[PROD](renovate) Update dependency smarty/smarty to v4.5.3 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
smarty/smarty (source)	4.3.0 -> 4.5.3

GitHub Vulnerability Alerts

CVE-2023-28447

Impact

An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user's browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application's behavior, or unauthorized actions performed on behalf of the user.

Patches

Please upgrade to the most recent version of Smarty v3 or v4.

For more information

If you have any questions or comments about this advisory please open an issue in the Smarty repo

CVE-2024-35226

Impact

Template authors could inject php code by choosing a malicous file name for an extends-tag. Users that cannot fully trust template authors should update asap.

Patches

Please upgrade to the most recent version of Smarty v4 or v5. There is no patch for v3.

---

Release Notes

smarty-php/smarty (smarty/smarty)

v4.5.3

Compare Source

Full Changelog: smarty-php/smarty@v4.5.2...v4.5.3

v4.5.2

Compare Source

What's Changed

• Fixed argument must be passed by reference error introduced in v4.5.1 #​964

Full Changelog: smarty-php/smarty@v4.5.1...v4.5.2

v4.5.1

Compare Source

What's Changed

• Using PHP functions and static class methods in expressions now also triggers a deprecation notice by @​wisskid in https://github.com/smarty-php/smarty/pull/880

Full Changelog: smarty-php/smarty@v4.4.0...v4.5.1

v4.5.0

Compare Source

v4.4.1

Compare Source

Full Changelog: smarty-php/smarty@v4.4.0...v4.4.1

v4.4.0

Compare Source

What's Changed

• Fix incorrect compilation of expressions when escape_html=true by @​wisskid in https://github.com/smarty-php/smarty/pull/932
• Prevent deprecation notices for implode, json_encode and substr modif… by @​wisskid in https://github.com/smarty-php/smarty/pull/942

Full Changelog: smarty-php/smarty@v4.3.5...v4.4.0

v4.3.5

Compare Source

v4.3.4

Compare Source

What's Changed

• Fix strip_tags modifier for falsy input. by @​wisskid in https://github.com/smarty-php/smarty/pull/893
• Fix use of negative numbers in math equations (4.3 port of #​903) by @​wisskid in https://github.com/smarty-php/smarty/pull/904

Full Changelog: smarty-php/smarty@v4.3.2...v4.3.4

v4.3.3

Compare Source

v4.3.2

Compare Source

Fixed

• $smarty->muteUndefinedOrNullWarnings() now also mutes PHP8 warnings for undefined properties

v4.3.1

Compare Source

Security

• Fixed Cross site scripting vulnerability in Javascript escaping. This addresses CVE-2023-28447.

Fixed

• $smarty->muteUndefinedOrNullWarnings() now also mutes PHP7 notices for undefined array indexes #​736
• $smarty->muteUndefinedOrNullWarnings() now treats undefined vars and array access of a null or false variables
  equivalent across all supported PHP versions
• $smarty->muteUndefinedOrNullWarnings() now allows dereferencing of non-objects across all supported PHP versions #​831
• PHP 8.1 deprecation warnings on null strings in modifiers #​834

---

Configuration

📅 Schedule: Branch creation - "" in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

Scan Summary

Tool	Critical	High	Medium	Low	Status
Dependency Scan (universal)	0	1	1	0	✅
Secrets Audit	0	12	0	0	❌

Recommendation

Please review the findings from Code scanning alerts before approving this pull request. You can also configure the build rules or add suppressions to customize this bot 👍

[github-actions]

Scan Summary

Tool	Critical	High	Medium	Low	Status
Dependency Scan (universal)	0	1	4	0	✅
Secrets Audit	0	12	0	0	❌

Recommendation

Please review the findings from Code scanning alerts before approving this pull request. You can also configure the build rules or add suppressions to customize this bot 👍