{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":96703652,"defaultBranch":"master","name":"spotify-coverflow","ownerLogin":"kylesurowiec","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2017-07-09T18:36:00.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/7395667?v=4","public":true,"private":false,"isOrgOwned":false},"refInfo":{"name":"","listCacheKey":"v0:1718674248.0","currentOid":""},"activityList":{"items":[{"before":null,"after":"d67ed0de2d3ece471345b528364ed4dc3c8accec","ref":"refs/heads/dependabot/pip/urllib3-1.26.19","pushedAt":"2024-06-18T01:30:48.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump urllib3 from 1.26.18 to 1.26.19\n\nBumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.18 to 1.26.19.\n- [Release notes](https://github.com/urllib3/urllib3/releases)\n- [Changelog](https://github.com/urllib3/urllib3/blob/1.26.19/CHANGES.rst)\n- [Commits](https://github.com/urllib3/urllib3/compare/1.26.18...1.26.19)\n\n---\nupdated-dependencies:\n- dependency-name: urllib3\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump urllib3 from 1.26.18 to 1.26.19"}},{"before":null,"after":"92c27094e9553c098b6fa8337c77c1ee4703c560","ref":"refs/heads/dependabot/pip/requests-2.32.0","pushedAt":"2024-05-21T05:57:18.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"---\nupdated-dependencies:\n- dependency-name: requests\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"---"}},{"before":null,"after":"767c30184de40bd0a9a510a151a1f2b2838ad3c6","ref":"refs/heads/dependabot/pip/idna-3.7","pushedAt":"2024-04-11T22:59:55.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump idna from 2.7 to 3.7\n\nBumps [idna](https://github.com/kjd/idna) from 2.7 to 3.7.\n- [Release notes](https://github.com/kjd/idna/releases)\n- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)\n- [Commits](https://github.com/kjd/idna/compare/v2.7...v3.7)\n\n---\nupdated-dependencies:\n- dependency-name: idna\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump idna from 2.7 to 3.7"}},{"before":"16595c7fb79f9883110c2ff13ef7749d72d0b779","after":null,"ref":"refs/heads/dependabot/pip/urllib3-1.26.18","pushedAt":"2023-10-22T22:35:31.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"}},{"before":"4a766be7478546c78e31600acef8ad4f27bfe71a","after":"d61197ecca82ea1eb469427025c596c0d113bc60","ref":"refs/heads/master","pushedAt":"2023-10-22T22:35:29.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"Bump urllib3 from 1.26.5 to 1.26.18 (#13)\n\nBumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.5 to\r\n1.26.18.\r\n
\r\nRelease notes\r\n

Sourced from urllib3's\r\nreleases.

\r\n
\r\n

1.26.18

\r\n
    \r\n
  • Made body stripped from HTTP requests changing the request method to\r\nGET after HTTP 303 "See Other" redirect responses.\r\n(GHSA-g4mx-q9vg-27p4)
  • \r\n
\r\n

1.26.17

\r\n
    \r\n
  • Added the Cookie header to the list of headers to strip\r\nfrom requests when redirecting to a different host. As before, different\r\nheaders can be set via Retry.remove_headers_on_redirect.\r\n(GHSA-v845-jxx5-vc9f)
  • \r\n
\r\n

1.26.16

\r\n
    \r\n
  • Fixed thread-safety issue where accessing a PoolManager\r\nwith many distinct origins would cause connection pools to be closed\r\nwhile requests are in progress (#2954)
  • \r\n
\r\n

1.26.15

\r\n
    \r\n
  • Fix socket timeout value when HTTPConnection is reused (urllib3/urllib3#2645)
  • \r\n
  • Remove "!" character from the unreserved characters in\r\nIPv6 Zone ID parsing (urllib3/urllib3#2899)
  • \r\n
  • Fix IDNA handling of 'x80' byte (urllib3/urllib3#2901)
  • \r\n
\r\n

1.26.14

\r\n
    \r\n
  • Fixed parsing of port 0 (zero) returning None, instead of 0 (#2850)
  • \r\n
  • Removed deprecated HTTPResponse.getheaders() calls in\r\nurllib3.contrib module.
  • \r\n
\r\n

1.26.13

\r\n
    \r\n
  • Deprecated the HTTPResponse.getheaders() and\r\nHTTPResponse.getheader() methods.
  • \r\n
  • Fixed an issue where parsing a URL with leading zeroes in the port\r\nwould be rejected even when the port number after removing the zeroes\r\nwas valid.
  • \r\n
  • Fixed a deprecation warning when using cryptography v39.0.0.
  • \r\n
  • Removed the <4 in the Requires-Python\r\npackaging metadata field.
  • \r\n
\r\n

1.26.12

\r\n
    \r\n
  • Deprecated the urllib3[secure] extra and the\r\nurllib3.contrib.pyopenssl module. Both will be removed in\r\nv2.x. See this GitHub\r\nissue for justification and info on how to migrate.
  • \r\n
\r\n

1.26.11

\r\n

If you or your organization rely on urllib3 consider\r\nsupporting us via GitHub\r\nSponsors.

\r\n

:warning: urllib3 v2.0 will drop support for Python\r\n2: Read\r\nmore in the v2.0 Roadmap

\r\n
    \r\n
  • Fixed an issue where reading more than 2 GiB in a call to\r\nHTTPResponse.read would raise an OverflowError on Python 3.9 and\r\nearlier.
  • \r\n
\r\n

1.26.10

\r\n

If you or your organization rely on urllib3 consider\r\nsupporting us via GitHub\r\nSponsors.

\r\n

:warning: urllib3 v2.0 will drop support for Python\r\n2: Read\r\nmore in the v2.0 Roadmap

\r\n

:closed_lock_with_key: This is the first release to be signed\r\nwith Sigstore! You can verify the distributables using the\r\n.sig and .crt files included on this\r\nrelease.

\r\n
    \r\n
  • Removed support for Python 3.5
  • \r\n
  • Fixed an issue where a ProxyError recommending\r\nconfiguring the proxy as HTTP instead of HTTPS could appear even when an\r\nHTTPS proxy wasn't configured.
  • \r\n
\r\n

1.26.9

\r\n

If you or your organization rely on urllib3 consider\r\nsupporting us via GitHub\r\nSponsors.

\r\n\r\n
\r\n

... (truncated)

\r\n
\r\n
\r\nChangelog\r\n

Sourced from urllib3's\r\nchangelog.

\r\n
\r\n

1.26.18 (2023-10-17)

\r\n
    \r\n
  • Made body stripped from HTTP requests changing the request method to\r\nGET after HTTP 303 "See Other" redirect responses.
  • \r\n
\r\n

1.26.17 (2023-10-02)

\r\n
    \r\n
  • Added the Cookie header to the list of headers to strip\r\nfrom requests when redirecting to a different host. As before, different\r\nheaders can be set via Retry.remove_headers_on_redirect.\r\n([#3139](https://github.com/urllib3/urllib3/issues/3139)\r\n<https://github.com/urllib3/urllib3/pull/3139>_)
  • \r\n
\r\n

1.26.16 (2023-05-23)

\r\n
    \r\n
  • Fixed thread-safety issue where accessing a PoolManager\r\nwith many distinct origins\r\nwould cause connection pools to be closed while requests are in progress\r\n([#2954](https://github.com/urllib3/urllib3/issues/2954)\r\n<https://github.com/urllib3/urllib3/pull/2954>_)
  • \r\n
\r\n

1.26.15 (2023-03-10)

\r\n
    \r\n
  • Fix socket timeout value when HTTPConnection is reused\r\n([#2645](https://github.com/urllib3/urllib3/issues/2645)\r\n<https://github.com/urllib3/urllib3/issues/2645>__)
  • \r\n
  • Remove "!" character from the unreserved characters in\r\nIPv6 Zone ID parsing\r\n([#2899](https://github.com/urllib3/urllib3/issues/2899)\r\n<https://github.com/urllib3/urllib3/issues/2899>__)
  • \r\n
  • Fix IDNA handling of '\\x80' byte\r\n([#2901](https://github.com/urllib3/urllib3/issues/2901)\r\n<https://github.com/urllib3/urllib3/issues/2901>__)
  • \r\n
\r\n

1.26.14 (2023-01-11)

\r\n
    \r\n
  • Fixed parsing of port 0 (zero) returning None, instead of 0.\r\n([#2850](https://github.com/urllib3/urllib3/issues/2850)\r\n<https://github.com/urllib3/urllib3/issues/2850>__)
  • \r\n
  • Removed deprecated getheaders() calls in contrib module. Fixed the\r\ntype hint of PoolKey.key_retries by adding\r\nbool to the union.\r\n([#2865](https://github.com/urllib3/urllib3/issues/2865)\r\n<https://github.com/urllib3/urllib3/issues/2865>__)
  • \r\n
\r\n

1.26.13 (2022-11-23)

\r\n
    \r\n
  • Deprecated the HTTPResponse.getheaders() and\r\nHTTPResponse.getheader() methods.
  • \r\n
  • Fixed an issue where parsing a URL with leading zeroes in the port\r\nwould be rejected\r\neven when the port number after removing the zeroes was valid.
  • \r\n
  • Fixed a deprecation warning when using cryptography v39.0.0.
  • \r\n
  • Removed the <4 in the Requires-Python\r\npackaging metadata field.
  • \r\n
\r\n

1.26.12 (2022-08-22)

\r\n
    \r\n
  • Deprecated the urllib3[secure] extra and the\r\nurllib3.contrib.pyopenssl module.\r\nBoth will be removed in v2.x. See this GitHub issue\r\n<https://github.com/urllib3/urllib3/issues/2680>_\r\nfor justification and info on how to migrate.
  • \r\n
\r\n

1.26.11 (2022-07-25)

\r\n
    \r\n
  • Fixed an issue where reading more than 2 GiB in a call to\r\nHTTPResponse.read would
  • \r\n
\r\n\r\n
\r\n

... (truncated)

