Update symfony/serializer requirement from ^5.4 || ^6.3 to ^5.4 || ^6.3 || ^7.0

[dependabot]

Updates the requirements on symfony/serializer to permit the latest version.

Release notes

Sourced from symfony/serializer's releases.

v7.0.0

Changelog (symfony/serializer@v7.0.0-RC2...v7.0.0)

• bug symfony/symfony#52786 [Serializer] Revert allowed attributes fix (@​mtarld)
• bug symfony/symfony#52767 [Serializer] Fix normalization relying on allowed attributes only (@​mtarld)

Changelog

Sourced from symfony/serializer's changelog.

CHANGELOG

7.0

• Add method getSupportedTypes() to DenormalizerInterface and NormalizerInterface
• Remove denormalization support for AbstractUid in UidNormalizer, use one of AbstractUid child class instead
• Denormalizing to an abstract class in UidNormalizer now throws an \Error
• Remove ContextAwareDenormalizerInterface, use DenormalizerInterface instead
• Remove ContextAwareNormalizerInterface, use NormalizerInterface instead
• Remove CacheableSupportsMethodInterface, use NormalizerInterface and DenormalizerInterface instead
• Require explicit argument when calling AttributeMetadata::setSerializedName() and ClassMetadata::setClassDiscriminatorMapping()
• Add argument $context to NormalizerInterface::supportsNormalization() and DenormalizerInterface::supportsDenormalization()
• Remove Doctrine annotations support in favor of native attributes
• Remove AnnotationLoader, use AttributeLoader instead

6.4

• Add TranslatableNormalizer
• Allow Context attribute to target classes
• Deprecate Doctrine annotations support in favor of native attributes
• Allow the Groups attribute/annotation on classes
• JsonDecode: Add json_decode_detailed_errors option
• Make ProblemNormalizer give details about Messenger's ValidationFailedException
• Add XmlEncoder::CDATA_WRAPPING context option
• Deprecate AnnotationLoader, use AttributeLoader instead
• Add aliases for all classes in the Annotation namespace to Attribute

6.3

• Add AbstractNormalizer::REQUIRE_ALL_PROPERTIES context flag to require all properties to be listed in the input instead of falling back to null for nullable ones
• Add XmlEncoder::SAVE_OPTIONS context option
• Add BackedEnumNormalizer::ALLOW_INVALID_VALUES context option
• Add UnsupportedFormatException which is thrown when there is no decoder for a given format
• Add method getSupportedTypes(?string $format) to NormalizerInterface and DenormalizerInterface
• Make ProblemNormalizer give details about ValidationFailedException and PartialDenormalizationException
• Deprecate CacheableSupportsMethodInterface in favor of the new getSupportedTypes(?string $format) methods
• The following Normalizer classes will become final in 7.0:
  • ConstraintViolationListNormalizer
  • CustomNormalizer
  • DataUriNormalizer
  • DateIntervalNormalizer
  • DateTimeNormalizer
  • DateTimeZoneNormalizer
  • GetSetMethodNormalizer
  • JsonSerializableNormalizer
  • ObjectNormalizer

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)