google/recaptcha — 1.5.2

This maintenance release for the 1.x series ports the non-breaking transport security and proxy-compatibility improvements introduced during the 1.5 cycle onto the backward-compatible 1.4.2 / 1.5.1 public API, and adds automated backward-compatibility verification in CI.

Improvements

• Hardened Fallback TLS Verification (RequestMethod\Post): Configured verify_peer and verify_peer_name under the ssl stream context (rather than http) so OpenSSL strictly verifies peer certificates and hostnames when using the file_get_contents() transport (#625).
• Request Timeouts (RequestMethod\CurlPost & RequestMethod\Post): Added explicit 60-second request timeouts (CURLOPT_TIMEOUT and http.timeout) so verification calls fail predictably if the upstream network hangs (#604).
• Automated SemVer Compatibility Checks: Added roave/backward-compatibility-check to GitHub Actions CI to automatically verify that future 1.x maintenance pull requests preserve 100% public API compatibility (#634 by @SNO7E-G).

Bug Fixes

• HTTP/1.1 Proxy Support (RequestMethod\SocketPost): Fixed SocketPost::submit() to accept both HTTP/1.0 200 OK and HTTP/1.1 200 OK status lines, preventing false bad-response errors when requests traverse HTTP/1.1 proxies (#616).

Breaking Changes

• None: Fully backward-compatible with 1.4.2 and 1.5.1.

Full Changelog: https://github.com/google/recaptcha/compare/1.5.1...1.5.2