Bump symfony/http-client from 7.4.5 to 8.1.0

[dependabot]

Bumps symfony/http-client from 7.4.5 to 8.1.0.

Release notes

Sourced from symfony/http-client's releases.

v8.1.0

Changelog (symfony/http-client@v8.1.0-RC1...v8.1.0)

• no significant changes

v8.1.0-RC1

Changelog (symfony/http-client@v8.1.0-BETA3...v8.1.0-RC1)

• security #cve-2026-48736 Block IPv6 transition forms in NoPrivateNetworkHttpClient (@​nicolas-grekas)
• bug #64349 ntlm regression on authPersistNonNTLM=false connections with reset() (@​Dooij)
• bug #64260 Various fixes and hardenings (@​Lctrs)

v8.1.0-BETA3

Changelog (symfony/http-client@v8.1.0-BETA2...v8.1.0-BETA3)

• bug #64243 Various fixes and hardenings (@​nicolas-grekas)

v8.1.0-BETA2

Changelog (symfony/http-client@v8.1.0-BETA1...v8.1.0-BETA2)

• feature #63770 Add custom DNS resolution using a decorator (@​peter17)
• feature #64160 Add $allowList argument to NoPrivateNetworkHttpClient (@​Amoifr)
• feature #64163 Log stale-if-error fallback in CachingHttpClient (@​ousamabenyounes)

v8.1.0-BETA1

No release notes provided.

v8.0.13

Changelog (symfony/http-client@v8.0.9...v8.0.13)

• security #cve-2026-48736 Block IPv6 transition forms in NoPrivateNetworkHttpClient (@​nicolas-grekas)
• bug #64349 ntlm regression on authPersistNonNTLM=false connections with reset() (@​Dooij)
• bug #64260 Various fixes and hardenings (@​Lctrs)

v8.0.9

Changelog (symfony/http-client@v8.0.8...v8.0.9)

• bug #64046 Don't share CURL_LOCK_DATA_CONNECT to honor max_host_connections (@​ousamabenyounes)

v8.0.8

Changelog (symfony/http-client@v8.0.7...v8.0.8)

• bug #63692 Fix broken streams when first event is delayed (@​LachlanArthur)
• bug #63726 Unset push response content when the push handler is released (@​sakozoko)

v8.0.7

Changelog (symfony/http-client@v8.0.6...v8.0.7)

• bug #63573 Fix CachingHttpClient compatibility with decorator clients on 304 responses (@​nicolas-grekas)

... (truncated)

Changelog

Sourced from symfony/http-client's changelog.

CHANGELOG

8.1

• Add support for the max_connect_duration option
• Add option extra.use_persistent_connections to CurlHttpClient to control the use of persistent connections introduced in PHP 8.5
• Add GuzzleHttpHandler that allows using Symfony HttpClient as a Guzzle handler
• Add $allowList argument to NoPrivateNetworkHttpClient to allow specific hosts (e.g. a local proxy) to bypass the private-network filter
• Add DnsResolvingHttpClient decorator to resolve host names using a custom resolver, including on redirects
• Change $maxTtl argument of CachingHttpClient to default to 86400 (24h) instead of null
• Deprecate passing null as $maxTtl to CachingHttpClient, pass a positive integer instead
• Make CachingHttpClient implement Psr\Log\LoggerAwareInterface to log when a stale cached response is served because the upstream call failed (stale-if-error fallback)

8.0

• Remove support for passing an instance of StoreInterface as $cache argument to CachingHttpClient constructor, use a TagAwareCacheInterface instead
• Remove support for amphp/http-client < 5
• Remove setLogger() methods on decorators; configure the logger on the wrapped client directly instead

7.4

• Add RFC 9111–based caching support to CachingHttpClient
• Add option auto_upgrade_http_version to control how the request HTTP version is handled in HttplugClient and Psr18Client
• Add QUERY to the list of retriable HTTP methods
• Deprecate using amphp/http-client < 5
• Deprecate passing an instance of StoreInterface as $cache argument to CachingHttpClient constructor

7.3

• Add IPv6 support to NativeHttpClient
• Allow using HTTP/3 with the CurlHttpClient

7.2

• Add support for amphp/http-client v5 on PHP 8.4+

7.1

• Add HttpOptions::setHeader() to add or replace a single header
• Allow mocking start_time info in MockResponse
• Add MockResponse::fromFile() and JsonMockResponse::fromFile() methods to help using fixtures files
• Add ThrottlingHttpClient to enable limiting the number of requests within a certain period
• Deprecate the setLogger() methods of the NoPrivateNetworkHttpClient, TraceableHttpClient and ScopingHttpClient classes, configure the logger of the wrapped clients directly instead

... (truncated)

Commits

• 68a48e4 Add call to backers in README files
• 6ee7f80 Merge branch '8.0' into 8.1
• c7f40f9 Merge branch '7.4' into 8.0
• e8a112b Merge branch '6.4' into 7.4
• dd69700 [ErrorHandler][HttpClient][Translation] Fix edge case spotted by the CI
• d6c16aa Merge branch '8.0' into 8.1
• 34c20e0 Merge branch '7.4' into 8.0
• 766f077 Merge branch '6.4' into 7.4
• 7b869d1 [HttpClient] Decouple NTLM tests from contracts update
• 67f23a1 Merge branch '8.0' into 8.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #271.