fix(deps): update dependency symfony/yaml to v8

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
symfony/yaml (source)	^6.0 → ^8.0

---

Release Notes

symfony/yaml (symfony/yaml)

v8.1.8

Compare Source

Changelog (symfony/yaml@v8.1.6...v8.1.8)

• bug #​66344 Fix tabs in block scalars and comments after empty ones (@​X-Coder264)
• bug #​66340 Fix !!str and !!float tags on block scalars (@​nicolas-grekas)
• bug #​66342 Fix several parsing edge cases (@​nicolas-grekas)
• bug #​66123 Fix the line offset handed to nested block parsers (@​lazerg)

v8.1.6

Compare Source

Changelog (symfony/yaml@v8.1.5...v8.1.6)

• bug #​65727 Fix a TypeError when "!!binary" is given an unparsable value (@​nicolas-grekas)
• bug #​65688 Bound recursion depth in the inline lexer (@​nicolas-grekas)
• bug #​65651 Quote strings that look like octal numbers when dumping (@​lazerg)

v8.1.5

Compare Source

Changelog (symfony/yaml@v8.1.2...v8.1.5)

• bug #​65470 Fix parsing tagged block scalars inside sequences (@​nicolas-grekas)
• bug #​65425 Fix parsing an alias followed by a comment (@​eyupcanakman)
• bug #​65395 Do not treat an uppercase 0X prefix as hexadecimal (@​eyupcanakman)
• bug #​65365 Restore the default dump output for sequences of mappings (@​eissasoubhi)

v8.1.2

Compare Source

Changelog (symfony/yaml@v8.1.1...v8.1.2)

• bug #​64672 Fix line folding after trailing backslashes in quoted strings (@​eyupcanakman)
• bug #​64915 Fix parsing and dumping of NaN (@​semx)
• bug #​64752 Fix parsing of integers with a leading plus sign (@​eyupcanakman)

v8.1.1

Compare Source

Changelog (symfony/yaml@v8.1.0...v8.1.1)

• minor #​64476 Unsafe unserialize phpstan rule (@​jack-worman)

v8.1.0

Compare Source

Changelog (symfony/yaml@v8.1.0-RC1...v8.1.0)

• bug #​64388 Fix parsing inline anchored values (@​nicolas-grekas)

v8.0.15

Compare Source

Changelog (symfony/yaml@v8.0.14...v8.0.15)

• bug #​64672 Fix line folding after trailing backslashes in quoted strings (@​eyupcanakman)
• bug #​64915 Fix parsing and dumping of NaN (@​semx)
• bug #​64752 Fix parsing of integers with a leading plus sign (@​eyupcanakman)

v8.0.14

Compare Source

Changelog (symfony/yaml@v8.0.13...v8.0.14)

• minor #​64476 Unsafe unserialize phpstan rule (@​jack-worman)
• bug #​64388 Fix parsing inline anchored values (@​nicolas-grekas)

v8.0.13

Compare Source

Changelog (symfony/yaml@v8.0.12...v8.0.13)

• bug #​64316 Allow trailing newlines after the end-of-document marker (@​nicolas-grekas)

v8.0.12

Compare Source

Changelog (symfony/yaml@v8.0.11...v8.0.12)

• security #cve-2026-45305 Harden the Parser::cleanup() regexes against catastrophic backtracking (@​nicolas-grekas)
• security #cve-2026-45304 Bound collection-alias resolution in the parser (@​nicolas-grekas)
• security #cve-2026-45133 Bound recursion depth in the parser (@​nicolas-grekas)

v8.0.11

Compare Source

Changelog (symfony/yaml@v8.0.10...v8.0.11)

• bug #​64196 Reject non-stringables when using "!!binary" (@​nicolas-grekas)

v8.0.10

Compare Source

Changelog (symfony/yaml@v8.0.6...v8.0.10)

• bug #​64119 fix flow collection drops &anchor and !!str &anchor items (@​ousamabenyounes)

v8.0.8

Compare Source

Changelog (symfony/yaml@v8.0.7...v8.0.8)

• no significant changes

v8.0.6

Compare Source

Changelog (symfony/yaml@v8.0.5...v8.0.6)

• bug #​57292 Fix parsing nested mappings in sequences (@​HypeMC)

v8.0.1

Compare Source

Changelog (symfony/yaml@v8.0.0...v8.0.1)

• bug symfony/symfony#62612 [Yaml] Fix regression handling blank lines in unquoted scalars (@​yoeunes)

v8.0.0

Compare Source

v7.4.20

Compare Source

Changelog (symfony/yaml@v7.4.18...v7.4.20)

• bug #​66344 Fix tabs in block scalars and comments after empty ones (@​X-Coder264)
• bug #​66340 Fix !!str and !!float tags on block scalars (@​nicolas-grekas)
• bug #​66342 Fix several parsing edge cases (@​nicolas-grekas)
• bug #​66123 Fix the line offset handed to nested block parsers (@​lazerg)

v7.4.18

Compare Source

Changelog (symfony/yaml@v7.4.17...v7.4.18)

• bug #​65727 Fix a TypeError when "!!binary" is given an unparsable value (@​nicolas-grekas)
• bug #​65688 Bound recursion depth in the inline lexer (@​nicolas-grekas)
• bug #​65651 Quote strings that look like octal numbers when dumping (@​lazerg)

v7.4.17

Compare Source

Changelog (symfony/yaml@v7.4.15...v7.4.17)

• bug #​65470 Fix parsing tagged block scalars inside sequences (@​nicolas-grekas)
• bug #​65425 Fix parsing an alias followed by a comment (@​eyupcanakman)
• bug #​65395 Do not treat an uppercase 0X prefix as hexadecimal (@​eyupcanakman)

v7.4.15

Compare Source

Changelog (symfony/yaml@v7.4.14...v7.4.15)

• bug #​64672 Fix line folding after trailing backslashes in quoted strings (@​eyupcanakman)
• bug #​64915 Fix parsing and dumping of NaN (@​semx)
• bug #​64752 Fix parsing of integers with a leading plus sign (@​eyupcanakman)

v7.4.14

Compare Source

Changelog (symfony/yaml@v7.4.13...v7.4.14)

• minor #​64476 Unsafe unserialize phpstan rule (@​jack-worman)
• bug #​64388 Fix parsing inline anchored values (@​nicolas-grekas)

v7.4.13

Compare Source

Changelog (symfony/yaml@v7.4.12...v7.4.13)

• bug #​64316 Allow trailing newlines after the end-of-document marker (@​nicolas-grekas)

v7.4.12

Compare Source

Changelog (symfony/yaml@v7.4.11...v7.4.12)

• security #cve-2026-45305 Harden the Parser::cleanup() regexes against catastrophic backtracking (@​nicolas-grekas)
• security #cve-2026-45304 Bound collection-alias resolution in the parser (@​nicolas-grekas)
• security #cve-2026-45133 Bound recursion depth in the parser (@​nicolas-grekas)

v7.4.11

Compare Source

Changelog (symfony/yaml@v7.4.10...v7.4.11)

• bug #​64196 Reject non-stringables when using "!!binary" (@​nicolas-grekas)

v7.4.10

Compare Source

Changelog (symfony/yaml@v7.4.6...v7.4.10)

• bug #​64119 fix flow collection drops &anchor and !!str &anchor items (@​ousamabenyounes)

v7.4.8

Compare Source

Changelog (symfony/yaml@v7.4.7...v7.4.8)

• no significant changes

v7.4.6

Compare Source

Changelog (symfony/yaml@v7.4.5...v7.4.6)

• bug #​57292 Fix parsing nested mappings in sequences (@​HypeMC)

v7.4.1

Compare Source

Changelog (symfony/yaml@v7.4.0...v7.4.1)

• bug symfony/symfony#62612 [Yaml] Fix regression handling blank lines in unquoted scalars (@​yoeunes)

v7.4.0

Compare Source

Changelog (symfony/yaml@v7.4.0-RC3...v7.4.0)

• no significant changes

v7.3.8

Compare Source

Changelog (symfony/yaml@v7.3.7...v7.3.8)

• bug symfony/symfony#62612 [Yaml] Fix regression handling blank lines in unquoted scalars (@​yoeunes)
• bug symfony/symfony#62409 [Yaml] Align unquoted multiline scalar parsing with spec for comments (@​yoeunes)
• bug symfony/symfony#62359 [Yaml] Fix parsing of unquoted multiline scalars with comments or blank lines (@​yoeunes)

v7.3.5

Compare Source

Changelog (symfony/yaml@v7.3.4...v7.3.5)

