Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump urllib3 from 1.26.3 to 1.26.5 #45

Closed
wants to merge 41 commits into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 1, 2021

Bumps urllib3 from 1.26.3 to 1.26.5.

Release notes

Sourced from urllib3's releases.

1.26.5

⚠️ IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap

  • Fixed deprecation warnings emitted in Python 3.10.
  • Updated vendored six library to 1.16.0.
  • Improved performance of URL parser when splitting the authority component.

If you or your organization rely on urllib3 consider supporting us via GitHub Sponsors

1.26.4

⚠️ IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap

  • Changed behavior of the default SSLContext when connecting to HTTPS proxy during HTTPS requests. The default SSLContext now sets check_hostname=True.

If you or your organization rely on urllib3 consider supporting us via GitHub Sponsors

Changelog

Sourced from urllib3's changelog.

1.26.5 (2021-05-26)

  • Fixed deprecation warnings emitted in Python 3.10.
  • Updated vendored six library to 1.16.0.
  • Improved performance of URL parser when splitting the authority component.

1.26.4 (2021-03-15)

  • Changed behavior of the default SSLContext when connecting to HTTPS proxy during HTTPS requests. The default SSLContext now sets check_hostname=True.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

graingert and others added 30 commits April 10, 2017 20:07
it still works (for now...) but the tests fail, because py 2.6 unittest
is old and broken
Support for reverse patching
upgrade deps, run tests on more live snakes
* add processing for empty file adds in git

* 80 char linter rule is dumb

* prefer 100 len lines and expand travis matrix

* flatten test matrix

* use xenial dist to get python 3.7

* fix README line

* flip hunk order so any tuple access is still compatible

* addressing PR comments

* move pipenv installed packages to be dev-only
* prep 6 release

* force urllib3 update

* add setuptools and wheel to dev packages
* use tempfile to derive the temp dir of the host

* update test to skip if patch is missing, use methods in tmp file building

* update readme with message about patch

* bump travis to bionic

* use os.path instead of pathlib

* add a history file

* update history notes for upcoming release

* drop python2

* might as well drop 3.4, too

* remove unused snippets
* test windows build script

* install patch for windows

* try manually setting path for patch

* ah the test that cares can be skipped anyway
* adjust setup python

* remove with os line

* try referencing matrix.os from the runs-on

* remove optional install reqs line; it's bash and doesn't work on windows

* remove travis/tox in favor of github actions

* add history notes
* replace nose with pytest

* try to build it without PYTHONPATH
* update build and pipfile

* install local for imports

* hm maybe editable is what we really want (all of this feels wrong)
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 1, 2021
@cscorley cscorley closed this Nov 13, 2022
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 13, 2022

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@cscorley cscorley deleted the dependabot/pip/urllib3-1.26.5 branch November 13, 2022 16:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants