Would have been added through the backdoor in #3399 I would say it should not be added in a lock file maintenance PR. Changelog: https://github.com/php-http/discovery/blob/1.x/CHANGELOG.md#1150---2023-02-09 PR: https://github.com/php-http/discovery/pull/208