2.10.0
(feat): Support streaming response bodies in generated PHP SDKs (Server-Sent Events,
NDJSON, and raw text). Endpoints with a response-stream now return a typed
SseStream<T>, JsonStream<T>, or TextStream that iterates the response
frame-by-frame and deserializes each one into the declared payload type.
Previously these endpoints were emitted as broken void methods that always
threw <Sdk>ApiException regardless of HTTP status.
2.9.7
(chore): Patch the bundled ip-address to v10.2.0 in the php-sdk container to
address CVE-2026-42338 / GHSA-v2v4-37r5-5v8g (XSS in Address6 HTML-
emitting methods). npm 11.12.1 (shipped with node:24.15) bundles
ip-address@10.1.0 via socks; this overlays the published 10.2.0
tarball in place at image build time.