chore(deps-dev): bump guzzlehttp/guzzle from 7.10.0 to 8.2.0 in /libs/baggage-php in the baggage-php group

[dependabot]

Bumps the baggage-php group in /libs/baggage-php with 1 update: guzzlehttp/guzzle.

Updates guzzlehttp/guzzle from 7.10.0 to 8.2.0

Release notes

Sourced from guzzlehttp/guzzle's releases.

8.2.0

Changed

• Allow connection caps to be combined with persistent transport sharing on libcurl 8.22.0+

8.1.0

Added

• Add PHP 8.6+ stream TLS session sharing, while persistent sharing remains cURL-only
• Add support for PHP 8.6
• Add in-transfer resends of seekable streamed uploads when PHP exposes CURLOPT_SEEKFUNCTION

Changed

• Adjusted guzzlehttp/promises version constraint to ^3.0.2
• Adjusted guzzlehttp/psr7 version constraint to ^3.1
• Classify stream handler transport failures using PHP 8.6+ structured stream error codes
• Hide URI credentials, queries, and fragments in automatic exception messages
• Match no_proxy rules against IPv4 hosts written in the shorthand a transport reads as an address
• Hold the cURL easy handle out of the reuse pool until a silent retry has been dispatched
• Treat a deferred resolved with a pending retry promise as progress when waiting on cURL transfers

8.0.3

Changed

• Adjusted guzzlehttp/psr7 version constraint to ^3.0.1

8.0.2

Changed

• Adjusted guzzlehttp/promises version constraint to ^3.0.1

Fixed

• Fail a cURL multi handler wait with an attributable error when the transfer is no longer tracked
• Fix StreamHandler resolving numeric IPv4 hosts differently from cURL handlers on macOS and Windows
• Fix StreamHandler TLS peer names and proxy authorities for numeric IPv4 hosts on all platforms
• Settle a cURL multi handler transfer displaced by a request reusing its native handle ID

8.0.1

Security

• Reject request URI hosts and Host header values that are not printable ASCII (GHSA-v5mv-p594-2x33)
• Reject URI hosts with a percent escape or that are not valid RFC 3986 hosts (GHSA-v5mv-p594-2x33)
• Reject numeric-looking URI hosts with trailing dots, read as IPv4 addresses (GHSA-v5mv-p594-2x33)
• Treat percent-escaped cookie domains as exact-match-only (GHSA-f7vp-7xgx-4w4r)
• Regenerate a derived Host header after client URI rewrites (GHSA-v5mv-p594-2x33)

8.0.0

Added

... (truncated)

Changelog

Sourced from guzzlehttp/guzzle's changelog.

8.2.0 - 2026-09-06

Changed

• Allow connection caps to be combined with persistent transport sharing on libcurl 8.22.0+

8.1.0 - 2026-08-24

Added

• Add PHP 8.6+ stream TLS session sharing, while persistent sharing remains cURL-only
• Add support for PHP 8.6
• Add in-transfer resends of seekable streamed uploads when PHP exposes CURLOPT_SEEKFUNCTION

Changed

• Adjusted guzzlehttp/promises version constraint to ^3.0.2
• Adjusted guzzlehttp/psr7 version constraint to ^3.1
• Classify stream handler transport failures using PHP 8.6+ structured stream error codes
• Hide URI credentials, queries, and fragments in automatic exception messages
• Match no_proxy rules against IPv4 hosts written in the shorthand a transport reads as an address
• Hold the cURL easy handle out of the reuse pool until a silent retry has been dispatched
• Treat a deferred resolved with a pending retry promise as progress when waiting on cURL transfers

8.0.3 - 2026-08-24

Changed

• Adjusted guzzlehttp/psr7 version constraint to ^3.0.1

8.0.2 - 2026-08-05

Changed

• Adjusted guzzlehttp/promises version constraint to ^3.0.1

Fixed

• Fail a cURL multi handler wait with an attributable error when the transfer is no longer tracked
• Fix StreamHandler resolving numeric IPv4 hosts differently from cURL handlers on macOS and Windows
• Fix StreamHandler TLS peer names and proxy authorities for numeric IPv4 hosts on all platforms
• Settle a cURL multi handler transfer displaced by a request reusing its native handle ID

8.0.1 - 2026-07-26

Security

... (truncated)

Commits

• 9393947 Release 8.2.0 (#3932)
• cf54074 Merge branch '8.1' into 8.2
• 7ffed98 Update CHANGELOG.md
• 316a505 Allow connection caps with persistent sharing on libcurl 8.22+ (#3866)
• 6a7728d Merge remote-tracking branch 'origin/8.1' into 8.2
• 7b7b04a Adjust versions (#3931)
• 2cdae51 Bump versions (#3930)
• 2c2660b Merge remote-tracking branch 'origin/8.0' into 8.1
• b690be7 Release 8.0.3
• 3ffe68d Adjusted guzzlehttp/psr7 version constraint to ^3.0.1 (#3929)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions