Bump guzzlehttp/guzzle from 7.12.1 to 7.12.3

[dependabot]

Bumps guzzlehttp/guzzle from 7.12.1 to 7.12.3.

Release notes

Sourced from guzzlehttp/guzzle's releases.

7.12.3

Changed

• Adjusted guzzlehttp/psr7 version constraint to ^2.12.3

Security

• Treat IP and numeric cookie domains as exact-match-only (GHSA-g446-98w2-8p5w)

7.12.2

Fixed

• Clamp out-of-range Max-Age so a very large value no longer overflows to an already-expired timestamp
• Use strict comparison in CookieJar conflict resolution so distinct numeric-string names don't overwrite
• Store a cookie whose Domain has a trailing dot on the origin host instead of silently discarding it
• Fix StreamHandler hard-failing on bracketed IPv6 literal hosts when force_ip_resolve is set
• Use strict cookie Path comparison so CookieJar::clear() with a numeric path keeps a distinct-path cookie
• Fixed cookie handling for falsey Domain, Max-Age, path, and name values
• Fixed decode_content handling for falsey string values
• Fixed deprecated request option values reaching built-in handlers before normalization

Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.12.3 - 2026-06-23

Changed

• Adjusted guzzlehttp/psr7 version constraint to ^2.12.3

Security

• Treat IP and numeric cookie domains as exact-match-only (GHSA-g446-98w2-8p5w)

7.12.2 - 2026-06-23

Fixed

• Clamp out-of-range Max-Age so a very large value no longer overflows to an already-expired timestamp
• Use strict comparison in CookieJar conflict resolution so distinct numeric-string names don't overwrite
• Store a cookie whose Domain has a trailing dot on the origin host instead of silently discarding it
• Fix StreamHandler hard-failing on bracketed IPv6 literal hosts when force_ip_resolve is set
• Use strict cookie Path comparison so CookieJar::clear() with a numeric path keeps a distinct-path cookie
• Fixed cookie handling for falsey Domain, Max-Age, path, and name values
• Fixed decode_content handling for falsey string values
• Fixed deprecated request option values reaching built-in handlers before normalization

Commits

• 9aa17bc Release 7.12.3
• 49615e1 Adjusted guzzlehttp/psr7 version constraint to ^2.12.3 (#3696)
• b9944c1 Treat IP cookie domains as exact-only (#3694)
• 1289bf2 Release 7.12.2
• 5c79b37 Remove shitty deprecation tests (#3690)
• 9e838e8 Normalize deprecated request option values (#3684)
• c2cfa80 Restore falsey changelog wording (#3683)
• 8250f59 Add cookie follow-up tests and changelog (#3675)
• b4bf998 Document cookie name lookup case sensitivity (#3674)
• e322fa4 Use strict cookie path matching (#3673)
• Additional commits viewable in compare view