From 0844452cde9a43cbd0c4f16bac87500eb71bcbe3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?M=C3=A1rio=20Lucas?= Date: Thu, 22 Oct 2026 12:20:31 -0300 Subject: [PATCH] PHPAY-119: chore(ci): stop Dependabot from proposing a Guzzle major MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Guzzle 8 drops ConnectException::getHandlerContext(), which is how RetryPolicy tells "never left this machine" from "timed out after the body went out" — the distinction that keeps a processed POST from being repeated and charging twice. The CI of #118 failed on exactly that call. Supporting Guzzle 8 is code work, not a bump: find the curl errno in the new API, re-confirm the .p12 path for mTLS, and redo the policy tests. Until then a reopened PR on every Guzzle release only spends review, so major is ignored for this one package. Patch and minor keep coming. --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 8048f9d..b2dbf18 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -18,6 +18,16 @@ updates: prefix-development: chore(deps-dev) labels: - dependências + ignore: + # o Guzzle 8 removeu ConnectException::getHandlerContext(), que é como a + # RetryPolicy separa "não saiu da máquina" de "deu timeout depois de + # enviar o corpo" — e é essa distinção que impede repetir um POST já + # processado, ou seja, cobrar duas vezes. Suportar a 8 é trabalho de + # código (ver a issue #119), não de bump, então o Dependabot para de + # propor major. Patch e minor continuam vindo. + - dependency-name: guzzlehttp/guzzle + update-types: + - version-update:semver-major groups: composer-patch: patterns: