guzzle (7.14.1-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Reject streamed requests on connection-capped stream handlers (#3816)
  * Fix flaky cookie expiry test on slow CI runners (#3820)
  * Restore conservative redaction for multi-@ proxy strings (#3821)
  * Enforce required multiplexing against the final configuration (#3825)
  * Correct cURL multi target waiting and delay deadlines (#3823)
  * Release the cURL easy handle when on_stats throws (#3831)
  * Redact request URI credentials in stream connection errors (#3839)
  * Tighten the response trailer API (#3837)
  * Roll back failed cURL multi handle attachment (#3827)
  * Use locale-independent ASCII folding for matching decisions (#3845)
  * Compare cookie and credential header names with ASCII folding (#3848)
  * Correct the stream handler connection-cap contract wording (#3842)
  * Fail closed on tunnel isolation and normalize proxy credentials (#3854)
  * Fix the multiplex conflict check for non-array multi options (#3858)
  * Reject ambiguous raw proxy option types (#3862)
  * Bump `guzzlehttp/psr7` to `^2.12.5` (#3868)
  * Release 7.14.1

 -- David Prévot <taffit@debian.org>  Mon, 13 Jul 2026 09:29:12 -0300

guzzle (7.14.0-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Fix cURL HEAD request handling (#3729)
  * Preserve response headers when HTTP trailers arrive (#3735)
  * Collect HTTP trailer fields on the easy handle (#3737)
  * Add tiered multiplex request option (#3741)
  * Improve cURL handler option hygiene (#3746)
  * Add `max_host_connections` and `max_total_connections` options (#3749)
  * Harden trailer status-line handling (#3754)
  * Validate collected HTTP trailer fields (#3756)
  * Fix the PSR-7 class names in the Pool iterator exception (#3757)
  * Adjust the minimum promises and psr7 versions (#3801) (#3802)
  * Redact proxy credentials containing raw separators (#3806)
  * Document the synchronous cURL multi handler change (#3808)
  * Release 7.14.0

 -- David Prévot <taffit@debian.org>  Thu, 09 Jul 2026 07:59:59 +0200

guzzle (7.13.1-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Reapply authenticated proxy tunnel reuse mitigation (#3642)
  * Section proxy tunnel connection reuse by credential (#3628)
  * Isolate delegated proxy tunnels (#3668)
  * Add crypto_method_max request option (#3687)
  * Route TLS 1.2 requests to stream fallback (#3691)
  * Support QUERY redirects (#3702)
  * Deprecate invalid numeric-string delay values (#3707)
  * Harden CurlMultiHandler proxy tunnel isolation (#3708)
  * Reject final URIs missing scheme or host (#3715)
  * Harden cURL header list options (#3716)
  * Route Proxy-Authorization through cURL proxy headers (#3710)
  * Reject CURLOPT_SHARE with authenticated proxy tunnel (#3711)
  * Stop deprecating CURLOPT_PREREQFUNCTION (#3718)
  * Allow middleware to rewrite partial URIs (#3721)
  * Release 7.13.1 (#3726)

 -- David Prévot <taffit@debian.org>  Sat, 04 Jul 2026 07:05:20 +0200

guzzle (7.12.3-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Fix cookie falsey edge cases (#3659)
  * Preserve falsey decode_content strings (#3660)
  * Clamp overflowing cookie Max-Age values (#3669)
  * Store trailing-dot cookie domains on origin (#3671)
  * Use strict cookie path matching (#3673)
  * Document cookie name lookup case sensitivity (#3674)
  * Treat IP cookie domains as exact-only (#3694) (GHSA-g446-98w2-8p5w)
  * Adjusted `guzzlehttp/psr7` version constraint to `^2.12.3` (#3696)
  * Release 7.12.3

 -- David Prévot <taffit@debian.org>  Wed, 24 Jun 2026 19:53:10 +0200

guzzle (7.12.1-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Reject HTTPS proxies when libcurl lacks HTTPS-proxy support (#3626)
    (GHSA-wpwq-4j6v-78m3) [CVE-2026-55568]
  * Reject proxy URLs with a malformed scheme in the cURL handlers (#3637)
  * Adjust version constraints (#3651)
  * Reject dot-only cookie domains (#3653)
    (GHSA-cwxw-98qj-8qjx) [CVE-2026-55767]
  * Release 7.12.1

 -- David Prévot <taffit@debian.org>  Fri, 19 Jun 2026 18:12:53 +0200

guzzle (7.12.0-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Ignore request-level transport sharing (#3586)
  * Deprecate request-level handler option (#3588)
  * Deprecate unsupported raw handler options (#3591)
  * Centralize cURL feature detection (#3602)
  * Take over proxy environment variable handling (#3619)
  * Fix non-finite float coercion warnings on PHP 8.5 (#3622)
  * Deprecate non-finite floats in the query and form_params options (#3623)
  * Deprecate non-string scalar values in the body request option (#3631)
  * Deprecate the CURLOPT_PROXYTYPE cURL request option (#3632)
  * Adjusted `guzzlehttp/psr7` version constraint and corrected links (#3646)
  * Release 7.12.0

 -- David Prévot <taffit@debian.org>  Wed, 17 Jun 2026 08:06:37 +0200

guzzle (7.11.0-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Add PHP 8.5 support (#3300)
  * Release 7.11.0

  [ Markus Podar ]
  * Remove explicit content-length header for GET requests (#3278)

  [ Tim Düsterhus ]
  * Remove obsolete reference capturing of `$http_response_header` (#3294)

  [ David Prévot ]
  * Fix debian/gbp.conf
  * Upgrade upstream signing key to new packet format
  * Update standards version to 4.7.4
  * Update watch file format version to 5
  * Removed Rules-Requires-Root
  * Remove redundant Priority: optional from source stanza
  * Wrap and sort
  * Set myself as uploader
  * Build-depend on dh-sequence-phpcomposer instead of pkg-php-tools
  * Drop patch

 -- David Prévot <taffit@debian.org>  Wed, 03 Jun 2026 23:26:16 +0200

guzzle (7.9.2-0.1) unstable; urgency=medium

  [ Katharina Drexel ]
  * Adding patch for removing Makefile (disturbing build process).
  * d/gbp.conf: Correcting upstream-vcs-tag.
  * d/control: Setting php-pear mailing list as maintainer.
  * d/control: Sorting.
  * Updating changelog.
  * d/rules: removing trailing whitespace.

  [ Ondřej Surý ]
  * New upstream version with PHP 8.4 support
  * Non-maintainer upload

 -- Ondřej Surý <ondrej@debian.org>  Fri, 06 Dec 2024 20:07:30 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog php-guzzlehttp-guzzle`.
