🚨 [Conductor] Security update symfony/cache to v7.4.13

[private-packagist]

This PR was automatically generated by Conductor.

The PR contains the changes generated by running the following command:

composer update symfony/cache:v7.4.13 --with-all-dependencies --minimal-changes

Changelog

symfony/cache (Source: GitHub Releases))

v7.4.12

Changelog (v7.4.10...v7.4.12)

• security #cve-2026-45073 Validate the prefix given to AbstractAdapter::clear() (@​nicolas-grekas)

v7.4.10

Changelog (v7.4.9...v7.4.10)

• bug #​64122 Ensure compatibility with Relay extension 0.22.0 (@​nicolas-grekas)

v7.4.9

Changelog (v7.4.8...v7.4.9)

• bug #​64060 Normalize default_lifetime for pools wrapped by ChainAdapter (@​ostrolucky)
• bug #​63964 Ensure internal state is cleared in TagAwareAdapter::reset() … (@​KevinMartinsDev)
• bug #​63860 Fix Psr16Cache::getMultiple() returning wrapper values when using TTL (@​nicolas-grekas)

v7.4.8

Changelog (v7.4.7...v7.4.8)

• bug #​63818 Ensure compatibility with Relay extension 0.21.0 (@​lyrixx)
• bug #​63747 Fix Psr16Cache::getMultiple() returning ValueWrapper with TagAwareAdapter (@​pcescon)
• bug #​63736 Fix undefined array key when tag save fails in AbstractTagAwareAdapter (@​pcescon)
• bug #​63655 Fix ChainAdapter ignoring item expiry when propagating to earlier adapters (@​guillaumeVDP)

v7.4.7

Changelog (v7.4.6...v7.4.7)

• bug #​63592 Add timeout and slot eviction to LockRegistry stampede prevention (@​nicolas-grekas)

v7.4.6

Changelog (v7.4.5...v7.4.6)

• bug #​63437 Wrap DoctrineDbalAdapter::doSave() in savepoint to prevent transaction poisoning (@​lacatoire)
• bug #​63391 Align Redis sentinel auth handling across components (@​nicolas-grekas)
• bug #​63324 Fix DSN auth not passed to Redis/RedisCluster/Relay in RedisTrait (@​ckrack)
• bug #​63306 Revert "Fix DSN auth not passed to clusters in RedisTrait" (@​nicolas-grekas)
• bug #​63272 Fix forwarding SSL settings to the redis sentinel (@​CientistaDaWeb)
• bug #​63230 fix engine declaration on mysql pdo table creations (@​tandev)

v7.4.5

Changelog (v7.4.4...v7.4.5)

• bug #​63137 Fix PdoSessionHandler charset-collation mismatch with the Doctrine DBAL (@​samy-mahmoudi)

v7.4.4

Changelog (v7.4.3...v7.4.4)

• bug #​62852 Fix DSN auth not passed to clusters in RedisTrait (@​wikando-ck)

v7.4.3

Changelog (v7.4.2...v7.4.3)

• bug symfony/symfony#​62873 [Cache] Fix namespace of chained pools when using another chain as template (@​nicolas-grekas)
• bug symfony/symfony#​62840 [Cache] Fix stampede protection when forcing item recomputation (@​nicolas-grekas)
• bug symfony/symfony#​62490 [FrameworkBundle] Fix cache:pool:prune exit code on failure (@​yoeunes)
• bug symfony/symfony#​62793 [Cache] Fix calling the callback wrapper for ChainAdapter (@​nicolas-grekas)
• bug symfony/symfony#​62799 [Cache][HttpFoundation] Fix VARBINARY columns on sqlsrv (@​nicolas-grekas)

v7.4.1

Changelog (v7.4.0...v7.4.1)

• bug symfony/symfony#​62614 [Cache] Fix NullAdapter must set taggable (@​a.dmitryuk)
• bug symfony/symfony#​62602 [Cache] Fix the creation of a redis connection with only ext-relay (@​stof)
• bug symfony/symfony#​62543 [Cache] ensure compatibility with RelayCluster 0.20.0 (@​xabbuh)
• bug symfony/symfony#​62536 [Cache] ensure compatibility with Relay extension 0.20.0 (@​xabbuh)

v7.4.0

Changelog (v7.4.0-RC3...v7.4.0)

• no significant changes

v7.4.0-RC2

Changelog (v7.4.0-RC1...v7.4.0-RC2)

• bug symfony/symfony#​62398 [Cache] Fix accepting named closures as early-expiration callbacks (@​nicolas-grekas)

v7.4.0-RC1

Changelog (v7.4.0-BETA2...v7.4.0-RC1)

• bug symfony/symfony#​62286 [Cache] compatibility with ext-redis 6.3 (@​xabbuh)
• feature symfony/symfony#​62326 [Cache][Messenger] re-allow ext-redis 6.1 (@​xabbuh)

v7.4.0-BETA1

Changelog (v7.3.4...v7.4.0-BETA1)

• feature symfony/symfony#​61955 [Messenger] bump ext-redis to 6.2 and ext-relay to 0.12 minimum (@​xabbuh)
• feature symfony/symfony#​61952 [Cache] bump ext-relay to 0.12+ (@​xabbuh)
• feature symfony/symfony#​61423 [Mime] Deprecate implementing __sleep/wakeup() on AbstractPart implementations (@​nicolas-grekas)
• feature symfony/symfony#​61127 [Cache] Add TagAwareAdapterInterface to NullAdapter (@​a.dmitryuk)

v7.3.11

Changelog (v7.3.10...v7.3.11)

• bug #​63137 Fix PdoSessionHandler charset-collation mismatch with the Doctrine DBAL (@​samy-mahmoudi)

v7.3.10

Changelog (v7.3.9...v7.3.10)

• bug #​62852 Fix DSN auth not passed to clusters in RedisTrait (@​wikando-ck)

v7.3.9

Changelog (v7.3.8...v7.3.9)

• bug symfony/symfony#​62873 [Cache] Fix namespace of chained pools when using another chain as template (@​nicolas-grekas)
• bug symfony/symfony#​62840 [Cache] Fix stampede protection when forcing item recomputation (@​nicolas-grekas)
• bug symfony/symfony#​62490 [FrameworkBundle] Fix cache:pool:prune exit code on failure (@​yoeunes)
• bug symfony/symfony#​62793 [Cache] Fix calling the callback wrapper for ChainAdapter (@​nicolas-grekas)
• bug symfony/symfony#​62799 [Cache][HttpFoundation] Fix VARBINARY columns on sqlsrv (@​nicolas-grekas)

v7.3.8

Changelog (v7.3.7...v7.3.8)

• bug symfony/symfony#​62602 [Cache] Fix the creation of a redis connection with only ext-relay (@​stof)
• bug symfony/symfony#​62543 [Cache] ensure compatibility with RelayCluster 0.20.0 (@​xabbuh)
• bug symfony/symfony#​62536 [Cache] ensure compatibility with Relay extension 0.20.0 (@​xabbuh)
• bug symfony/symfony#​62398 [Cache] Fix accepting named closures as early-expiration callbacks (@​nicolas-grekas)
• bug symfony/symfony#​62372 [Cache] Recognize saveDeferred events as writes in CacheDataCollector (@​yitznewton)
• bug symfony/symfony#​62286 [Cache] compatibility with ext-redis 6.3 (@​xabbuh)

v7.3.6

Changelog (v7.3.5...v7.3.6)

• bug symfony/symfony#​62222 [Cache] fix ext-redis 6.2.0 compatibility (@​xabbuh)

v7.3.5

Changelog (v7.3.4...v7.3.5)

• bug symfony/symfony#​62096 [Cache] fix compatibility with Relay 0.12.1 (@​xabbuh)
• bug symfony/symfony#​62087 [Cache] fix compatibility with Relay 0.12.1 (@​xabbuh)
• bug symfony/symfony#​61990 [Cache][RedisTagAwareAdapter] Add Predis2 Replication Interface check (@​BrianMwit)
• bug symfony/symfony#​61970 [Cache] fix compatibility with RelayCluster 0.11 and 0.12 (@​xabbuh)
• bug symfony/symfony#​61947 [Cache] fix Relay Cluster 0.12 compatibility (@​xabbuh)
• bug symfony/symfony#​61945 [Cache] fix compatibility with Relay 0.12 (@​xabbuh)

v7.3.4

Changelog (v7.3.3...v7.3.4)

