@freost</code></a> made their first contribution in <a href="https://redirect.github.com/thephpleague/commonmark/pull/1107">thephpleague/commonmark#1107</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/thephpleague/commonmark/compare/2.8.0...2.8.1">https://github.com/thephpleague/commonmark/compare/2.8.0...2.8.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/thephpleague/commonmark/blob/2.8/CHANGELOG.md">league/commonmark's changelog</a>.</em></p> <blockquote> <h2>[2.8.1] - 2026-03-05</h2> <p>This is a <strong>security release</strong> to address an issue where <code>DisallowedRawHtml</code> can be bypassed, resulting in a possible cross-site scripting (XSS) vulnerability.</p> <h3>Fixed</h3> <ul> <li>Fixed <code>DisallowedRawHtmlRenderer</code> not blocking raw HTML tags with trailing ASCII whitespace (GHSA-4v6x-c7xx-hw9f)</li> <li>Fixed PHP 8.5 deprecation (<a href="https://redirect.github.com/thephpleague/commonmark/issues/1107">#1107</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/thephpleague/commonmark/commit/84b1ca48347efdbe775426f108622a42735a6579"><code>84b1ca4</code></a> Almost forgot this entry</li> <li><a href="https://github.com/thephpleague/commonmark/commit/bcf54f5a38cf8e42cca45248b04caba13317459f"><code>bcf54f5</code></a> Merge commit from fork</li> <li><a href="https://github.com/thephpleague/commonmark/commit/7a68ed1c6765bd2650fed6d9857985bdfe655c71"><code>7a68ed1</code></a> Prepare to release 2.8.1</li> <li><a href="https://github.com/thephpleague/commonmark/commit/5c0c4c8fe5a31e8260be99e0afad7136a27c79e6"><code>5c0c4c8</code></a> Fix DisallowedRawHtml bypass via newline/tab in tag names</li> <li><a href="https://github.com/thephpleague/commonmark/commit/f6e74434dd1a91f195f80cb0184b746a4187272a"><code>f6e7443</code></a> Add regression test</li> <li><a href="https://github.com/thephpleague/commonmark/commit/0719b6744cc68bc8b037fb30db86b62ec370c557"><code>0719b67</code></a> Merge pull request <a href="https://redirect.github.com/thephpleague/commonmark/issues/1107">#1107</a> from freost/fix-php85-deprecation-error</li> <li><a href="https://github.com/thephpleague/commonmark/commit/63ff2e0b12742f379803b5f21aa6f5b50abcd412"><code>63ff2e0</code></a> Fix PHP 8.5 deprecation</li> <li><a href="https://github.com/thephpleague/commonmark/commit/8608e9c006d9f44acf8d983b126a813bd8def780"><code>8608e9c</code></a> Merge pull request <a href="https://redirect.github.com/thephpleague/commonmark/issues/1106">#1106</a> from Kocal/patch-1</li> <li><a href="https://github.com/thephpleague/commonmark/commit/10f246a4064731b8c46942237a26261484bba7f5"><code>10f246a</code></a> [Docs] Fix "rendering" page rendering</li> <li><a href="https://github.com/thephpleague/commonmark/commit/24b07741e26bfd7224acd5ec2342c25bab20a32a"><code>24b0774</code></a> Merge pull request <a href="https://redirect.github.com/thephpleague/commonmark/issues/1104">#1104</a> from thephpleague/renovate/major-symfony</li> <li>Additional commits viewable in <a href="https://github.com/thephpleague/commonmark/compare/2.8.0...2.8.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Submitty/Submitty/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
GarvitKhandelwal31
pushed a commit
to GarvitKhandelwal31/Submitty
that referenced
this pull request
Apr 14, 2026
…he composer group across 1 directory (Submitty#12546) Bumps the composer group with 1 update in the /site directory: [league/commonmark](https://github.com/thephpleague/commonmark). Updates `league/commonmark` from 2.8.0 to 2.8.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/thephpleague/commonmark/releases">league/commonmark's releases</a>.</em></p> <blockquote> <h2>2.8.1</h2> <h2>What's Changed</h2> <p>This is a <strong>security release</strong> to address an issue where <code>DisallowedRawHtml</code> can be bypassed, resulting in a possible cross-site scripting (XSS) vulnerability.</p> <h3>Fixed</h3> <ul> <li>Fixed <code>DisallowedRawHtmlRenderer</code> not blocking raw HTML tags with trailing ASCII whitespace (<a href="https://github.com/thephpleague/commonmark/security/advisories/GHSA-4v6x-c7xx-hw9f">GHSA-4v6x-c7xx-hw9f</a>)</li> <li>Fixed PHP 8.5 deprecation (<a href="https://redirect.github.com/thephpleague/commonmark/issues/1107">#1107</a>)</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Kocal"><code>@Kocal</code></a> made their first contribution in <a href="https://redirect.github.com/thephpleague/commonmark/pull/1106">thephpleague/commonmark#1106</a></li> <li><a href="https://github.com/freost"><code>@freost</code></a> made their first contribution in <a href="https://redirect.github.com/thephpleague/commonmark/pull/1107">thephpleague/commonmark#1107</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/thephpleague/commonmark/compare/2.8.0...2.8.1">https://github.com/thephpleague/commonmark/compare/2.8.0...2.8.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/thephpleague/commonmark/blob/2.8/CHANGELOG.md">league/commonmark's changelog</a>.</em></p> <blockquote> <h2>[2.8.1] - 2026-03-05</h2> <p>This is a <strong>security release</strong> to address an issue where <code>DisallowedRawHtml</code> can be bypassed, resulting in a possible cross-site scripting (XSS) vulnerability.</p> <h3>Fixed</h3> <ul> <li>Fixed <code>DisallowedRawHtmlRenderer</code> not blocking raw HTML tags with trailing ASCII whitespace (GHSA-4v6x-c7xx-hw9f)</li> <li>Fixed PHP 8.5 deprecation (<a href="https://redirect.github.com/thephpleague/commonmark/issues/1107">#1107</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/thephpleague/commonmark/commit/84b1ca48347efdbe775426f108622a42735a6579"><code>84b1ca4</code></a> Almost forgot this entry</li> <li><a href="https://github.com/thephpleague/commonmark/commit/bcf54f5a38cf8e42cca45248b04caba13317459f"><code>bcf54f5</code></a> Merge commit from fork</li> <li><a href="https://github.com/thephpleague/commonmark/commit/7a68ed1c6765bd2650fed6d9857985bdfe655c71"><code>7a68ed1</code></a> Prepare to release 2.8.1</li> <li><a href="https://github.com/thephpleague/commonmark/commit/5c0c4c8fe5a31e8260be99e0afad7136a27c79e6"><code>5c0c4c8</code></a> Fix DisallowedRawHtml bypass via newline/tab in tag names</li> <li><a href="https://github.com/thephpleague/commonmark/commit/f6e74434dd1a91f195f80cb0184b746a4187272a"><code>f6e7443</code></a> Add regression test</li> <li><a href="https://github.com/thephpleague/commonmark/commit/0719b6744cc68bc8b037fb30db86b62ec370c557"><code>0719b67</code></a> Merge pull request <a href="https://redirect.github.com/thephpleague/commonmark/issues/1107">#1107</a> from freost/fix-php85-deprecation-error</li> <li><a href="https://github.com/thephpleague/commonmark/commit/63ff2e0b12742f379803b5f21aa6f5b50abcd412"><code>63ff2e0</code></a> Fix PHP 8.5 deprecation</li> <li><a href="https://github.com/thephpleague/commonmark/commit/8608e9c006d9f44acf8d983b126a813bd8def780"><code>8608e9c</code></a> Merge pull request <a href="https://redirect.github.com/thephpleague/commonmark/issues/1106">#1106</a> from Kocal/patch-1</li> <li><a href="https://github.com/thephpleague/commonmark/commit/10f246a4064731b8c46942237a26261484bba7f5"><code>10f246a</code></a> [Docs] Fix "rendering" page rendering</li> <li><a href="https://github.com/thephpleague/commonmark/commit/24b07741e26bfd7224acd5ec2342c25bab20a32a"><code>24b0774</code></a> Merge pull request <a href="https://redirect.github.com/thephpleague/commonmark/issues/1104">#1104</a> from thephpleague/renovate/major-symfony</li> <li>Additional commits viewable in <a href="https://github.com/thephpleague/commonmark/compare/2.8.0...2.8.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Submitty/Submitty/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the composer group with 1 update in the /site directory: league/commonmark.
Updates
league/commonmarkfrom 2.8.0 to 2.8.1Release notes
Sourced from league/commonmark's releases.
Changelog
Sourced from league/commonmark's changelog.
Commits
84b1ca4Almost forgot this entrybcf54f5Merge commit from fork7a68ed1Prepare to release 2.8.15c0c4c8Fix DisallowedRawHtml bypass via newline/tab in tag namesf6e7443Add regression test0719b67Merge pull request #1107 from freost/fix-php85-deprecation-error63ff2e0Fix PHP 8.5 deprecation8608e9cMerge pull request #1106 from Kocal/patch-110f246a[Docs] Fix "rendering" page rendering24b0774Merge pull request #1104 from thephpleague/renovate/major-symfonyDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.