Merge branch '3.4'

* 3.4:
  fix deps=low

Author: nicolas-grekas

src/Symfony/Bundle/SecurityBundle/composer.json

@@ -18,7 +18,7 @@
     "require": {
         "php": "^7.1.3",
         "ext-xml": "*",
-        "symfony/security": "~3.4|~4.0",
+        "symfony/security": "~3.4-beta5|~4.0-beta5",
         "symfony/dependency-injection": "~3.4|~4.0",
         "symfony/http-kernel": "~3.4|~4.0"
     },

src/Symfony/Component/Security/Csrf/CsrfToken.php

@@ -21,10 +21,10 @@ class CsrfToken
     private $id;
     private $value;
 
-    public function __construct(string $id, string $value)
+    public function __construct(string $id, ?string $value)
     {
         $this->id = $id;
-        $this->value = $value;
+        $this->value = $value ?? '';
     }
 
     /**

src/Symfony/Component/Security/Csrf/composer.json

@@ -20,7 +20,10 @@
         "symfony/security-core": "~3.4|~4.0"
     },
     "require-dev": {
-        "symfony/http-foundation": "~3.4|~4.0"
+        "symfony/http-foundation": "~3.4-beta5|~4.0-beta5"
+    },
+    "conflict": {
+        "symfony/http-foundation": "<3.4-beta5|~4.0,<4.0-beta5"
     },
     "suggest": {
         "symfony/http-foundation": "For using the class SessionTokenStorage."

src/Symfony/Component/Security/composer.json

@@ -18,7 +18,7 @@
     "require": {
         "php": "^7.1.3",
         "symfony/event-dispatcher": "~3.4|~4.0",
-        "symfony/http-foundation": "~3.4|~4.0",
+        "symfony/http-foundation": "~3.4-beta5|~4.0-beta5",
         "symfony/http-kernel": "~3.4|~4.0",
         "symfony/property-access": "~3.4|~4.0"
     },