Merge pull request #374 from php-http/fix-lowest-version-security

CVE-2019-18888, CVE-2019-18889

Author: dbu

composer.json

@@ -55,10 +55,10 @@
         "php-http/promise": "^1.0",
         "polishsymfonycommunity/symfony-mocker-container": "^1.0",
         "symfony/browser-kit": "^3.4.34 || ^4.2.12 || ^5.0",
-        "symfony/cache": "^3.4.34 || ~4.2.12 || ^4.3.8 || ^5.0",
+        "symfony/cache": "^3.4.35 || ~4.2.12 || ^4.3.8 || ^5.0",
         "symfony/dom-crawler": "^3.4.34 || ^4.2.12 || ^5.0",
         "symfony/framework-bundle": "^3.4.34 || ^4.2.12 || ^5.0",
-        "symfony/http-foundation": "^3.4.34 || ~4.2.12 || ^4.3.8 || ^5.0",
+        "symfony/http-foundation": "^3.4.35 || ~4.2.12 || ^4.3.8 || ^5.0",
         "symfony/phpunit-bridge": "^3.4.34 || ^4.2.12 || ^5.0",
         "symfony/stopwatch": "^3.4.34 || ^4.2.12 || ^5.0",
         "symfony/twig-bundle": "^3.4.34 || ^4.2.12 || ^5.0",