Skip to content

Update dependency guzzlehttp/guzzle to v7.12.3#869

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/guzzlehttp-guzzle-7.x-lockfile
Jun 23, 2026
Merged

Update dependency guzzlehttp/guzzle to v7.12.3#869
renovate[bot] merged 1 commit into
mainfrom
renovate/guzzlehttp-guzzle-7.x-lockfile

Conversation

@renovate

@renovate renovate Bot commented Jun 23, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
guzzlehttp/guzzle (source) 7.12.17.12.3 age confidence

Release Notes

guzzle/guzzle (guzzlehttp/guzzle)

v7.12.3

Compare Source

Changed
  • Adjusted guzzlehttp/psr7 version constraint to ^2.12.3
Security

v7.12.2

Compare Source

Fixed
  • Clamp out-of-range Max-Age so a very large value no longer overflows to an already-expired timestamp
  • Use strict comparison in CookieJar conflict resolution so distinct numeric-string names don't overwrite
  • Store a cookie whose Domain has a trailing dot on the origin host instead of silently discarding it
  • Fix StreamHandler hard-failing on bracketed IPv6 literal hosts when force_ip_resolve is set
  • Use strict cookie Path comparison so CookieJar::clear() with a numeric path keeps a distinct-path cookie
  • Fixed cookie handling for falsey Domain, Max-Age, path, and name values
  • Fixed decode_content handling for falsey string values
  • Fixed deprecated request option values reaching built-in handlers before normalization

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "before 4pm every weekday except before 9am every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot enabled auto-merge June 23, 2026 19:37
@renovate renovate Bot merged commit 75d3fc4 into main Jun 23, 2026
7 checks passed
@renovate renovate Bot deleted the renovate/guzzlehttp-guzzle-7.x-lockfile branch June 23, 2026 19:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants