Bump react/http from 1.8.0 to 1.11.0

[dependabot]

Bumps react/http from 1.8.0 to 1.11.0.

Release notes

Sourced from react/http's releases.

v1.11.0

• Feature: Improve PHP 8.4+ support by avoiding implicitly nullable types. (#537 by @​clue)

• Feature: Allow underscore character in Uri host. (#524 by @​lulhum)

• Improve test suite to fix expected error code when ext-sockets is not enabled. (#539 by @​WyriHaximus)

v1.10.0

• Feature: Add new PSR-7 implementation and remove dated RingCentral PSR-7 dependency. (#518, #519, #520 and #522 by @​clue)

  This changeset allows us to maintain our own PSR-7 implementation and reduce dependencies on external projects. It also improves performance slightly and does not otherwise affect our public API. If you want to explicitly install the old RingCentral PSR-7 dependency, you can still install it like this:

  composer require ringcentral/psr7

• Feature: Add new Uri class for new PSR-7 implementation. (#521 by @​clue)

• Feature: Validate outgoing HTTP message headers and reject invalid messages. (#523 by @​clue)

• Feature: Full PHP 8.3 compatibility. (#508 by @​clue)

• Fix: Fix HTTP client to omit Transfer-Encoding: chunked when streaming empty request body. (#516 by @​clue)

• Fix: Ensure connection close handler is cleaned up for each request. (#515 by @​WyriHaximus)

• Update test suite and avoid unhandled promise rejections. (#501 and #502 by @​clue)

v1.9.0

This is a SECURITY and feature release for the 1.x series of ReactPHP's HTTP component.

• Security fix: This release fixes a medium severity security issue in ReactPHP's HTTP server component that affects all versions between v0.8.0 and v1.8.0. All users are encouraged to upgrade immediately. (CVE-2023-26044 reported and fixed by @​WyriHaximus)

• Feature: Support HTTP keep-alive for HTTP client (reusing persistent connections). (#481, #484, #486 and #495 by @​clue)

... (truncated)

Changelog

Sourced from react/http's changelog.

1.11.0 (2024-11-20)

• Feature: Improve PHP 8.4+ support by avoiding implicitly nullable types. (#537 by @​clue)

• Feature: Allow underscore character in Uri host. (#524 by @​lulhum)

• Improve test suite to fix expected error code when ext-sockets is not enabled. (#539 by @​WyriHaximus)

1.10.0 (2024-03-27)

• Feature: Add new PSR-7 implementation and remove dated RingCentral PSR-7 dependency. (#518, #519, #520 and #522 by @​clue)

  This changeset allows us to maintain our own PSR-7 implementation and reduce dependencies on external projects. It also improves performance slightly and does not otherwise affect our public API. If you want to explicitly install the old RingCentral PSR-7 dependency, you can still install it like this:

  composer require ringcentral/psr7

• Feature: Add new Uri class for new PSR-7 implementation. (#521 by @​clue)

• Feature: Validate outgoing HTTP message headers and reject invalid messages. (#523 by @​clue)

• Feature: Full PHP 8.3 compatibility. (#508 by @​clue)

• Fix: Fix HTTP client to omit Transfer-Encoding: chunked when streaming empty request body. (#516 by @​clue)

• Fix: Ensure connection close handler is cleaned up for each request. (#515 by @​WyriHaximus)

• Update test suite and avoid unhandled promise rejections. (#501 and #502 by @​clue)

1.9.0 (2023-04-26)

This is a SECURITY and feature release for the 1.x series of ReactPHP's HTTP component.

• Security fix: This release fixes a medium severity security issue in ReactPHP's HTTP server component that affects all versions between v0.8.0 and v1.8.0. All users are encouraged to upgrade immediately. (CVE-2023-26044 reported and fixed by @​WyriHaximus)

... (truncated)

Commits

• 8db02de Prepare v1.11.0 release
• 71c0e5c Merge pull request #524 from lulhum/lulhum-uri-allow-underscore
• 888e3c0 Allow underscore character in Uri host
• f2b8bf3 Merge pull request #539 from WyriHaximus-labs/1.x-fix-expected-error-code-in-...
• e0ab174 Fix expected error code in tests when ext-sockets is not enabled
• c4855ce Merge pull request #537 from clue-labs/nullable-v1
• 88128ac Improve PHP 8.4+ support by avoiding implicitly nullable types
• 8111281 Prepare v1.10.0 release
• 04cb936 Merge pull request #523 from clue-labs/http-validate
• 27d2e74 Validate outgoing HTTP message headers and reject invalid messages
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.