Bump symfony/http-client from 5.3.10 to 5.4.47

[dependabot]

Bumps symfony/http-client from 5.3.10 to 5.4.47.

Release notes

Sourced from symfony/http-client's releases.

v5.4.47

Changelog (symfony/http-client@v5.4.46...v5.4.47)

• security symfony/symfony#cve-2024-50342 [HttpClient] Resolve hostnames in NoPrivateNetworkHttpClient (@​nicolas-grekas)

v5.4.46

Changelog (symfony/http-client@v5.4.45...v5.4.46)

• security symfony/symfony#cve-2024-50342 [HttpClient] Filter private IPs before connecting when Host == IP (@​nicolas-grekas)

v5.4.45

Changelog (symfony/http-client@v5.4.44...v5.4.45)

• no significant changes

v5.4.44

Changelog (symfony/http-client@v5.4.43...v5.4.44)

• bug symfony/symfony#58278 [HttpClient] Fix setting CURLMOPT_MAXCONNECTS (@​HypeMC)
• bug symfony/symfony#58218 Work around parse_url() bug (@​nicolas-grekas)

v5.4.43

Changelog (symfony/http-client@v5.4.42...v5.4.43)

• bug symfony/symfony#58044 [HttpClient] Do not overwrite the host to request when using option "resolve" (@​xabbuh)
• bug symfony/symfony#57981 [HttpClient] reject malformed URLs with a meaningful exception (@​xabbuh)
• bug symfony/symfony#57870 [HttpClient] Disable HTTP/2 PUSH by default when using curl (@​nicolas-grekas)

v5.4.42

Changelog (symfony/http-client@v5.4.41...v5.4.42)

• no significant changes

v5.4.41

Changelog (symfony/http-client@v5.4.40...v5.4.41)

• bug symfony/symfony#57569 [HttpClient][Mailer] Revert "Let curl handle transfer encoding", use HTTP/1.1 for Mailgun (@​nicolas-grekas)
• bug symfony/symfony#57453 [HttpClient] Fix parsing SSE (@​fancyweb)

v5.4.40

Changelog (symfony/http-client@v5.4.39...v5.4.40)

• bug symfony/symfony#54860 [HttpClient] Revert fixing curl default options (@​alexandre-daubois)
• bug symfony/symfony#54830 [HttpClient] Fix cURL default options for PHP 8.4 (@​alexandre-daubois)

v5.4.39

Changelog (symfony/http-client@v5.4.38...v5.4.39)

• bug symfony/symfony#54517 [HttpClient] Let curl handle transfer encoding (@​michaelhue)
• bug symfony/symfony#54242 [HttpClient] [EventSourceHttpClient] Fix consuming SSEs with \r\n separator (@​fancyweb)

... (truncated)

Changelog

Sourced from symfony/http-client's changelog.

CHANGELOG

8.1

• Add support for the max_connect_duration option
• Add option extra.use_persistent_connections to CurlHttpClient to control the use of persistent connections introduced in PHP 8.5
• Add GuzzleHttpHandler that allows using Symfony HttpClient as a Guzzle handler
• Change $maxTtl argument of CachingHttpClient to default to 86400 (24h) instead of null
• Deprecate passing null as $maxTtl to CachingHttpClient, pass a positive integer instead

8.0

• Remove support for passing an instance of StoreInterface as $cache argument to CachingHttpClient constructor, use a TagAwareCacheInterface instead
• Remove support for amphp/http-client < 5
• Remove setLogger() methods on decorators; configure the logger on the wrapped client directly instead

7.4

• Add RFC 9111–based caching support to CachingHttpClient
• Add option auto_upgrade_http_version to control how the request HTTP version is handled in HttplugClient and Psr18Client
• Add QUERY to the list of retriable HTTP methods
• Deprecate using amphp/http-client < 5
• Deprecate passing an instance of StoreInterface as $cache argument to CachingHttpClient constructor

7.3

• Add IPv6 support to NativeHttpClient
• Allow using HTTP/3 with the CurlHttpClient

7.2

• Add support for amphp/http-client v5 on PHP 8.4+

7.1

• Add HttpOptions::setHeader() to add or replace a single header
• Allow mocking start_time info in MockResponse
• Add MockResponse::fromFile() and JsonMockResponse::fromFile() methods to help using fixtures files
• Add ThrottlingHttpClient to enable limiting the number of requests within a certain period
• Deprecate the setLogger() methods of the NoPrivateNetworkHttpClient, TraceableHttpClient and ScopingHttpClient classes, configure the logger of the wrapped clients directly instead

7.0

... (truncated)

Commits

• 3b643b8 [HttpClient] Resolve hostnames in NoPrivateNetworkHttpClient
• ebcaeea [HttpClient] Filter private IPs before connecting when Host == IP
• 54118c6 Add PR template and auto-close PR on subtree split repositories
• 58d3dc6 [HttpClient] Fix setting CURLMOPT_MAXCONNECTS
• f09ba83 Work around parse_url() bug
• 4d547e5 do not overwrite the host to request
• 6ad5e27 reject malformed URLs with a meaningful exception
• 550cc67 [HttpClient] Disable HTTP/2 PUSH by default when using curl
• ed17728 minor #57689 [Contracts][HttpClient] Skip tests when zlib's ob_gzhandler() ...
• 1663725 [Contracts][HttpClient] Skip tests when zlib's ob_gzhandler() doesn't exist
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.