chore(deps): update dependency req to v0.7.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
req (source)	prod	minor	== 0.6.3 → == 0.7.0	0.7.1

---

Release Notes

wojtekmach/req (req)

v0.7.0

Compare Source

• [Req]: Add Req.new(req, options).

  • [Req]: Treat URL userinfo as Basic Authentication.

  • [Req], [Req.Request]: Deprecate adapter: fun in favour of adapter: mod.

  • [Req.Request]: (BREAKING CHANGE) Remove current_request_steps field.

  • [Req.Request]: Fix redacting remaining auth values.

  • (BREAKING CHANGE) Replace run_finch step with [Req.Finch] adapter module.

  • (BREAKING CHANGE) Replace put_plug and run_plug steps with [Req.Plug] adapter module.

  • [Req.Finch]: Support finch: options.

  • [Req.Finch]: Support :request_timeout.

  • [Req.Finch]: Fix handling duplicate response headers.

  • [Req.Finch]: Deprecate finch: name in favour of finch: [name: name].

  • [Req.Finch]: Deprecate pool_timeout: value in favour of finch: [pool_timeout: value].

  • [Req.Finch]: Deprecate pool_max_idle_time: value in favour of finch: [pool_max_idle_time: value].

  • [Req.Finch]: Deprecate :finch_request.

  • [Req.Plug]: Handle individual response body chunks.

  • [Req.Plug]: Support non-UTF8 request params.

  • [Req.Plug]: Put original request private data in conn.private.

  • [Req.Test]: Allow descendant processes.

  • [Req.Test]: Fix concurrent plug fetches immediately after switching to shared mode.

  • [compress_body]: Do nothing when request content-encoding is already set.

  • [compress_body]: Update multipart boundary when re-running the step.

  • [compressed], [decode_body]: Replace optional ezstd dependency with Erlang/OTP 28+
    built-in :zstd.

  • [decode_body]: Deprecate :decode_json in favour of setting a custom JSON
    decoder via :decoders:

before:

    Req.get!(url, decode_json: [keys: :atoms])

after:

    Req.get!(url, decoders: [json: &Jason.decode(&1, keys: :atoms)])

• [encode_body]: (BREAKING CHANGE) Automatically change GET to POST when request body is set.

• [put_aws_sigv4]: Exclude accept-encoding, x-amzn-trace-id, and
  hop-by-hop headers from the signature.

• [put_aws_sigv4]: Correctly sign duplicate header values.

• [put_params]: (BREAKING CHANGE) Overwrite existing query params instead of appending.

• [put_path_params]: Preserve the path template when re-running the step.

• [redirect]: Strip userinfo from redirect locations and log a warning.

  Previously, redirecting to a URL with userinfo (e.g. http://user:pass@host)
  kept the userinfo in the request URL (without converting it to auth). It is
  now dropped so credentials supplied by the redirecting server aren't sent.

• [redirect]: Clear the request body, body options, and content headers when
  changing POST to GET after a 301, 302, or 303 response.

• [retry]: Use jitter by default.

• [retry]: Honor configured :retry_delay over Retry-After.

• (BREAKING CHANGE) Remove deprecated follow_redirects step.

• (BREAKING CHANGE) Remove deprecated output step.

• Require Elixir 1.15 or later.

---

Configuration

📅 Schedule: (in timezone Europe/Rome)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.