build(deps): bump symfony/http-kernel from 8.0.13 to 8.1.0

[dependabot]

Bumps symfony/http-kernel from 8.0.13 to 8.1.0.

Release notes

Sourced from symfony/http-kernel's releases.

v8.1.0

Changelog (symfony/http-kernel@v8.1.0-RC1...v8.1.0)

• data #64399 Release v8.1.0
• bug #64102 Remove usage of Kernel::VERSION (@​fabpot)
• data #64374 Release v8.0.13
• data #64372 Release v7.4.13
• data #64371 Release v6.4.41

v8.1.0-RC1

Changelog (symfony/http-kernel@v8.1.0-BETA3...v8.1.0-RC1)

• data #64377 Release v8.1.0-RC1
• bug #64310 Check logs priority name for both WARNING and warning (@​MatTheCat)
• data #64306 Release v8.0.12
• data #64305 Release v7.4.12
• data #64302 Release v5.4.52

v8.1.0-BETA3

Changelog (symfony/http-kernel@v8.1.0-BETA2...v8.1.0-BETA3)

• data #64307 Release v8.1.0-BETA3
• data #64303 Release v6.4.40
• bug #64273 Various fixes and hardenings (@​nicolas-grekas)
• bug #64214 Preserve named-attribute override on Request/Session value resolvers (@​nicolas-grekas)
• security #cve-2026-45075 Fix HEAD requests bypassing methods filter in IsGranted, IsCsrfTokenValid and IsSignatureValid attributes (@​nicolas-grekas)
• data #64202 Release v8.0.11
• data #64201 Release v7.4.11
• data #64200 Release v6.4.39

v8.1.0-BETA2

Changelog (symfony/http-kernel@v8.1.0-BETA1...v8.1.0-BETA2)

• data #64203 Release v8.1.0-BETA2
• bug #64150 Use backend-handled request for terminate listeners in HttpCache (@​Toflar)
• data #64146 Release v6.4.38
• data #64145 Release v8.0.10
• data #64144 Release v7.4.10

v8.1.0-BETA1

No release notes provided.

Changelog

Sourced from symfony/http-kernel's changelog.

CHANGELOG

8.2

• Add #[AsControllerAttributeListener] attribute to declare event listeners for controller attributes

8.1

• Add setNonce() to DumpDataCollector to forward CSP nonces to every HtmlDumper it instantiates
• Add #[MapRequestHeader] to map a header from Request to a controller argument
• Add hasErrors() method to Profile to track profiles with errors (exceptions or error-level logs)
• Validate typed route parameters before calling controllers and return an HTTP error when an invalid value is provided
• Add ControllerAttributeEvent et al. to dispatch events named after controller attributes
• Add support for UploadedFile when using MapRequestPayload
• Add support for bundles as compiler pass
• Add support for SOURCE_DATE_EPOCH environment variable
• Add property $controllerMetadata to several kernel events to give listeners access to controller metadata
• Add Request attribute _controller_attributes to decouple controller attributes from their source code
• Return attributes as a flat list when using Controller[Arguments]Event::getAttributes('*')
• Pass request and args variables to Cache attribute expressions containing the Request object and controller arguments
• Allow using closures with the Cache attribute
• Allow setting a condition when the Cache attribute should be applied
• Add ControllerEvent::evaluate() et al. to help with evaluating expressions or closures in controller attributes
• Deprecate passing a non-flat list of attributes to Controller::setController()
• Deprecate the Symfony\Component\HttpKernel\DependencyInjection\Extension class, use the parent Symfony\Component\DependencyInjection\Extension\Extension class instead
• Allow using Expression or \Closure for validationGroups in #[MapRequestPayload] and #[MapQueryString]
• Deprecate passing a ControllerArgumentsEvent to the ViewEvent constructor; pass a ControllerArgumentsMetadata instead
• Support variadic argument with #[MapRequestPayload]
• Add #[Serialize] to serialize values returned by controllers
• Add argument $mapWhenEmpty to MapQueryString and MapRequestPayload for always attempting denormalization with empty query and request payload
• Deprecate Bundle::registerCommands(), use the #[AsCommand] attribute or the console.command service tag instead of overriding this method
• Deprecate BundleInterface, use the one from the DependencyInjection component instead
• Deprecate MergeExtensionConfigurationPass, use the one from the DependencyInjection component instead
• Deprecate FileLocator, use the one from the DependencyInjection component instead
• Add #[RateLimit] attribute to declaratively enforce rate limiting on controllers.
• Deprecate ServicesResetter, ServicesResetterInterface, and ResettableServicePass, use the ones from the DependencyInjection component instead

8.0

• Remove AddAnnotatedClassesToCachePass
• Remove Extension::getAnnotatedClassesToCompile() and Extension::addAnnotatedClassesToCompile()
• Remove Kernel::getAnnotatedClassesToCompile() and Kernel::setAnnotatedClassCache()
• Make ServicesResetter class final
• Add argument $logChannel to ErrorListener::logException()
• Add argument $event to DumpListener::configure()
• Replace __sleep/wakeup() by __(un)serialize() on kernels and data collectors

... (truncated)

Commits

• cefeb37 Update VERSION for 8.1.0
• 9048776 Add call to backers in README files
• e9895cc Merge branch '8.0' into 8.1
• 9bb59b5 Merge branch '7.4' into 8.0
• 907ca8f Remove usage of Kernel::VERSION
• 2477d33 Bump Symfony version to 8.1.0
• 1a51900 Update VERSION for 8.1.0-RC1
• 173e34d Bump Symfony version to 8.0.14
• dbabb25 Bump Symfony version to 7.4.14
• 9df8479 Update VERSION for 7.4.13
• Additional commits viewable in compare view

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.