chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Resolved 8 open Dependabot security alerts by bumping guzzlehttp/guzzle from 7.15.1 to 7.15.2 across all manifests

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#62	guzzlehttp/guzzle	high	Bumped to 7.15.2 in composer.json + composer.lock
#63	guzzlehttp/guzzle	high	Bumped to 7.15.2 in examples/hello-world-http-proxy/composer.lock
#64	guzzlehttp/guzzle	high	Bumped to 7.15.2 in examples/hello-world/composer.lock
#65	guzzlehttp/guzzle	high	Bumped to 7.15.2 in examples/hello-world-udp-proxy/composer.lock
#58	guzzlehttp/guzzle	medium	Bumped to 7.15.2 in composer.lock
#59	guzzlehttp/guzzle	medium	Bumped to 7.15.2 in examples/hello-world-http-proxy/composer.lock
#60	guzzlehttp/guzzle	medium	Bumped to 7.15.2 in examples/hello-world/composer.lock
#61	guzzlehttp/guzzle	medium	Bumped to 7.15.2 in examples/hello-world-udp-proxy/composer.lock

Vulnerabilities addressed:

• Noncanonical host can bypass host-based checks (CVE high)
• Noncanonical cookie domain keeps subdomain scope (CVE medium)

[Copilot]

Pull request overview

Updates the PHP Server SDK’s HTTP client dependency to address Dependabot-reported security vulnerabilities by upgrading guzzlehttp/guzzle to 7.15.2, and propagates the lockfile changes to the included example applications.

Changes:

• Bumped guzzlehttp/guzzle from 7.15.1 to 7.15.2 in the root composer.json.
• Updated the root composer.lock to lock guzzlehttp/guzzle at 7.15.2.
• Updated example app lockfiles to lock guzzlehttp/guzzle at 7.15.2.

Reviewed changes

Copilot reviewed 1 out of 5 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
composer.json	Updates the SDK’s direct dependency constraint for guzzlehttp/guzzle to ^7.15.2.
composer.lock	Locks guzzlehttp/guzzle to 7.15.2 for the main project dependency graph.
examples/hello-world/composer.lock	Updates the example’s locked dependencies (including the SDK path dependency) to use guzzlehttp/guzzle 7.15.2.
examples/hello-world-http-proxy/composer.lock	Updates the example’s locked dependencies to use guzzlehttp/guzzle 7.15.2.
examples/hello-world-udp-proxy/composer.lock	Updates the example’s locked dependencies to use guzzlehttp/guzzle 7.15.2.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[jonathannorris]

@copilot resolve the merge conflicts in this pull request

[Copilot]

@copilot resolve the merge conflicts in this pull request

Addressed in ba1d282.