Skip to content

chore(deps): bump the php-deps group in /legacy with 3 updates#131

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/legacy/php-deps-d574142c51
Open

chore(deps): bump the php-deps group in /legacy with 3 updates#131
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/legacy/php-deps-d574142c51

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the php-deps group in /legacy with 3 updates: guzzlehttp/guzzle, composer/ca-bundle and friendsofphp/php-cs-fixer.

Updates guzzlehttp/guzzle from 7.14.1 to 7.15.1

Release notes

Sourced from guzzlehttp/guzzle's releases.

7.15.1

Security

7.15.0

Added

  • Added Multiplexing::NONE support as a client, cURL multi handler, and conditional request option

Changed

  • Adjusted guzzlehttp/psr7 version constraint to ^2.13
  • Use locale-independent ASCII folding for all case normalization and comparison
  • Bound cURL upload reads to the declared Content-Length
  • Sanitize the cURL error text exposed through exception handler context
  • Fail closed when a named cURL multi connection cap cannot be applied
  • Reject the request-level CURLOPT_SHARE cURL option when named connection caps are configured
  • Strengthen old-libcurl SOCKS isolation for raw CURLOPT_PRE_PROXY and opaque share handles
  • Isolate HTTP proxy tunnels from opaque shared connection caches
  • Trigger runtime deprecations for previously deprecated functionality in 7.1.0

Deprecated

  • Deprecated Utils::jsonDecode() and Utils::jsonEncode() in favor of native JSON functions
  • Deprecated passing CURLMOPT_PIPELINING in the cURL multi handler options array
  • Deprecated passing CURLOPT_PROXYHEADER without cURL proxy header separation support

Fixed

  • Defer cURL requests created from multi callbacks until native execution unwinds
  • Fail synchronous waits from native cURL callbacks promptly instead of self-deadlocking
  • Guard cURL multi handle removal against progress callbacks re-entering the handler
  • Scope promise waits on the cURL multi handler to the awaited transfer
  • Strip Content-Length and Transfer-Encoding when redirects discard the request body
  • Stop re-applying the delay request option to followed redirects

7.14.2

Security

Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.15.1 - 2026-07-18

Security

7.15.0 - 2026-07-17

Added

  • Added Multiplexing::NONE support as a client, cURL multi handler, and conditional request option

Changed

  • Adjusted guzzlehttp/psr7 version constraint to ^2.13
  • Use locale-independent ASCII folding for all case normalization and comparison
  • Bound cURL upload reads to the declared Content-Length
  • Sanitize the cURL error text exposed through exception handler context
  • Fail closed when a named cURL multi connection cap cannot be applied
  • Reject the request-level CURLOPT_SHARE cURL option when named connection caps are configured
  • Strengthen old-libcurl SOCKS isolation for raw CURLOPT_PRE_PROXY and opaque share handles
  • Isolate HTTP proxy tunnels from opaque shared connection caches
  • Trigger runtime deprecations for previously deprecated functionality in 7.1.0

Deprecated

  • Deprecated Utils::jsonDecode() and Utils::jsonEncode() in favor of native JSON functions
  • Deprecated passing CURLMOPT_PIPELINING in the cURL multi handler options array
  • Deprecated passing CURLOPT_PROXYHEADER without cURL proxy header separation support

Fixed

  • Defer cURL requests created from multi callbacks until native execution unwinds
  • Fail synchronous waits from native cURL callbacks promptly instead of self-deadlocking
  • Guard cURL multi handle removal against progress callbacks re-entering the handler
  • Scope promise waits on the cURL multi handler to the awaited transfer
  • Strip Content-Length and Transfer-Encoding when redirects discard the request body
  • Stop re-applying the delay request option to followed redirects

7.14.2 - 2026-07-14

Security

Commits

Updates composer/ca-bundle from 1.5.12 to 1.5.13

Release notes

Sourced from composer/ca-bundle's releases.

1.5.13

Full Changelog: composer/ca-bundle@1.5.12...1.5.13

Commits

Updates friendsofphp/php-cs-fixer from 3.95.13 to 3.95.15

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.15 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.14...v3.95.15

v3.95.14 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.13...v3.95.14

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.15

  • fix: self-update - fix "Access Denied" error when running on Windows (#9731)

Changelog for v3.95.14

  • fix: ClassAttributesSeparationFixer - handle property with hooks as last class element (#9724)
  • fix: SingleClassElementPerStatementFixer - do not break PHP syntax when splitting properties with disjunctive normal form type (#9723)
  • fix: TrailingCommaInMultilineFixer - do not add trailing comma after first-class callable (#9722)
  • chore: add code coverage ignore annotations to parallel runner and worker (#9721)
  • chore: cleanup FunctionToConstantFixer (#9719)
  • test: HeaderCommentFixerTest - improve invalid configuration types (#9728)
  • test: ClassDefinitionFixerTest - improve PHPDocs (#9726)
  • test: ConfigurationResolverTest - fix types (#9725)
  • test: GeneralAttributeRemoveFixerTest - improve data provider types (#9727)
  • test: ProjectCodeTest - improve PHPDocs (#9730)
  • deps: allow to run PHPUnit v12 directly for project, without future-ready CI workarounds (#9580)
  • deps: bump shipmonk/dead-code-detector from 1.3.0 to 1.3.1 in /dev-tools in the shipmonk group across 1 directory (#9718)
  • deps: bump the phpstan group in /dev-tools with 2 updates (#9717)
Commits
  • 3e47e5d prepared the 3.95.15 release
  • 5eeae8d fix: self-update - fix "Access Denied" error when running on Windows (#9731)
  • 8153d49 bumped version
  • beee274 prepared the 3.95.14 release
  • 4b1d95d deps: allow to run PHPUnit v12 directly for project, without future-ready CI ...
  • 4796020 test: ProjectCodeTest - improve PHPDocs (#9730)
  • e8af9ca fix: SingleClassElementPerStatementFixer - do not break PHP syntax when spl...
  • b858858 fix: ClassAttributesSeparationFixer - handle property with hooks as last cl...
  • 6a461b9 fix: TrailingCommaInMultilineFixer - do not add trailing comma after first-...
  • 177aa71 test: HeaderCommentFixerTest - improve invalid configuration types (#9728)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the php-deps group in /legacy with 3 updates
999bf81 
Bumps the php-deps group in /legacy with 3 updates: [guzzlehttp/guzzle](https://github.com/guzzle/guzzle), [composer/ca-bundle](https://github.com/composer/ca-bundle) and [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer).


Updates `guzzlehttp/guzzle` from 7.14.1 to 7.15.1
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/8.0/CHANGELOG.md)
- [Commits](guzzle/guzzle@7.14.1...7.15.1)

Updates `composer/ca-bundle` from 1.5.12 to 1.5.13
- [Release notes](https://github.com/composer/ca-bundle/releases)
- [Commits](composer/ca-bundle@1.5.12...1.5.13)

Updates `friendsofphp/php-cs-fixer` from 3.95.13 to 3.95.15
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.13...v3.95.15)

---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
  dependency-version: 7.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: php-deps
- dependency-name: composer/ca-bundle
  dependency-version: 1.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-deps
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.95.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: php-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Jul 21, 2026
Copilot AI review requested due to automatic review settings July 21, 2026 14:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Jul 21, 2026
Copilot AI reviewed Jul 21, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant