Changed
- Adjusted
guzzlehttp/psr7version constraint to^2.12.1
Fixed
- Reject proxy URLs with a malformed scheme in the cURL handlers instead of letting libcurl mishandle them
Security
- Reject HTTPS proxies when the installed libcurl lacks HTTPS-proxy support (GHSA-wpwq-4j6v-78m3)
- Reject dot-only cookie
Domainattributes as match-all (GHSA-cwxw-98qj-8qjx)