\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • 9c2c230\r\nRelease 1.26.18 (#3159)
  • \r\n
  • b594c5c\r\nMerge pull request from GHSA-g4mx-q9vg-27p4
  • \r\n
  • 944f0eb\r\n[1.26] Use vendored six in urllib3.contrib.securetransport
  • \r\n
  • c9016bf\r\nRelease 1.26.17
  • \r\n
  • 0122035\r\nBackport GHSA-v845-jxx5-vc9f (#3139)
  • \r\n
  • e63989f\r\nFix installing brotli extra on Python 2.7
  • \r\n
  • 2e7a24d\r\n[1.26] Configure OS for RTD to fix building docs
  • \r\n
  • 57181d6\r\n[1.26] Improve error message when calling urllib3.request() (#3058)
  • \r\n
  • 3c01480\r\n[1.26] Run coverage even with failed jobs
  • \r\n
  • d94029b\r\nRelease 1.26.16
  • \r\n
  • Additional commits viewable in compare\r\nview
  • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=urllib3&package-manager=pip&previous-version=1.26.5&new-version=1.26.18)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/kylesurowiec/spotify-coverflow/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump urllib3 from 1.26.5 to 1.26.18 (#13)"}},{"before":"d54a3c62ed0d071060526c500ce866c16b716fb3","after":null,"ref":"refs/heads/dependabot/pip/urllib3-1.26.17","pushedAt":"2023-10-18T02:01:38.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"16595c7fb79f9883110c2ff13ef7749d72d0b779","ref":"refs/heads/dependabot/pip/urllib3-1.26.18","pushedAt":"2023-10-18T02:01:33.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump urllib3 from 1.26.5 to 1.26.18\n\nBumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.5 to 1.26.18.\n- [Release notes](https://github.com/urllib3/urllib3/releases)\n- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)\n- [Commits](https://github.com/urllib3/urllib3/compare/1.26.5...1.26.18)\n\n---\nupdated-dependencies:\n- dependency-name: urllib3\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump urllib3 from 1.26.5 to 1.26.18"}},{"before":null,"after":"d54a3c62ed0d071060526c500ce866c16b716fb3","ref":"refs/heads/dependabot/pip/urllib3-1.26.17","pushedAt":"2023-10-03T04:50:16.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump urllib3 from 1.26.5 to 1.26.17\n\nBumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.5 to 1.26.17.\n- [Release notes](https://github.com/urllib3/urllib3/releases)\n- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)\n- [Commits](https://github.com/urllib3/urllib3/compare/1.26.5...1.26.17)\n\n---\nupdated-dependencies:\n- dependency-name: urllib3\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump urllib3 from 1.26.5 to 1.26.17"}},{"before":"c7f7b6ffd3dfc45d766d62bf2b01be825492289d","after":"a28c673fc55a38e3b36e2531c9b4be1364133af8","ref":"refs/heads/feature/rust","pushedAt":"2023-09-17T05:27:04.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}},{"before":"0a8930e8908a2f32626f2fc40fa6dc36f0c9c857","after":"c7f7b6ffd3dfc45d766d62bf2b01be825492289d","ref":"refs/heads/feature/rust","pushedAt":"2023-07-29T09:03:46.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}},{"before":"9cd769c6977bd1adebd96224526d7390a0ac9bb7","after":null,"ref":"refs/heads/dependabot/pip/certifi-2023.7.22","pushedAt":"2023-07-25T21:09:29.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"}},{"before":"44fbc490cc2ddecdd194f34924947d0361728ea0","after":"4a766be7478546c78e31600acef8ad4f27bfe71a","ref":"refs/heads/master","pushedAt":"2023-07-25T21:09:26.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"Bump certifi from 2022.12.7 to 2023.7.22 (#11)\n\nBumps [certifi](https://github.com/certifi/python-certifi) from\r\n2022.12.7 to 2023.7.22.\r\n
\r\nCommits\r\n
    \r\n
  • 8fb96ed\r\n2023.07.22
  • \r\n
  • afe7722\r\nBump actions/setup-python from 4.6.1 to 4.7.0 (#230)
  • \r\n
  • 2038739\r\nBump dessant/lock-threads from 3.0.0 to 4.0.1 (#229)
  • \r\n
  • 44df761\r\nHash pin Actions and enable dependabot (#228)
  • \r\n
  • 8b3d7ba\r\n2023.05.07
  • \r\n
  • 53da240\r\nci: Add Python 3.12-dev to the testing (#224)
  • \r\n
  • c2fc3b1\r\nCreate a Security Policy (#222)
  • \r\n
  • c211ef4\r\nSet up permissions to github workflows (#218)
  • \r\n
  • 2087de5\r\nDon't let deprecation warning fail CI (#219)
  • \r\n
  • e0b9fc5\r\nremove paragraphs about 1024-bit roots from README
  • \r\n
  • Additional commits viewable in compare\r\nview
  • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=certifi&package-manager=pip&previous-version=2022.12.7&new-version=2023.7.22)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/kylesurowiec/spotify-coverflow/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump certifi from 2022.12.7 to 2023.7.22 (#11)"}},{"before":null,"after":"9cd769c6977bd1adebd96224526d7390a0ac9bb7","ref":"refs/heads/dependabot/pip/certifi-2023.7.22","pushedAt":"2023-07-25T21:05:51.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump certifi from 2022.12.7 to 2023.7.22\n\nBumps [certifi](https://github.com/certifi/python-certifi) from 2022.12.7 to 2023.7.22.\n- [Commits](https://github.com/certifi/python-certifi/compare/2022.12.07...2023.07.22)\n\n---\nupdated-dependencies:\n- dependency-name: certifi\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump certifi from 2022.12.7 to 2023.7.22"}},{"before":"1665f2161eb4df1cfb0f0f5c0b5d3b5abcf5068a","after":"0a8930e8908a2f32626f2fc40fa6dc36f0c9c857","ref":"refs/heads/feature/rust","pushedAt":"2023-07-24T07:09:40.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}},{"before":"c18cfc12e625391ecb267653d21f498736392b3d","after":null,"ref":"refs/heads/dependabot/pip/requests-2.31.0","pushedAt":"2023-07-16T05:38:43.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"}},{"before":"f9b1ff771e38a95f831a6265d33c9058f7a552d3","after":"44fbc490cc2ddecdd194f34924947d0361728ea0","ref":"refs/heads/master","pushedAt":"2023-07-16T05:38:41.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"Bump requests from 2.20.0 to 2.31.0 (#10)\n\nBumps [requests](https://github.com/psf/requests) from 2.20.0 to 2.31.0.\r\n
\r\nRelease notes\r\n

Sourced from requests's\r\nreleases.

\r\n
\r\n

v2.31.0

\r\n

2.31.0 (2023-05-22)

\r\n

Security

\r\n
    \r\n
  • \r\n

    Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to\r\npotential\r\nforwarding of Proxy-Authorization headers to destination\r\nservers when\r\nfollowing HTTPS redirects.

    \r\n

    When proxies are defined with user info (https://user:pass@proxy:8080),\r\nRequests\r\nwill construct a Proxy-Authorization header that is\r\nattached to the request to\r\nauthenticate with the proxy.

    \r\n

    In cases where Requests receives a redirect response, it previously\r\nreattached\r\nthe Proxy-Authorization header incorrectly, resulting in\r\nthe value being\r\nsent through the tunneled connection to the destination server. Users\r\nwho rely on\r\ndefining their proxy credentials in the URL are strongly\r\nencouraged to upgrade\r\nto Requests 2.31.0+ to prevent unintentional leakage and rotate their\r\nproxy\r\ncredentials once the change has been fully deployed.

    \r\n

    Users who do not use a proxy or do not supply their proxy credentials\r\nthrough\r\nthe user information portion of their proxy URL are not subject to this\r\nvulnerability.

    \r\n

    Full details can be read in our Github\r\nSecurity Advisory\r\nand CVE-2023-32681.

    \r\n
  • \r\n
\r\n

v2.30.0

\r\n

2.30.0 (2023-05-03)

\r\n

Dependencies

\r\n
    \r\n
  • \r\n

    ⚠️ Added support for urllib3 2.0. ⚠️

    \r\n

    This may contain minor breaking changes so we advise careful testing\r\nand\r\nreviewing https://urllib3.readthedocs.io/en/latest/v2-migration-guide.html\r\nprior to upgrading.

    \r\n

    Users who wish to stay on urllib3 1.x can pin to\r\nurllib3<2.

    \r\n
  • \r\n
\r\n

v2.29.0

\r\n

2.29.0 (2023-04-26)

\r\n

Improvements

\r\n
    \r\n
  • Requests now defers chunked requests to the urllib3 implementation\r\nto improve\r\nstandardization. (#6226)
  • \r\n
  • Requests relaxes header component requirements to support bytes/str\r\nsubclasses. (#6356)
  • \r\n
\r\n\r\n
\r\n

... (truncated)

\r\n
\r\n
\r\nChangelog\r\n

Sourced from requests's\r\nchangelog.

\r\n
\r\n

2.31.0 (2023-05-22)

\r\n

Security

\r\n
    \r\n
  • \r\n

    Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to\r\npotential\r\nforwarding of Proxy-Authorization headers to destination\r\nservers when\r\nfollowing HTTPS redirects.

