Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency guzzlehttp/guzzle to v6.5.8 #7

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Jul 6, 2022

This PR contains the following updates:

Package Type Update Change
guzzlehttp/guzzle (source) require minor 6.3.3 -> 6.5.8

By merging this PR, the issue #6 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 8.1 CVE-2022-29248
High High 7.7 CVE-2022-31090
High High 7.7 CVE-2022-31091
High High 7.5 CVE-2022-31042
High High 7.5 CVE-2022-31043

Release Notes

guzzle/guzzle (guzzlehttp/guzzle)

v6.5.8

Compare Source

See change log for changes.

v6.5.7

Compare Source

See change log for changes.

v6.5.6

Compare Source

See change log for changes.

v6.5.5

Compare Source

v6.5.4

Compare Source

v6.5.3

Compare Source

v6.5.2

Compare Source

  • idn_to_ascii() fix for old PHP versions #​2489

v6.5.1

Compare Source

  • Better defaults for PHP installations with old ICU lib #​2454
  • IDN support for redirects #​2424

v6.5.0

Compare Source

  • Improvement: Added support for reset internal queue in MockHandler. #​2143
  • Improvement: Added support to pass arbitrary options to curl_multi_init. #​2287
  • Fix: Gracefully handle passing null to the header option. #​2132
  • Fix: RetryMiddleware did not do exponential delay between retires due unit mismatch. #​2132
  • Fix: Prevent undefined offset when using array for ssl_key options. #​2348
  • Deprecated ClientInterface::VERSION

v6.4.1

Compare Source

  • No guzzle.phar was created in 6.4.0 due expired API token. This release will fix that
  • Added parent::__construct() to FileCookieJar and SessionCookieJar

v6.4.0

Compare Source

  • Improvement: Improved error messages when using curl < 7.21.2 #​2108
  • Fix: Test if response is readable before returning a summary in RequestException::getResponseBodySummary() #​2081
  • Fix: Add support for GUZZLE_CURL_SELECT_TIMEOUT environment variable #​2161
  • Improvement: Added GuzzleHttp\Exception\InvalidArgumentException #​2163
  • Improvement: Added GuzzleHttp\_current_time() to use hrtime() if that function exists. #​2242
  • Improvement: Added curl's appconnect_time in TransferStats #​2284
  • Improvement: Make GuzzleException extend Throwable wherever it's available #​2273
  • Fix: Prevent concurrent writes to file when saving CookieJar #​2335
  • Improvement: Update MockHandler so we can test transfer time #​2362

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Jul 6, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency guzzlehttp/guzzle to v6.5.8 Update dependency guzzlehttp/guzzle to v6.5.7 Nov 20, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/guzzlehttp-guzzle-6.x branch from 1e44393 to 665cb3b Compare November 20, 2022 20:38
@mend-for-github-com mend-for-github-com bot changed the title Update dependency guzzlehttp/guzzle to v6.5.7 Update dependency guzzlehttp/guzzle to v6.5.6 Jan 8, 2023
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/guzzlehttp-guzzle-6.x branch from 665cb3b to 0c268bb Compare January 8, 2023 01:05
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/guzzlehttp-guzzle-6.x branch from 0c268bb to c2c6f54 Compare January 31, 2024 05:32
@mend-for-github-com mend-for-github-com bot changed the title Update dependency guzzlehttp/guzzle to v6.5.6 Update dependency guzzlehttp/guzzle to v6.5.8 Jan 31, 2024
Copy link
Author

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock
Command failed: composer update guzzlehttp/guzzle:6.5.8 --with-dependencies --ignore-platform-reqs --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins
Package "guzzlehttp/guzzle:6.5.8" listed for update is not installed. Ignoring.
Loading composer repositories with package information
Warning from https://repo.packagist.org: Support for Composer 1 is deprecated and some packages will not be available. You should upgrade to Composer 2. See https://blog.packagist.com/deprecating-composer-1-support/
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - The requested package guzzlehttp/guzzle (locked at 6.3.3, required as 6.5.8) is satisfiable by guzzlehttp/guzzle[6.3.3] but these conflict with your requirements or minimum-stability.
  Problem 2
    - Installation request for guzzlehttp/guzzle 6.5.8 -> satisfiable by guzzlehttp/guzzle[6.5.8].
    - Conclusion: don't install guzzlehttp/psr7 1.6.1
    - guzzlehttp/guzzle 6.5.8 requires guzzlehttp/psr7 ^1.9 -> satisfiable by guzzlehttp/psr7[1.9.0, 1.9.1].
    - Can only install one of: guzzlehttp/psr7[1.9.0, 1.6.1].
    - Can only install one of: guzzlehttp/psr7[1.9.1, 1.6.1].
    - Installation request for guzzlehttp/psr7 (locked at 1.6.1) -> satisfiable by guzzlehttp/psr7[1.6.1].


Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants