fix(deps): update dependency symfony/yaml to v8

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
symfony/yaml (source)	^5.2 → ^8.0

---

Release Notes

symfony/yaml (symfony/yaml)

v8.1.1

Compare Source

Changelog (symfony/yaml@v8.1.0...v8.1.1)

• minor #​64476 Unsafe unserialize phpstan rule (@​jack-worman)

v8.1.0

Compare Source

Changelog (symfony/yaml@v8.1.0-RC1...v8.1.0)

• bug #​64388 Fix parsing inline anchored values (@​nicolas-grekas)

v8.0.14

Compare Source

Changelog (symfony/yaml@v8.0.13...v8.0.14)

• minor #​64476 Unsafe unserialize phpstan rule (@​jack-worman)
• bug #​64388 Fix parsing inline anchored values (@​nicolas-grekas)

v8.0.13

Compare Source

Changelog (symfony/yaml@v8.0.12...v8.0.13)

• bug #​64316 Allow trailing newlines after the end-of-document marker (@​nicolas-grekas)

v8.0.12

Compare Source

Changelog (symfony/yaml@v8.0.11...v8.0.12)

• security #cve-2026-45305 Harden the Parser::cleanup() regexes against catastrophic backtracking (@​nicolas-grekas)
• security #cve-2026-45304 Bound collection-alias resolution in the parser (@​nicolas-grekas)
• security #cve-2026-45133 Bound recursion depth in the parser (@​nicolas-grekas)

v8.0.11

Compare Source

Changelog (symfony/yaml@v8.0.10...v8.0.11)

• bug #​64196 Reject non-stringables when using "!!binary" (@​nicolas-grekas)

v8.0.10

Compare Source

Changelog (symfony/yaml@v8.0.6...v8.0.10)

• bug #​64119 fix flow collection drops &anchor and !!str &anchor items (@​ousamabenyounes)

v8.0.8

Compare Source

Changelog (symfony/yaml@v8.0.7...v8.0.8)

• no significant changes

v8.0.6

Compare Source

Changelog (symfony/yaml@v8.0.5...v8.0.6)

• bug #​57292 Fix parsing nested mappings in sequences (@​HypeMC)

v8.0.1

Compare Source

Changelog (symfony/yaml@v8.0.0...v8.0.1)

• bug symfony/symfony#62612 [Yaml] Fix regression handling blank lines in unquoted scalars (@​yoeunes)

v8.0.0

Compare Source

v7.4.14

Compare Source

Changelog (symfony/yaml@v7.4.13...v7.4.14)

• minor #​64476 Unsafe unserialize phpstan rule (@​jack-worman)
• bug #​64388 Fix parsing inline anchored values (@​nicolas-grekas)

v7.4.13

Compare Source

Changelog (symfony/yaml@v7.4.12...v7.4.13)

• bug #​64316 Allow trailing newlines after the end-of-document marker (@​nicolas-grekas)

v7.4.12

Compare Source

Changelog (symfony/yaml@v7.4.11...v7.4.12)

• security #cve-2026-45305 Harden the Parser::cleanup() regexes against catastrophic backtracking (@​nicolas-grekas)
• security #cve-2026-45304 Bound collection-alias resolution in the parser (@​nicolas-grekas)
• security #cve-2026-45133 Bound recursion depth in the parser (@​nicolas-grekas)

v7.4.11

Compare Source

Changelog (symfony/yaml@v7.4.10...v7.4.11)

• bug #​64196 Reject non-stringables when using "!!binary" (@​nicolas-grekas)

v7.4.10

Compare Source

Changelog (symfony/yaml@v7.4.6...v7.4.10)

• bug #​64119 fix flow collection drops &anchor and !!str &anchor items (@​ousamabenyounes)

v7.4.8

Compare Source

Changelog (symfony/yaml@v7.4.7...v7.4.8)

• no significant changes

v7.4.6

Compare Source

Changelog (symfony/yaml@v7.4.5...v7.4.6)

• bug #​57292 Fix parsing nested mappings in sequences (@​HypeMC)

v7.4.1

Compare Source

Changelog (symfony/yaml@v7.4.0...v7.4.1)

• bug symfony/symfony#62612 [Yaml] Fix regression handling blank lines in unquoted scalars (@​yoeunes)

v7.4.0

Compare Source

Changelog (symfony/yaml@v7.4.0-RC3...v7.4.0)

• no significant changes

v7.3.8

Compare Source

Changelog (symfony/yaml@v7.3.7...v7.3.8)

• bug symfony/symfony#62612 [Yaml] Fix regression handling blank lines in unquoted scalars (@​yoeunes)
• bug symfony/symfony#62409 [Yaml] Align unquoted multiline scalar parsing with spec for comments (@​yoeunes)
• bug symfony/symfony#62359 [Yaml] Fix parsing of unquoted multiline scalars with comments or blank lines (@​yoeunes)

v7.3.5

Compare Source

Changelog (symfony/yaml@v7.3.4...v7.3.5)

• bug symfony/symfony#61855 [DoctrineBridge][Yaml] don't cast strings exceeding the min/max int ranges (@​xabbuh)

v7.3.3

Compare Source

Changelog (symfony/yaml@v7.3.2...v7.3.3)

• bug symfony/symfony#61520 [Yaml] Fix scope resolution operator in flow mapping keys (@​MatTheCat)

v7.3.2

Compare Source

Changelog (symfony/yaml@v7.3.1...v7.3.2)

• no significant changes

v7.3.1

Compare Source

Changelog (symfony/yaml@v7.3.0...v7.3.1)

• bug symfony/symfony#60648 [Yaml] fix support for years outside of the 32b range on x86 arch on PHP 8.4 (@​nicolas-grekas)

v7.3.0

Compare Source

Changelog (symfony/yaml@v7.3.0-RC1...v7.3.0)

• no significant changes

v7.2.9

Compare Source

Changelog (symfony/yaml@v7.2.8...v7.2.9)

• no significant changes

v7.2.8

Compare Source

Changelog (symfony/yaml@v7.2.7...v7.2.8)

• bug symfony/symfony#60648 [Yaml] fix support for years outside of the 32b range on x86 arch on PHP 8.4 (@​nicolas-grekas)

v7.2.6

Compare Source

Changelog (symfony/yaml@v7.2.5...v7.2.6)

• no significant changes

v7.2.5

Compare Source

Changelog (symfony/yaml@v7.2.4...v7.2.5)

• bug symfony/symfony#59830 [Yaml] drop comments while lexing unquoted strings (@​xabbuh)

v7.2.3

Compare Source

Changelog (symfony/yaml@v7.2.2...v7.2.3)

• bug symfony/symfony#59381 [Yaml] fix inline notation with inline comment (@​alexpott)
• bug symfony/symfony#59349 [Yaml] reject inline notations followed by invalid content (@​xabbuh)
• bug symfony/symfony#59312 [Yaml] Fix parsing of unquoted strings in Parser::lexUnquotedString() to ignore spaces (@​Link1515)

v7.2.0

Compare Source

Changelog (symfony/yaml@v7.2.0-RC1...v7.2.0)

• no significant changes

v7.1.11

Compare Source

Changelog (symfony/yaml@v7.1.10...v7.1.11)

• bug symfony/symfony#59381 [Yaml] fix inline notation with inline comment (@​alexpott)
• bug symfony/symfony#59349 [Yaml] reject inline notations followed by invalid content (@​xabbuh)
• bug symfony/symfony#59312 [Yaml] Fix parsing of unquoted strings in Parser::lexUnquotedString() to ignore spaces (@​Link1515)

v7.1.6

Compare Source

Changelog (symfony/yaml@v7.1.5...v7.1.6)

• no significant changes

v7.1.5

Compare Source

Changelog (symfony/yaml@v7.1.4...v7.1.5)

• bug symfony/symfony#58279 [Yaml] parse empty sequence elements as null (@​xabbuh)

v7.1.4

Compare Source

Changelog (symfony/yaml@v7.1.3...v7.1.4)

• bug symfony/symfony#57968 [Yaml] 🐛 throw ParseException on invalid date (@​homersimpsons)

v7.1.1

Compare Source

Changelog (symfony/yaml@v7.1.0...v7.1.1)

• no significant changes

v7.1.0

Compare Source

Changelog (symfony/yaml@v7.1.0-RC1...v7.1.0)

• no significant changes

v7.0.8

Compare Source

Changelog (symfony/yaml@v7.0.7...v7.0.8)

• no significant changes

v7.0.7

Compare Source

Changelog (symfony/yaml@v7.0.6...v7.0.7)

• bug symfony/symfony#54706 [Yaml] call substr() with integer offsets (@​xabbuh)

v7.0.3

Compare Source

Changelog (symfony/yaml@v7.0.2...v7.0.3)

• no significant changes

v7.0.0

Compare Source

Changelog (symfony/yaml@v7.0.0-RC2...v7.0.0)

• no significant changes

v6.4.42

Compare Source

Changelog (symfony/yaml@v6.4.41...v6.4.42)

• minor #​64476 Unsafe unserialize phpstan rule (@​jack-worman)
• bug #​64388 Fix parsing inline anchored values (@​nicolas-grekas)

v6.4.41

Compare Source

Changelog (symfony/yaml@v6.4.40...v6.4.41)

• bug #​64316 Allow trailing newlines after the end-of-document marker (@​nicolas-grekas)

v6.4.40

Compare Source

Changelog (symfony/yaml@v6.4.39...v6.4.40)

• security #cve-2026-45305 Harden the Parser::cleanup() regexes against catastrophic backtracking (@​nicolas-grekas)
• security #cve-2026-45304 Bound collection-alias resolution in the parser (@​nicolas-grekas)
• security #cve-2026-45133 Bound recursion depth in the parser (@​nicolas-grekas)

v6.4.39

Compare Source

Changelog (symfony/yaml@v6.4.38...v6.4.39)

• bug #​64196 Reject non-stringables when using "!!binary" (@​nicolas-grekas)

v6.4.38

Compare Source

Changelog (symfony/yaml@v6.4.34...v6.4.38)

• bug #​64119 fix flow collection drops &anchor and !!str &anchor items (@​ousamabenyounes)

v6.4.34

Compare Source

Changelog (symfony/yaml@v6.4.33...v6.4.34)

• bug #​57292 Fix parsing nested mappings in sequences (@​HypeMC)

v6.4.30

Compare Source

Changelog (symfony/yaml@v6.4.29...v6.4.30)

• bug symfony/symfony#62612 [Yaml] Fix regression handling blank lines in unquoted scalars (@​yoeunes)
• bug symfony/symfony#62409 [Yaml] Align unquoted multiline scalar parsing with spec for comments (@​yoeunes)
• bug symfony/symfony#62359 [Yaml] Fix parsing of unquoted multiline scalars with comments or blank lines (@​yoeunes)

v6.4.26

Compare Source

Changelog (symfony/yaml@v6.4.25...v6.4.26)

• bug symfony/symfony#61855 [DoctrineBridge][Yaml] don't cast strings exceeding the min/max int ranges (@​xabbuh)

v6.4.25

Compare Source

Changelog (symfony/yaml@v6.4.24...v6.4.25)

• bug symfony/symfony#61520 [Yaml] Fix scope resolution operator in flow mapping keys (@​MatTheCat)

v6.4.24

Compare Source

Changelog (symfony/yaml@v6.4.23...v6.4.24)

• no significant changes

v6.4.23

Compare Source

Changelog (symfony/yaml@v6.4.22...v6.4.23)

• bug symfony/symfony#60648 [Yaml] fix support for years outside of the 32b range on x86 arch on PHP 8.4 (@​nicolas-grekas)

v6.4.21

Compare Source

Changelog (symfony/yaml@v6.4.20...v6.4.21)

• no significant changes

v6.4.20

Compare Source

Changelog (symfony/yaml@v6.4.19...v6.4.20)

• bug symfony/symfony#59830 [Yaml] drop comments while lexing unquoted strings (@​xabbuh)

v6.4.18

Compare Source

Changelog (symfony/yaml@v6.4.17...v6.4.18)

• bug symfony/symfony#59381 [Yaml] fix inline notation with inline comment (@​alexpott)
• bug symfony/symfony#59349 [Yaml] reject inline notations followed by invalid content (@​xabbuh)
• bug symfony/symfony#59312 [Yaml] Fix parsing of unquoted strings in Parser::lexUnquotedString() to ignore spaces (@​Link1515)

v6.4.13

Compare Source

Changelog (symfony/yaml@v6.4.12...v6.4.13)

• no significant changes

v6.4.12

Compare Source

Changelog (symfony/yaml@v6.4.11...v6.4.12)

• bug symfony/symfony#58279 [Yaml] parse empty sequence elements as null (@​xabbuh)

v6.4.11

Compare Source

Changelog (symfony/yaml@v6.4.10...v6.4.11)

• bug symfony/symfony#57968 [Yaml] 🐛 throw ParseException on invalid date (@​homersimpsons)

v6.4.8

Compare Source

Changelog (symfony/yaml@v6.4.7...v6.4.8)

• no significant changes

v6.4.7

Compare Source

Changelog (symfony/yaml@v6.4.6...v6.4.7)

• bug symfony/symfony#54706 [Yaml] call substr() with integer offsets (@​xabbuh)

v6.4.3

Compare Source

Changelog (symfony/yaml@v6.4.2...v6.4.3)

• no significant changes

v6.4.0

Compare Source

Changelog (symfony/yaml@v6.4.0-RC2...v6.4.0)

• no significant changes

v6.3.12

Compare Source

Changelog (symfony/yaml@v6.3.11...v6.3.12)

• no significant changes

v6.3.8

Compare Source

Changelog (symfony/yaml@v6.3.7...v6.3.8)

• bug symfony/symfony#52443 [Yaml] Fix uid binary parsing (@​mRoca)
• bug symfony/symfony#52408 [Yaml] Fix block scalar array parsing (@​NickSdot)

v6.3.7

Compare Source

Changelog (symfony/yaml@v6.3.6...v6.3.7)

