Skip to content

build(deps): Bump the composer group across 1 directory with 4 updates - #1119

Closed
dependabot[bot] wants to merge 1 commit into
WEM-2.0from
dependabot/composer/composer-ce178d82a0
Closed

build(deps): Bump the composer group across 1 directory with 4 updates#1119
dependabot[bot] wants to merge 1 commit into
WEM-2.0from
dependabot/composer/composer-ce178d82a0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the composer group with 3 updates in the / directory: guzzlehttp/guzzle, horstoeko/zugferd and predis/predis.

Updates guzzlehttp/guzzle from 7.10.5 to 7.15.1

Release notes

Sourced from guzzlehttp/guzzle's releases.

7.15.1

Security

7.15.0

Added

  • Added Multiplexing::NONE support as a client, cURL multi handler, and conditional request option

Changed

  • Adjusted guzzlehttp/psr7 version constraint to ^2.13
  • Use locale-independent ASCII folding for all case normalization and comparison
  • Bound cURL upload reads to the declared Content-Length
  • Sanitize the cURL error text exposed through exception handler context
  • Fail closed when a named cURL multi connection cap cannot be applied
  • Reject the request-level CURLOPT_SHARE cURL option when named connection caps are configured
  • Strengthen old-libcurl SOCKS isolation for raw CURLOPT_PRE_PROXY and opaque share handles
  • Isolate HTTP proxy tunnels from opaque shared connection caches
  • Trigger runtime deprecations for previously deprecated functionality in 7.1.0

Deprecated

  • Deprecated Utils::jsonDecode() and Utils::jsonEncode() in favor of native JSON functions
  • Deprecated passing CURLMOPT_PIPELINING in the cURL multi handler options array
  • Deprecated passing CURLOPT_PROXYHEADER without cURL proxy header separation support

Fixed

  • Defer cURL requests created from multi callbacks until native execution unwinds
  • Fail synchronous waits from native cURL callbacks promptly instead of self-deadlocking
  • Guard cURL multi handle removal against progress callbacks re-entering the handler
  • Scope promise waits on the cURL multi handler to the awaited transfer
  • Strip Content-Length and Transfer-Encoding when redirects discard the request body
  • Stop re-applying the delay request option to followed redirects

7.14.2

Security

7.14.1

Changed

  • Adjusted guzzlehttp/psr7 version constraint to ^2.12.5

Fixed

... (truncated)

Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.15.1 - 2026-07-18

Security

7.15.0 - 2026-07-17

Added

  • Added Multiplexing::NONE support as a client, cURL multi handler, and conditional request option

Changed

  • Adjusted guzzlehttp/psr7 version constraint to ^2.13
  • Use locale-independent ASCII folding for all case normalization and comparison
  • Bound cURL upload reads to the declared Content-Length
  • Sanitize the cURL error text exposed through exception handler context
  • Fail closed when a named cURL multi connection cap cannot be applied
  • Reject the request-level CURLOPT_SHARE cURL option when named connection caps are configured
  • Strengthen old-libcurl SOCKS isolation for raw CURLOPT_PRE_PROXY and opaque share handles
  • Isolate HTTP proxy tunnels from opaque shared connection caches
  • Trigger runtime deprecations for previously deprecated functionality in 7.1.0

Deprecated

  • Deprecated Utils::jsonDecode() and Utils::jsonEncode() in favor of native JSON functions
  • Deprecated passing CURLMOPT_PIPELINING in the cURL multi handler options array
  • Deprecated passing CURLOPT_PROXYHEADER without cURL proxy header separation support

Fixed

  • Defer cURL requests created from multi callbacks until native execution unwinds
  • Fail synchronous waits from native cURL callbacks promptly instead of self-deadlocking
  • Guard cURL multi handle removal against progress callbacks re-entering the handler
  • Scope promise waits on the cURL multi handler to the awaited transfer
  • Strip Content-Length and Transfer-Encoding when redirects discard the request body
  • Stop re-applying the delay request option to followed redirects

7.14.2 - 2026-07-14

Security

... (truncated)

Commits

Updates horstoeko/zugferd from 1.0.122 to 1.0.124

Release notes

Sourced from horstoeko/zugferd's releases.

v1.0.124

  • prefix with / and exclude more textfiles (Kevin Papst)
  • prevent non-prod files from being release with composer (Kevin Papst)
  • feat: add missing test (Thomas Wunner)
  • fix: correct getDocumentRoutingId pass-by-reference and DateTimeInterface checks (Thomas Wunner)
  • feat: add XML catalog for UN/CEFACT namespace resolution (Thomas Wunner)
  • fix: correct getDocumentRoutingId pass-by-reference and DateTimeInterface checks (Thomas Wunner)
  • feat: add new fork features (BuyerTaxRepresentative, BusinessProcess/ForeignCurrency reader, UltimateCustomerOrder) (Thomas Wunner)

v1.0.123

What's Changed

New Contributors

Full Changelog: horstoeko/zugferd@v1.0.122...v1.0.123

Changelog

Sourced from horstoeko/zugferd's changelog.

v1.0.124

Previous version v1.0.123

Type Hash Date Author Subject Issue(s)
🌑 a8a8fac 2026-06-08 10:25:03 CEST Kevin Papst prefix with / and exclude more textfiles
🌑 8fde0de 2026-06-08 10:08:31 CEST Kevin Papst prevent non-prod files from being release with composer
🌑 1b44f73 2026-06-03 10:28:12 CEST Thomas Wunner feat: add missing test
🌑 18d652e 2026-04-28 18:23:52 CEST Thomas Wunner fix: correct getDocumentRoutingId pass-by-reference and DateTimeInterface checks
🌑 a1216ad 2026-04-28 09:16:31 CEST Thomas Wunner feat: add XML catalog for UN/CEFACT namespace resolution
🌑 f9b13e1 2026-04-28 18:23:52 CEST Thomas Wunner fix: correct getDocumentRoutingId pass-by-reference and DateTimeInterface checks
🌑 8006a51 2026-04-28 08:52:14 CEST Thomas Wunner feat: add new fork features (BuyerTaxRepresentative, BusinessProcess/ForeignCurrency reader, UltimateCustomerOrder)

❗ There is one internal commit

v1.0.123

Previous version v1.0.122

Type Hash Date Author Subject Issue(s)
🆕 043bc25 2026-05-23 08:50:32 CEST HorstOeko [ENH] Added method to allow configuring the PDF/A conformance #364
🌑 952d642 2026-05-04 17:05:04 CEST Andreas Wunderwald feat: extend getDocumentAdditionalReferencedDocument to include binary mime code and filename handling in both logic and tests.
🌑 bf84893 2026-04-27 18:00:30 CEST Andreas Wunderwald Removed the invalid MIME type “application/xml”
🌑 15253ee 2026-04-27 18:00:30 CEST Andreas Wunderwald Removed the invalid MIME type “application/xml”
🌑 ac6da1c 2026-04-27 17:27:34 CEST Andreas Wunderwald Add support for XML mimetype in supported formats, we should remove this separately
🌑 a628c9f 2026-04-27 17:20:48 CEST Andreas Wunderwald Normalize PHP 8.0 CSV mimetype misdetection and remove redundant XML mimetype from supported list
🌑 b632bf7 2026-04-27 16:38:59 CEST Andreas Wunderwald Improve mimetype handling and add tests and fix for CSV attachments

❗ There are 3 internal commit(s)

Commits
  • e6cfed3 Merge pull request #370 from kevinpapst/gitattributes
  • a8a8fac prefix with / and exclude more textfiles
  • 8fde0de prevent non-prod files from being release with composer
  • baad4db Merge pull request #367 from alpham8/fix/reader-bugfixes
  • 6c25844 Merge pull request #369 from alpham8/feat/fork-features
  • ce28909 Merge branch 'fix/reader-bugfixes' of github.com:alpham8/zugferd into fix/rea...
  • 1b44f73 feat: add missing test
  • 18d652e fix: correct getDocumentRoutingId pass-by-reference and DateTimeInterface checks
  • a1216ad feat: add XML catalog for UN/CEFACT namespace resolution
  • 4851ee9 [DOC] Updated CHANGELOG.md
  • Additional commits viewable in compare view

Updates predis/predis from 3.4.2 to 3.5.1

Release notes

Sourced from predis/predis's releases.

v3.5.1

Added

  • Expose pipeline() API via ClientInterface (#1686)

Fixed

  • Allow UNLINK to accept an array of keys (#1687)

v3.5.0

Added

  • Added support for XNACK command (#1666)
  • Added support for INCREX command (#1674)
  • Added support for UNLINK command (#1680)
  • Added support for AR* array commands (#1672)
  • Handle Redis Cluster -READONLY responses failover events (#1656)
  • Added FPHA argument for JSON.SET command (#1661)
  • Added new COUNT aggregator for Sorted Set commands (#1668)
  • Added support for multiple aggregators for TS.range commands (#1670)

Changed

  • Include command name in unsupported container command error messages (#1653)

Fixed

  • Fixed handling of gap slots in SlotMap::offsetUnset() (#1660)
  • Fixed ZRANGE to include 6.2 arguments (#1662)
  • Fixed Sentinel retry to narrow retryable exceptions to CommunicationException (#1665)
  • Fixed SENTINEL SLAVES RESP3 incompatible response (#1676)
Changelog

Sourced from predis/predis's changelog.

v3.5.1 (2026-06-11)

Added

  • Expose pipeline() API via ClientInterface (#1686)

Fixed

  • Allow UNLINK to accept an array of keys (#1687)
  • Fixed Client::(un)pack() return types

v3.5.0 (2026-06-02)

Added

  • Added support for XNACK command (#1666)
  • Added support for INCREX command (#1674)
  • Added support for UNLINK command (#1680)
  • Added support for AR* array commands (#1672)
  • Handle Redis Cluster -READONLY responses failover events (#1656)
  • Added FPHA argument for JSON.SET command (#1661)
  • Added new COUNT aggregator for Sorted Set commands (#1668)
  • Added support for multiple aggregators for TS.range commands (#1670)

Changed

  • Include command name in unsupported container command error messages (#1653)

Fixed

  • Fixed handling of gap slots in SlotMap::offsetUnset() (#1660)
  • Fixed ZRANGE to include 6.2 arguments (#1662)
  • Fixed Sentinel retry to narrow retryable exceptions to CommunicationException (#1665)
  • Fixed SENTINEL SLAVES RESP3 incompatible response (#1676)
Commits

Updates setasign/fpdi from 2.6.7 to 2.6.8

Release notes

Sourced from setasign/fpdi's releases.

FPDI 2.6.8

Fixes

  • Handle filter exceptions of faulty streams in Page::getContentStream() (fixes #252).

Tweaks

  • Optimized handling of recursion in xref-table parsing.
Commits
  • 881945b Updated version constant
  • 1f227b5 Merge pull request #257 from Setasign/development
  • 1eac11f Update README.md
  • 3fd0b31 Merge pull request #256 from Setasign/development
  • 3f01c08 Merge branch 'master' into development
  • 32b24a9 Update release.yml
  • 4ba8a11 Merge pull request #255 from Setasign/development
  • 0ca4920 Handle filter exceptions of faulty streams in Page::getContentStream(). (Fi...
  • be50a1e Merge pull request #254 from Setasign/development
  • c62f222 Update zizmor.yml
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Jun 15, 2026
@dependabot
build(deps): Bump the composer group across 1 directory with 4 updates
091458f 
Bumps the composer group with 3 updates in the / directory: [guzzlehttp/guzzle](https://github.com/guzzle/guzzle), [horstoeko/zugferd](https://github.com/horstoeko/zugferd) and [predis/predis](https://github.com/predis/predis).


Updates `guzzlehttp/guzzle` from 7.10.5 to 7.15.1
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/7.15/CHANGELOG.md)
- [Commits](guzzle/guzzle@7.10.5...7.15.1)

Updates `horstoeko/zugferd` from 1.0.122 to 1.0.124
- [Release notes](https://github.com/horstoeko/zugferd/releases)
- [Changelog](https://github.com/horstoeko/zugferd/blob/master/CHANGELOG.md)
- [Commits](horstoeko/zugferd@v1.0.122...v1.0.124)

Updates `predis/predis` from 3.4.2 to 3.5.1
- [Release notes](https://github.com/predis/predis/releases)
- [Changelog](https://github.com/predis/predis/blob/main/CHANGELOG.md)
- [Commits](predis/predis@v3.4.2...v3.5.1)

Updates `setasign/fpdi` from 2.6.7 to 2.6.8
- [Release notes](https://github.com/Setasign/FPDI/releases)
- [Commits](Setasign/FPDI@v2.6.7...v2.6.8)

---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
  dependency-version: 7.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: horstoeko/zugferd
  dependency-version: 1.0.123
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: predis/predis
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: setasign/fpdi
  dependency-version: 2.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/composer/composer-ce178d82a0 branch from 5216ec2 to 091458f Compare July 20, 2026 03:21
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 27, 2026
@dependabot
dependabot Bot deleted the dependabot/composer/composer-ce178d82a0 branch July 27, 2026 02:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants