- Update to 2.6.0:
- Fix handling of cookies on redirect. Previously a cookie without a host
value set would use the hostname for the redirected URL exposing requests
users to session fixation attacks and potentially cookie stealing. This was
disclosed privately by Matthew Daley of `BugFuzz <https://bugfuzz.com>`_.
An CVE identifier has not yet been assigned for this. This affects all
versions of requests from v2.1.0 to v2.5.3 (inclusive on both ends).
- Fix error when requests is an ``install_requires`` dependency and ``python
setup.py test`` is run. (#2462)
- Fix error when urllib3 is unbundled and requests continues to use the
vendored import location.
- Include fixes to ``urllib3``'s header handling.
- Requests' handling of unvendored dependencies is now more restrictive.
- Support bytearrays when passed as parameters in the ``files`` argument.
(#2468)
- Avoid data duplication when creating a request with ``str``, ``bytes``, or
``bytearray`` input to the ``files`` argument.
- Revert changes to our vendored certificate bundle. For more context see
(#2455, #2456, and http://bugs.python.org/issue23476)
OBS-URL: https://build.opensuse.org/request/show/298170
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=55
- Update to version 2.3.0
+ New ``Response`` property ``is_redirect``, which is true when the
library could have processed this response as a redirection (whether
or not it actually did).
+ The ``timeout`` parameter now affects requests with both ``stream=True``
and ``stream=False`` equally.
+ The change in v2.0.0 to mandate explicit proxy schemes has been reverted.
Proxy schemes now default to ``http://``.
+ The ``CaseInsensitiveDict`` used for HTTP headers now behaves like a normal
dictionary when references as string or viewd in the interpreter.
+ No longer expose Authorization or Proxy-Authorization headers on redirect.
Fix CVE-2014-1829 and CVE-2014-1830 respectively.
+ Authorization is re-evaluated each redirect.
+ On redirect, pass url as native strings.
+ Fall-back to autodetected encoding for JSON when Unicode detection fails.
+ Headers set to ``None`` on the ``Session`` are now correctly not sent.
+ Correctly honor ``decode_unicode`` even if it wasn't used earlier in the
same response.
+ Stop advertising ``compress`` as a supported Content-Encoding.
+ The ``Response.history`` parameter is now always a list.
+ Many, many ``urllib3`` bugfixes.- Fixes incorrect parsing of proxy
credentials that contain a literal or encoded '#' character.
+ Assorted urllib3 fixes.
+ New exception: ``ContentDecodingError``. Raised instead of ``urllib3``
``DecodeError`` exceptions.
+ Avoid many many exceptions from the buggy implementation of
``proxy_bypass`` on OS X in Python 2.6.
+ Avoid crashing when attempting to get authentication credentials
from ~/.netrc when running as a user without a home directory.
+ Use the correct pool size for pools of connections to proxies.
OBS-URL: https://build.opensuse.org/request/show/236416
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=46
- update to 2.0.1
- changes in 2.0.1:
- Updated included CA Bundle with new mistrusts and automated process for the future
- Added MD5-sess to Digest Auth
- Accept per-file headers in multipart file POST messages.
- Fixed: Don't send the full URL on CONNECT messages.
- Fixed: Correctly lowercase a redirect scheme.
- Fixed: Cookies not persisted when set via functional API.
- Fixed: Translate urllib3 ProxyError into a requests ProxyError derived from ConnectionError.
- Updated internal urllib3 and chardet.
- changes in 2.0.0:
- Keys in the Headers dictionary are now native strings on all Python versions,
i.e. bytestrings on Python 2, unicode on Python 3.
- Proxy URLs now *must* have an explicit scheme. A ``MissingSchema`` exception
will be raised if they don't.
- Timeouts now apply to read time if ``Stream=False``.
- ``RequestException`` is now a subclass of ``IOError``, not ``RuntimeError``.
- Added new method to ``PreparedRequest`` objects: ``PreparedRequest.copy()``.
- Added new method to ``Session`` objects: ``Session.update_request()``. This
method updates a ``Request`` object with the data (e.g. cookies) stored on
the ``Session``.
- Added new method to ``Session`` objects: ``Session.prepare_request()``. This
method updates and prepares a ``Request`` object, and returns the
corresponding ``PreparedRequest`` object.
- Added new method to ``HTTPAdapter`` objects: ``HTTPAdapter.proxy_headers()``.
This should not be called directly, but improves the subclass interface.
- ``httplib.IncompleteRead`` exceptions caused by incorrect chunked encoding
will now raise a Requests ``ChunkedEncodingError`` instead.
- Invalid percent-escape sequences now cause a Requests ``InvalidURL``
exception to be raised.
OBS-URL: https://build.opensuse.org/request/show/206076
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=42
- update to 1.2.0:
* Fixed cookies on sessions and on requests
* Significantly change how hooks are dispatched - hooks now receive all the
arguments specified by the user when making a request so hooks can make a
secondary request with the same parameters. This is especially necessary for
authentication handler authors
* certifi support was removed
* Fixed bug where using OAuth 1 with body ``signature_type`` sent no data
* Major proxy work thanks to @Lukasa including parsing of proxy authentication
from the proxy url
* Fix DigestAuth handling too many 401s
* Update vendored urllib3 to include SSL bug fixes
* Allow keyword arguments to be passed to ``json.loads()`` via the
``Response.json()`` method
* Don't send ``Content-Length`` header by default on ``GET`` or ``HEAD``
requests
* Add ``elapsed`` attribute to ``Response`` objects to time how long a request
took.
* Fix ``RequestsCookieJar``
* Sessions and Adapters are now picklable, i.e., can be used with the
mutiprocessing library
Update charade to version 1.0.3
- update to 1.2.0:
* Fixed cookies on sessions and on requests
* Significantly change how hooks are dispatched - hooks now receive all the
arguments specified by the user when making a request so hooks can make a
secondary request with the same parameters. This is especially necessary for
authentication handler authors
* certifi support was removed
OBS-URL: https://build.opensuse.org/request/show/175233
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=32
+ Removal of Requests.async in favor of grequests
+ Allow disabling of cookie persistiance.
+ New implimentation of safe_mode
+ cookies.get now supports default argument
+ Session cookies not saved when Session.request is called with return_response=False
+ Env: no_proxy support.
+ RequestsCookieJar improvements.
+ Various bug fixes.
- Rebased patches
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=21
* Attempt to use the OS's certificate bundle if certifi isn't available.
* Infinite digest auth redirect fix
* Multi-part file upload improvements
* Fix decoding of invalid %encodings in URLs
* If there is no content in a response don't throw an error the second time
that content is attempted to be read.
* Upload data on redirects.
- Update to 0.11.1:
* POST redirects now break RFC to do what browsers do: Follow up with a GET.
* New strict_mode configuration to disable new redirect behavior.
- 0.11.0 (2012-03-14)
* Private SSL Certificate support
* Remove select.poll from Gevent monkeypatching
* Remove redundant generator for chunked transfer encoding
* Fix: Response.ok raises Timeout Exception in safe_mode
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=15
* PYTHON 3 SUPPORT!
* Dropped 2.5 Support. (Backwards Incompatible)
- 0.10.0 (2012-01-21)
* Response.content is now bytes-only. (Backwards Incompatible)
* New Response.text is unicode-only.
* If no Response.encoding is specified and chardet is available,
Respoonse.text will guess an encoding.
* Default to ISO-8859-1 (Western) encoding for "text" subtypes.
* Removal of decode_unicode. (Backwards Incompatible)
* New multiple-hooks system.
* New Response.register_hook for registering hooks within the pipeline.
* Response.url is now Unicode.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=9
* Converted auth system to use simpler callable objects.
* New session parameter to API methods.
* Display full URL while logging.
-+-This line, and those below, will be ignored--
M python-requests.changes
M python-requests.spec
D requests-0.8.2.tar.gz
A requests-0.8.3.tar.gz
Diff for working copy: .
Index: python-requests.changes
===================================================================
--- python-requests.changes (revision 4)
+++ python-requests.changes (working copy)
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Sun Nov 27 20:38:47 UTC 2011 - jfunk@funktronics.ca
+
+- Update to 0.8.3
+ * Converted auth system to use simpler callable objects.
+ * New session parameter to API methods.
+ * Display full URL while logging.
+
-------------------------------------------------------------------
Sun Nov 27 08:54:32 UTC 2011 - jfunk@funktronics.ca
Index: python-requests.spec
===================================================================
--- python-requests.spec (revision 4)
+++ python-requests.spec (working copy)
@@ -18,7 +18,7 @@
Name: python-requests
-Version: 0.8.2
+Version: 0.8.3
Release: 0
Url: http://python-requests.org
Summary: Awesome Python HTTP Library That's Actually Usable
Index: requests-0.8.3.tar.gz
===================================================================
Binary file 'requests-0.8.3.tar.gz' added.
Index: requests-0.8.2.tar.gz
===================================================================
Binary file 'requests-0.8.2.tar.gz' deleted.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=5
* Enhanced status codes experience ``\o/``
* Set a maximum number of redirects (``settings.max_redirects``)
* Full Unicode URL support
* Support for protocol-less redirects.
* Allow for arbitrary request types.
* Bugfixes
- Changes from version 0.6.0:
* New callback hook system
* New persistient sessions object and context manager
* Transparent Dict-cookie handling
* Status code reference object
* Removed Response.cached
* Added Response.request
* All args are kwargs
* Relative redirect support
* HTTPError handling improvements
* Improved https testing
* Bugfixes
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=3
- PATCH Support
- Support for Proxies
- HTTPBin Test Suite
- Redirect Fixes
- settings.verbose stream writing
- Querystrings for all methods
- URLErrors (Connection Refused, Timeout, Invalid URLs) are treated as
explicity raised r.requests.get('hwe://blah'); r.raise_for_status()
- 0.4.1 (2011-05-22)
- Improved Redirection Handling
- New 'allow_redirects' param for following non-GET/HEAD Redirects
- Settings module refactoring
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=2
