Chore(deps-dev): Bump guzzlehttp/guzzle from 7.12.3 to 7.13.1 in /vendor-bin/psalm

[dependabot]

Bumps guzzlehttp/guzzle from 7.12.3 to 7.13.1.

Release notes

Sourced from guzzlehttp/guzzle's releases.

7.13.1

Fixed

• Allow middleware to rewrite partial URIs before transports validate them

7.13.0

Added

• Added the crypto_method_max request option to cap the maximum TLS protocol version
• Added HTTP QUERY redirect support, preserving method and body on 301 and 302

Changed

• Section proxy tunnel connection reuse by credential so distinct credentials never share a tunnel
• Isolate concurrent foreign cURL proxy tunnels added while another owner's tunnel is active
• Route credentialed HTTP(S) proxy Proxy-Authorization headers through cURL proxy header handling
• Reject request-level CURLOPT_SHARE when combined with authenticated HTTP/HTTPS proxy tunnel configuration
• Remove deprecation for raw cURL CURLOPT_PREREQFUNCTION callbacks when defined by PHP cURL
• Route TLS 1.2 crypto_method requests to the stream handler when cURL cannot select TLS 1.2
• Reject final request URIs missing a scheme or host before transfer

Deprecated

• Deprecate invalid protocols, force_ip_resolve, delay, cookies, and allow_redirects values

Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.13.1 - 2026-06-29

Fixed

• Allow middleware to rewrite partial URIs before transports validate them

7.13.0 - 2026-06-29

Added

• Added the crypto_method_max request option to cap the maximum TLS protocol version
• Added HTTP QUERY redirect support, preserving method and body on 301 and 302

Changed

• Section proxy tunnel connection reuse by credential so distinct credentials never share a tunnel
• Isolate concurrent foreign cURL proxy tunnels added while another owner's tunnel is active
• Route credentialed HTTP(S) proxy Proxy-Authorization headers through cURL proxy header handling
• Reject request-level CURLOPT_SHARE when combined with authenticated HTTP/HTTPS proxy tunnel configuration
• Remove deprecation for raw cURL CURLOPT_PREREQFUNCTION callbacks when defined by PHP cURL
• Route TLS 1.2 crypto_method requests to the stream handler when cURL cannot select TLS 1.2
• Reject final request URIs missing a scheme or host before transfer

Deprecated

• Deprecate invalid protocols, force_ip_resolve, delay, cookies, and allow_redirects values

Commits

• 55901a7 Release 7.13.1 (#3726)
• f385904 Validate cURL scheme support before protocol policy (#3723)
• 8d0895b Allow middleware to rewrite partial URIs (#3721)
• a4decaa Release 7.13.0
• a5e7069 Stop deprecating CURLOPT_PREREQFUNCTION (#3718)
• bc34e93 Reject CURLOPT_SHARE with authenticated proxy tunnel (#3711)
• f748c62 Route Proxy-Authorization through cURL proxy headers (#3710)
• 69fc262 Harden cURL header list options (#3716)
• cef051a Reject final URIs missing scheme or host (#3715)
• 586ddfb Harden CurlMultiHandler proxy tunnel isolation (#3708)
• Additional commits viewable in compare view

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[Chartman123]

@dependabot rebase