[dependabot]

Updates the requirements on guzzlehttp/psr7 to permit the latest version.

Release notes

Sourced from guzzlehttp/psr7's releases.

3.2.0

• Fix InflateStream ignoring source read failures that follow decoded bytes
• Fix AppendStream discarding bytes read before a timeout

Changelog

Sourced from guzzlehttp/psr7's changelog.

3.2.0 - 2026-10-18

Fixed

• Fix InflateStream ignoring source read failures that follow decoded bytes
• Fix AppendStream discarding bytes read before a timeout

3.1.1 - 2026-10-18

Fixed

• Fix StreamWrapper flushes reporting failure
• Fix CachingStream skipping unread bytes after repeated writes

3.1.0 - 2026-08-24

Added

• Add Utils::redactUriForMessage() and Utils::redactUriStringForMessage() for URI diagnostics
• Add support for PHP 8.6

Changed

• Omit rejected header values and sensitive URI components from automatic exception messages

3.0.1 - 2026-08-24

Fixed

• Prefix relative paths that begin with a colon segment with ./ instead of throwing
• Apply the /. prefix for authority-less // paths to percent-encoding normalizations as well
• Keep colon-leading first path segments when reading the paths of scheme-less non-native URIs
• Stop throwing when removing the default file host strands a // path, prefixing it with /.

3.0.0 - 2026-07-20

Added

• Add DiagnosticValue::escape() to escape controls and malformed UTF-8 in diagnostics
• Add GuzzleHttp\Psr7\Exception\TimeoutException for timed-out stream operations
• Add GuzzleHttp\Psr7\Utils::redactUserInfoInString() to redact the userinfo of a raw URI string within text
• Promote GuzzleHttp\Psr7\Rfc3986 to public API with isValid*() predicates and canonicalizeIpv6()
• Add GuzzleHttp\Psr7\UriNormalizer::CANONICALIZE_IPV6_HOST to PRESERVING_NORMALIZATIONS

Changed

• Require psr/http-message:^2.0 and add native parameter and return types
• Require psr/http-factory:^1.1
• Reject native PHP serialization of stream implementations
• Preserve request method casing, except ServerRequest::fromGlobals() still uppercases

... (truncated)

Commits

• cdc1393 Release 3.2.0
• 268aabf Merge branch '3.1' into 3.2
• e6e2b99 Keep AppendStream bytes read before a timeout (#899)
• b1ab16b Report InflateStream source read failures that follow decoded bytes (#898)
• 6a66fbd Release 3.1.1
• 3c4ac62 Bump version to 3.2 (#900)
• b91cce8 Fix CachingStream skipping unread bytes after repeated writes (#892)
• ad965d4 Report successful flushes from the stream wrapper (#890)
• 52f87ed Use a zero backtrack limit to force the header PCRE failure (#889)
• 5823fee Reference the security maintainers in the readme (#887)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coveralls]

coverage: 99.455% (+0.001%) from 99.454% — dependabot/composer/guzzlehttp/psr7-tw-3.2 into 4.x