guzzle (7.12.1-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Reject HTTPS proxies when libcurl lacks HTTPS-proxy support (#3626)
    (GHSA-wpwq-4j6v-78m3) [CVE-2026-55568]
  * Reject proxy URLs with a malformed scheme in the cURL handlers (#3637)
  * Adjust version constraints (#3651)
  * Reject dot-only cookie domains (#3653)
    (GHSA-cwxw-98qj-8qjx) [CVE-2026-55767]
  * Release 7.12.1

 -- David Prévot <taffit@debian.org>  Fri, 19 Jun 2026 18:12:53 +0200

guzzle (7.12.0-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Ignore request-level transport sharing (#3586)
  * Deprecate request-level handler option (#3588)
  * Deprecate unsupported raw handler options (#3591)
  * Centralize cURL feature detection (#3602)
  * Take over proxy environment variable handling (#3619)
  * Fix non-finite float coercion warnings on PHP 8.5 (#3622)
  * Deprecate non-finite floats in the query and form_params options (#3623)
  * Deprecate non-string scalar values in the body request option (#3631)
  * Deprecate the CURLOPT_PROXYTYPE cURL request option (#3632)
  * Adjusted `guzzlehttp/psr7` version constraint and corrected links (#3646)
  * Release 7.12.0

 -- David Prévot <taffit@debian.org>  Wed, 17 Jun 2026 08:06:37 +0200

guzzle (7.11.0-1) unstable; urgency=medium

  [ Graham Campbell ]
  * Add PHP 8.5 support (#3300)
  * Release 7.11.0

  [ Markus Podar ]
  * Remove explicit content-length header for GET requests (#3278)

  [ Tim Düsterhus ]
  * Remove obsolete reference capturing of `$http_response_header` (#3294)

  [ David Prévot ]
  * Fix debian/gbp.conf
  * Upgrade upstream signing key to new packet format
  * Update standards version to 4.7.4
  * Update watch file format version to 5
  * Removed Rules-Requires-Root
  * Remove redundant Priority: optional from source stanza
  * Wrap and sort
  * Set myself as uploader
  * Build-depend on dh-sequence-phpcomposer instead of pkg-php-tools
  * Drop patch

 -- David Prévot <taffit@debian.org>  Wed, 03 Jun 2026 23:26:16 +0200

guzzle (7.9.2-0.1) unstable; urgency=medium

  [ Katharina Drexel ]
  * Adding patch for removing Makefile (disturbing build process).
  * d/gbp.conf: Correcting upstream-vcs-tag.
  * d/control: Setting php-pear mailing list as maintainer.
  * d/control: Sorting.
  * Updating changelog.
  * d/rules: removing trailing whitespace.

  [ Ondřej Surý ]
  * New upstream version with PHP 8.4 support
  * Non-maintainer upload

 -- Ondřej Surý <ondrej@debian.org>  Fri, 06 Dec 2024 20:07:30 +0100

guzzle (7.4.5-1) unstable; urgency=medium

  * Upgrading to 7.4.5 because of patch concerning removing authorization and
    cookie headers
    (Closes: #1014492)
    [CVE-2022-31091, CVE-2022-31090]
  * d/watch: removing typo.
  * d/gbp.conf: Correcting upstream-vcs-tag.
  * d/control: Setting php-pear mailing list as maintainer.
  * d/control: Sorting.

 -- Katharina Drexel <katharina.drexel@bfh.ch>  Mon, 18 Jul 2022 09:06:20 +0200

guzzle (7.4.4-2) unstable; urgency=medium

  * Team upload
  * Install phpabtpl(1) autoloaders
  * Fix autoload.php
  * Drop broken autopkgtests

 -- David Prévot <taffit@debian.org>  Sun, 19 Jun 2022 19:51:44 +0200

guzzle (7.4.4-1) sid; urgency=medium

  * Upgrading to 7.4.4 because of cookie injection leak (Closes: #1011636)
    [CVE-2022-31042, CVE-2022-31043]
  * Adding test folder to debian.
  * Adopting debian/rules to the salsa standard.
  * Optimizing watchfile.
  * Adding some more files which have to be cleaned.
  * Adding gbp config file.
  * Adding upstream/metadata and signing key.
  * Adding newer standards version.
  * debian/control: Correcting Vcs* paths.
  * debian/control: Break should also be valid for Debian-replace.

 -- Katharina Drexel <katharina.drexel@bfh.ch>  Thu, 16 Jun 2022 18:22:39 +0200

guzzle (7.4.1-1) unstable; urgency=medium

  * Initial release (Closes: #1004898).

 -- Katharina Drexel <katharina.drexel@bfh.ch>  Mon, 31 Jan 2022 17:14:16 +0100