php-guzzlehttp-psr7 (2.13.0-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Add locale-independent ASCII case folding helpers (#850)
  * Add caseless comparison and asciiUcFirst helpers (#854)
  * Trigger a runtime deprecation for Header::normalize() (#866)
  * Release 2.13.0

 -- David Prévot <taffit@debian.org>  Fri, 17 Jul 2026 09:17:16 -0300

php-guzzlehttp-psr7 (2.12.5-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Use locale-independent ASCII folding for header and host names (#849)
  * Fold cross-origin host comparison without locale sensitivity (#852)
  * Release 2.12.5

 -- David Prévot <taffit@debian.org>  Mon, 13 Jul 2026 09:27:49 -0300

php-guzzlehttp-psr7 (2.12.4-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Freeze trim characters ahead of PHP 8.6 (#812)
  * Anchor validation patterns to the true end of input (#814)
  * Treat host-less origin-form `//` targets as paths (#820)
  * Reject raw DEL and ambiguous suffixes in bracketed IP-literal parsing (#836)
  * Release 2.12.4

 -- David Prévot <taffit@debian.org>  Thu, 09 Jul 2026 07:56:09 +0200

php-guzzlehttp-psr7 (2.12.3-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Report URI PCRE failures (#801)
  * Report message parser PCRE failures (#802)
  * Fail closed on validation PCRE errors (#803)
  * Validate the URI host so `getHost()` matches the URI authority (#811)
    (GHSA-c2w2-prh8-qm98)
  * Release 2.12.3

 -- David Prévot <taffit@debian.org>  Wed, 24 Jun 2026 08:46:40 +0200

php-guzzlehttp-psr7 (2.12.1-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Mitigate CRLF Injection in HTTP Start-Line Serialization (#798)
    (GHSA-vm85-hxw5-5432) [CVE-2026-55766]
  * Release 2.12.1

 -- David Prévot <taffit@debian.org>  Fri, 19 Jun 2026 07:51:52 +0200

php-guzzlehttp-psr7 (2.12.0-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Fix non-finite float coercion warnings on PHP 8.5 (#787)
  * Deprecate non-finite float values (#788)
  * Deprecate non-string scalar stream bodies and query values (#790)
  * Release 2.12.0

 -- David Prévot <taffit@debian.org>  Wed, 17 Jun 2026 08:04:33 +0200

php-guzzlehttp-psr7 (2.11.0-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Deprecate invalid with arguments (#670)
  * Deprecate additional 3.0 changes (#677)
  * Change Header parameter splitting (#680)
  * Deprecate invalid multipart metadata (#689)
  * Deprecate automatic request method uppercasing (#696)
  * Document callable stream sources (#704)
  * Deprecate invalid modifyRequest changes (#709)
  * Reject conflicting modifyRequest Host changes (#728)
  * Limit UriComparator default ports to HTTP and HTTPS (#743)
  * Fix Header parameter splitting with escaped quotes (#744)
  * Fix copyToStream short writes (#772)
  * Release 2.11.0

  [ David Prévot ]
  * New php-symfony-deprecation-contracts (build-)dependency

 -- David Prévot <taffit@debian.org>  Wed, 03 Jun 2026 08:50:48 +0200

php-guzzlehttp-psr7 (2.10.4-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Prevent CachingStream seek no-progress loops (#739)
  * Fix AppendStream reads without streams (#740)
  * Normalize URI fragment percent-encoding (#741)
  * Fix LimitStream size past stream end (#742)
  * Throw when the CachingStream cache target does not persist
    a full write (#768)
  * Release 2.10.4

  [ David Prévot ]
  * Document that #1138265 has been fixed

 -- David Prévot <taffit@debian.org>  Sun, 31 May 2026 01:58:32 +0200

php-guzzlehttp-psr7 (2.10.3-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Upgrade to `http-interop/http-factory-tests` 1.1.0 (#642)
  * [2.9] Fix parsing of relative path references containing a
    colon in a non-initial path segment (#645)
  * Fix UTF-8 body summary truncation (#652)
  * Fix CachingStream detach resource (#654)
  * Add 1.x to 2.0 upgrade guide (#659)
  * Harden ServerRequest globals handling (#660)
  * Use native stream URI for size cache (#661)
  * Throw when StreamWrapper resource creation fails (#662)
  * Fix modifyRequest with numeric header names (#667)
  * Reject control characters in URI hosts (#715) [CVE-2026-49214]
  * Normalize global header values (#718)
  * Reject malformed Host authorities (#717) [CVE-2026-48998]
    (Closes: #1138265)
  * Reject malformed UTF-8 URIs (#729)
  * Parse IPv6 literals with embedded IPv4 addresses (#731)
  * Release 2.10.3

