Skip to content

Bump symfony/http-client from 5.1.7 to 5.4.46 - #2

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/symfony/http-client-5.4.46
Open

Bump symfony/http-client from 5.1.7 to 5.4.46#2
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/symfony/http-client-5.4.46

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2024 •
edited
Loading

Copy link
Copy Markdown
Contributor

Warning

Dependabot will stop supporting composer v1!

Please upgrade to version v2.

Bumps symfony/http-client from 5.1.7 to 5.4.46.

Release notes

Sourced from symfony/http-client's releases.

v5.4.46

Changelog (symfony/http-client@v5.4.45...v5.4.46)

v5.4.45

Changelog (symfony/http-client@v5.4.44...v5.4.45)

  • no significant changes

v5.4.44

Changelog (symfony/http-client@v5.4.43...v5.4.44)

v5.4.43

Changelog (symfony/http-client@v5.4.42...v5.4.43)

v5.4.42

Changelog (symfony/http-client@v5.4.41...v5.4.42)

  • no significant changes

v5.4.41

Changelog (symfony/http-client@v5.4.40...v5.4.41)

v5.4.40

Changelog (symfony/http-client@v5.4.39...v5.4.40)

v5.4.39

Changelog (symfony/http-client@v5.4.38...v5.4.39)

v5.4.38

Changelog (symfony/http-client@v5.4.37...v5.4.38)

... (truncated)

Changelog

Sourced from symfony/http-client's changelog.

CHANGELOG

7.1

  • Add HttpOptions::setHeader() to add or replace a single header
  • Allow mocking start_time info in MockResponse
  • Add MockResponse::fromFile() and JsonMockResponse::fromFile() methods to help using fixtures files
  • Add ThrottlingHttpClient to enable limiting the number of requests within a certain period
  • Deprecate the setLogger() methods of the NoPrivateNetworkHttpClient, TraceableHttpClient and ScopingHttpClient classes, configure the logger of the wrapped clients directly instead

7.0

  • Remove implementing Http\Message\RequestFactory from HttplugClient

6.4

  • Add HarFileResponseFactory testing utility, allow to replay responses from .har files
  • Add max_retries option to RetryableHttpClient to adjust the retry logic on a per request level
  • Add PingWehookMessage and PingWebhookMessageHandler
  • Enable using EventSourceHttpClient::connect() for both GET and POST

6.3

  • Add option crypto_method to set the minimum TLS version and make it default to v1.2
  • Add UriTemplateHttpClient to use URI templates as specified in the RFC 6570
  • Add ServerSentEvent::getArrayData() to get the Server-Sent Event's data decoded as an array when it's a JSON payload
  • Allow array of urls as base_uri option value in RetryableHttpClient to retry on a new url each time
  • Add JsonMockResponse, a MockResponse shortcut that automatically encodes the passed body to JSON and sets the content type to application/json by default
  • Support file uploads by nesting resource streams in option "body"

6.2

  • Make HttplugClient implement Psr\Http\Message\RequestFactoryInterface, StreamFactoryInterface and UriFactoryInterface
  • Deprecate implementing Http\Message\RequestFactory, StreamFactory and UriFactory on HttplugClient
  • Add withOptions() to HttplugClient and Psr18Client

6.1

  • Allow yielding Exception from MockResponse's $body to mock transport errors
  • Remove credentials from requests redirected to same host but different port

5.4

... (truncated)

Commits
  • ebcaeea [HttpClient] Filter private IPs before connecting when Host == IP
  • 54118c6 Add PR template and auto-close PR on subtree split repositories
  • 58d3dc6 [HttpClient] Fix setting CURLMOPT_MAXCONNECTS
  • f09ba83 Work around parse_url() bug
  • 4d547e5 do not overwrite the host to request
  • 6ad5e27 reject malformed URLs with a meaningful exception
  • 550cc67 [HttpClient] Disable HTTP/2 PUSH by default when using curl
  • ed17728 minor #57689 [Contracts][HttpClient] Skip tests when zlib's ob_gzhandler() ...
  • 1663725 [Contracts][HttpClient] Skip tests when zlib's ob_gzhandler() doesn't exist
  • 88cdf42 Fix typo
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot
Bump symfony/http-client from 5.1.7 to 5.4.46
d134144 
Bumps [symfony/http-client](https://github.com/symfony/http-client) from 5.1.7 to 5.4.46.
- [Release notes](https://github.com/symfony/http-client/releases)
- [Changelog](https://github.com/symfony/http-client/blob/7.1/CHANGELOG.md)
- [Commits](symfony/http-client@v5.1.7...v5.4.46)

---
updated-dependencies:
- dependency-name: symfony/http-client
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 6, 2024
@private-packagist

private-packagist Bot commented Nov 6, 2024

Copy link
Copy Markdown

composer.lock

Package changes

Package Operation From To About
psr/container upgrade 1.0.0 1.1.2 diff
psr/log upgrade 1.1.3 1.1.4 diff
symfony/http-client-contracts upgrade v2.3.1 v2.5.3 diff
symfony/polyfill-php73 upgrade v1.18.1 v1.31.0 diff
symfony/polyfill-php80 upgrade v1.18.1 v1.31.0 diff
symfony/service-contracts upgrade v2.1.3 v2.5.3 diff

Dev Package changes

Package Operation From To About
symfony/http-client upgrade v5.1.7 ⚠️ v5.4.46 ✅ diff

Important Metadata Changes

Package Version Metadata From To
squizlabs/php_codesniffer 3.5.8 dist url https://api.github.com/repos/squizlabs/PHP_CodeSniffer/zipball/9d583721a7157ee997f235f327de038e7ea6dac4 https://api.github.com/repos/PHPCSStandards/PHP_CodeSniffer/zipball/9d583721a7157ee997f235f327de038e7ea6dac4
squizlabs/php_codesniffer 3.5.8 source url https://github.com/squizlabs/PHP_CodeSniffer.git https://github.com/PHPCSStandards/PHP_CodeSniffer.git
webmozart/assert 1.9.1 dist url https://api.github.com/repos/webmozart/assert/zipball/bafc69caeb4d49c39fd0779086c03a3738cbb389 https://api.github.com/repos/webmozarts/assert/zipball/bafc69caeb4d49c39fd0779086c03a3738cbb389
webmozart/assert 1.9.1 source url https://github.com/webmozart/assert.git https://github.com/webmozarts/assert.git

Settings · Docs · Powered by Private Packagist

@joostfaassen

joostfaassen commented Jul 17, 2026

Copy link
Copy Markdown
Member

🤖 Dependabot PR processing skill — risk assessment

Acting on behalf of Joost Faassen.

Decision

Do not merge automatically — assessed risk: medium

What changed
Title Bump symfony/http-client from 5.1.7 to 5.4.46
Semver minor (5.1.7 → 5.4.46)
Files (1) composer.lock
Diff size +120 / −109

Why this was not merged automatically

  1. This is a minor bump of a framework/runtime package.
  2. Minor upgrades can still change defaults or deprecations in ways that affect apps.
  3. Left open for human review.

Checks considered

  • Pull request is mergeable with a clean merge state
  • No failing / timed-out / cancelled required checks observed
  • Diff inspected for manifests/lockfiles only vs unexpected paths
  • Package/path screened against sensitive dependency patterns

Automated assessment by the Dependabot PR processing skill. Detail stays in this comment; the merge commit message is kept short on purpose.

4 similar comments
@joostfaassen

joostfaassen commented Jul 17, 2026

Copy link
Copy Markdown
Member

🤖 Dependabot PR processing skill — risk assessment

Acting on behalf of Joost Faassen.

Decision

Do not merge automatically — assessed risk: medium

What changed
Title Bump symfony/http-client from 5.1.7 to 5.4.46
Semver minor (5.1.7 → 5.4.46)
Files (1) composer.lock
Diff size +120 / −109

Why this was not merged automatically

  1. This is a minor bump of a framework/runtime package.
  2. Minor upgrades can still change defaults or deprecations in ways that affect apps.
  3. Left open for human review.

Checks considered

  • Pull request is mergeable with a clean merge state
  • No failing / timed-out / cancelled required checks observed
  • Diff inspected for manifests/lockfiles only vs unexpected paths
  • Package/path screened against sensitive dependency patterns

Automated assessment by the Dependabot PR processing skill. Detail stays in this comment; the merge commit message is kept short on purpose.

@joostfaassen

joostfaassen commented Jul 17, 2026

Copy link
Copy Markdown
Member

🤖 Dependabot PR processing skill — risk assessment

Acting on behalf of Joost Faassen.

Decision

Do not merge automatically — assessed risk: medium

What changed
Title Bump symfony/http-client from 5.1.7 to 5.4.46
Semver minor (5.1.7 → 5.4.46)
Files (1) composer.lock
Diff size +120 / −109

Why this was not merged automatically

  1. This is a minor bump of a framework/runtime package.
  2. Minor upgrades can still change defaults or deprecations in ways that affect apps.
  3. Left open for human review.

Checks considered

  • Pull request is mergeable with a clean merge state
  • No failing / timed-out / cancelled required checks observed
  • Diff inspected for manifests/lockfiles only vs unexpected paths
  • Package/path screened against sensitive dependency patterns

Automated assessment by the Dependabot PR processing skill. Detail stays in this comment; the merge commit message is kept short on purpose.

@joostfaassen

joostfaassen commented Jul 17, 2026

Copy link
Copy Markdown
Member

🤖 Dependabot PR processing skill — risk assessment

Acting on behalf of Joost Faassen.

Decision

Do not merge automatically — assessed risk: medium

What changed
Title Bump symfony/http-client from 5.1.7 to 5.4.46
Semver minor (5.1.7 → 5.4.46)
Files (1) composer.lock
Diff size +120 / −109

Why this was not merged automatically

  1. This is a minor bump of a framework/runtime package.
  2. Minor upgrades can still change defaults or deprecations in ways that affect apps.
  3. Left open for human review.

Checks considered

  • Pull request is mergeable with a clean merge state
  • No failing / timed-out / cancelled required checks observed
  • Diff inspected for manifests/lockfiles only vs unexpected paths
  • Package/path screened against sensitive dependency patterns

Automated assessment by the Dependabot PR processing skill. Detail stays in this comment; the merge commit message is kept short on purpose.

@joostfaassen

joostfaassen commented Jul 17, 2026

Copy link
Copy Markdown
Member

🤖 Dependabot PR processing skill — risk assessment

Acting on behalf of Joost Faassen.

Decision

Do not merge automatically — assessed risk: medium

What changed
Title Bump symfony/http-client from 5.1.7 to 5.4.46
Semver minor (5.1.7 → 5.4.46)
Files (1) composer.lock
Diff size +120 / −109

Why this was not merged automatically

  1. This is a minor bump of a framework/runtime package.
  2. Minor upgrades can still change defaults or deprecations in ways that affect apps.
  3. Left open for human review.

Checks considered

  • Pull request is mergeable with a clean merge state
  • No failing / timed-out / cancelled required checks observed
  • Diff inspected for manifests/lockfiles only vs unexpected paths
  • Package/path screened against sensitive dependency patterns

Automated assessment by the Dependabot PR processing skill. Detail stays in this comment; the merge commit message is kept short on purpose.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@joostfaassen