Title: build(deps-dev): bump requests from 2.32.5 to 2.33.0 by dependabot[bot] · Pull Request #76 · NHSDigital/data-validation-engine · GitHub
Open Graph Title: build(deps-dev): bump requests from 2.32.5 to 2.33.0 by dependabot[bot] · Pull Request #76 · NHSDigital/data-validation-engine
X Title: build(deps-dev): bump requests from 2.32.5 to 2.33.0 by dependabot[bot] · Pull Request #76 · NHSDigital/data-validation-engine
Description: Bumps requests from 2.32.5 to 2.33.0.
Release notes
Sourced from requests's releases.
v2.33.0
2.33.0 (2026-03-25)
Announcements
📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣
Security
CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.
Improvements
Migrated to a PEP 517 build system using setuptools. (#7012)
Bugfixes
Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)
Deprecations
Dropped support for Python 3.9 following its end of support. (#7196)
Documentation
Various typo fixes and doc improvements.
New Contributors
@M0d3v1 made their first contribution in psf/requests#6865
@aminvakil made their first contribution in psf/requests#7220
@E8Price made their first contribution in psf/requests#6960
@mitre88 made their first contribution in psf/requests#7244
@magsen made their first contribution in psf/requests#6553
@Rohan5commit made their first contribution in psf/requests#7227
Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25
Changelog
Sourced from requests's changelog.
2.33.0 (2026-03-25)
Announcements
📣 Requests is adding inline types. If you have a typed code base that
uses Requests, please take a look at #7271. Give it a try, and report
any gaps or feedback you may have in the issue. 📣
Security
CVE-2026-25645 requests.utils.extract_zipped_paths now extracts
contents to a non-deterministic location to prevent malicious file
replacement. This does not affect default usage of Requests, only
applications calling the utility function directly.
Improvements
Migrated to a PEP 517 build system using setuptools. (#7012)
Bugfixes
Fixed an issue where an empty netrc entry could cause
malformed authentication to be applied to Requests on
Python 3.11+. (#7205)
Deprecations
Dropped support for Python 3.9 following its end of support. (#7196)
Documentation
Various typo fixes and doc improvements.
Commits
bc04dfd v2.33.0
66d21cb Merge commit from fork
8b9bc8f Move badges to top of README (#7293)
e331a28 Remove unused extraction call (#7292)
753fd08 docs: fix FAQ grammar in httplib2 example
774a0b8 docs(socks): same block as other sections
9c72a41 Bump github/codeql-action from 4.33.0 to 4.34.1
ebf7190 Bump github/codeql-action from 4.32.0 to 4.33.0
0e4ae38 docs: exclude Response.is_permanent_redirect from API docs (#7244)
d568f47 docs: clarify Quickstart POST example (#6960)
Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show
Open Graph Description: Bumps requests from 2.32.5 to 2.33.0. Release notes Sourced from requests's releases. v2.33.0 2.33.0 (2026-03-25) Announcements 📣 Requests is adding inline types. If you have a typed code ba...
X Description: Bumps requests from 2.32.5 to 2.33.0. Release notes Sourced from requests's releases. v2.33.0 2.33.0 (2026-03-25) Announcements 📣 Requests is adding inline types. If you have a typed cod...
Opengraph URL: https://github.com/NHSDigital/data-validation-engine/pull/76
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:92556074-3899-3b33-3a76-40a280fee478 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | E148:16035A:52BA01:6EF708:6A53EA76 |
| html-safe-nonce | 729d5a0bddd6898af04e7105165f9e1cfa0e936552d5489bd67516342e2afe7d |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFMTQ4OjE2MDM1QTo1MkJBMDE6NkVGNzA4OjZBNTNFQTc2IiwidmlzaXRvcl9pZCI6IjY0Mzg0NDI2OTMzMjQ2OTYxODIiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | af59c1998557a1dd5d9bfda1762bfd48a5b27815b932626bb0de5971e43280b4 |
| hovercard-subject-tag | pull_request:3452061488 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/NHSDigital/data-validation-engine/pull/76/files |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Bumps requests from 2.32.5 to 2.33.0. Release notes Sourced from requests's releases. v2.33.0 2.33.0 (2026-03-25) Announcements 📣 Requests is adding inline types. If you have a typed code ba... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | b9a586c06a05a7a86fc7e3f4dbd03e42f6869085879aa184aa6369456dbd50fb |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/NHSDigital/data-validation-engine git https://github.com/NHSDigital/data-validation-engine.git |
| octolytics-dimension-user_id | 6683590 |
| octolytics-dimension-user_login | NHSDigital |
| octolytics-dimension-repository_id | 1071433568 |
| octolytics-dimension-repository_nwo | NHSDigital/data-validation-engine |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 1071433568 |
| octolytics-dimension-repository_network_root_nwo | NHSDigital/data-validation-engine |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 07a982c1d40157c619b364352b704c3ce66bb332 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width