Skip to content

Upgrading guzzlehttp/guzzle 3 to 4

Breakingv3.8.1 → 4.2.4Breaking3Security1New19Changed16Fixed13Other7

Full comparisonBack to guzzlehttp/guzzle
BreakingUpgrade verdict

3 breaking changes and a security fix.

In plain terms
  • No longer using request_fulluri in stream adapter proxies.
  • No longer utilizing the now deprecated namespaced methods from the stream package.
  • Removed request method constants from RequestInterface.
  • HTTP Proxy header vulnerability
Must act 4 items need code or config changes

guzzlehttp/guzzle publishes an official migration guide for version 4. It covers more than the release notes do.

Migration guide ↗

PHP requirement changed in 4.0.0-rc.1: >=5.3.3 → >=5.4.0.

Adds guzzlehttp/streams ~2.1.

Drops symfony/event-dispatcher.

What you must change

Breaking3
No longer using request_fulluri in stream adapter proxies.
request_fulluri
4.2.2GitHub ReleaseOriginalView source
No longer utilizing the now deprecated namespaced methods from the stream package.
4.2.0CHANGELOG.mdOriginalView source
Removed request method constants from RequestInterface.
4.1.0CHANGELOG.mdOriginalView source
Security1
HTTP Proxy header vulnerability
High · CVSS 8.1
4.2.4GitHub AdvisoryOriginalView source