Update dependencies to patch known CVEs

Browse Source

composer audit reported 37 advisories across 15 packages, including
high-severity ones in symfony/security-http. Ran composer update
within the existing 7.4.* constraints - composer audit now reports
zero advisories. Also adds symfony/rate-limiter, needed for login
throttling and invite-code rate limiting in the next commit.

Flex removed a stale, non-functional sendgrid notifier config left
over from before the app switched to Mailgun as part of the sync.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

...

This commit is contained in:

Frank

2026-08-10 21:41:36 +02:00

co-authored by Claude Sonnet 5

parent daa37390d0

commit 335697e520

4 changed files with 389 additions and 339 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

composer.lock

Generated

+376 -317

File diff suppressed because it is too large Load Diff