Skip to content

chore(deps): bump smarty/smarty from 5.8.4 to 5.8.5 - #1800

Merged
JohnVillalovos merged 1 commit into
developfrom
dependabot/composer/smarty/smarty-5.8.5
Oct 13, 2026
Merged

JohnVillalovos merged 1 commit into
developfrom
dependabot/composer/smarty/smarty-5.8.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps smarty/smarty from 5.8.4 to 5.8.5.

Release notes

Sourced from smarty/smarty's releases.

v5.8.5

What's Changed

  • Security: prevent attacker-controlled template output from forging a nocache marker that injects raw PHP into the generated cache file when a template is rendered through the extends:/inheritance path
  • Fix double semicolon in getRightDelimiter method by @​colemanw in smarty-php/smarty#1202

Full Changelog: smarty-php/smarty@v5.8.4...v5.8.5

Changelog

Sourced from smarty/smarty's changelog.

[5.8.5] - 2026-10-04

  • Security: prevent attacker-controlled template output from forging a nocache marker that injects raw PHP into the generated cache file when a template is rendered through the extends:/inheritance path
Commits
  • 0ae6635 Merge branch 'release/5.8.5'
  • 0471b1c version bump
  • c0fdd48 Security: prevent nocache-marker forgery leading to cache-poisoning RCE
  • 0086ada update local unit test suite:
  • 0193091 Update SECURITY.md
  • 1f9eef5 Fix double semicolon in getRightDelimiter method (#1202)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Oct 13, 2026
@JohnVillalovos

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [smarty/smarty](https://github.com/smarty-php/smarty) from 5.8.4 to 5.8.5.
- [Release notes](https://github.com/smarty-php/smarty/releases)
- [Changelog](https://github.com/smarty-php/smarty/blob/master/CHANGELOG.md)
- [Commits](smarty-php/smarty@v5.8.4...v5.8.5)

---
updated-dependencies:
- dependency-name: smarty/smarty
  dependency-version: 5.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/composer/smarty/smarty-5.8.5 branch from 7a8bda7 to eb3fa67 Compare October 13, 2026 19:03
@JohnVillalovos
JohnVillalovos enabled auto-merge (rebase) October 13, 2026 19:03
@JohnVillalovos
JohnVillalovos merged commit 42aa5f5 into develop Oct 13, 2026
17 checks passed
@JohnVillalovos
JohnVillalovos deleted the dependabot/composer/smarty/smarty-5.8.5 branch October 13, 2026 19:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant