Update to Symfony 7.3.0

MR https://git.drupalcode.org/project/drupal/-/merge_requests/12317

Split off updating Symfony to 7.3.0 from 📌 Update Composer dependencies for 11.2.0 Active , per #13:

Symfony 7.3.0 is also now out, and could be given its own issue as it's more critical than other updates.

That looks correct now, thanks.

Removed the changes to composer/ca-bundle, composer/spdx-licenses (any non-Symfony packages).

Shouldn't there also be increases to the constraints in the core/composer.json in here?

Added the version constraint changes to core/composer.json.

NW for https://www.drupal.org/node/3522189 → (I think) creeping in.

Crosspost, you are fast like lightning!

We need separate MRs for both 11.x and 11.2.x as this has to land in both but the lockfile causes conflicts so we can't reuse the same patch.

I actually think the core-recipe-unpack thing was correct.. it's in 11.2.x lockfile and should have been added to 11.x as well, otherwise I get this on install after switching branches:

Package operations: 0 installs, 3 updates, 1 removal
  - Removing drupal/core-recipe-unpack (11.2.x-dev)
  - Upgrading drupal/core-project-message (11.2.x-dev => 11.x-dev): Source already present
  - Upgrading drupal/core-vendor-hardening (11.2.x-dev => 11.x-dev): Source already present
  - Upgrading drupal/core (11.2.x-dev => 11.x-dev): Source already present

NW for #11/#12. Thanks @godotislate for helping out here!

I just confirmed that I get the recipe unpack stuff on a completely brand new repo as well. So it's either something that was failed to be added to the lock file in a previous issue, or a bug that was added in a previous issue... either way, out of scope here, and letting the lock file be what vanilla core generates out of the box is correct. Sorry @godotislate for the extra step!

https://git.drupalcode.org/project/drupal/-/merge_requests/12317 11.x
https://git.drupalcode.org/project/drupal/-/merge_requests/12319 11.2.x

Let's stabilize it, recipe unpack hunk just skipped on git add -p meantime

Committed to 11.x and 11.2.x, thanks!

xjm → closed merge request !12319

xjm → closed merge request !12317