URL encode param names, fix proxy, validate host (#22)

* URL encode param names, fix proxy, validate host
* remove PHP 8.1
* phpunit no longer runs against PHP 8.2

Author: mtmail

.github/workflows/ci.yml

@@ -14,7 +14,7 @@ jobs:
     strategy:
       matrix:
         # https://www.php.net/supported-versions.php
-        php-version: ["8.1", "8.2", "8.3", "8.4", "8.5"]
+        php-version: ["8.3", "8.4", "8.5"]
 
     name: PHP OpenCage Geocode
 

CHANGES.txt

@@ -1,3 +1,13 @@
+3.4.0 -- Sat Mar 29 2026
+=====================================================
+- deprecate PHP 8.1
+- URL encode API key and all query parameter names 
+- host and proxy parameter have to be set before calling geocode(). Values are now
+   stricter. In the last 30 days no customer used either option.
+- Explicitly enforce SSL certificate verification in both CURL and fopen.
+- Proxy now requires CURL extension; raises explicit error with fopen fallback
+- Fix stream context not being passed to file_get_contents
+
 3.3.4 -- Mon Dec 15 2025
 =====================================================
 - removes deprecation warning when using PHP 8.5 on $http_response_header created by fopen (thanks to @TimWolla)

README.md

@@ -89,7 +89,8 @@ if ($result && $result['total_results'] > 0) {
 ### Set a proxy URL
 
 ```php
-$geocoder->setProxy('http://proxy.example.com:1234');
+$geocoder = new \OpenCage\Geocoder\Geocoder('YOUR-API-KEY');
+$geocoder->setProxy('https://proxy.example.com:1234');
 $result = $geocoder->geocode("Brandenburger Tor, Berlin");
 print_r($result['results'][0]['formatted']);
 // Brandenburger Tor, Unter den Linden, 10117 Berlin, Germany

composer.json

@@ -15,10 +15,10 @@
     }
   },
   "require": {
-    "php": ">=8.1"
+    "php": ">=8.2"
   },
   "require-dev": {
-    "phpunit/phpunit": "^10.5 || ^11.0 || ^12.0",
+    "phpunit/phpunit": "^12.5.8",
     "squizlabs/php_codesniffer": "^3.7 || ^4.0",
     "phpstan/phpstan": "^2.0" 
   },