    \r\n

    When proxies are defined with user info (https://user:pass@proxy:8080),\r\nRequests\r\nwill construct a Proxy-Authorization header that is\r\nattached to the request to\r\nauthenticate with the proxy.

    \r\n

    In cases where Requests receives a redirect response, it previously\r\nreattached\r\nthe Proxy-Authorization header incorrectly, resulting in\r\nthe value being\r\nsent through the tunneled connection to the destination server. Users\r\nwho rely on\r\ndefining their proxy credentials in the URL are strongly\r\nencouraged to upgrade\r\nto Requests 2.31.0+ to prevent unintentional leakage and rotate their\r\nproxy\r\ncredentials once the change has been fully deployed.

    \r\n

    Users who do not use a proxy or do not supply their proxy credentials\r\nthrough\r\nthe user information portion of their proxy URL are not subject to this\r\nvulnerability.

    \r\n

    Full details can be read in our Github\r\nSecurity Advisory\r\nand CVE-2023-32681.

    \r\n
  • \r\n
\r\n

2.30.0 (2023-05-03)

\r\n

Dependencies

\r\n
    \r\n
  • \r\n

    ⚠️ Added support for urllib3 2.0. ⚠️

    \r\n

    This may contain minor breaking changes so we advise careful testing\r\nand\r\nreviewing https://urllib3.readthedocs.io/en/latest/v2-migration-guide.html\r\nprior to upgrading.

    \r\n

    Users who wish to stay on urllib3 1.x can pin to\r\nurllib3<2.

    \r\n
  • \r\n
\r\n

2.29.0 (2023-04-26)

\r\n

Improvements

\r\n
    \r\n
  • Requests now defers chunked requests to the urllib3 implementation\r\nto improve\r\nstandardization. (#6226)
  • \r\n
  • Requests relaxes header component requirements to support bytes/str\r\nsubclasses. (#6356)
  • \r\n
\r\n

2.28.2 (2023-01-12)

\r\n\r\n
\r\n

... (truncated)