• bug symfony/symfony#61855 [DoctrineBridge][Yaml] don't cast strings exceeding the min/max int ranges (@​xabbuh)

v7.3.3

Compare Source

Changelog (symfony/yaml@v7.3.2...v7.3.3)

• bug symfony/symfony#61520 [Yaml] Fix scope resolution operator in flow mapping keys (@​MatTheCat)

v7.3.2

Compare Source

Changelog (symfony/yaml@v7.3.1...v7.3.2)

• no significant changes

v7.3.1

Compare Source

Changelog (symfony/yaml@v7.3.0...v7.3.1)

• bug symfony/symfony#60648 [Yaml] fix support for years outside of the 32b range on x86 arch on PHP 8.4 (@​nicolas-grekas)

v7.3.0

Compare Source

Changelog (symfony/yaml@v7.3.0-RC1...v7.3.0)

• no significant changes

v7.2.9

Compare Source

Changelog (symfony/yaml@v7.2.8...v7.2.9)

• no significant changes

v7.2.8

Compare Source

Changelog (symfony/yaml@v7.2.7...v7.2.8)

• bug symfony/symfony#60648 [Yaml] fix support for years outside of the 32b range on x86 arch on PHP 8.4 (@​nicolas-grekas)

v7.2.6

Compare Source

Changelog (symfony/yaml@v7.2.5...v7.2.6)

• no significant changes

v7.2.5

Compare Source

Changelog (symfony/yaml@v7.2.4...v7.2.5)

• bug symfony/symfony#59830 [Yaml] drop comments while lexing unquoted strings (@​xabbuh)

v7.2.3

Compare Source

Changelog (symfony/yaml@v7.2.2...v7.2.3)

• bug symfony/symfony#59381 [Yaml] fix inline notation with inline comment (@​alexpott)
• bug symfony/symfony#59349 [Yaml] reject inline notations followed by invalid content (@​xabbuh)
• bug symfony/symfony#59312 [Yaml] Fix parsing of unquoted strings in Parser::lexUnquotedString() to ignore spaces (@​Link1515)

v7.2.0

Compare Source

Changelog (symfony/yaml@v7.2.0-RC1...v7.2.0)

• no significant changes

v7.1.11

Compare Source

Changelog (symfony/yaml@v7.1.10...v7.1.11)

• bug symfony/symfony#59381 [Yaml] fix inline notation with inline comment (@​alexpott)
• bug symfony/symfony#59349 [Yaml] reject inline notations followed by invalid content (@​xabbuh)
• bug symfony/symfony#59312 [Yaml] Fix parsing of unquoted strings in Parser::lexUnquotedString() to ignore spaces (@​Link1515)

v7.1.6

Compare Source

Changelog (symfony/yaml@v7.1.5...v7.1.6)

• no significant changes

v7.1.5

Compare Source

Changelog (symfony/yaml@v7.1.4...v7.1.5)

• bug symfony/symfony#58279 [Yaml] parse empty sequence elements as null (@​xabbuh)

v7.1.4

Compare Source

Changelog (symfony/yaml@v7.1.3...v7.1.4)

• bug symfony/symfony#57968 [Yaml] 🐛 throw ParseException on invalid date (@​homersimpsons)

v7.1.1

Compare Source

Changelog (symfony/yaml@v7.1.0...v7.1.1)

• no significant changes

v7.1.0

Compare Source

Changelog (symfony/yaml@v7.1.0-RC1...v7.1.0)

• no significant changes

v7.0.8

Compare Source

Changelog (symfony/yaml@v7.0.7...v7.0.8)

• no significant changes

v7.0.7

Compare Source

Changelog (symfony/yaml@v7.0.6...v7.0.7)

• bug symfony/symfony#54706 [Yaml] call substr() with integer offsets (@​xabbuh)

v7.0.3

Compare Source

Changelog (symfony/yaml@v7.0.2...v7.0.3)

• no significant changes

v7.0.0

Compare Source

Changelog (symfony/yaml@v7.0.0-RC2...v7.0.0)

• no significant changes

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[gcf-merge-on-green]

Merge-on-green attempted to merge your PR for 6 hours, but it was not mergeable because either one of your required status checks failed, one of your required reviews was not approved, or there is a do not merge label. Learn more about your required status checks here: https://help.github.com/en/github/administering-a-repository/enabling-required-status-checks. You can remove and reapply the label to re-run the bot.