[composer](deps): Bump twig/twig from 3.5.1 to 3.22.0

[dependabot]

Bumps twig/twig from 3.5.1 to 3.22.0.

Changelog

Sourced from twig/twig's changelog.

3.22.0 (2025-10-29)

• Add support for two words test in guard tag
• Add Environment::registerUndefinedTestCallback()
• Fix compatibility with Symfony 8
• Fix accessing arrays with stringable objects as key
• Avoid errors when failing to guess the template info for an error
• Fix expression parser compatibility layer
• Fix compiling 'index' with repr (not string) in EmbedNode
• Update configuration keys + allow extra keys for CommonMark extensions
• Allow usage of other Markdown converters than CommonMark in LeagueMarkdown

3.21.1 (2025-05-03)

• Fix ExtensionSet usage of BinaryOperatorExpressionParser

3.21.0 (2025-05-02)

• Fix wrong array index
• Deprecate Template::loadTemplate()
• Fix testing and expression when it evaluates to an instance of Markup
• Add ReturnPrimitiveTypeInterface (and sub-interfaces for number, boolean, string, and array)
• Add SupportDefinedTestInterface for expression nodes supporting the defined test
• Deprecate using the | operator in an expression with + or - without using parentheses to clarify precedence
• Deprecate operator precedence outside of the [0, 512] range
• Introduce expression parser classes to describe operators and operands provided by extensions instead of arrays (it comes with many deprecations that are documented in the deprecated documentation chapter)
• Deprecate the Twig\ExpressionParser, and Twig\OperatorPrecedenceChange classes
• Add attributes AsTwigFilter, AsTwigFunction, and AsTwigTest to ease extension development

3.20.0 (2025-02-13)

• Fix support for ignoring syntax errors in an undefined handler in guard
• Add configuration for Commonmark
• Fix wrong array index
• Bump minimum PHP version to 8.1
• Add support for registering callbacks for undefined functions, filters or token parsers in the IntegrationTestCase
• Use correct line number for ForElseNode
• Fix timezone conversion on strings

3.19.0 (2025-01-28)

• Fix a security issue where escaping was missing when using ??
• Deprecate Token::getType(), use Token::test() instead
• Add Token::toEnglish()
• Add ForElseNode
• Deprecate Twig\ExpressionParser::parseOnlyArguments() and Twig\ExpressionParser::parseArguments() (use Twig\ExpressionParser::parseNamedArguments() instead)

... (truncated)

Commits

• 4509984 Prepare the 3.22.0 release
• a5487c8 Update CHANGELOG
• 9a5887a bug #4704 Fix accessing arrays with stringable objects as key (nicolas-grekas)
• 9ae75d3 Fix accessing arrays with stringable objects as key
• d26e8f2 minor #4699 Update inky_to_html.rst: Updating link (ThomasLandauer)
• b9a4e04 Update inky_to_html.rst: Updating link
• f0cd0fd minor #4695 Update replace.rst (cyphix333)
• df3a281 Update replace.rst
• a895a3f minor #4694 [Doc] Tweaks in the escaping article (javiereguiluz)
• dac599c bug #4693 Compile 'index' with repr (not string) in EmbedNode (smnandre)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[wayfapper-bot]

This PR is stale because it has been open 28 days with no activity. Remove stale label or comment or this will be closed in 14 days.

[dependabot]

Superseded by #1900.