Bump the symfony-dependencies group with 2 updates

Bumps the symfony-dependencies group with 2 updates: [symfony/flex](https://github.com/symfony/flex) and [symfony/security-bundle](https://github.com/symfony/security-bundle).


Updates `symfony/flex` from 1.21.5 to 1.21.6
- [Release notes](https://github.com/symfony/flex/releases)
- [Commits](symfony/flex@v1.21.5...v1.21.6)

Updates `symfony/security-bundle` from 5.4.36 to 5.4.37
- [Release notes](https://github.com/symfony/security-bundle/releases)
- [Changelog](https://github.com/symfony/security-bundle/blob/7.0/CHANGELOG.md)
- [Commits](symfony/security-bundle@v5.4.36...v5.4.37)

---
updated-dependencies:
- dependency-name: symfony/flex
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony-dependencies
- dependency-name: symfony/security-bundle
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: symfony-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>