Update php-http/psr7-integration-tests requirement from ^1.3.0 to ^1.5.0

[dependabot]

Updates the requirements on php-http/psr7-integration-tests to permit the latest version.

Release notes

Sourced from php-http/psr7-integration-tests's releases.

1.5.0

• Support for PHPUnit 11 & 12.
• Build with the fatfree PSR7 client as well.

Changelog

Sourced from php-http/psr7-integration-tests's changelog.

[1.5.0] - 2025-10-28

• Support for PHPUnit 11 & 12.
• Build with the fatfree PSR7 client as well.

[1.4.0] - 2024-08-02

Added

• Support for PHPUnit 10.

Removed

• Support for PHP 7.2 and PHPUnit 9.

[1.3.0] - 2023-04-28

Added

• Adds UriIntegrationTest::testSpecialCharsInUserInfo and UriIntegrationTest::testAlreadyEncodedUserInfo. These validate that usernames and passwords which contain reserved characters (defined by RFC3986) are being encoded so that the URI does not contain these reserved characters at any time.

• Adds support for testing against PSR-7 1.1 and 2.0. In particular, it adapts tests that were verifying invalid parameters threw InvalidArgumentException previously now either throw that OR (more correctly) raise a TypeError.

[1.2.0] - 2022-12-01

Added

• Adds UriIntegrationTest::testGetPathNormalizesMultipleLeadingSlashesToSingleSlashToPreventXSS(), UriIntegrationTest::testStringRepresentationWithMultipleSlashes(array $test), and RequestIntegrationTest::testGetRequestTargetInOriginFormNormalizesUriWithMultipleLeadingSlashesInPath(). These validate that a path containing multiple leading slashes is (a) represented with a single slash when calling UriInterface::getPath(), and (b) represented without changes when calling UriInterface::__toString(), including when calling RequestInterface::getRequestTarget() (which returns the path without the URI authority by default, to comply with origin-form). This is done to validate mitigations for CVE-2015-3257.

Changed

• Modifies UriIntegrationTest::testPathWithMultipleSlashes() to only validate multiple slashes in the middle of a path. Multiple leading slashes are covered with the newly introduced tests.

[1.1.1] - 2021-02-20

Changed

• Replace deprecated assertRegExp() with assertMatchesRegularExpression()

[1.1.0] - 2020-10-17

Added

• Support for PHP8 and PHPUnit 8 and 9

... (truncated)

Commits

• 5f8df36 prepare release
• 959f5fb Merge pull request #80 from Xerkus/feature/phpunit
• 1e80b76 Merge pull request #81 from Xerkus/feature/update-laminas-integration
• 40ae089 Allow laminas-diactoros 3 as dev dependency
• bb607f4 Update Laminas integration
• a8a8746 Add support for PHPUnit 11 and 12
• 76689df Merge pull request #78 from ikkez/feature/fatfree
• 6d25776 fix: test factory initialization
• 542fba2 feat: add fatfree PSR7 package
• 7e7bc95 prepare release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coveralls]

coverage: 100.0%. remained the same
when pulling 7b36345 on dependabot/composer/php-http/psr7-integration-tests-tw-1.5.0
into 0583b77 on main.