Update fetch dependency

[ChiragAgg5k]

Summary

• Update utopia-php/fetch constraint from 0.5.* to ^1.1.
• Refresh composer.lock to install utopia-php/fetch 1.1.2.

Compatibility

audit uses Utopia\Fetch\Client, Client::setTimeout(), Client::fetch(), Client::METHOD_POST, Response::getStatusCode(), and Response::getBody() in src/Audit/Adapter/ClickHouse.php. These symbols are still available in fetch 1.1.2.

Test Plan

• composer validate --strict
• composer run lint
• ./vendor/bin/phpstan analyse --level max src tests --memory-limit=512M

Notes:

• composer audit reports the existing google/protobuf advisory on the default dependency set; this PR only changes utopia-php/fetch.
• vendor/bin/phpunit requires local clickhouse and mariadb hostnames and fails in this environment because those services are not available.

[greptile-apps]

Greptile Summary

This PR updates the utopia-php/fetch constraint from 0.5.* to ^1.1 and refreshes the lock file to install version 1.1.2.

• composer.json: Single-line constraint change from 0.5.* to ^1.1; all other dependencies are untouched.
• composer.lock: Pins utopia-php/fetch to 1.1.2 and records the new content-hash; a swoole/ide-helper ^6.0 entry appears only under the fetch package's require-dev metadata and has no effect on production installs.

Confidence Score: 5/5

Minimal-scope dependency bump; no application code was changed and the updated lock file correctly pins the new version.

The change is limited to a version constraint update in composer.json and the corresponding lock-file refresh. No logic, tests, or other dependencies were modified, and the diff is mechanically straightforward.

No files require special attention.

Important Files Changed

Filename	Overview
composer.json	Bumps utopia-php/fetch constraint from 0.5.* to ^1.1; no other dependency changes.
composer.lock	Refreshes lock to pin utopia-php/fetch at 1.1.2; adds swoole/ide-helper as a dev-only entry in the fetch package's metadata (no production impact).

_{Reviews (2): Last reviewed commit: "Refresh Greptile review" | Re-trigger Greptile}

[greptile-apps]

Incomplete API surface verified for the version bump

The PR description confirms Client::fetch(), Response::getStatusCode(), and Response::getBody() are present in 1.1.2, but ClickHouse.php also calls $client->addHeader(), $client->setTimeout(), and references the Client::METHOD_POST constant. The README for the 1.x branch confirms addHeader(), but setTimeout() and METHOD_POST aren't explicitly covered. If either was removed or renamed between 0.5.x and 1.1.x, the ClickHouse adapter will throw a fatal error at construction time for every caller.