fix: batch header concatenation (#2233) add support for firebase/php-jwt v6.0 for CVE-2021-46743 (#2235) update psr7 for CVE-2022-24775 (#2234)