  [ David Prévot ]
  * Ship upstream upgrade notes

 -- David Prévot <taffit@debian.org>  Fri, 29 May 2026 13:27:35 +0200

php-guzzlehttp-psr7 (2.9.0-2) unstable; urgency=medium

  * Use full version with RequiresPhp
  * Update standards version to 4.7.4

 -- David Prévot <taffit@debian.org>  Mon, 11 May 2026 09:19:47 +0200

php-guzzlehttp-psr7 (2.9.0-1) unstable; urgency=medium

  [ Graham Campbell ]
  * [2.9] Updated MIME type mappings and automated generation (#637)
  * [2.9] Added nested array expansion support to `MultipartStream` (#638)
  * Added `@return static` to `MessageTrait` methods (#639)
  * Release 2.9.0

  [ Eyüp Can Akman ]
  * [2.8] Encode plus sign in withQueryValue() and withQueryValues() (#636)

 -- David Prévot <taffit@debian.org>  Wed, 11 Mar 2026 12:37:28 +0100

php-guzzlehttp-psr7 (2.8.0-2) unstable; urgency=medium

  * Compatibility with recent PHPUnit (13)
  * Convert d/watch to version 5
  * Update Standards-Version to 4.7.3

 -- David Prévot <taffit@debian.org>  Sat, 07 Feb 2026 11:44:06 +0100

php-guzzlehttp-psr7 (2.8.0-1) unstable; urgency=medium

  [ Graham Campbell ]
  * [2.8] Add PHP 8.5 support (#628)
  * Release 2.8.0

  [ Sean O'Brien ]
  * [2.8] Allow empty lists as header values (#625)

  [ David Prévot ]
  * Remove Rules-Requires-Root
  * debian/control: Document nocheck flag

 -- David Prévot <taffit@debian.org>  Wed, 27 Aug 2025 01:20:28 +0200

php-guzzlehttp-psr7 (2.7.1-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Release 2.7.1

  [ divinity76 ]
  * [2.7] Improve uploaded file error message (#621)

  [ Emmanuel Deloget ]
  * Support uppercase IPv6 addresses in URI (#620)

  [ David Prévot ]
  * Update Standards-Version to 4.7.2

 -- David Prévot <taffit@debian.org>  Mon, 31 Mar 2025 12:19:42 +0200

php-guzzlehttp-psr7 (2.7.0-3) unstable; urgency=medium

  * Modernize PHPUnit syntax
  * Revert "Force system dependencies loading"
  * Simplify build

 -- David Prévot <taffit@debian.org>  Tue, 18 Feb 2025 08:27:59 +0100

php-guzzlehttp-psr7 (2.7.0-2) unstable; urgency=medium

  * Handle exit code in debci
  * Force PHPUnit 11 for autopkgtest

 -- David Prévot <taffit@debian.org>  Sun, 12 Jan 2025 18:05:03 +0100

php-guzzlehttp-psr7 (2.7.0-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Fixes for PHP 8.4 deprecation (#600)
  * [2.7] Add `Utils::redactUserInfo()` method (#613)
  * Add ability to encode bools and ints (#614)
  * Release 2.7.0 (#615)

  [ Mickaël ]
  * Make `StreamWrapper::stream_stat()` returns `false` if inner stream's size
    is `null` (#594)

  [ David Prévot ]
  * Update Standards-Version to 4.7.0
  * Make provider functions static (PHPUnit 11 Fix) (Closes: #1070552)

 -- David Prévot <taffit@debian.org>  Sun, 21 Jul 2024 11:06:10 +0900

php-guzzlehttp-psr7 (2.6.2-3) unstable; urgency=medium

  * Allow stderr for debci

 -- David Prévot <taffit@debian.org>  Sun, 10 Mar 2024 10:09:05 +0100

php-guzzlehttp-psr7 (2.6.2-2) unstable; urgency=medium

  * Force system dependencies loading

 -- David Prévot <taffit@debian.org>  Wed, 06 Mar 2024 16:53:37 +0100

php-guzzlehttp-psr7 (2.6.2-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Release 2.6.2 (#585)

 -- David Prévot <taffit@debian.org>  Mon, 04 Dec 2023 07:45:22 +0100

php-guzzlehttp-psr7 (2.6.1-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Fix issue where PHP transforms numeric strings in array keys to ints (#578)
  * Release 2.6.1 (#579)

 -- David Prévot <taffit@debian.org>  Sun, 03 Sep 2023 03:29:18 +0530

php-guzzlehttp-psr7 (2.6.0-1) unstable; urgency=medium

  * Upload to unstable now that Bookworm has been released

  [ Graham Campbell ]
  * Corrected mime type for `.acc` files to `audio/aac` (#573)
  * Update mime type map (#574)
  * Fallback to `application/octet-stream` if we are unable to guess the
    content type for a multipart file upload (#568)
  * Release 2.6.0

  [ Santiago Vila ]
  * Kill php process after running unit tests (Closes: #1029499)

  [ David Prévot ]
  * Mark package as Multi-Arch: foreign
  * Revert: Adapt version constraint to dh_phpcomposer expectations
  * Compatibility with recent PHPUnit (10)

 -- David Prévot <taffit@debian.org>  Sun, 06 Aug 2023 10:52:37 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog php-guzzlehttp-psr7`.