• bug symfony/symfony#​61727 Replace __sleep/wakeup() by __(un)serialize() for throwing and internal usages (@​nicolas-grekas)
• bug symfony/symfony#​61605 [Cache] Fix internal representation of non-static values (@​nicolas-grekas)
• bug symfony/symfony#​61599 [Cache] Make TagAwareAdapter registrable as a service (@​a.dmitryuk)

v7.3.2

Changelog (v7.3.1...v7.3.2)

• bug symfony/symfony#​61234 [Cache] RedisTrait::doFetch should use pipeline with GET's instead of MGET for Relay\Cluster (@​dorrogeray)
• bug symfony/symfony#​61220 [Cache] fix compatibility with different Relay versions (@​xabbuh)

v7.3.1

Changelog (v7.3.0...v7.3.1)

• bug symfony/symfony#​60594 [Cache] Fix using a ChainAdapter as an adapter for a pool (@​IndraGunawan)

v7.3.0

Changelog (v7.3.0-RC1...v7.3.0)

• no significant changes

v7.3.0-RC1

Changelog (v7.3.0-BETA2...v7.3.0-RC1)

• no significant changes

v7.3.0-BETA2

Changelog (v7.3.0-BETA1...v7.3.0-BETA2)

• no significant changes

v7.3.0-BETA1

Changelog (v7.2.6...v7.3.0-BETA1)

• feature symfony/symfony#​59813 [Cache] Enable namespace-based invalidation by prefixing keys with backend-native namespace separators (@​nicolas-grekas)
• feature symfony/symfony#​59869 [Cache] Add support for valkey: / valkeys: schemes (@​nicolas-grekas)
• feature symfony/symfony#​59857 [Cache] Add \Relay\Cluster support (@​dorrogeray)

v7.2.9

Changelog (v7.2.8...v7.2.9)

• bug symfony/symfony#​61234 [Cache] RedisTrait::doFetch should use pipeline with GET's instead of MGET for Relay\Cluster (@​dorrogeray)
• bug symfony/symfony#​61220 [Cache] fix compatibility with different Relay versions (@​xabbuh)

v7.2.8

Changelog (v7.2.7...v7.2.8)

• bug symfony/symfony#​60594 [Cache] Fix using a ChainAdapter as an adapter for a pool (@​IndraGunawan)

v7.2.6

Changelog (v7.2.5...v7.2.6)

• bug symfony/symfony#​60172 [Cache] Fix invalidating on save failures with Array|ApcuAdapter (@​nicolas-grekas)
• bug symfony/symfony#​60122 [Cache] ArrayAdapter serialization exception clean $expiries (@​bastien-wink)
• bug symfony/symfony#​60167 [Cache] Fix proxying third party PSR-6 cache items (Dmitry Danilson)

v7.2.5

Changelog (v7.2.4...v7.2.5)

• bug symfony/symfony#​60030 [Cache][DoctrineBridge][HttpFoundation][Lock][Messenger] use Table::addPrimaryKeyConstraint() with Doctrine DBAL 4.3+ (@​xabbuh)
• bug symfony/symfony#​59940 [Cache] Fix missing cache data in profiler (@​dcmbrs)
• bug symfony/symfony#​59841 [Cache] fix cache data collector on late collect (@​dcmbrs)

v7.2.4

Changelog (v7.2.3...v7.2.4)

• bug symfony/symfony#​59751 [Cache] Tests for Redis Replication with cache (@​DemigodCode)

Task options

• Recreate commit - Conductor recreates the update commit and overwrites all additional changes made in this branch.
• Details
• Skip - Conductor won't attempt to update the dependency to this exact version again.
• All tasks
• Settings
• Docs

If you close the PR, the task will be skipped and Conductor will schedule the next task. Clicking the "Skip" button in the UI has the same effect. Conductor won't attempt to update the dependency to this exact version again but it will schedule updates to newer versions.

---

Powered by Private Packagist

[private-packagist]

composer.lock

Package changes

Package	Operation	From	To	About
symfony/cache	upgrade	v7.2.3 ⚠️	v7.4.13 ✅	diff
symfony/cache-contracts	upgrade	v3.5.1	v3.7.0	diff

---

Settings · Docs · Powered by Private Packagist

[private-packagist]

The composer.lock diff comment has been updated to reflect new changes in this PR.