\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • 147c851\r\nv2.31.0
  • \r\n
  • 74ea7cf\r\nMerge pull request from GHSA-j8r2-6x86-q33q
  • \r\n
  • 3022253\r\ntest on pypy 3.8 and pypy 3.9 on windows and macos (#6424)
  • \r\n
  • b639e66\r\ntest on py3.12 (#6448)
  • \r\n
  • d3d5044\r\nFixed a small typo (#6452)
  • \r\n
  • 2ad18e0\r\nv2.30.0
  • \r\n
  • f2629e9\r\nRemove strict parameter (#6434)
  • \r\n
  • 87d63de\r\nv2.29.0
  • \r\n
  • 51716c4\r\nenable the warnings plugin (#6416)
  • \r\n
  • a7da1ab\r\ntry on ubuntu 22.04 (#6418)
  • \r\n
  • Additional commits viewable in compare\r\nview
  • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=requests&package-manager=pip&previous-version=2.20.0&new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/kylesurowiec/spotify-coverflow/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump requests from 2.20.0 to 2.31.0 (#10)"}},{"before":null,"after":"c18cfc12e625391ecb267653d21f498736392b3d","ref":"refs/heads/dependabot/pip/requests-2.31.0","pushedAt":"2023-07-16T01:31:46.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump requests from 2.20.0 to 2.31.0\n\nBumps [requests](https://github.com/psf/requests) from 2.20.0 to 2.31.0.\n- [Release notes](https://github.com/psf/requests/releases)\n- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)\n- [Commits](https://github.com/psf/requests/compare/v2.20.0...v2.31.0)\n\n---\nupdated-dependencies:\n- dependency-name: requests\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump requests from 2.20.0 to 2.31.0"}},{"before":"996d7c13cd38c0986667bbef58ed6676e45f1c09","after":"1665f2161eb4df1cfb0f0f5c0b5d3b5abcf5068a","ref":"refs/heads/feature/rust","pushedAt":"2023-07-11T06:27:45.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}},{"before":"3e2f17f95c99d166bbe8cb416f9285c2940ca68c","after":"996d7c13cd38c0986667bbef58ed6676e45f1c09","ref":"refs/heads/feature/rust","pushedAt":"2023-07-11T04:23:19.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}},{"before":"82491405157c23b6e3e1b38a8afc77d576d35349","after":"3e2f17f95c99d166bbe8cb416f9285c2940ca68c","ref":"refs/heads/feature/rust","pushedAt":"2023-07-11T04:22:31.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}},{"before":"9e80e39aa714602779d89ead33fe402d4e45daf7","after":"82491405157c23b6e3e1b38a8afc77d576d35349","ref":"refs/heads/feature/rust","pushedAt":"2023-07-09T09:15:28.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}},{"before":"8a80a48bc52e2b984cafbc6680c30bc9e6a7d0ca","after":"9e80e39aa714602779d89ead33fe402d4e45daf7","ref":"refs/heads/feature/rust","pushedAt":"2023-07-09T09:13:32.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}},{"before":"02d343336382e92f54be4b7c350101097d1e3eb7","after":"8a80a48bc52e2b984cafbc6680c30bc9e6a7d0ca","ref":"refs/heads/feature/rust","pushedAt":"2023-07-07T06:02:22.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}},{"before":"f604a1cffeef70b36aa9d48f82f0a1725525464b","after":"02d343336382e92f54be4b7c350101097d1e3eb7","ref":"refs/heads/feature/rust","pushedAt":"2023-07-06T05:22:52.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}},{"before":null,"after":"f604a1cffeef70b36aa9d48f82f0a1725525464b","ref":"refs/heads/feature/rust","pushedAt":"2023-07-04T06:33:06.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}},{"before":"fe0e610a2c4c15d97c356bf63f2ab43a4cad696d","after":null,"ref":"refs/heads/dependabot/pip/spotipy-2.22.1","pushedAt":"2023-07-01T23:58:50.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"}},{"before":"3a16a50ae0172b27644f8ea22aabe917fedd1a9a","after":"f9b1ff771e38a95f831a6265d33c9058f7a552d3","ref":"refs/heads/master","pushedAt":"2023-07-01T23:58:48.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"Bump spotipy from 2.4.4 to 2.22.1 (#9)\n\nBumps [spotipy](https://github.com/plamere/spotipy) from 2.4.4 to 2.22.1.\r\n- [Release notes](https://github.com/plamere/spotipy/releases)\r\n- [Changelog](https://github.com/spotipy-dev/spotipy/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/plamere/spotipy/commits/2.22.1)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: spotipy\r\n dependency-type: direct:production\r\n...\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump spotipy from 2.4.4 to 2.22.1 (#9)"}},{"before":"c2a931e6c888c64af16f3381ee5a123880386c18","after":null,"ref":"refs/heads/rework","pushedAt":"2023-07-01T23:58:27.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"}},{"before":"1a374d7555ac5044e0cede867da3a26cb992e6ea","after":"c2a931e6c888c64af16f3381ee5a123880386c18","ref":"refs/heads/rework","pushedAt":"2023-05-13T07:29:47.162Z","pushType":"push","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}},{"before":"2fe045e3ec28537d5934dd8dda7fea966c4b8f18","after":"1a374d7555ac5044e0cede867da3a26cb992e6ea","ref":"refs/heads/rework","pushedAt":"2023-05-13T07:28:50.225Z","pushType":"push","commitsCount":1,"pusher":{"login":"kylesurowiec","name":"Kyle Surowiec","path":"/kylesurowiec","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7395667?s=80&v=4"},"commit":{"message":"...","shortMessageHtmlLink":"..."}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEZ_CZgwA","startCursor":null,"endCursor":null}},"title":"Activity · kylesurowiec/spotify-coverflow"}