[UPMERGE] 5.0 -> next#2996

Closed

github-actions[bot] wants to merge 21 commits intonextfrom

upmerge/5.0_next

Commits on Apr 15, 2026

[Security] fix pull_request_target workflow injection (pwn request)

dpfaffenbauer
and
claude
committed
[OrderBundle] remove web2print, not needed anymore
dpfaffenbauer
committed
Merge pull request #2989 from coreshop/fix/pull-request-target-cve
dpfaffenbauer
authored
Bump follow-redirects
dependabot[bot]
authored
Merge pull request #2992 from coreshop/dependabot/npm_and_yarn/src/CoreShop/Bundle/FrontendBundle/Resources/assets/follow-redirects-1.16.0
dpfaffenbauer
authored
Merge pull request #2991 from coreshop/fix/remove-web-to-print-bundle-dep
dpfaffenbauer
authored
bump symfony constraints to ^6.4 || ^7.3
dpfaffenbauer
committed
Merge pull request #2993 from coreshop/fix/bump-symfony-constraints
dpfaffenbauer
authored
skip prefer-lowest on PHP 8.4 (old libs not 8.4-clean)
dpfaffenbauer
committed
Merge pull request #2994 from coreshop/fix/ci-skip-lowest-on-php84
dpfaffenbauer
authored
Merge pull request #2964 from coreshop/copilot/fix-token-generator-entropy
dpfaffenbauer
authored
Merge pull request #2961 from coreshop/copilot/improve-password-reset-security
dpfaffenbauer
authored
Merge branch '5.0' into upmerge/4.1_5.0
dpfaffenbauer
authored
fix stray character from merge
dpfaffenbauer
committed
fix Carbon type for password reset timestamp
dpfaffenbauer
committed
Merge pull request #2995 from coreshop/upmerge/4.1_5.0
dpfaffenbauer
authored