> For clean Markdown content of this page, append .md to this URL. For the complete documentation index, see https://buildwithfern.com/learn/llms.txt.

## 2.10.0

**`(feat):`** Support streaming response bodies in generated PHP SDKs (Server-Sent Events,
NDJSON, and raw text). Endpoints with a `response-stream` now return a typed
`SseStream<T>`, `JsonStream<T>`, or `TextStream` that iterates the response
frame-by-frame and deserializes each one into the declared payload type.
Previously these endpoints were emitted as broken `void` methods that always
threw `<Sdk>ApiException` regardless of HTTP status.

## 2.9.7

**`(chore):`** Patch the bundled `ip-address` to v10.2.0 in the php-sdk container to
address CVE-2026-42338 / GHSA-v2v4-37r5-5v8g (XSS in `Address6` HTML-
emitting methods). npm 11.12.1 (shipped with `node:24.15`) bundles
`ip-address@10.1.0` via `socks`; this overlays the published 10.2.0
tarball in place at image build time.