Bump symfony/http-client from 7.4.5 to 8.1.1

[dependabot]

Bumps symfony/http-client from 7.4.5 to 8.1.1.

Release notes

Sourced from symfony/http-client's releases.

v8.1.1

Changelog (symfony/http-client@v8.1.0...v8.1.1)

• bug #64596 Prevent re-yielding of the first chunk after reconnect (@​nacorp)

v8.1.0

Changelog (symfony/http-client@v8.1.0-RC1...v8.1.0)

• no significant changes

v8.1.0-RC1

Changelog (symfony/http-client@v8.1.0-BETA3...v8.1.0-RC1)

• security #cve-2026-48736 Block IPv6 transition forms in NoPrivateNetworkHttpClient (@​nicolas-grekas)
• bug #64349 ntlm regression on authPersistNonNTLM=false connections with reset() (@​Dooij)
• bug #64260 Various fixes and hardenings (@​Lctrs)

v8.1.0-BETA3

Changelog (symfony/http-client@v8.1.0-BETA2...v8.1.0-BETA3)

• bug #64243 Various fixes and hardenings (@​nicolas-grekas)

v8.1.0-BETA2

Changelog (symfony/http-client@v8.1.0-BETA1...v8.1.0-BETA2)

• feature #63770 Add custom DNS resolution using a decorator (@​peter17)
• feature #64160 Add $allowList argument to NoPrivateNetworkHttpClient (@​Amoifr)
• feature #64163 Log stale-if-error fallback in CachingHttpClient (@​ousamabenyounes)

v8.1.0-BETA1

Changelog (symfony/http-client@v8.0.13...v8.1.0-BETA1)

• security #cve-2026-48736 Block IPv6 transition forms in NoPrivateNetworkHttpClient (@​nicolas-grekas)
• bug #64349 ntlm regression on authPersistNonNTLM=false connections with reset() (@​Dooij)
• bug #64260 Various fixes and hardenings (@​Lctrs)
• feature #63441 Default CachingHttpClient's $maxTtl to 86400s to prevent eternal cache items (@​Lctrs, @​nicolas-grekas)
• feature #63433 Add GuzzleHttpHandler that allows using Symfony HttpClient as a Guzzle handler (@​nicolas-grekas)
• feature #62751 Add support of the persistent cURL handles (@​Koc)
• feature #62854 Add support for the max_connect_duration option (@​alexandre-daubois)

v8.0.14

Changelog (symfony/http-client@v8.0.13...v8.0.14)

• bug #64596 Prevent re-yielding of the first chunk after reconnect (@​nacorp)

v8.0.13

Changelog (symfony/http-client@v8.0.9...v8.0.13)

• security #cve-2026-48736 Block IPv6 transition forms in NoPrivateNetworkHttpClient (@​nicolas-grekas)
• bug #64349 ntlm regression on authPersistNonNTLM=false connections with reset() (@​Dooij)

... (truncated)

Changelog

Sourced from symfony/http-client's changelog.

CHANGELOG

8.1

• Add support for the max_connect_duration option
• Add option extra.use_persistent_connections to CurlHttpClient to control the use of persistent connections introduced in PHP 8.5
• Add GuzzleHttpHandler that allows using Symfony HttpClient as a Guzzle handler
• Add $allowList argument to NoPrivateNetworkHttpClient to allow specific hosts (e.g. a local proxy) to bypass the private-network filter
• Add DnsResolvingHttpClient decorator to resolve host names using a custom resolver, including on redirects
• Change $maxTtl argument of CachingHttpClient to default to 86400 (24h) instead of null
• Deprecate passing null as $maxTtl to CachingHttpClient, pass a positive integer instead
• Make CachingHttpClient implement Psr\Log\LoggerAwareInterface to log when a stale cached response is served because the upstream call failed (stale-if-error fallback)

8.0

• Remove support for passing an instance of StoreInterface as $cache argument to CachingHttpClient constructor, use a TagAwareCacheInterface instead
• Remove support for amphp/http-client < 5
• Remove setLogger() methods on decorators; configure the logger on the wrapped client directly instead

7.4

• Add RFC 9111–based caching support to CachingHttpClient
• Add option auto_upgrade_http_version to control how the request HTTP version is handled in HttplugClient and Psr18Client
• Add QUERY to the list of retriable HTTP methods
• Deprecate using amphp/http-client < 5
• Deprecate passing an instance of StoreInterface as $cache argument to CachingHttpClient constructor

7.3

• Add IPv6 support to NativeHttpClient
• Allow using HTTP/3 with the CurlHttpClient

7.2

• Add support for amphp/http-client v5 on PHP 8.4+

7.1

• Add HttpOptions::setHeader() to add or replace a single header
• Allow mocking start_time info in MockResponse
• Add MockResponse::fromFile() and JsonMockResponse::fromFile() methods to help using fixtures files
• Add ThrottlingHttpClient to enable limiting the number of requests within a certain period
• Deprecate the setLogger() methods of the NoPrivateNetworkHttpClient, TraceableHttpClient and ScopingHttpClient classes, configure the logger of the wrapped clients directly instead

... (truncated)

Commits

• d41e977 Merge branch '8.0' into 8.1
• 4f7a484 Merge branch '7.4' into 8.0
• f6bc6b5 Merge branch '6.4' into 7.4
• b71b312 [EventSourceHttpClient] Prevent re-yielding of the first chunk after reconnect
• 2e23fdf Merge branch '8.0' into 8.1
• 3e30563 Merge branch '7.4' into 8.0
• a6c4e70 Merge branch '6.4' into 7.4
• 05e871f Drop PR warning and auto-closing on subtree splits
• 68a48e4 Add call to backers in README files
• 6ee7f80 Merge branch '8.0' into 8.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)