wechatpay-apiv3/wechatpay-php

SDK与腾讯云SDK的GuzzleHttp版本冲突，一直找不到兼容的版本

breezechime opened this issue · 2 comments

breezechime commented

运行环境

Your requirements could not be resolved to an installable set of packages.
 
   Problem 1
     - Root composer.json requires wechatpay/wechatpay ^1.4.5 -> satisfiable by wechatpay/wechatpay[1.4.5, 1.4.6, 1.4.7, 1.4.8].
     - wechatpay/wechatpay[1.4.5, ..., 1.4.8] require guzzlehttp/guzzle ^6.5 || ^7.0 -> satisfiable by guzzlehttp/guzzle[6.5.0, ..., 6.5.8, 7.0.0, ..., 7.6.0].
     - You can only install one version of a package, so only one of these can be installed: guzzlehttp/guzzle[6.3.0, ..., 6.5.8, 7.0.0, ..., 7.6.0].
     - tencentcloud/tencentcloud-sdk-php 3.0.6 requires guzzlehttp/guzzle 6.3.0 -> satisfiable by guzzlehttp/guzzle[6.3.0].
     - Root composer.json requires tencentcloud/tencentcloud-sdk-php 3.0.6 -> satisfiable by tencentcloud/tencentcloud-sdk-php[3.0.6].

描述你的问题现象

1.我在linux中使用了您的sdk，并且使用composer安装，您的sdk依赖于guzzleHttp的6.5和更高的7.0，而腾讯云的SDK却依赖于GuzzleHttp6.3.0这让我始终找不到它们两个共存的问题

TheNorthMemory commented

Guzzle6目前只有6.5.8是稳定版本，其余均存在安全问题提示，比如 6.3.0存在 CVE-2022-29248 CVE-2022-31042 CVE-2022-31043 CVE-2022-31090 CVE-2022-31091 等安全问题；建议给 tencentcloud/tencentcloud-sdk-php 提issue升级Guzzle版本。

TheNorthMemory commented

刚又看了一下 https://packagist.org/packages/tencentcloud/tencentcloud-sdk-php#3.0.6 , 其发布时间是 2018-05-31 13:01 UTC， 锁定了 Guzzle 6.3.0 版本，而自 3.0.27 版调整为了 ^6.3 ，你可以试试这个版本

  • 👍1