From c6323f7d3386578fe1e635e018926151e362ac68 Mon Sep 17 00:00:00 2001
From: fermatmind <17551046983@163.com>
Date: Tue, 4 Aug 2026 14:13:37 +0800
Subject: [PATCH] =?UTF-8?q?fix(deps):=20update=20guzzlehttp/guzzle=207.15.?=
 =?UTF-8?q?1=E2=86=927.15.2=20for=20CVE-2026-69246/69245?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fix CI supply-chain / composer audit failure caused by two newly-reported
Guzzle CVEs (high CVE-2026-69246, medium CVE-2026-69245). Both affect
<7.15.2; 7.15.2 is a semver-compatible patch release.

- guzzlehttp/guzzle: 7.15.1 → 7.15.2
- composer audit: No security vulnerability advisories found
---
 backend/composer.lock | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/backend/composer.lock b/backend/composer.lock
index 3616ec5d9..194ae4b9f 100644
--- a/backend/composer.lock
+++ b/backend/composer.lock
@@ -1700,16 +1700,16 @@
         },
         {
             "name": "guzzlehttp/guzzle",
-            "version": "7.15.1",
+            "version": "7.15.2",
             "source": {
                 "type": "git",
                 "url": "https://github.com/guzzle/guzzle.git",
-                "reference": "61443dfb33c62f308ee8add20f45b4d6e4bf8d2f"
+                "reference": "744101956d78b7c1384d0cbf379db13e859167bf"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/guzzle/guzzle/zipball/61443dfb33c62f308ee8add20f45b4d6e4bf8d2f",
-                "reference": "61443dfb33c62f308ee8add20f45b4d6e4bf8d2f",
+                "url": "https://api.github.com/repos/guzzle/guzzle/zipball/744101956d78b7c1384d0cbf379db13e859167bf",
+                "reference": "744101956d78b7c1384d0cbf379db13e859167bf",
                 "shasum": ""
             },
             "require": {
@@ -1808,7 +1808,7 @@
             ],
             "support": {
                 "issues": "https://github.com/guzzle/guzzle/issues",
-                "source": "https://github.com/guzzle/guzzle/tree/7.15.1"
+                "source": "https://github.com/guzzle/guzzle/tree/7.15.2"
             },
             "funding": [
                 {
@@ -1824,7 +1824,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-07-18T11:23:11+00:00"
+            "time": "2026-07-26T23:23:20+00:00"
         },
         {
             "name": "guzzlehttp/promises",