chore(deps): bump sympress/kernel from 1.1.5 to 1.1.8

[dependabot]

Bumps sympress/kernel from 1.1.5 to 1.1.8.

Release notes

Sourced from sympress/kernel's releases.

v1.1.8

Require Symfony DependencyInjection 8.1.8 and maintained Routing/YAML 8.1 releases. This fixes reused environment placeholders after an earlier extension discards them and excludes the vulnerable Symfony 8.0 releases.

Validation: full local and hosted Composer QA, with 79 tests and 375 assertions, including compiled-container creation and cache reload. The existing environment skip and PHPUnit notices remain. The regression reproduces with upstream DependencyInjection 8.1.7 and passes with 8.1.8.

The optional compile-time environment diagnostic documents and probes the native future Symfony 8.2 API using synthetic names and configuration paths only. Production dependencies remain stable.

v1.1.7

Fix runtime recompilation with stateful native compiler passes. Every container candidate now uses fresh pass instances, preserving Doctrine event listeners when newly discovered resources trigger a second compile.

Validation: shared local and hosted QA passed, including the new isolated-state and cache-reload regression (78 tests, 372 assertions). Downstream native Doctrine tests cover listeners, forms, validation, Security entity providers, Messenger, Maker generation and cached-container reload. The kernel suite retains its existing environment skip and PHPUnit notices.

v1.1.6 (withdrawn)

This tag was accidentally created at the v1.1.5 commit before the pending fetch completed. It contains no compiler-pass fix. Do not select it for the Doctrine integration. The repository's immutable tag rule prevents changing or removing the tag; the correction is released as v1.1.7.

Changelog

Sourced from sympress/kernel's changelog.

1.1.8 — 2026-10-09

• Require maintained Symfony Routing and YAML 8.1 or newer, excluding the vulnerable 8.0 releases covered by the May 2026 advisories.
• Require Symfony DependencyInjection 8.1.8 or newer so environment placeholders reused after an earlier extension discards them remain resolvable in compiled containers.
• Verify environment resolution through container creation and cached-container reload with two extensions sharing an overridden environment value.
• Document the native Symfony 8.2 compile-time environment log and add a synthetic availability probe that outputs names and configuration paths only. Stable dependencies remain unchanged; the feature requires the future upstream API.

1.1.7 — 2026-10-06

• Isolate native compiler-pass state when rebuilding a runtime container after newly discovered resources change its identity. Doctrine event listeners and other passes now populate the final container instead of retaining definitions from the discarded first candidate.

1.1.6 — 2026-10-06 (withdrawn)

• An accidental duplicate of the v1.1.5 source, created before a fetch completed. Immutable repository tags retain it for audit. Use v1.1.7 for the compiler fix.

Commits

• b4c9ebc docs: verify native compile-time environment diagnostics
• f07f7bd fix: require safe Symfony components and preserve reused environment values
• 246eb84 chore: update Composer author email and format manifest
• 2d551bf ci: use current dependency canary toolchain bootstrap
• 910e5bb docs: assign compiler pass fix to v1.1.7
• 3aca3d9 fix: isolate compiler passes during runtime recompilation
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like sympress/kernel is up-to-date now, so this is no longer needed.