Added
- Added
RequestOptionsconstants forcurl,retries, andstream_context
Changed
- Adjusted
guzzlehttp/psr7version constraint to^2.12 - Constrain cURL transport sharing to safe libcurl DNS and SSL session support
- Resolve proxy environment variables in the cURL handlers; libcurl no longer reads the environment itself
- Ignore proxy environment variables when the
proxyrequest option makes a decision - Disable proxy environment variables on Windows SAPIs other than CLI (httpoxy hardening)
- Redact proxy credentials from cURL handler error messages, following
Psr7\Utils::redactUserInfo() - Normalize no-proxy domain and IP literal matching across the cURL and stream handlers
Deprecated
- Deprecated the request-level
handleroption, which will be ignored in 8.0 - Deprecated raw cURL request options outside the built-in cURL handlers' allow-list
- Deprecated the
CURLOPT_PROXYTYPEcURL request option; set the proxy type via a scheme-prefixed proxy URL - Deprecated PHP stream context options outside the built-in stream handler allow-list
- Deprecated passing
ntlmas a built-inauthtype - Deprecated
Utils::describeType() - Deprecated non-finite floats in the
queryandform_paramsoptions; 8.0 rejects them - Deprecated non-string scalar values in the
bodyoption; 8.0 rejects them
Fixed
- Fix cURL TLS and HTTP/2 capability detection using libcurl feature checks
- Fix proxy
nolist matches being re-proxied through environment-configured proxies by libcurl - Fix
nolist andNO_PROXYmatching to support IP CIDR ranges, matching libcurl - Fix the stream handler not applying scheme-less proxies and their credentials