Psr7 Laravel Package

Fixed

• Fixed URI parsing for IPv6 literals containing embedded IPv4 addresses
• Fixed malformed UTF-8 URI strings being parsed as empty URIs

Security

• Reject control and whitespace characters in URI host components (GHSA-hq7v-mx3g-29hw)
• Reject malformed Host values when constructing request URIs (GHSA-34xg-wgjx-8xph)

Fixed

• Make ServerRequest::fromGlobals() robust against unexpected HTTP header value types in $_SERVER

Fixed

• Fix Utils::modifyRequest() with numeric header names

• Harden ServerRequest::fromGlobals() against malformed $_SERVER values
• Prevent custom stream metadata from affecting internal size handling
• Throw when StreamWrapper::getResource() cannot create a resource
• Preserve custom request implementations in Utils::modifyRequest()
• Preserve custom URI implementations in UriResolver::resolve()
• Make Uri::__toString() side-effect-free

• Fix parsing of relative path references containing a colon in a non-initial path segment
• Fix CachingStream::detach() returning an incomplete resource before the decorated stream has been fully read
• Fix Message::bodySummary() returning null when truncating printable UTF-8 bodies inside a multibyte character

Added

• Added nested array expansion support to MultipartStream
• Added [@return](https://github.com/return) static to MessageTrait methods

Changed

• Updated MIME type mappings

See also the change log for changes.

Fixed

• Encode + signs in Uri::withQueryValue() and Uri::withQueryValues() to prevent them being interpreted as spaces

See also the change log for changes.

Added

• Allow empty lists as header values

Changed

• PHP 8.5 support

See also the change log for changes.

Fixed

• Fixed uppercase IPv6 addresses in URI

Changed

• Improve uploaded file error message

See also the change log for changes.

Added

• Add Utils::redactUserInfo() method
• Add ability to encode bools as ints in Query::build

See also the change log for changes.

Fixed

• Make StreamWrapper::stream_stat() return false if inner stream's size is null

Changed

• PHP 8.4 support

See also the change log for changes.

Fixed

• Fixed another issue with the fact that PHP transforms numeric strings in array keys to ints

Changed

• Updated links in docs to their canonical versions
• Replaced call_user_func* with native calls

See also the change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.

See change log for changes.