chore(deps): update guzzlehttp/uri-template requirement from ^1.0 to ^1.0 || ^2.0

[dependabot]

Updates the requirements on guzzlehttp/uri-template to permit the latest version.

Release notes

Sourced from guzzlehttp/uri-template's releases.

v2.0.0

Changed

• Invalid URI template syntax now throws InvalidArgumentException instead of expanding partially
• Literal template text is now validated and valid non-ASCII literals are pct-encoded
• URI template variable names and modifiers are now validated according to RFC 6570
• Prefix modifiers are now rejected for list and map values
• Referenced variable values are now validated before expansion
• Dense zero-indexed arrays are expanded as lists and sparse or mixed-key arrays as maps
• UriTemplate is now non-instantiable; use UriTemplate::expand() statically
• Nested null values in lists and maps are now treated as undefined members and omitted
• Variable values must now be valid UTF-8; invalid byte sequences throw InvalidArgumentException
• Booleans now expand as 1 and 0 at every nesting level
• Non-finite floats now throw InvalidArgumentException instead of expanding as INF or NAN
• Non-empty lists whose members are all null are now treated as defined variables
• Variable specifier whitespace padding is now detected with the real whitespace set
• UriTemplate now rejects native PHP serialization and unserialization
• Referenced variable values are now detached and formed before expansion begins
• Template syntax is now validated for every expression before variable values are formed
• Stringable objects are now converted to strings once per value position while values are formed
• Invalid UTF-8 in variable values and map keys is now rejected while values are formed
• Finite floats are now converted to their expansion strings while values are formed
• Exceptions thrown by __toString() now surface while values are formed, before any output exists

Fixed

• Fixed invalid template expressions being accepted as query and path-style parameter names
• Fixed prefix modifiers counting bytes instead of Unicode code points and pct-encoded triplets
• Fixed unsupported variable shapes producing warnings, conversion errors, or Array output
• Fixed path-style parameter explode rendering empty members as name= instead of bare name
• Fixed map keys not using the operator's allow set under reserved and fragment expansion
• Fixed map explode rendering empty members as name= instead of bare name for unnamed operators
• Fixed the documented variables array type rejecting integer keys for numeric variable names
• Fixed all-null maps throwing with prefix modifiers instead of being skipped as undefined
• Fixed prefix modifiers splitting Unicode code points encoded as multiple pct-encoded triplets
• Fixed path-style composites rendering bare name instead of name= for empty joined members
• Fixed null nested query array members being rejected for their keys instead of being omitted
• Fixed float values expanding with the locale decimal separator on PHP versions before 8.0
• Fixed PCRE engine failures on very long variable names being reported as invalid template syntax
• Fixed invalid UTF-8 errors for list and map members not reporting the member path
• Fixed exception messages embedding raw controls or malformed UTF-8 from expressions and map keys
• Fixed invalid UTF-8 in literal text reported at the segment offset, not the first invalid byte
• Fixed PCRE engine failures during literal text validation being reported as invalid UTF-8
• Fixed PCRE engine failures during variable UTF-8 validation not being reported as runtime errors
• Fixed PCRE engine failures during invalid UTF-8 offset recovery being reported as invalid UTF-8

Changelog

Sourced from guzzlehttp/uri-template's changelog.

v2.0.0 - 2026-07-20

Changed

• Invalid URI template syntax now throws InvalidArgumentException instead of expanding partially
• Literal template text is now validated and valid non-ASCII literals are pct-encoded
• URI template variable names and modifiers are now validated according to RFC 6570
• Prefix modifiers are now rejected for list and map values
• Referenced variable values are now validated before expansion
• Dense zero-indexed arrays are expanded as lists and sparse or mixed-key arrays as maps
• UriTemplate is now non-instantiable; use UriTemplate::expand() statically
• Nested null values in lists and maps are now treated as undefined members and omitted
• Variable values must now be valid UTF-8; invalid byte sequences throw InvalidArgumentException
• Booleans now expand as 1 and 0 at every nesting level
• Non-finite floats now throw InvalidArgumentException instead of expanding as INF or NAN
• Non-empty lists whose members are all null are now treated as defined variables
• Variable specifier whitespace padding is now detected with the real whitespace set
• UriTemplate now rejects native PHP serialization and unserialization
• Referenced variable values are now detached and formed before expansion begins
• Template syntax is now validated for every expression before variable values are formed
• Stringable objects are now converted to strings once per value position while values are formed
• Invalid UTF-8 in variable values and map keys is now rejected while values are formed
• Finite floats are now converted to their expansion strings while values are formed
• Exceptions thrown by __toString() now surface while values are formed, before any output exists

Fixed

• Fixed invalid template expressions being accepted as query and path-style parameter names
• Fixed prefix modifiers counting bytes instead of Unicode code points and pct-encoded triplets
• Fixed unsupported variable shapes producing warnings, conversion errors, or Array output
• Fixed path-style parameter explode rendering empty members as name= instead of bare name
• Fixed map keys not using the operator's allow set under reserved and fragment expansion
• Fixed map explode rendering empty members as name= instead of bare name for unnamed operators
• Fixed the documented variables array type rejecting integer keys for numeric variable names
• Fixed all-null maps throwing with prefix modifiers instead of being skipped as undefined
• Fixed prefix modifiers splitting Unicode code points encoded as multiple pct-encoded triplets
• Fixed path-style composites rendering bare name instead of name= for empty joined members
• Fixed null nested query array members being rejected for their keys instead of being omitted
• Fixed float values expanding with the locale decimal separator on PHP versions before 8.0
• Fixed PCRE engine failures on very long variable names being reported as invalid template syntax
• Fixed invalid UTF-8 errors for list and map members not reporting the member path
• Fixed exception messages embedding raw controls or malformed UTF-8 from expressions and map keys
• Fixed invalid UTF-8 in literal text reported at the segment offset, not the first invalid byte
• Fixed PCRE engine failures during literal text validation being reported as invalid UTF-8
• Fixed PCRE engine failures during variable UTF-8 validation not being reported as runtime errors
• Fixed PCRE engine failures during invalid UTF-8 offset recovery being reported as invalid UTF-8

Removed

• Dropped support for PHP 7.2 and 7.3

... (truncated)

Commits

• 516c3bf Release 2.0.0
• 10d94bf Document sensitive parameter policy (#117)
• 62a1f58 Merge branch '1.0' into 2.0
• e324719 Avoid full-value prefix tokenization (#116)
• f6c24c2 Release 1.0.10
• bf9266f Escape C1 controls in URI template diagnostics (#114)
• c3fa609 Fix URI template prefix byte loss (#115)
• 2ef8387 Shorten long changelog entries and a PHPDoc summary (#113)
• 35db3a4 Document integer keys for numeric variable names (#111)
• 4fe0650 Form variable values before expansion begins (#110)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (92b0a47) to head (70af916).

Additional details and impacted files

@@             Coverage Diff             @@
##                main      #190   +/-   ##
===========================================
  Coverage     100.00%   100.00%           
  Complexity       479       479           
===========================================
  Files            161       161           
  Lines           1725      1725           
===========================================
  Hits            1725      1725           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.