From 81311cfeaf0b6d35006d183b93b2596746bb267b Mon Sep 17 00:00:00 2001 From: MudassarTariq Date: Tue, 29 Sep 2026 22:03:09 +0500 Subject: [PATCH 1/2] fix: require patched guzzle and phpunit versions Raises the minimum guzzlehttp/guzzle from 7.8 to 7.15.2 and the dev dependency phpunit/phpunit from 10.5 to 10.5.62. Guzzle releases below 7.15.2 have up to 9 security advisories (CVE-2026-55568, CVE-2026-55767, CVE-2026-59883, CVE-2026-67339, CVE-2026-67353, CVE-2026-67354, CVE-2026-67355, CVE-2026-69245, CVE-2026-69246), and PHPUnit below 10.5.62 has CVE-2026-24765. Fresh installs already resolve the same package versions as before. No code changes. --- composer.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/composer.json b/composer.json index 049a111..20a326d 100644 --- a/composer.json +++ b/composer.json @@ -39,11 +39,11 @@ "php": "^8.1", "ext-curl": "*", "ext-json": "*", - "guzzlehttp/guzzle": "^7.8" + "guzzlehttp/guzzle": "^7.15.2" }, "require-dev": { "friendsofphp/php-cs-fixer": "^3.64", - "phpunit/phpunit": "^10.5" + "phpunit/phpunit": "^10.5.62" }, "autoload": { "psr-4": { From 5415f17f71002cfb386e60946ba40fb46d1add50 Mon Sep 17 00:00:00 2001 From: MudassarTariq Date: Tue, 29 Sep 2026 22:03:09 +0500 Subject: [PATCH 2/2] release: prepare v3.0.1 --- CHANGELOG.md | 4 ++++ lib/Version.php | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 42ca959..ec617e2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## 3.0.1 + +- Raised the minimum `guzzlehttp/guzzle` version to 7.15.2 and the dev `phpunit/phpunit` version to 10.5.62, so installs can no longer resolve releases with known security vulnerabilities. No API or behavior changes. + ## 3.0.0 - Replaced the old multi-API SDK with the new PHP SDK for the IPGeolocation.io IP Location API. diff --git a/lib/Version.php b/lib/Version.php index 06e17ad..eb75b4e 100644 --- a/lib/Version.php +++ b/lib/Version.php @@ -6,7 +6,7 @@ final class Version { - public const VERSION = '3.0.0'; + public const VERSION = '3.0.1'; private function __construct() {