Bump cakephp/cakephp from 3.7.1 to 3.7.7 #80

Merged

dependabot[bot] merged 1 commit from dependabot/composer/cakephp/cakephp-3.7.7 into master

2020-03-16 19:04:27 +01:00

dependabot[bot] commented

2019-12-02 23:24:25 +01:00

(Migrated from github.com)

Bumps cakephp/cakephp from 3.7.1 to 3.7.7.

Release notes

Sourced from cakephp/cakephp's releases.

CakePHP 3.7.7 released

The CakePHP core team is happy to announce the immediate availability of CakePHP
3.7.7, 3.6.15 and 3.5.18. These releases contain a security related fix for CVE-2019-11458. The vulnerability affects applications that open serialized content from user input. When doing so the SmtpTransport can be used to overwrite any file the webserver has write access to. We'd like to thank Edgaras Janušauskas for notifying us of this issue and confirming the fix.

Bugfixes

In addition to the security fix, you can expect the following changes in 3.7.7. See the changelog for every
commit.

Add getName() to View. This method was suggested in a deprecation warning but did not exist.

Cake\Http\Response::withModified() is now compatible with DateTimeImmutable objects.

Improved API documentation.

Fixed accidental return type change in Cache::deleteMany().

FileEngine no longer emits warnings when cache files are written to during shutdown when the previous write is for the same key.

CommandRunner now gracefully handles StopException now.

Fixed side-effect in SmtpTransport destructor.

Contributors to 3.7.7

Thank you to all the contributors that helped make this release happen:

ADmad

Edgaras Janušauskas

Mark Scherer

Mark Story

saeideng

As always, we would like to thank all the contributors that opened issues, created pull requests or updated the documentation.

CakePHP 3.7.6 released

The CakePHP core team is happy to announce the immediate availability of CakePHP 3.7.6. This is a maintenance release for the 3.7 branch that fixes several community reported issues.

Bugfixes

You can expect the following changes in 3.7.6. See the changelog for every commit.

Improved the error message displayed when a route filter fails to apply.

Improved API documentation.

Blackhole callbacks for SecurityComponent can now return responses as they could in CakePHP 3.6.

The console TableHelper now calculates cell widths correctly when cells contain formatted content.

Fixed a persistence failure when HasMany associations had string keys.

Updated the CA bundle to curl 2019-01-23.

Fixed requirements on standalone Cache package.

Contributors to 3.7.6
... (truncated)

Commits

b0aeff3 Update version number to 3.7.7
2434f9b Merge pull request #13153 from cakephp/smtp-transport
1a74e79 Fix side-effect in destructor
f3adf8c Merge pull request #13134 from cakephp/run-command
649c0a4 catch the StopException when execute a command
33e43ea Merge pull request #13118 from cakephp/issue-13110
b5b6efc Merge pull request #13127 from cakephp/issue-13085-v3
d53a520 Fix warnings from FileEngine on shutdown
6331b0e Merge pull request #13119 from cakephp/issue-13087
4e35047 Fix method descriptions in FrozenTime
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [cakephp/cakephp](https://github.com/cakephp/cakephp) from 3.7.1 to 3.7.7. <details> <summary>Release notes</summary> *Sourced from [cakephp/cakephp's releases](https://github.com/cakephp/cakephp/releases).* > ## CakePHP 3.7.7 released > The CakePHP core team is happy to announce the immediate availability of CakePHP > 3.7.7, 3.6.15 and 3.5.18. These releases contain a security related fix for [CVE-2019-11458](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11458). The vulnerability affects applications that open serialized content from user input. When doing so the ``SmtpTransport`` can be used to overwrite any file the webserver has write access to. We'd like to thank Edgaras Janušauskas for notifying us of this issue and confirming the fix. > > Bugfixes > -------- > > In addition to the security fix, you can expect the following changes in 3.7.7. See the [changelog](https://github.com/cakephp/cakephp/compare/3.7.6...3.7.7) for every > commit. > > * Add ``getName()`` to View. This method was suggested in a deprecation warning but did not exist. > * ``Cake\Http\Response::withModified()`` is now compatible with ``DateTimeImmutable`` objects. > * Improved API documentation. > * Fixed accidental return type change in ``Cache::deleteMany()``. > * FileEngine no longer emits warnings when cache files are written to during shutdown when the previous write is for the same key. > * ``CommandRunner`` now gracefully handles ``StopException`` now. > * Fixed side-effect in ``SmtpTransport`` destructor. > > Contributors to 3.7.7 > --------------------- > > Thank you to all the contributors that helped make this release happen: > > * ADmad > * Edgaras Janušauskas > * Mark Scherer > * Mark Story > * saeideng > > As always, we would like to thank all the contributors that opened issues, created pull requests or updated the documentation. > > ## CakePHP 3.7.6 released > The CakePHP core team is happy to announce the immediate availability of CakePHP 3.7.6. This is a maintenance release for the 3.7 branch that fixes several community reported issues. > > Bugfixes > -------- > > You can expect the following changes in 3.7.6. See the [changelog](https://github.com/cakephp/cakephp/compare/3.7.5...3.7.6) for every commit. > > * Improved the error message displayed when a route filter fails to apply. > * Improved API documentation. > * Blackhole callbacks for ``SecurityComponent`` can now return responses as they could in CakePHP 3.6. > * The console ``TableHelper`` now calculates cell widths correctly when cells contain formatted content. > * Fixed a persistence failure when HasMany associations had string keys. > * Updated the CA bundle to curl 2019-01-23. > * Fixed requirements on standalone Cache package. > > Contributors to 3.7.6 > ---------------------- > ></tr></table> ... (truncated) </details> <details> <summary>Commits</summary> - [`b0aeff3`](https://github.com/cakephp/cakephp/commit/b0aeff37f78e6cca7ed35bc0e49dedd6cf5fb3d6) Update version number to 3.7.7 - [`2434f9b`](https://github.com/cakephp/cakephp/commit/2434f9ba4740759bf10947fbb5d3ebccce8e5cb9) Merge pull request [#13153](https://github-redirect.dependabot.com/cakephp/cakephp/issues/13153) from cakephp/smtp-transport - [`1a74e79`](https://github.com/cakephp/cakephp/commit/1a74e798309192a9895c9cedabd714ceee345f4e) Fix side-effect in destructor - [`f3adf8c`](https://github.com/cakephp/cakephp/commit/f3adf8cae8c1acd8c6f7c6d9aaea1c2b1ec14e71) Merge pull request [#13134](https://github-redirect.dependabot.com/cakephp/cakephp/issues/13134) from cakephp/run-command - [`649c0a4`](https://github.com/cakephp/cakephp/commit/649c0a44df6677f38fe342782d5047066630009b) catch the `StopException` when execute a command - [`33e43ea`](https://github.com/cakephp/cakephp/commit/33e43ea9d6e2cad30ee17b5b6ba9409c4d93a8ce) Merge pull request [#13118](https://github-redirect.dependabot.com/cakephp/cakephp/issues/13118) from cakephp/issue-13110 - [`b5b6efc`](https://github.com/cakephp/cakephp/commit/b5b6efcbd4dad2d7bde442d885166b9a4faa5629) Merge pull request [#13127](https://github-redirect.dependabot.com/cakephp/cakephp/issues/13127) from cakephp/issue-13085-v3 - [`d53a520`](https://github.com/cakephp/cakephp/commit/d53a52022381c5b40e3a0e7b12fa4e6922da1416) Fix warnings from FileEngine on shutdown - [`6331b0e`](https://github.com/cakephp/cakephp/commit/6331b0eadba6053874400e0bfbbedafebd88c5fa) Merge pull request [#13119](https://github-redirect.dependabot.com/cakephp/cakephp/issues/13119) from cakephp/issue-13087 - [`4e35047`](https://github.com/cakephp/cakephp/commit/4e35047d26f23b350124704cbfac0f04ab80d950) Fix method descriptions in FrozenTime - Additional commits viewable in [compare view](https://github.com/cakephp/cakephp/compare/3.7.1...3.7.7) </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cakephp/cakephp&package-manager=composer&previous-version=3.7.1&new-version=3.7.7)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/lbryio/block-explorer/network/alerts). </details>

No reviewers

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: LBRYCommunity/block-explorer#80

No description provided.