Breaking changes
- Minimum PHP version raised from 7.2.5 to 8.2 ("php": ">=8.2"). Applications on PHP 7.2 – 8.1 must upgrade PHP before installing this release.
- Minimum Guzzle version raised from ^7.9 to ^7.15.2. Applications pinned to an older Guzzle 7.x must update it.
Security
- Updated Guzzle from 7.9 to 7.15.2 to incorporate security vulnerability fixes.
- Security notice: update your PHP runtime. On October 21, 2026, the PHP project published a security advisory for two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619). They affect the PHP runtime on servers handling web requests, not the SDK itself. Upgrading the SDK does not fix them. Update the PHP runtime on every server that runs your application to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, or install your vendor's patched package.