chore(deps): bump req from 0.7.3 to 0.7.4

[dependabot]

Bumps req from 0.7.3 to 0.7.4.

Release notes

Sourced from req's releases.

v0.7.4

• put_params: Allow explicit duplicates.

  in v0.7.0 we made this change:

  Overwrite existing query params instead of appending.

  This was a regression for legitimate use cases where some servers require duplicate params. Now we allow explicit duplicates but otherwise overwrite any previously set:

  Req.get!("?id=1&foo=bar", params: [id: 2, id: 3]) # ?id=2&id=3&foo=bar
  

• put_path_params: Do not overwrite redirect target.

Changelog

Sourced from req's changelog.

v0.7.4 (2026-08-26)

• [put_params]: Allow explicit duplicates.

  in v0.7.0 we made this change:

  Overwrite existing query params instead of appending.

  This was a regression for legitimate use cases where some servers require duplicate params. Now we allow explicit duplicates but otherwise overwrite any previously set:

  Req.get!("?id=1&foo=bar", params: [id: 2, id: 3]) # ?id=2&id=3&foo=bar
  

• [put_path_params]: Do not overwrite redirect target.

Commits

• 3678dc4 Release v0.7.4
• bd160b2 put_path_params: Do not overwrite redirect target, closes #562
• 9b7330f put_params: Preserve order
• b099a12 put_params: Allow explicit duplicate param names
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)