Bump twig/twig from 3.7.1 to 3.11.1

[dependabot]

Bumps twig/twig from 3.7.1 to 3.11.1.

Changelog

Sourced from twig/twig's changelog.

3.11.1 (2024-09-10)

• Fix a security issue when an included sandboxed template has been loaded before without the sandbox context

3.11.0 (2024-08-08)

• Add Twig\Cache\ChainCache and Twig\Cache\ReadOnlyFilesystemCache
• Add the possibility to deprecate attributes and nodes on Node
• Add the possibility to add a package and a version to the deprecated tag
• Add the possibility to add a package for filter/function/test deprecations
• Mark ConstantExpression as being @final
• Add the find filter
• Fix optimizer mode validation in OptimizerNodeVisitor
• Add the possibility to yield from a generator in PrintNode
• Add the shuffle filter
• Add the singular and plural filters in StringExtension
• Deprecate the second argument of Twig\Node\Expression\CallExpression::compileArguments()
• Deprecate Twig\ExpressionParser\parseHashExpression() in favor of Twig\ExpressionParser::parseMappingExpression()
• Deprecate Twig\ExpressionParser\parseArrayExpression() in favor of Twig\ExpressionParser::parseSequenceExpression()
• Add sequence and mapping tests
• Deprecate Twig\Node\Expression\NameExpression::isSimple() and Twig\Node\Expression\NameExpression::isSpecial()

3.10.3 (2024-05-16)

• Fix missing ; in generated code

3.10.2 (2024-05-14)

• Fix support for the deprecated escaper signature

3.10.1 (2024-05-12)

• Fix BC break on escaper extension
• Fix constant return type

3.10.0 (2024-05-11)

• Make CoreExtension::formatDate, CoreExtension::convertDate, and CoreExtension::formatNumber part of the public API

• Add needs_charset option for filters and functions

• Extract the escaping logic from the EscaperExtension class to a new EscaperRuntime class.

  The following methods from Twig\\Extension\\EscaperExtension are deprecated: setEscaper(), getEscapers(), setSafeClasses, addSafeClasses(). Use the same methods on the Twig\\Runtime\\EscaperRuntime class instead.

... (truncated)

Commits

• ff063af Prepare the 3.11.1 release
• 41103dc Fix a security issue when an included sandboxed template has been loaded befo...
• e80fb8e Prepare the 3.11.0 release
• fe32121 Update CHANGELOG
• 0d524d3 feature #4182 Add the possibility to deprecate attributes and nodes on Node (...
• 18894cf Add the possibility to deprecate attributes and nodes on Node
• 90fbb9a feature #4183 Add support for package/version on deprecations (fabpot)
• 0ce79df Use trigger_deprecation() instead of trigger_error() for deprecations
• 839da16 Tweak docs
• 9252578 minor #4181 clarify that macros shadow other macros/functions (xabbuh)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.