Bump guzzlehttp/guzzle-services from 1.4.2 to 1.6.1

[dependabot]

Bumps guzzlehttp/guzzle-services from 1.4.2 to 1.6.1.

Release notes

Sourced from guzzlehttp/guzzle-services's releases.

1.6.1

• Allow deprecated null header location values to normalize to empty strings

1.6.0

• Require guzzlehttp/guzzle ^7.11 and guzzlehttp/psr7 ^2.11
• Require guzzlehttp/command ^1.5 and guzzlehttp/uri-template ^1.0.6
• Deprecate the legacy baseUrl service description option; use baseUri instead
• Deprecate the legacy responseClass operation option; use responseModel instead
• Deprecate non-uppercase operation httpMethod values; 2.0 preserves method casing
• Deprecate non-string and empty-array header location values
• Deprecate loose parameter schema values and reject values that cannot be safely normalized

1.5.4

• Prevent XML CDATA injection during request serialization (GHSA-q8r6-5hfw-5jff)

1.5.3

• Harden request serialization state after failures
• Preserve explicit null JSON response properties
• Validate ToArrayInterface object properties after conversion
• Enforce zero-valued schema validation bounds

1.5.2

• Fix request serialization for validation-only additionalParameters

1.5.1

• Replace deprecated Guzzle JSON helper functions
• Serialize and validate header location values

1.5.0

• Add PHP 8.5 support
• Require guzzlehttp/guzzle ^7.10, guzzlehttp/psr7 ^2.8, and guzzlehttp/command ^1.4
• Fix recursive parameter model inheritance

1.4.3

• Handle malformed XML responses safely
• Fix multipart request Content-Type header

Changelog

Sourced from guzzlehttp/guzzle-services's changelog.

1.6.1 - 2026-06-04

• Allow deprecated null header location values to normalize to empty strings

1.6.0 - 2026-06-02

• Require guzzlehttp/guzzle ^7.11 and guzzlehttp/psr7 ^2.11
• Require guzzlehttp/command ^1.5 and guzzlehttp/uri-template ^1.0.6
• Deprecate the legacy baseUrl service description option; use baseUri instead
• Deprecate the legacy responseClass operation option; use responseModel instead
• Deprecate non-uppercase operation httpMethod values; 2.0 preserves method casing
• Deprecate non-string and empty-array header location values
• Deprecate loose parameter schema values and reject values that cannot be safely normalized

1.5.4 - 2026-06-02

• Prevent XML CDATA injection during request serialization (GHSA-q8r6-5hfw-5jff)

1.5.3 - 2026-06-02

• Harden request serialization state after failures
• Preserve explicit null JSON response properties
• Validate ToArrayInterface object properties after conversion
• Enforce zero-valued schema validation bounds

1.5.2 - 2026-05-22

• Fix request serialization for validation-only additionalParameters

1.5.1 - 2026-05-20

• Replace deprecated Guzzle JSON helper functions
• Serialize and validate header location values

1.5.0 - 2026-05-18

• Add PHP 8.5 support
• Require guzzlehttp/guzzle ^7.10, guzzlehttp/psr7 ^2.8, and guzzlehttp/command ^1.4
• Fix recursive parameter model inheritance

1.4.3 - 2026-05-18

• Handle malformed XML responses safely
• Fix multipart request Content-Type header

Commits

• 4427b77 Release 1.6.1
• 815a685 Allow null header location values (#265)
• 8a9bc31 Release 1.6.0
• ce3c0ac Bump versions (#263)
• f446f1d Merge branch '1.5' into 1.6
• 2edaddc Release 1.5.4
• d78052e Prevent XML CDATA injection (#259)
• 1adbc38 Release 1.5.3
• 5257403 Merge branch '1.5' into 1.6
• 20f109e Fix schema validation edge cases (#257)
• Additional commits viewable in compare view