chore(deps): bump twig/twig from 3.11.2 to 3.19.0 in /buildpacks/buildpack-php/tests/php

[dependabot]

Bumps twig/twig from 3.11.2 to 3.19.0.

Changelog

Sourced from twig/twig's changelog.

3.19.0 (2025-01-28)

• Fix a security issue where escaping was missing when using ??
• Deprecate Token::getType(), use Token::test() instead
• Add Token::toEnglish()
• Add ForElseNode
• Deprecate Twig\ExpressionParser::parseOnlyArguments() and Twig\ExpressionParser::parseArguments() (use Twig\ExpressionParser::parseNamedArguments() instead)
• Fix constant() behavior when used with ??
• Add the invoke filter
• Make {} optional for the types tag
• Add LastModifiedExtensionInterface and implementation in AbstractExtension to track modification of runtime classes
• Ignore static properties when using the dot operator

3.18.0 (2024-12-29)

• Fix unary operator precedence change
• Ignore SyntaxError exceptions from undefined handlers when using the guard tag
• Add a way to stream template rendering (TemplateWrapper::stream() and TemplateWrapper::streamBlock())

3.17.1 (2024-12-12)

• Fix the null coalescing operator when the test returns null
• Fix the Elvis operator when used as '? :' instead of '?:'
• Support for invoking closures

3.17.0 (2024-12-10)

• Fix ArrayAccess with objects as keys
• Support underscores in number literals
• Deprecate ConditionalExpression and NullCoalesceExpression (use ConditionalTernary and NullCoalesceBinary instead)

3.16.0 (2024-11-29)

• Deprecate InlinePrint
• Fix having macro variables starting with an underscore
• Deprecate not passing a Source instance to TokenStream
• Deprecate returning null from TwigFilter::getSafe() and TwigFunction::getSafe(), return [] instead

3.15.0 (2024-11-17)

• [BC BREAK] Add support for accessing class constants with the dot operator; this can be a BC break if you don't use UPPERCASE constant names
• Add Spanish inflector support for the plural and singular filters in the String extension
• Deprecate TempNameExpression in favor of LocalVariable
• Deprecate NameExpression in favor of ContextVariable
• Deprecate AssignNameExpression in favor of AssignContextVariable
• Remove MacroAutoImportNodeVisitor
• Deprecate MethodCallExpression in favor of MacroReferenceExpression

... (truncated)

Commits

• d4f8c2b Prepare the 3.19.0 release
• 38576b1 security #cve-2025-24374 [SECURITY] Fix a security issue where escaping was m...
• 445f74c [SECURITY] Fix a security issue where escaping was missing when using ??
• b638637 minor #4560 Fix typo for html_cva code example (matthieupetel)
• 83da53c Fix typo for html_cva code example
• 48d167a minor #4558 Fix CS (fabpot)
• f594248 Fix CS
• fcd0332 minor #4557 Fix Token::__toString() (fabpot)
• 11535e9 Fix Token::__toString()
• b680354 minor #4556 fix intl-extra tests (xabbuh)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)