• bug symfony/symfony#52332 [Yaml] Fix deprecated passing null to trim() (@​javaDeveloperKid)

v6.3.3

Compare Source

Changelog (symfony/yaml@v6.3.2...v6.3.3)

• no significant changes

v6.3.0

Compare Source

Changelog (symfony/yaml@v6.3.0-RC2...v6.3.0)

• no significant changes

v6.2.10

Compare Source

Changelog (symfony/yaml@v6.2.9...v6.2.10)

• bug symfony/symfony#50066 [Dumper] Trim leading newlines when checking if value begins with a space (@​bradtreloar)
• bug symfony/symfony#48886 [Console] Fix computing column width containing multibyte chars (@​cay89)
• bug symfony/symfony#47505 [Mime] Form field values with integer keys not resolved correctly (@​claudiu-cristea)
• bug symfony/symfony#48837 [Messenger] [Redis] Fixed problem where worker stops handling messages on first empty message (@​jvmanji)
• bug symfony/symfony#49317 [Messenger] Fix warning message on failed messenger show command (@​gstapinato)
• bug symfony/symfony#48972 [HttpFoundation] Fix memory limit problems in BinaryFileResponse (@​glady)
• bug symfony/symfony#49009 [Form] Cast choices value callback result to string (@​Matth--)

v6.2.7

Compare Source

Changelog (symfony/yaml@v6.2.6...v6.2.7)

• no significant changes

v6.2.5

Compare Source

Changelog (symfony/yaml@v6.2.4...v6.2.5)

• no significant changes

v6.2.2

Compare Source

Changelog (symfony/yaml@v6.2.1...v6.2.2)

• bug #​48331 fix dumping top-level tagged values (xabbuh)

v6.2.0

Compare Source

Changelog (symfony/yaml@v6.2.0-RC2...v6.2.0)

• no significant changes

v6.1.11

Compare Source

v6.1.9

Compare Source

Changelog (symfony/yaml@v6.1.8...v6.1.9)

• bug #​48331 fix dumping top-level tagged values (xabbuh)

v6.1.8

Compare Source

Changelog (symfony/yaml@v6.1.7...v6.1.8)

• bug #​48333 parse unquoted digits in tag values as integers (xabbuh)

v6.1.6

Compare Source

Changelog (symfony/yaml@v6.1.5...v6.1.6)

• no significant changes

v6.1.4

Compare Source

Changelog (symfony/yaml@v6.1.3...v6.1.4)

• no significant changes

v6.1.3

Compare Source

Changelog (symfony/yaml@v6.1.2...v6.1.3)

• no significant changes

v6.1.2

Compare Source

Changelog (symfony/yaml@v6.1.1...v6.1.2)

• no significant changes

v6.1.0

Compare Source

Changelog (symfony/yaml@v6.1.0-RC1...v6.1.0)

• no significant changes

v6.0.19

Compare Source

Changelog (symfony/yaml@v6.0.18...v6.0.19)

• no significant changes

v6.0.17

Compare Source

Changelog (symfony/yaml@v6.0.16...v6.0.17)

• bug #​48331 fix dumping top-level tagged values (xabbuh)

v6.0.16

Compare Source

Changelog (symfony/yaml@v6.0.15...v6.0.16)

• bug #​48333 parse unquoted digits in tag values as integers (xabbuh)

v6.0.14

Compare Source

Changelog (symfony/yaml@v6.0.13...v6.0.14)

• no significant changes

v6.0.12

Compare Source

Changelog (symfony/yaml@v6.0.11...v6.0.12)

• no significant changes

v6.0.11

Compare Source

Changelog (symfony/yaml@v6.0.10...v6.0.11)

• no significant changes

v6.0.10

Compare Source

Changelog (symfony/yaml@v6.0.9...v6.0.10)

• no significant changes

v6.0.3

Compare Source

Changelog (symfony/yaml@v6.0.2...v6.0.3)

• bug #​45140 Making the parser stateless (mamazu)

v6.0.2

Compare Source

Changelog (symfony/yaml@v6.0.1...v6.0.2)

• no significant changes

v6.0.1

Compare Source

Changelog (symfony/yaml@v6.0.0...v6.0.1)

• bug #​44494 Remove FQCN type hints on properties (fabpot)

v6.0.0

Compare Source

Changelog (symfony/yaml@v6.0.0-RC1...v6.0.0)

• no significant changes

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[gcf-merge-on-green]

Merge-on-green attempted to merge your PR for 6 hours, but it was not mergeable because either one of your required status checks failed, one of your required reviews was not approved, or there is a do not merge label. Learn more about your required status checks here: https://help.github.com/en/github/administering-a-repository/enabling-required-status-checks. You can remove and reapply the label to re-run the bot.

[bshaffer]

will require a PHP 8.2 update