Bump smarty/smarty from 3.1.48 to 4.3.5

[dependabot]

Bumps smarty/smarty from 3.1.48 to 4.3.5.

Release notes

Sourced from smarty/smarty's releases.

v4.3.4

What's Changed

• Fix strip_tags modifier for falsy input. by @​wisskid in smarty-php/smarty#893
• Fix use of negative numbers in math equations (4.3 port of #903) by @​wisskid in smarty-php/smarty#904

Full Changelog: smarty-php/smarty@v4.3.2...v4.3.4

v4.3.2

What's Changed

• Remove md5 modifier from debug.tpl by @​j-applese3d in smarty-php/smarty#871
• muteUndefinedOrNullWarnings() now also mutes PHP8 warnings for undefi… by @​wisskid in smarty-php/smarty#891

New Contributors

• @​j-applese3d made their first contribution in smarty-php/smarty#871

Full Changelog: smarty-php/smarty@v4.3.1...v4.3.2

v4.3.1

Security

• Fixed Cross site scripting vulnerability in Javascript escaping. This addresses CVE-2023-28447.

Fixed

• $smarty->muteUndefinedOrNullWarnings() now also mutes PHP7 notices for undefined array indexes #736
• $smarty->muteUndefinedOrNullWarnings() now treats undefined vars and array access of a null or false variables equivalent across all supported PHP versions
• $smarty->muteUndefinedOrNullWarnings() now allows dereferencing of non-objects across all supported PHP versions #831
• PHP 8.1 deprecation warnings on null strings in modifiers #834

v4.3.0

What's Changed

• clean output buffer for Throwable instead of just Exception by @​wisskid in smarty-php/smarty#797
• Fix wrong indentation in libs/plugins/modifier.capitalize.php by @​MrPetovan in smarty-php/smarty#802
• fix compilation for caching templates by @​Storyxx in smarty-php/smarty#801
• Fix Variable Expression by @​JonisoftGermany in smarty-php/smarty#808
• Silence deprecation errors for strtime in PHP8.1 or higher by @​wisskid in smarty-php/smarty#811
• Fixed PHP8.1 deprecation errors passing null to parameter in trim by @​IT-Experte in smarty-php/smarty#807
• Re-organize all testrunners to use the same script(s). by @​wisskid in smarty-php/smarty#812
• Fixed PHP8.1 deprecation errors in strip_tags by @​wisskid in smarty-php/smarty#803
• #155 Adapt Smarty upper/lower functions to be codesafe (e.g. for Turkish locale) by @​asmecher in smarty-php/smarty#586
• Bug fix for underscore in template name by @​EDCScott in smarty-php/smarty#581
• Using PHP functions as modifiers now triggers a deprecation notice. by @​wisskid in smarty-php/smarty#814
• Use 'DIR' instead of 'dirname(FILE)' by @​MekDrop in smarty-php/smarty#817
• Fixed several typos and grammar errors by @​AndrewDawes in smarty-php/smarty#821
• PHP8.2 compatibility by @​Progi1984 in smarty-php/smarty#775
• Make SmartyCompilerException play nicer with error handler libraries by @​Hunman in smarty-php/smarty#782
• Change file permissions for directories and respect umask for files by @​wisskid in smarty-php/smarty#828

New Contributors

• @​MrPetovan made their first contribution in smarty-php/smarty#802

... (truncated)

Changelog

Sourced from smarty/smarty's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

• PHP8.3 support #925

Fixed

• The {debug} tag was broken in v5 #922

[5.0.0-rc2] - 2023-11-11

Fixed

• Registered output filters wouldn't run #899
• Use of negative numbers in {math} equations #895
• Do not auto-html-escape custom function results #906
• Fix case-sensitive tag names #907

Removed

• Removed $smarty->registered_filters array

[5.0.0-rc1] - 2023-08-08

Added

• Added support for PHP8.2
• Added a new way to extend Smarty functionality using Smarty::addExtension() or Smarty::setExtensions(). Please see the docs for more information.
• Custom tags can accept positional parameters, so you can write a block compiler that support this: {trans "Jack" "dull boy"}All work and no play makes %s a %s.{/trans} #164
• Full support for ternary operator: {$test ? $a : $b} and {$var ?: $value_if_falsy} #881
• Full support for null coalescing operator: {$var ?? $value_if_null} #882

Changed

• All Smarty code is now in the \Smarty namespace. For simple use-cases, you only need to add use \Smarty\Smarty; to your script and everything will work. If you extend Smarty or use Smarty plug-ins, please review your code to see if they assume specific class or method names. E.g.: Smarty_Internal_Template is now \Smarty\Template\, SmartyException is now \Smarty\Exception.
• Template variable scope bubbling has been simplified and made more consistent. The global scope now equals the Smarty scope in order to avoid global state side effects. Please read the documentation for more details.
• Lexers and Parsers PHP files are reliably generated from sources (.y and .plex) using the make file
• Smarty now always runs in multibyte mode, using symfony/polyfill-mbstring if required. Please use the multibyte extension for optimal performance.
• Smarty no longer calls mb_internal_encoding() and doesn't check for deprecated mbstring.func_overload ini directive #480
• Generated <script> tags lo longer have deprecated type="text/javascript" or language="Javascript" attributes #815
• Smarty will throw a compiler exception instead of silently ignoring a modifier on a function call, like this: {include|dot:"x-template-id" file="included.dot.tpl"} #526
• The documentation was largely rewritten

... (truncated)

Commits

• e0cbbdf Update php version number in docs
• b4bbc17 Add PHP8.3 support for Smarty 4.3. (#927)
• 6e067ed Add unit tests to clarify current behavior
• 3931d8f Merge branch 'release/4.3.4' into support/4.3
• d8c1dfe version bump
• 6887e55 Merge branch 'release/4.3.3' into support/4.3
• 642fd69 version bump
• 17a7d6f Fix release-script to user support-branch
• b96a5c3 version bump
• 2ff66e0 Fix use of negative numbers in math equations. (#904)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (863a9da) 53.00% compared to head (9453e35) 53.00%.
Report is 4 commits behind head on main.

❗ Current head 9453e35 differs from pull request most recent head 05b66e8. Consider uploading reports for the commit 05b66e8 to get more accurate results

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #1791   +/-   ##
=========================================
  Coverage     53.00%   53.00%           
  Complexity     9806     9806           
=========================================
  Files           495      495           
  Lines         24705    24705           
=========================================
  Hits          13095    13095           
  Misses        11610    11610           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[dependabot]

Superseded by #1805.