Skip to content

Bump guzzlehttp/psr7 and laravel/framework to patched versions - #47

Merged
iazaran merged 1 commit into
mainfrom
Fix-GuzzleHttp-issues
Jun 16, 2026
Merged

Bump guzzlehttp/psr7 and laravel/framework to patched versions#47
iazaran merged 1 commit into
mainfrom
Fix-GuzzleHttp-issues

Conversation

@iazaran

@iazaran iazaran commented Jun 16, 2026

Copy link
Copy Markdown
Owner

Resolves the two guzzlehttp/psr7 "Host Confusion via Authority Reinterpretation" advisories (Dependabot #12 and sibling) by updating psr7 2.9.0 -> 2.11.1 (above the 2.10.2 patch).

Pull Request

Description

Fix Guzzle issue

Fixes # (issue)

Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

How Has This Been Tested?

Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce.

  • Test Locally

Test Configuration:

  • PHP version: 8.5
  • Laravel version: 13

Checklist:

  • My code follows the style guidelines of this project
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • Any dependent changes have been merged and published in downstream modules

Resolves the two guzzlehttp/psr7 "Host Confusion via Authority
Reinterpretation" advisories (Dependabot #12 and sibling) by updating
psr7 2.9.0 -> 2.11.1 (above the 2.10.2 patch).

Also fixes laravel/framework CVE-2026-48019 (CRLF injection in default
email rule) by updating 13.5.0 -> 13.16.0, pulling along routine
transitive dev-dependency bumps.

composer audit now reports no advisories; full test suite passes.
@iazaran
iazaran merged commit 52c9508 into main Jun 16, 2026
22 checks passed
@iazaran
iazaran deleted the Fix-GuzzleHttp-issues branch June 16, 2026 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant