chore(deps): update composer

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
guzzlehttp/guzzle (source)	7.8.1 → 7.10.0
league/oauth2-client (source)	2.7.0 → 2.9.0
marcocesarato/php-conventional-changelog	1.17.2 → 1.17.3

---

Release Notes

guzzle/guzzle (guzzlehttp/guzzle)

v7.10.0

Compare Source

Added

• Support for PHP 8.5

Changed

• Adjusted guzzlehttp/promises version constraint to ^2.3
• Adjusted guzzlehttp/psr7 version constraint to ^2.8

v7.9.3

Compare Source

Changed

• Remove explicit content-length header for GET requests
• Improve compatibility with bad servers for boolean cookie values

v7.9.2

Compare Source

Fixed

• Adjusted handler selection to use cURL if its version is 7.21.2 or higher, rather than 7.34.0

v7.9.1

Compare Source

Fixed

• Fix TLS 1.3 check for HTTP/2 requests

v7.9.0

Compare Source

Changed

• Improve protocol version checks to provide feedback around unsupported protocols
• Only select the cURL handler by default if 7.34.0 or higher is linked
• Improved CurlMultiHandler to avoid busy wait if possible
• Dropped support for EOL guzzlehttp/psr7 v1
• Improved URI user info redaction in errors

v7.8.2

Compare Source

Added

• Support for PHP 8.4

thephpleague/oauth2-client (league/oauth2-client)

v2.9.0

Compare Source

Released: 2025-11-25

• Add support for PHP 8.5 #​1081

v2.8.1

Compare Source

Released: 2025-02-26

• Only provide scopes in access token when set in options #​1053
• Add missing @throws annotations for Guzzle exceptions #​1055

v2.8.0

Compare Source

Released: 2024-12-11

• This version is certified for PHP 8.3 and PHP 8.4! 🎉
• Fix cases where expires is not a number #​929
• Add SettableRefreshTokenInterface to support setting the refresh token
  #​994
• Set minimum version of Guzzle to 6.5.8 and 7.4.5, due to security vulnerabilities
  reported in earlier versions #​1022
• Fix parameter docblock type hint for AbstractProvider::prepareAccessTokenResponse()
  #​1025
  • Take note, this might affect static analysis reports for downstream providers
• Send scopes with access token request #​1029
  #​1030
• Explicitly mark nullable parameter #​1034
  #​1039
  • This change requires PHP 7.1 as the minimum version for this library
• Plus a number of test and documentation improvements; see the
  commit log
  for more details

marcocesarato/php-conventional-changelog (marcocesarato/php-conventional-changelog)

v1.17.3

Compare Source

Features

• Add support for Symfony 8 (df24e4a)

---

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 02:59 AM ( * 0-2 * * * ) (UTC), Automerge - Between 03:00 AM and 05:59 AM ( * 3-5 * * * ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.