wechatpay-apiv3 / wechatpay-php

微信支付 APIv3 的官方 PHP Library,同时也支持 APIv2
Apache License 2.0
496 stars 100 forks source link

SDK与腾讯云SDK的GuzzleHttp版本冲突,一直找不到兼容的版本 #118

Closed breezechime closed 1 year ago

breezechime commented 1 year ago

运行环境

Your requirements could not be resolved to an installable set of packages.
 
   Problem 1
     - Root composer.json requires wechatpay/wechatpay ^1.4.5 -> satisfiable by wechatpay/wechatpay[1.4.5, 1.4.6, 1.4.7, 1.4.8].
     - wechatpay/wechatpay[1.4.5, ..., 1.4.8] require guzzlehttp/guzzle ^6.5 || ^7.0 -> satisfiable by guzzlehttp/guzzle[6.5.0, ..., 6.5.8, 7.0.0, ..., 7.6.0].
     - You can only install one version of a package, so only one of these can be installed: guzzlehttp/guzzle[6.3.0, ..., 6.5.8, 7.0.0, ..., 7.6.0].
     - tencentcloud/tencentcloud-sdk-php 3.0.6 requires guzzlehttp/guzzle 6.3.0 -> satisfiable by guzzlehttp/guzzle[6.3.0].
     - Root composer.json requires tencentcloud/tencentcloud-sdk-php 3.0.6 -> satisfiable by tencentcloud/tencentcloud-sdk-php[3.0.6].

描述你的问题现象

1.我在linux中使用了您的sdk,并且使用composer安装,您的sdk依赖于guzzleHttp的6.5和更高的7.0,而腾讯云的SDK却依赖于GuzzleHttp6.3.0这让我始终找不到它们两个共存的问题

TheNorthMemory commented 1 year ago

Guzzle6目前只有6.5.8是稳定版本,其余均存在安全问题提示,比如 6.3.0存在 CVE-2022-29248 CVE-2022-31042 CVE-2022-31043 CVE-2022-31090 CVE-2022-31091 等安全问题;建议给 tencentcloud/tencentcloud-sdk-php 提issue升级Guzzle版本。

TheNorthMemory commented 1 year ago

刚又看了一下 https://packagist.org/packages/tencentcloud/tencentcloud-sdk-php#3.0.6 , 其发布时间是 2018-05-31 13:01 UTC, 锁定了 Guzzle 6.3.0 版本,而自 3.0.27 版调整为了 ^6.3 ,你可以试试这个版本