[dependabot]

Bumps symfony/http-client from 5.4.49 to 8.1.10.

Release notes

Sourced from symfony/http-client's releases.

v8.1.10

Changelog (symfony/http-client@v8.1.9...v8.1.10)

• bug #67513 Fix retry delays longer than the idle timeout (@​nicolas-grekas)
• bug #67223 Fix NativeHttpClient sending paused requests up to one second late (@​nicolas-grekas)
• bug #67112 Fix AmpHttpClient reporting completed responses up to one second late (@​nicolas-grekas)
• bug #67052 Fix CurlHttpClient leaking temp file streams (@​bakugo)
• bug #67085 Fix CurlHttpClient leaking the curl handle of responses closed while performing (@​nicolas-grekas)
• bug #66940 Ignore negative CURLOPT_MAXREDIRS values in GuzzleHttpHandler (@​nicolas-grekas)
• bug #66938 Don't add the query option again to redirect targets in NoPrivateNetworkHttpClient (@​nicolas-grekas)

[SECURITY] Security release

v8.1.9

Changelog (symfony/http-client@v8.1.8...v8.1.9)

• bug #66899 Fix RetryableHttpClient::withOptions() changing the base URIs of the original client (@​nicolas-grekas)
• bug #66823 Fix CachingHttpClient storing responses as stale when their start_time is old (@​nicolas-grekas)
• bug #66822 Fix ThrottlingHttpClient when the response has no pause handler (@​nicolas-grekas)
• bug #66610 Skip tests that rely on 500ms server pauses on Windows (@​nicolas-grekas)
• bug #66556 Fix using HTTP/3 with CurlHttpClient (@​nicolas-grekas)
• bug #66468 Cap the timeout passed to curl_multi_select() (@​dylanpulver)

v8.1.8

Changelog (symfony/http-client@v8.1.7...v8.1.8)

• bug #66267 Align GuzzleHttpHandler with Guzzle when on_headers throws (@​nicolas-grekas)
• bug #66266 Fix NativeHttpClient::stream() skipping responses not opened yet (@​nicolas-grekas)
• bug #66270 Don't reject highly compressed responses (@​nicolas-grekas)
• bug #66233 Don't set CURLOPT_WRITEFUNCTION from within the write callback (@​nicolas-grekas)
• bug #66080 Add missing non-routable ranges to NoPrivateNetworkHttpClient (@​nicolas-grekas)

v8.1.7

Changelog (symfony/http-client@v8.1.6...v8.1.7)

• bug #65914 Suppress warnings from failed DNS lookups (@​Toflar)

v8.1.6

Changelog (symfony/http-client@v8.1.5...v8.1.6)

• bug #65751 Reject decompression bombs (@​nicolas-grekas)
• bug #65740 Reject https:// proxies that curl would connect to in cleartext (@​nicolas-grekas)
• bug #65731 Don't send the original Host header on cross-authority redirects (@​nicolas-grekas)
• bug #65742 Reject 3xx pushed responses (@​nicolas-grekas)
• bug #65704 Drop credentials when a redirect changes the scheme (@​nicolas-grekas)
• bug #65632 Fix GuzzleHttpHandler consuming responses out of band (@​peter17)

v8.1.5

Changelog (symfony/http-client@v8.1.4...v8.1.5)

... (truncated)

Changelog

Sourced from symfony/http-client's changelog.

CHANGELOG

8.2

• Limit read-ahead for active responses in CurlHttpClient, AmpHttpClient and NativeHttpClient
• Default the http_client.recorder.enabled option to true when framework.test is enabled
• Add HttpClientBundle, which provides the http_client configuration and the services previously provided by FrameworkBundle under framework.http_client
• Add the max_connect_duration option to the http_client configuration
• Add the retry_failed.base_uris option of scoped clients to retry a failed request against the next URI in the list
• Add RecorderHttpClient to record HTTP exchanges into HAR files and replay them
• Make HarFileResponseFactory replay repeated entries in the order they were recorded
• Add the extra.cache_policy option to CachingHttpClient to tag cached responses and force their lifetime
• [BC BREAK] Allow passing a stream or a closure to HttpOptions::buffer()
• Add QUERY to the list of cacheable HTTP methods in CachingHttpClient
• Add ScopingHttpClient::forBaseUris() to scope a client to several base URIs at once
• Collect the duration and the transferred sizes of each request in HttpClientDataCollector, and add HttpClientDataCollector::getTotalTime()
• Add the trailers response info
• Add support for the on_trailers request option to GuzzleHttpHandler
• Allow passing the query and body options as lists of single-entry arrays to repeat a field
• Make http_version: 2.0 use HTTP/2 with prior knowledge on http:// URLs in CurlHttpClient and AmpHttpClient
• Stop following redirects from https:// to http:// URLs
• Make AmpHttpClient, CurlHttpClient, DnsResolvingHttpClient, HttplugClient, NoPrivateNetworkHttpClient, Psr18Client and TraceableHttpClient implement ShutdownInterface
• Add argument $shutdown to reset() in DecoratorTrait, ScopingHttpClient and ThrottlingHttpClient
• Close the idle connections of CurlHttpClient and AmpHttpClient when reset(true) is called at shutdown

8.1

• Add support for the max_connect_duration option
• Add option extra.use_persistent_connections to CurlHttpClient to control the use of persistent connections introduced in PHP 8.5
• Add GuzzleHttpHandler that allows using Symfony HttpClient as a Guzzle handler
• Add $allowList argument to NoPrivateNetworkHttpClient to allow specific hosts (e.g. a local proxy) to bypass the private-network filter
• Add DnsResolvingHttpClient decorator to resolve host names using a custom resolver, including on redirects
• Change $maxTtl argument of CachingHttpClient to default to 86400 (24h) instead of null
• Deprecate passing null as $maxTtl to CachingHttpClient, pass a positive integer instead
• Make CachingHttpClient implement Psr\Log\LoggerAwareInterface to log when a stale cached response is served because the upstream call failed (stale-if-error fallback)

8.0

• Remove support for passing an instance of StoreInterface as $cache argument to CachingHttpClient constructor, use a TagAwareCacheInterface instead
• Remove support for amphp/http-client < 5
• Remove setLogger() methods on decorators; configure the logger on the wrapped client directly instead

7.4

• Add RFC 9111–based caching support to CachingHttpClient

... (truncated)

Commits

• 1f6bd9b Merge branch '7.4' into 8.1
• 9dd7ba9 Merge branch '6.4' into 7.4
• 8f2cc53 [HttpClient] Fix retry delays longer than the idle timeout
• ebd991f Merge branch '7.4' into 8.1
• 0ee6818 Merge branch '6.4' into 7.4
• 1104edb [HttpClient] Fix testPauseBeforeTheRequestIsSent() failing when the test runn...
• eab18b2 Merge branch '7.4' into 8.1
• 9b76b31 Merge branch '6.4' into 7.4
• 8069f9a bug #67223 [HttpClient] Fix NativeHttpClient sending paused requests up to on...
• aedb5f3 [HttpClient] Fix NativeHttpClient sending paused requests up to one second late
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)