Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 10, 2022

Bumps urllib3[secure] from 1.26.7 to 1.26.8.

Release notes

Sourced from urllib3[secure]'s releases.

1.26.8

If you or your organization rely on urllib3 consider supporting us via GitHub Sponsors.

⚠️ urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap

⚠️ This release will be the last release supporting Python 3.5. Please upgrade to a non-EOL Python version.

  • Added extra message tourllib3.exceptions.ProxyError when urllib3 detects that a proxy is configured to use HTTPS but the proxy itself appears to only use HTTP.
  • Added a mention of the size of the connection pool when discarding a connection due to the pool being full.
  • Added explicit support for Python 3.11.
  • Deprecated the Retry.MAX_BACKOFF class property in favor of Retry.DEFAULT_MAX_BACKOFF to better match the rest of the default parameter names. Retry.MAX_BACKOFF is removed in v2.0.
  • Changed location of the vendored ssl.match_hostname function from urllib3.packages.ssl_match_hostname to urllib3.util.ssl_match_hostname to ensure Python 3.10+ compatibility after being repackaged by downstream distributors.
  • Fixed absolute imports, all imports are now relative.
Changelog

Sourced from urllib3[secure]'s changelog.

1.26.8 (2022-01-07)

  • Added extra message tourllib3.exceptions.ProxyError when urllib3 detects that a proxy is configured to use HTTPS but the proxy itself appears to only use HTTP.
  • Added a mention of the size of the connection pool when discarding a connection due to the pool being full.
  • Added explicit support for Python 3.11.
  • Deprecated the Retry.MAX_BACKOFF class property in favor of Retry.DEFAULT_MAX_BACKOFF to better match the rest of the default parameter names. Retry.MAX_BACKOFF is removed in v2.0.
  • Changed location of the vendored ssl.match_hostname function from urllib3.packages.ssl_match_hostname to urllib3.util.ssl_match_hostname to ensure Python 3.10+ compatibility after being repackaged by downstream distributors.
  • Fixed absolute imports, all imports are now relative.
Commits
  • b1f60e4 Release 1.26.8
  • 72e72b8 [1.26] Add explicit support for Python 3.11 to packaging metadata
  • 0435b0c Wrap HTTPS/HTTP proxy mismatch error into ProxyError
  • 25d0454 Revert commit bd816ee8 '[1.26] Add exception wrapper for HTTPS proxy connecti...
  • 109b445 Deprecate BACKOFF_MAX in favor of DEFAULT_BACKOFF_MAX
  • dc279bd [1.26] Point setuptools to use standard library distutils as a fallback
  • dc1e68f [1.26] Upload coverage report if check failed
  • a472d6d [1.26] Remove codecov in favor of GHA artifacts to upload and combine coverag...
  • 6bad9ac Test against Python 3.11
  • 06406c5 [1.26] Mention pool size when discarding connections (#2497)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [urllib3[secure]](https://github.com/urllib3/urllib3) from 1.26.7 to 1.26.8.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/1.26.8/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.7...1.26.8)

---
updated-dependencies:
- dependency-name: urllib3[secure]
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 10, 2022
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Mar 17, 2022

Superseded by #135.

@dependabot dependabot bot closed this Mar 17, 2022
@dependabot dependabot bot deleted the dependabot/pip/tools/urllib3-secure--1.26.8 branch March 17, 2022 01:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants