René's URL Explorer Experiment

Title: build(deps): bump the pip group across 1 directory with 5 updates by dependabot[bot] · Pull Request #1 · KinggCode/python_request_api_example · GitHub

Open Graph Title: build(deps): bump the pip group across 1 directory with 5 updates by dependabot[bot] · Pull Request #1 · KinggCode/python_request_api_example

X Title: build(deps): bump the pip group across 1 directory with 5 updates by dependabot[bot] · Pull Request #1 · KinggCode/python_request_api_example

Description: Bumps the pip group with 5 updates in the / directory: Package From To certifi 2021.10.8 2024.7.4 idna 3.3 3.15 pytest 7.1.2 9.0.3 requests 2.27.1 2.33.0 urllib3 1.26.9 2.7.0 Updates certifi from 2021.10.8 to 2024.7.4 Commits bd81538 2024.07.04 (#295) 06a2cbf Bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (#294) 13bba02 Bump actions/checkout from 4.1.6 to 4.1.7 (#293) e8abcd0 Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 (#292) 124f4ad 2024.06.02 (#291) c2196ce --- (#290) fefdeec Bump actions/checkout from 4.1.4 to 4.1.5 (#289) 3c5fb15 Bump actions/download-artifact from 4.1.6 to 4.1.7 (#286) 4a9569a Bump actions/checkout from 4.1.2 to 4.1.4 (#287) 1fc8086 Bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 (#288) Additional commits viewable in compare view Updates idna from 3.3 to 3.15 Release notes Sourced from idna's releases. v3.15 No release notes provided. v3.14 No release notes provided. v3.13 No release notes provided. v3.12 No release notes provided. v3.11 No release notes provided. v3.10 No release notes provided. v3.9 No release notes provided. v3.8 What's Changed Fix regression where IDNAError exception was not being produced for certain inputs. Add support for Python 3.13, drop support for Python 3.5 as it is no longer testable. Documentation improvements Updates to package testing using Github actions Thanks to Hugo van Kemenade for contributions to this release. Full Changelog: kjd/idna@v3.7...v3.8 v3.7 What's Changed Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651] Thanks to Guido Vranken for reporting the issue. Full Changelog: kjd/idna@v3.6...v3.7 Changelog Sourced from idna's changelog. 3.15 (2026-05-12) Enforce DNS-length cap on individual labels early in check_label, short-circuiting contextual-rule processing for oversized input while staying compatible with UTS 46 usage. Tidy core helpers: hoist bidi category sets to module-level frozensets (avoiding per-codepoint list construction), simplify length checks, and reuse the shared _unicode_dots_re from idna.core in the codec module. Use raise ... from err for proper exception chaining and switch internal string formatting to f-strings. Allow flit_core 4.x in the build backend. Expand the ruff lint set (flake8-bugbear, flake8-simplify, pyupgrade, perflint) and apply the surfaced fixes; pin lint CI to Python 3.14. Add Dependabot configuration for GitHub Actions. Convert README and HISTORY from reStructuredText to Markdown. Reference CVE-2026-45409 for the 3.14 advisory in place of the initial GHSA identifier. Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for contributions to this release. 3.14 (2026-05-10) Removed opportunity to process long inputs into quadratic time by rejecting oversize inputs up-front. Closes a bypass of the CVE-2024-3651 mitigation. [CVE-2026-45409] Thanks to Stan Ulbrych for reporting the issue. 3.13 (2026-04-22) Correct classification error for codepoint U+A7F1 3.12 (2026-04-21) Update to Unicode 17.0.0. Issue a deprecation warning for the transitional argument. Added lazy-loading to provide some performance improvements. Removed vestiges of code related to Python 2 support, including segmentation of data structures specific to Jython. Thanks to Rodrigo Nogueira for contributions to this release. 3.11 (2025-10-12) Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result. ... (truncated) Commits af30a09 Release 3.15 30314d4 Pre-release 3.15rc0 05d4b21 Merge pull request #237 from kjd/convert-docs-to-markdown 2987fdb Convert README and HISTORY from reStructuredText to Markdown 59fa800 Merge pull request #236 from kjd/dependabot/github_actions/actions-f3e34333ea def6983 Merge branch 'master' into dependabot/github_actions/actions-f3e34333ea bbd8004 Merge pull request #234 from StanFromIreland/patch-1 edd07c0 Bump github/codeql-action from 3.35.2 to 4.35.2 in the actions group 5557db0 Merge branch 'master' into patch-1 f11746c Merge pull request #235 from StanFromIreland/patch-2 Additional commits viewable in compare view Updates pytest from 7.1.2 to 9.0.3 Release notes Sourced from pytest's releases. 9.0.3 pytest 9.0.3 (2026-04-07) Bug fixes #12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them. #13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed. Previously this resulted in an internal assertion failure during plugin loading. Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p. #13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True. #14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed. #14343: Fixed use of insecure temporary directory (CVE-2025-71176). Improved documentation #13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example. #13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function . #14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after. #14255: TOML integer log levels must be quoted: Updating reference documentation. Contributor-facing changes #12689: The test reports are now published to Codecov from GitHub Actions. The test statistics is visible on the web interface. -- by aleguy02 9.0.2 pytest 9.0.2 (2025-12-06) Bug fixes #13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators. You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future. Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled. #13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string. #13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0. Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim. It will be deprecated in pytest 9.1 and removed in pytest 10. ... (truncated) Commits a7d58d7 Prepare release version 9.0.3 089d981 Merge pull request #14366 from bluetech/revert-14193-backport 8127eaf Revert "Fix: assertrepr_compare respects dict insertion order (#14050) (#14193)" 99a7e60 Merge pull request #14363 from pytest-dev/patchback/backports/9.0.x/95d8423bd... ddee02a Merge pull request #14343 from bluetech/cve-2025-71176-simple 74eac69 doc: Update training info (#14298) (#14301) f92dee7 Merge pull request #14267 from pytest-dev/patchback/backports/9.0.x/d6fa26c62... 7ee58ac Merge pull request #12378 from Pierre-Sassoulas/fix-implicit-str-concat-and-d... 37da870 Merge pull request #14259 from mitre88/patch-4 (#14268) c34bfa3 Add explanation for string context diffs (#14257) (#14266) Additional commits viewable in compare view Updates requests from 2.27.1 to 2.33.0 Release notes Sourced from requests's releases. v2.33.0 2.33.0 (2026-03-25) Announcements 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣 Security CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly. Improvements Migrated to a PEP 517 build system using setuptools. (#7012) Bugfixes Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205) Deprecations Dropped support for Python 3.9 following its end of support. (#7196) Documentation Various typo fixes and doc improvements. New Contributors @​M0d3v1 made their first contribution in psf/requests#6865 @​aminvakil made their first contribution in psf/requests#7220 @​E8Price made their first contribution in psf/requests#6960 @​mitre88 made their first contribution in psf/requests#7244 @​magsen made their first contribution in psf/requests#6553 @​Rohan5commit made their first contribution in psf/requests#7227 Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25 v2.32.5 2.32.5 (2025-08-18) Bugfixes The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration. Deprecations Added support for Python 3.14. Dropped support for Python 3.8 following its end of support. v2.32.4 2.32.4 (2025-06-10) ... (truncated) Changelog Sourced from requests's changelog. 2.33.0 (2026-03-25) Announcements 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣 Security CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly. Improvements Migrated to a PEP 517 build system using setuptools. (#7012) Bugfixes Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205) Deprecations Dropped support for Python 3.9 following its end of support. (#7196) Documentation Various typo fixes and doc improvements. 2.32.5 (2025-08-18) Bugfixes The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration. Deprecations Added support for Python 3.14. Dropped support for Python 3.8 following its end of support. 2.32.4 (2025-06-10) Security CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. ... (truncated) Commits bc04dfd v2.33.0 66d21cb Merge commit from fork 8b9bc8f Move badges to top of README (#7293) e331a28 Remove unused extraction call (#7292) 753fd08 docs: fix FAQ grammar in httplib2 example 774a0b8 docs(socks): same block as other sections 9c72a41 Bump github/codeql-action from 4.33.0 to 4.34.1 ebf7190 Bump github/codeql-action from 4.32.0 to 4.33.0 0e4ae38 docs: exclude Response.is_permanent_redirect from API docs (#7244) d568f47 docs: clarify Quickstart POST example (#6960) Additional commits viewable in compare view Updates urllib3 from 1.26.9 to 2.7.0 Release notes Sourced from urllib3's releases. 2.7.0 🚀 urllib3 is fundraising for HTTP/2 support urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul. Thank you for your support. Security Addressed high-severity security issues. Impact was limited to specific use cases detailed in the accompanying advisories; overall user exposure was estimated to be marginal. Decompression-bomb safeguards of the streaming API were bypassed: When HTTPResponse.drain_conn() was called after the response had been read and decompressed partially. (Reported by @​Cycloctane) During the second HTTPResponse.read(amt=N) or HTTPResponse.stream(amt=N) call when the response was decompressed using the official Brotli library. (Reported by @​kimkou2024) See GHSA-mf9v-mfxr-j63j for details. HTTP pools created using ProxyManager.connection_from_url did not strip sensitive headers specified in Retry.remove_headers_on_redirect when redirecting to a different host. (GHSA-qccp-gfcp-xxvc reported by @​christos-spearbit) Deprecations and Removals Used FutureWarning instead of DeprecationWarning for better visibility of existing deprecation notices. Rescheduled the removal of deprecated features to version 3.0. (urllib3/urllib3#3763) Removed support for end-of-life Python 3.9. (urllib3/urllib3#3720) Removed support for end-of-life PyPy3.10. (urllib3/urllib3#4979) Bumped the minimum supported pyOpenSSL version to 19.0.0. (urllib3/urllib3#3777) Bugfixes Fixed a bug where HTTPResponse.read(amt=None) was ignoring decompressed data buffered from previous partial reads. (urllib3/urllib3#3636) Fixed a bug where HTTPResponse.read() could cache only part of the response after a partial read when cache_content=True. (urllib3/urllib3#4967) Fixed HTTPResponse.stream() and HTTPResponse.read_chunked() to handle amt=0. (urllib3/urllib3#3793) Updated _TYPE_BODY type alias to include missing Iterable[str], matching the documented and runtime behavior of chunked request bodies. (urllib3/urllib3#3798) Fixed LocationParseError when paths resembling schemeless URIs were passed to HTTPConnectionPool.urlopen(). (urllib3/urllib3#3352) Fixed BaseHTTPResponse.readinto() type annotation to accept memoryview in addition to bytearray, matching the io.RawIOBase.readinto contract and enabling use with io.BufferedReader without type errors. (urllib3/urllib3#3764) 2.6.3 🚀 urllib3 is fundraising for HTTP/2 support urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul. Thank you for your support. Changes Fixed a security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were followed. (CVE-2026-21441 reported by @​D47A, 8.9 High, GHSA-38jv-5279-wg99) Started treating Retry-After times greater than 6 hours as 6 hours by default. (urllib3/urllib3#3743) Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten. (urllib3/urllib3#3752) 2.6.2 ... (truncated) Changelog Sourced from urllib3's changelog. 2.7.0 (2026-05-07) Security Addressed high-severity security issues. Impact was limited to specific use cases detailed in the accompanying advisories; overall user exposure was estimated to be marginal. Decompression-bomb safeguards of the streaming API were bypassed: When HTTPResponse.drain_conn() was called after the response had been read and decompressed partially. During the second HTTPResponse.read(amt=N) or HTTPResponse.stream(amt=N) call when the response was decompressed using the official Brotli __ library. See GHSA-mf9v-mfxr-j63j __ for details. HTTP pools created using ProxyManager.connection_from_url did not strip sensitive headers specified in Retry.remove_headers_on_redirect when redirecting to a different host. (GHSA-qccp-gfcp-xxvc __) Deprecations and Removals Used FutureWarning instead of DeprecationWarning for better visibility of existing deprecation notices. Rescheduled the removal of deprecated features to version 3.0. ([#3763](https://github.com/urllib3/urllib3/issues/3763) __) Removed support for end-of-life Python 3.9. ([#3720](https://github.com/urllib3/urllib3/issues/3720) __) Removed support for end-of-life PyPy3.10. ([#4979](https://github.com/urllib3/urllib3/issues/4979) __) Bumped the minimum supported pyOpenSSL version to 19.0.0. ([#3777](https://github.com/urllib3/urllib3/issues/3777) __) Bugfixes Fixed a bug where HTTPResponse.read(amt=None) was ignoring decompressed data buffered from previous partial reads. ([#3636](https://github.com/urllib3/urllib3/issues/3636) __) Fixed a bug where HTTPResponse.read() could cache only part of the response after a partial read when cache_content=True. ... (truncated) Commits 9a950b9 Release 2.7.0 5ec0de4 Merge commit from fork 2bdcc44 Merge commit from fork f45b0df Fix a misleading example for ProxyManager (#4970) 577193c Switch to nightly PyPy3.11 in CI for now (#4984) e90af45 Avoid infinite loop in HTTPResponse.read_chunked when amt=0 (#4974) 67ed74f Bump dev dependencies (#4972) 3abd481 Upgrade mypy to version 1.20.2 (#4978) 2b8725d Drop support for EOL PyPy3.10 (#4979) 2944b2a Upgrade setup-chrome and setup-firefox to fix warnings (#4973) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot show ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore will remove all of the ignore conditions of the specified dependency @dependabot unignore will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the Security Alerts page.

Open Graph Description: Bumps the pip group with 5 updates in the / directory: Package From To certifi 2021.10.8 2024.7.4 idna 3.3 3.15 pytest 7.1.2 9.0.3 requests 2.27.1 2.33.0 urllib3 1.26.9 2.7.0 Upda...

X Description: Bumps the pip group with 5 updates in the / directory: Package From To certifi 2021.10.8 2024.7.4 idna 3.3 3.15 pytest 7.1.2 9.0.3 requests 2.27.1 2.33.0 urllib3 1.26.9 2.7.0 Upda...

Opengraph URL: https://github.com/KinggCode/python_request_api_example/pull/1

X: @github

direct link

Domain: github.com

Links:

Viewport: width=device-width