Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump doctrine/dbal from 2.13.5 to 3.1.4 #1612

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 16, 2021

Bumps doctrine/dbal from 2.13.5 to 3.1.4.

Release notes

Sourced from doctrine/dbal's releases.

3.1.4

Release 3.1.4

SECURITY RELEASE: All users are advised to upgrade when using doctrine/dbal 3.0.0 - 3.1.3 due to a critical SQL injection that was fixed: GHSA-r7cj-8hjg-x622

3.1.4

  • Total issues resolved: 6
  • Total pull requests resolved: 20
  • Total contributors: 13

Bug,oci8

Connections,Test Suite

Bug,QueryBuilder

Bug,Prepared Statements,Regression,SQL Parser

Documentation

Bug,MySQL,Schema Introspection

CI

Bug,Connections,Test Suite,pdo_oci

... (truncated)

Upgrade guide

Sourced from doctrine/dbal's upgrade guide.

Note about upgrading: Doctrine uses static and runtime mechanisms to raise awareness about deprecated code.

  • Use of @deprecated docblock that is detected by IDEs (like PHPStorm) or Static Analysis tools (like Psalm, phpstan)
  • Use of our low-overhead runtime deprecation API, details: https://github.com/doctrine/deprecations/

Upgrade to 3.1

Deprecated schema- and namespace-related methods

The usage of the following schema- and namespace-related methods is deprecated:

  • AbstractPlatform::getListNamespacesSQL(),
  • AbstractSchemaManager::listNamespaceNames(),
  • AbstractSchemaManager::getPortableNamespacesList(),
  • AbstractSchemaManager::getPortableNamespaceDefinition(),
  • PostgreSQLSchemaManager::getSchemaNames().

Use AbstractSchemaManager::listSchemaNames() instead.

PostgreSQLSchemaManager methods marked internal.

PostgreSQLSchemaManager::getExistingSchemaSearchPaths() and ::determineExistingSchemaSearchPaths() have been marked internal.

OracleSchemaManager methods marked internal.

OracleSchemaManager::dropAutoincrement() has been marked internal.

Deprecated AbstractPlatform::getReservedKeywordsClass()

Instead of implementing getReservedKeywordsClass(), AbstractPlatform subclasses should implement createReservedKeywordsList().

Deprecated ReservedWordsCommand::setKeywordListClass()

The usage of ReservedWordsCommand::setKeywordListClass() has been deprecated. To add or replace a keyword list, use setKeywordList() instead.

Deprecated $driverOptions argument of PDO\Statement::bindParam() and PDO\SQLSrv\Statement::bindParam()

The usage of the $driverOptions argument of PDO\Statement::bindParam() and PDO\SQLSrv\Statement::bindParam() is deprecated. To define parameter binding type as ASCII, BINARY or BLOB, use the corresponding ParameterType::* constant.

Deprecated Connection::$_schemaManager and Connection::getSchemaManager()

The usage of Connection::$_schemaManager and Connection::getSchemaManager() is deprecated. Use Connection::createSchemaManager() instead.

... (truncated)

Commits
  • 821b4f0 Merge pull request #4995 from derrabus/bugfix/oci8-server-version
  • f804b21 Fix getServerVersion for OCI8 when assertions are disabled
  • fa27901 Merge pull request #4991 from morozov/optimize-sharing-test-connection
  • 8fb8105 Close the non-shared connection instead of marking it non-reusable
  • 06f5925 Optimize sharing test connection
  • 10df50f Merge pull request #4978 from AndreasA/bugfix/4971
  • 1b768e9 Use correct column order for composite foreign keys
  • 4c63afa Merge branch '2.13.x' into 3.1.x
  • 483a518 Merge pull request #4984 from morozov/cast-limit-offset-to-int
  • 0ae1aa5 Bump to 2.13.6
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Minor updates to packages or dependencies php Pull requests that update PHP code labels Nov 16, 2021
@dependabot dependabot bot force-pushed the dependabot/composer/doctrine/dbal-3.1.4 branch 2 times, most recently from 87a1503 to f9cd946 Compare November 24, 2021 20:26
Bumps [doctrine/dbal](https://github.com/doctrine/dbal) from 2.13.5 to 3.1.4.
- [Release notes](https://github.com/doctrine/dbal/releases)
- [Upgrade guide](https://github.com/doctrine/dbal/blob/3.1.x/UPGRADE.md)
- [Commits](doctrine/dbal@2.13.5...3.1.4)

---
updated-dependencies:
- dependency-name: doctrine/dbal
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/composer/doctrine/dbal-3.1.4 branch from f9cd946 to 982f2d6 Compare November 24, 2021 20:27
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 29, 2021

Superseded by #1637.

@dependabot dependabot bot closed this Nov 29, 2021
@dependabot dependabot bot deleted the dependabot/composer/doctrine/dbal-3.1.4 branch November 29, 2021 05:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Minor updates to packages or dependencies php Pull requests that update PHP code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants