Skip to content

Update PHP-Scoper - #34

Merged
soderlind merged 1 commit into
mainfrom
update/php-scoper
Mar 2, 2026
Merged

Update PHP-Scoper#34
soderlind merged 1 commit into
mainfrom
update/php-scoper

Conversation

@soderlind

Copy link
Copy Markdown
Collaborator

This pull request updates dependencies and introduces several improvements and fixes to the Guzzle HTTP client codebase, focusing on enhanced protocol support, improved error handling, and better security for sensitive information in error messages. The changes also include updates for compatibility with newer PHP versions and adjustments to package constraints.

Dependency updates and compatibility

  • Updated humbug/php-scoper dependency version in php-scoper/composer.json for improved stability.
  • Updated guzzlehttp/promises and guzzlehttp/psr7 version constraints in vendor-prefixed/guzzlehttp/guzzle/composer.json to require newer versions, and added support for PHP 8.5 in the changelog. [1] [2]

Protocol and security improvements

  • Enhanced HTTP protocol version checks in CurlFactory.php to provide more explicit feedback and support for HTTP/2 and TLS 1.2/1.3, including new helper methods for protocol support detection. [1] [2] [3] [4]
  • Improved handling of cookie attributes in SetCookie.php to correctly process boolean flags like Secure, Discard, and HttpOnly.

Error handling and sensitive data protection

  • Replaced trigger_error with throwing RuntimeException for platform and autoload errors, ensuring better exception handling. [1] [2]
  • Enhanced error message construction in CurlFactory.php and RequestException.php to redact sensitive user info from URIs and error messages, and removed the old URI obfuscation method. [1] [2] [3]

Miscellaneous

  • Updated Composer-generated autoloader and static initializer class names to reflect new hashes in autoload.php, autoload_real.php, and autoload_static.php. [1] [2] [3] [4]
  • Added a new package-lock.json file for Guzzle.

@soderlind
soderlind merged commit b69e48a into main Mar 2, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant