Skip to content

Bump the composer group across 1 directory with 3 updates#117

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/composer-02e598651b
Open

Bump the composer group across 1 directory with 3 updates#117
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/composer-02e598651b

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 27, 2026

Bumps the composer group with 2 updates in the / directory: guzzlehttp/guzzle and phpunit/phpunit.

Updates guzzlehttp/guzzle from 6.3.0 to 6.5.8

Release notes

Sourced from guzzlehttp/guzzle's releases.

Release 6.5.8

See change log for changes.

Release 6.5.7

See change log for changes.

Release 6.5.6

See change log for changes.

6.5.5

No release notes provided.

6.5.4

No release notes provided.

6.5.3

No release notes provided.

6.5.2

  • idn_to_ascii() fix for old PHP versions #2489

6.5.1

  • Better defaults for PHP installations with old ICU lib #2454
  • IDN support for redirects #2424

6.5.0

No release notes provided.

6.4.1

No release notes provided.

6.3.3

No release notes provided.

6.3.2

  • Bug fix: Parsing 0 epoch expiry times in cookies #2014
  • Improvement: Better ConnectException detection #2012
  • Bug fix: Malformed domain that contains a "/" #1999
  • Bug fix: Undefined offset when a cookie has no first key-value pair #1998
  • Improvement: Support PHPUnit 6 #1953
  • Bug fix: Support empty headers #1915
  • Bug fix: Ignore case during header modifications #1916
  • Minor code cleanups, documentation fixes and clarifications.
Changelog

Sourced from guzzlehttp/guzzle's changelog.

6.5.8 - 2022-06-20

  • Fix change in port should be considered a change in origin
  • Fix CURLOPT_HTTPAUTH option not cleared on change of origin

6.5.7 - 2022-06-09

  • Fix failure to strip Authorization header on HTTP downgrade
  • Fix failure to strip the Cookie header on change in host or HTTP downgrade

6.5.6 - 2022-05-25

  • Fix cross-domain cookie leakage

6.5.5 - 2020-06-16

  • Unpin version constraint for symfony/polyfill-intl-idn #2678

6.5.4 - 2020-05-25

  • Fix various intl icu issues #2626

6.5.3 - 2020-04-18

  • Use Symfony intl-idn polyfill #2550
  • Remove use of internal functions #2548

6.5.2 - 2019-12-23

  • idn_to_ascii() fix for old PHP versions #2489

6.5.1 - 2019-12-21

  • Better defaults for PHP installations with old ICU lib #2454
  • IDN support for redirects #2424

6.5.0 - 2019-12-07

  • Improvement: Added support for reset internal queue in MockHandler. #2143
  • Improvement: Added support to pass arbitrary options to curl_multi_init. #2287
  • Fix: Gracefully handle passing null to the header option. #2132
  • Fix: RetryMiddleware did not do exponential delay between retries due unit mismatch. #2132 Previously, RetryMiddleware would sleep for 1 millisecond, then 2 milliseconds, then 4 milliseconds. After this change, RetryMiddleware will sleep for 1 second, then 2 seconds, then 4 seconds. Middleware::retry() accepts a second callback parameter to override the default timeouts if needed.
  • Fix: Prevent undefined offset when using array for ssl_key options. #2348
  • Deprecated ClientInterface::VERSION

6.4.1 - 2019-10-23

... (truncated)

Commits

Updates phpunit/phpunit from 8.5.5 to 8.5.52

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 8.5.52

Changed

  • To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

Learn how to install or update PHPUnit 8.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 8.5.51

Changed

  • PHPUnit\Framework\MockObject exceptions subtypes of PHPUnit\Exception

Learn how to install or update PHPUnit 8.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 8.5.50

  • No changes; phpunit.phar rebuilt with PHP 8.4 to work around PHP-Scoper issue #1139

Learn how to install or update PHPUnit 8.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 8.5.49

  • No changes; phpunit.phar rebuilt with updated dependencies

Learn how to install or update PHPUnit 8.5 in the documentation.

Keep up to date with PHPUnit:

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

Commits

Updates guzzlehttp/psr7 from 1.4.2 to 1.9.1

Release notes

Sourced from guzzlehttp/psr7's releases.

1.9.1

See change log for changes.

1.9.0

See change log for changes.

1.8.5

See change log for changes.

1.8.4

See change log for changes.

1.8.3

See change log for changes.

1.8.2

See change log for changes.

1.8.1

See change log for changes.

1.8.0

See change log for changes.

1.7.0

See change log for changes.

Revert PSR-7 type assertions

1.6.0 introduced a few type assertions to enforce types defined by PSR-7. Unfortunately that break the library for users not strictly following the PSR-7 standard. Since the users impacted by this change seems to be rather large, this hotfix reverts that change with the note that we will reapply it in 2.0.0, so fixing this is recommended regardless of which version you use.

Details are in #282 and #283

1.6.0

Version 1.6.0 is released which will likely be the last minor release in 1.x. We're focussing 2.0 now with support for psr/http-factory, PHP 7.2 requirement and type declarations.

Added

  • Allowed version ^3.0 of ralouphie/getallheaders dependency (#244)
  • Added MIME type for WEBP image format (#246)
  • Added more validation of values according to PSR-7 and RFC standards, e.g. status code range (#250, #272)

Changed

  • Tests don't pass with HHVM 4.0, so HHVM support got dropped. Other libraries like composer have done the same. (#262)
  • Accept port number 0 to be valid (#270)

Fixed

  • Fixed subsequent reads from php://input in ServerRequest (#247)
  • Fixed readable/writable detection for certain stream modes (#248)

... (truncated)

Changelog

Sourced from guzzlehttp/psr7's changelog.

1.9.1 - 2023-04-17

Fixed

  • Fixed header validation issue

1.9.0 - 2022-06-20

Added

  • Added UriComparator::isCrossOrigin method

1.8.5 - 2022-03-20

Fixed

  • Correct header value validation

1.8.4 - 2022-03-20

Fixed

  • Validate header values properly

1.8.3 - 2021-10-05

Fixed

  • Return null in caching stream size if remote size is null

1.8.2 - 2021-04-26

Fixed

  • Handle possibly unset url in stream_get_meta_data

1.8.1 - 2021-03-21

Fixed

  • Issue parsing IPv6 URLs
  • Issue modifying ServerRequest lost all its attributes

1.8.0 - 2021-03-21

Added

  • Locale independent URL parsing
  • Most classes got a @final annotation to prepare for 2.0

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the composer group across 1 directory with 3 updates
49a933c 
Bumps the composer group with 2 updates in the / directory: [guzzlehttp/guzzle](https://github.com/guzzle/guzzle) and [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit).


Updates `guzzlehttp/guzzle` from 6.3.0 to 6.5.8
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/6.5.8/CHANGELOG.md)
- [Commits](guzzle/guzzle@6.3.0...6.5.8)

Updates `phpunit/phpunit` from 8.5.5 to 8.5.52
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/8.5.52/ChangeLog-8.5.md)
- [Commits](sebastianbergmann/phpunit@8.5.5...8.5.52)

Updates `guzzlehttp/psr7` from 1.4.2 to 1.9.1
- [Release notes](https://github.com/guzzle/psr7/releases)
- [Changelog](https://github.com/guzzle/psr7/blob/1.9.1/CHANGELOG.md)
- [Commits](guzzle/psr7@1.4.2...1.9.1)

---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
  dependency-version: 6.5.8
  dependency-type: direct:production
  dependency-group: composer
- dependency-name: phpunit/phpunit
  dependency-version: 8.5.52
  dependency-type: direct:development
  dependency-group: composer
- dependency-name: guzzlehttp/psr7
  dependency-version: 1.9.1
  dependency-type: indirect
  dependency-group: composer
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels May 27, 2026
This was referenced May 27, 2026
Closed
Closed
@private-packagist
Copy link
Copy Markdown

private-packagist Bot commented May 27, 2026

composer.lock

Package changes

Package Operation From To About
ralouphie/getallheaders add - 3.0.3 view code - License: MIT License
symfony/polyfill-intl-idn add - v1.38.1 view code - License: MIT License
symfony/polyfill-intl-normalizer add - v1.38.0 view code - License: MIT License
guzzlehttp/guzzle upgrade 6.3.0 ⚠️ 6.5.8 ✅ diff
guzzlehttp/promises upgrade v1.3.1 1.5.3 diff
guzzlehttp/psr7 upgrade 1.4.2 ⚠️ 1.9.1 ✅ diff
psr/http-message upgrade 1.0.1 1.1 diff
symfony/polyfill-mbstring upgrade v1.4.0 v1.38.1 diff
symfony/polyfill-php70 upgrade v1.17.0 v1.20.0 diff
paragonie/random_compat remove v9.99.99 - -

Dev Package changes

Package Operation From To About
doctrine/instantiator upgrade 1.3.1 1.5.0 diff
myclabs/deep-copy upgrade 1.9.5 1.13.4 diff
phar-io/manifest upgrade 1.0.3 2.0.4 diff
phar-io/version upgrade 2.0.1 3.2.1 diff
phpunit/php-code-coverage upgrade 7.0.10 7.0.17 diff
phpunit/php-file-iterator upgrade 2.0.2 2.0.6 diff
phpunit/php-timer upgrade 2.1.2 2.1.4 diff
phpunit/php-token-stream upgrade 3.1.1 3.1.3 diff
phpunit/phpunit upgrade 8.5.5 ⚠️ 8.5.52 ✅ diff
sebastian/code-unit-reverse-lookup upgrade 1.0.1 1.0.3 diff
sebastian/comparator upgrade 3.0.2 3.0.7 diff
sebastian/diff upgrade 3.0.2 3.0.6 diff
sebastian/environment upgrade 4.2.3 4.2.5 diff
sebastian/exporter upgrade 3.1.2 3.1.8 diff
sebastian/global-state upgrade 3.0.0 3.0.6 diff
sebastian/object-enumerator upgrade 3.0.3 3.0.5 diff
sebastian/object-reflector upgrade 1.1.1 1.1.3 diff
sebastian/recursion-context upgrade 3.0.0 3.0.3 diff
sebastian/resource-operations upgrade 2.0.1 2.0.3 diff
sebastian/type upgrade 1.1.3 1.1.5 diff
theseer/tokenizer upgrade 1.1.3 1.3.1 diff
phpdocumentor/reflection-common remove 1.0 - -
phpdocumentor/reflection-docblock remove 3.2.0 - -
phpdocumentor/type-resolver remove 0.4.0 - -
phpspec/prophecy remove v1.10.3 - -

Settings · Docs · Powered by Private Packagist

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants