Bump the version-updates group with 2 updates

[dependabot]

Bumps the version-updates group with 2 updates: guzzlehttp/guzzle and slevomat/coding-standard.

Updates guzzlehttp/guzzle from 7.12.3 to 7.13.1

Release notes

Sourced from guzzlehttp/guzzle's releases.

7.13.1

Fixed

• Allow middleware to rewrite partial URIs before transports validate them

7.13.0

Added

• Added the crypto_method_max request option to cap the maximum TLS protocol version
• Added HTTP QUERY redirect support, preserving method and body on 301 and 302

Changed

• Section proxy tunnel connection reuse by credential so distinct credentials never share a tunnel
• Isolate concurrent foreign cURL proxy tunnels added while another owner's tunnel is active
• Route credentialed HTTP(S) proxy Proxy-Authorization headers through cURL proxy header handling
• Reject request-level CURLOPT_SHARE when combined with authenticated HTTP/HTTPS proxy tunnel configuration
• Remove deprecation for raw cURL CURLOPT_PREREQFUNCTION callbacks when defined by PHP cURL
• Route TLS 1.2 crypto_method requests to the stream handler when cURL cannot select TLS 1.2
• Reject final request URIs missing a scheme or host before transfer

Deprecated

• Deprecate invalid protocols, force_ip_resolve, delay, cookies, and allow_redirects values

Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.13.1 - 2026-06-29

Fixed

• Allow middleware to rewrite partial URIs before transports validate them

7.13.0 - 2026-06-29

Added

• Added the crypto_method_max request option to cap the maximum TLS protocol version
• Added HTTP QUERY redirect support, preserving method and body on 301 and 302

Changed

• Section proxy tunnel connection reuse by credential so distinct credentials never share a tunnel
• Isolate concurrent foreign cURL proxy tunnels added while another owner's tunnel is active
• Route credentialed HTTP(S) proxy Proxy-Authorization headers through cURL proxy header handling
• Reject request-level CURLOPT_SHARE when combined with authenticated HTTP/HTTPS proxy tunnel configuration
• Remove deprecation for raw cURL CURLOPT_PREREQFUNCTION callbacks when defined by PHP cURL
• Route TLS 1.2 crypto_method requests to the stream handler when cURL cannot select TLS 1.2
• Reject final request URIs missing a scheme or host before transfer

Deprecated

• Deprecate invalid protocols, force_ip_resolve, delay, cookies, and allow_redirects values

Commits

• 55901a7 Release 7.13.1 (#3726)
• f385904 Validate cURL scheme support before protocol policy (#3723)
• 8d0895b Allow middleware to rewrite partial URIs (#3721)
• a4decaa Release 7.13.0
• a5e7069 Stop deprecating CURLOPT_PREREQFUNCTION (#3718)
• bc34e93 Reject CURLOPT_SHARE with authenticated proxy tunnel (#3711)
• f748c62 Route Proxy-Authorization through cURL proxy headers (#3710)
• 69fc262 Harden cURL header list options (#3716)
• cef051a Reject final URIs missing scheme or host (#3715)
• 586ddfb Harden CurlMultiHandler proxy tunnel isolation (#3708)
• Additional commits viewable in compare view

Updates slevomat/coding-standard from 8.29.0 to 8.30.1

Release notes

Sourced from slevomat/coding-standard's releases.

8.30.1

🐛 Fixes

• SlevomatCodingStandard.Classes.ReadonlyClass: Do not require mark readonly class when class extends from another class (thanks o @​kamil-zacek)

8.30.0

🔧 Improvements

• SlevomatCodingStandard.Classes.ReadonlyClass: For check to readonly class / promoted properties (thanks to @​kamil-zacek)
• SlevomatCodingStandard.Namespaces.ReferenceUsedNamesOnly: New options namespacesAllowedToUsePartially and namespacesRequiredToUsePartially (thanks to @​Toflar)

🐛 Fixes

• Fix (Disallow|Require)TrailingComma sniffs to handle null parenthesis pointers (thanks to @​HonzaCZ)

Commits

• 70a3b21 Fix ReadonlyClassSniff for do not require mark readonly class when class is e...
• 72b3590 ReadonlyClassSniff for check to readonly class / promoted properties
• 6511c00 Add support to allow partial use rules per namespace
• d3e1e43 Updated dependencies
• 5302a0a Updated dependencies
• 61316e2 Fix (Disallow|Require)TrailingComma*Sniff to handle null parenthesis pointers
• 39155a9 Update .gitattributes to exclude dev files from composer dist
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions