Commit Graph

  • ff58b000ef Add security patches slfo-1.2 nkrapp 2026-01-20 13:39:50 +01:00
  • 5596e5dd87 Add security patches slfo-main nkrapp 2026-01-20 13:39:50 +01:00
  • 1dd58911fa Accepting request 1327014 from devel:languages:python factory Ana Guerrero 2026-01-14 15:19:41 +00:00
  • 34c26d5883 Accepting request 1326931 from home:glaubitz:branches:devel:languages:python Markéta Machová 2026-01-13 14:05:11 +00:00
  • 036b503cc3 Backport fix to address CVE-2026-21441 John Paul Adrian Glaubitz 2026-01-13 11:08:08 +01:00
  • 9aadbc2422 Accepting request 1325966 from devel:languages:python Ana Guerrero 2026-01-09 16:02:44 +00:00
  • 7d9c1856b5 Accepting request 1325746 from home:nkrapp:branches:devel:languages:python Markéta Machová 2026-01-08 13:44:15 +00:00
  • c7e3c17e34 Accepting request 1287779 from devel:languages:python Ana Guerrero 2025-06-24 18:45:47 +00:00
  • 1d09eeecb6 Accepting request 1287779 from devel:languages:python Ana Guerrero 2025-06-24 18:45:47 +00:00
  • 75573f8736 - Update to 2.5.0: * Security issues Pool managers now properly control redirects when retries is passed (CVE-2025-50181, GHSA-pq67-6m6q-mj2v, bsc#1244925) Redirects are now controlled by urllib3 in the Node.js runtime (CVE-2025-50182, GHSA-48p4-8xcf-vxj5, bsc#1244924) * Features Added support for the compression.zstd module that is new in Python 3.14. Added support for version 0.5 of hatch-vcs * Bugfixes Raised exception for HTTPResponse.shutdown on a connection already released to the pool. Fixed incorrect CONNECT statement when using an IPv6 proxy with connection_from_host. Previously would not be wrapped in []. Steve Kowalik 2025-06-23 02:04:11 +00:00
  • bf96469562 - Update to 2.5.0: * Security issues Pool managers now properly control redirects when retries is passed (CVE-2025-50181, GHSA-pq67-6m6q-mj2v, bsc#1244925) Redirects are now controlled by urllib3 in the Node.js runtime (CVE-2025-50182, GHSA-48p4-8xcf-vxj5, bsc#1244924) * Features Added support for the compression.zstd module that is new in Python 3.14. Added support for version 0.5 of hatch-vcs * Bugfixes Raised exception for HTTPResponse.shutdown on a connection already released to the pool. Fixed incorrect CONNECT statement when using an IPv6 proxy with connection_from_host. Previously would not be wrapped in []. Steve Kowalik 2025-06-23 02:04:11 +00:00
  • b90c81c378 Accepting request 1280514 from devel:languages:python Dominique Leuenberger 2025-05-31 17:14:11 +00:00
  • 9b18397dff Accepting request 1280514 from devel:languages:python Dominique Leuenberger 2025-05-31 17:14:11 +00:00
  • fa15163672 - Update to 2.4.0 * Applied PEP 639 by specifying the license fields in pyproject.toml. (#3522) * Updated exceptions to save and restore more properties during the pickle/serialization process. (#3567) * Added verify_flags option to create_urllib3_context with a default of VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python 3.13+. (#3571) * Fixed a bug with partial reads of streaming data in Emscripten. (#3555) * Switched to uv for installing development dependecies. (#3550) * Removed the multiple.intoto.jsonl asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (#3566) - 2.3.0: * Added HTTPResponse.shutdown() to stop any ongoing or future reads for a specific response. It calls shutdown(SHUT_RD) on the underlying socket. This feature was sponsored by LaunchDarkly. (#2868) * Added support for JavaScript Promise Integration on Emscripten. This enables more efficient WebAssembly requests and streaming, and makes it possible to use in Node.js if you launch it as node --experimental-wasm-stack-switching. (#3400) * Added the proxy_is_tunneling property to HTTPConnection and HTTPSConnection. (#3285) * Added pickling support to NewConnectionError and NameResolutionError. (#3480) * Fixed an issue in debug logs where the HTTP version was rendering as "HTTP/11" instead of "HTTP/1.1". (#3489) * Removed support for Python 3.8. (#3492) Daniel Garcia 2025-05-27 09:29:34 +00:00
  • cc10ddd9a4 - Update to 2.4.0 * Applied PEP 639 by specifying the license fields in pyproject.toml. (#3522) * Updated exceptions to save and restore more properties during the pickle/serialization process. (#3567) * Added verify_flags option to create_urllib3_context with a default of VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python 3.13+. (#3571) * Fixed a bug with partial reads of streaming data in Emscripten. (#3555) * Switched to uv for installing development dependecies. (#3550) * Removed the multiple.intoto.jsonl asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (#3566) - 2.3.0: * Added HTTPResponse.shutdown() to stop any ongoing or future reads for a specific response. It calls shutdown(SHUT_RD) on the underlying socket. This feature was sponsored by LaunchDarkly. (#2868) * Added support for JavaScript Promise Integration on Emscripten. This enables more efficient WebAssembly requests and streaming, and makes it possible to use in Node.js if you launch it as node --experimental-wasm-stack-switching. (#3400) * Added the proxy_is_tunneling property to HTTPConnection and HTTPSConnection. (#3285) * Added pickling support to NewConnectionError and NameResolutionError. (#3480) * Fixed an issue in debug logs where the HTTP version was rendering as "HTTP/11" instead of "HTTP/1.1". (#3489) * Removed support for Python 3.8. (#3492) Daniel Garcia 2025-05-27 09:29:34 +00:00
  • af9a86ac19 - Skip test_close_after_handshake flaky test, it fails sometimes in ppc64le and s390x architectures, bsc#1243583 Daniel Garcia 2025-05-27 08:55:03 +00:00
  • 08a914ed14 - Skip test_close_after_handshake flaky test, it fails sometimes in ppc64le and s390x architectures, bsc#1243583 Daniel Garcia 2025-05-27 08:55:03 +00:00
  • 2e3a3af491 Accepting request 1232162 from devel:languages:python Ana Guerrero 2024-12-19 20:40:18 +00:00
  • ceff2a421d Accepting request 1232162 from devel:languages:python Ana Guerrero 2024-12-19 20:40:18 +00:00
  • c9bda474fd - Skip some flaky tests that fail sometimes in OBS (bsc#1234681) Daniel Garcia 2024-12-19 10:26:30 +00:00
  • ce7b454f3a Accepting request 1232160 from home:dgarcia:branches:devel:languages:python Daniel Garcia 2024-12-19 10:26:30 +00:00
  • 9860f9689b Accepting request 1231820 from devel:languages:python Ana Guerrero 2024-12-18 19:09:10 +00:00
  • 11370b615c Accepting request 1231820 from devel:languages:python Ana Guerrero 2024-12-18 19:09:10 +00:00
  • ef1a31c0b1 - Ignore DeprecationWarning in tests (bsc#1234681) Daniel Garcia 2024-12-18 08:42:44 +00:00
  • 0b62990bc0 - Ignore DeprecationWarning in tests (bsc#1234681) Daniel Garcia 2024-12-18 08:42:44 +00:00
  • a5d1101265 Accepting request 1205339 from devel:languages:python Ana Guerrero 2024-10-03 16:00:38 +00:00
  • d4a491d904 Accepting request 1205339 from devel:languages:python Ana Guerrero 2024-10-03 16:00:38 +00:00
  • e84edfbd9b Fiddle with changelog Steve Kowalik 2024-10-03 05:11:07 +00:00
  • ce3b02b945 Fiddle with changelog Steve Kowalik 2024-10-03 05:11:07 +00:00
  • a6661b64be - Update to 2.2.3: * Features + Added support for Python 3.13. * Bugfixes + Fixed the default encoding of chunked request bodies to be UTF-8 instead of ISO-8859-1. All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0. + Fixed ResourceWarning on CONNECT with Python < 3.11.4 by backporting python/cpython#103472. + Fixed a crash where certain standard library hash functions were absent in restricted environments. + Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect. + Allowed passing negative integers as amt to read methods of http.client.HTTPResponse as an alternative to None. + Fixed issue where InsecureRequestWarning was emitted for HTTPS connections when using Emscripten. + Fixed HTTPConnectionPool.urlopen to stop automatically casting non-proxy headers to HTTPHeaderDict. This change was premature as it did not apply to proxy headers and HTTPHeaderDict does not handle byte header values correctly yet. + Changed InvalidChunkLength to ProtocolError when response terminates before the chunk length is sent. + Changed ProtocolError to be more verbose on incomplete reads with excess content. + Added support for HTTPResponse.read1() method. + Fixed issue where requests against urls with trailing dots were failing due to SSL errors when using proxy. + Fixed HTTPConnection.proxy_is_verified and Steve Kowalik 2024-09-24 05:07:08 +00:00
  • 994aa4ef3e - Update to 2.2.3: * Features + Added support for Python 3.13. * Bugfixes + Fixed the default encoding of chunked request bodies to be UTF-8 instead of ISO-8859-1. All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0. + Fixed ResourceWarning on CONNECT with Python < 3.11.4 by backporting python/cpython#103472. + Fixed a crash where certain standard library hash functions were absent in restricted environments. + Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect. + Allowed passing negative integers as amt to read methods of http.client.HTTPResponse as an alternative to None. + Fixed issue where InsecureRequestWarning was emitted for HTTPS connections when using Emscripten. + Fixed HTTPConnectionPool.urlopen to stop automatically casting non-proxy headers to HTTPHeaderDict. This change was premature as it did not apply to proxy headers and HTTPHeaderDict does not handle byte header values correctly yet. + Changed InvalidChunkLength to ProtocolError when response terminates before the chunk length is sent. + Changed ProtocolError to be more verbose on incomplete reads with excess content. + Added support for HTTPResponse.read1() method. + Fixed issue where requests against urls with trailing dots were failing due to SSL errors when using proxy. + Fixed HTTPConnection.proxy_is_verified and Steve Kowalik 2024-09-24 05:07:08 +00:00
  • 259b7264d6 Accepting request 1181456 from devel:languages:python Ana Guerrero 2024-06-18 20:50:46 +00:00
  • ffabb69f87 Accepting request 1181456 from devel:languages:python Ana Guerrero 2024-06-18 20:50:46 +00:00
  • 0a96b5f06e - Add CVE-2024-37891.patch (bsc#1226469) Markéta Machová 2024-06-18 09:56:35 +00:00
  • 8f299cb2ff Accepting request 1181452 from home:mcalabkova:branches:devel:languages:python:patch Markéta Machová 2024-06-18 09:56:35 +00:00
  • 020c67f782 Accepting request 1138118 from devel:languages:python Ana Guerrero 2024-01-12 22:44:33 +00:00
  • 08d8a1b841 Accepting request 1138118 from devel:languages:python Ana Guerrero 2024-01-12 22:44:33 +00:00
  • 95eb7884e4 - Add upstream patch openssl-3.2.patch, to fix tests with opennssl 3.2.0, gh#urllib3/urllib3#3271 Daniel Garcia 2024-01-11 11:49:26 +00:00
  • 8c2f1e9b92 - Add upstream patch openssl-3.2.patch, to fix tests with opennssl 3.2.0, gh#urllib3/urllib3#3271 Daniel Garcia 2024-01-11 11:49:26 +00:00
  • 6533ff8336 Accepting request 1130850 from devel:languages:python Ana Guerrero 2023-12-05 16:02:48 +00:00
  • d7d150f7d8 Accepting request 1130850 from devel:languages:python Ana Guerrero 2023-12-05 16:02:48 +00:00
  • e748795144 - update to 2.1.0: * Removed support for the deprecated urllib3[secure] extra. * Removed support for the deprecated SecureTransport TLS implementation. * Removed support for the end-of-life Python 3.7. * Allowed loading CA certificates from memory for proxies. * Fixed decoding Gzip-encoded responses which specified `x-gzip` content-encoding. Dirk Mueller 2023-11-27 20:30:05 +00:00
  • de9f9463f1 - update to 2.1.0: * Removed support for the deprecated urllib3[secure] extra. * Removed support for the deprecated SecureTransport TLS implementation. * Removed support for the end-of-life Python 3.7. * Allowed loading CA certificates from memory for proxies. * Fixed decoding Gzip-encoded responses which specified `x-gzip` content-encoding. Dirk Mueller 2023-11-27 20:30:05 +00:00
  • 91110ae749 Accepting request 1118603 from devel:languages:python Ana Guerrero 2023-10-19 20:46:47 +00:00
  • 5487654a7c Accepting request 1118603 from devel:languages:python Ana Guerrero 2023-10-19 20:46:47 +00:00
  • 2e198fd675 - update to 2.0.7 (bsc#1216377, CVE-2023-45803): * Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses. Daniel Garcia 2023-10-18 14:25:18 +00:00
  • 6e851ee99e - update to 2.0.7 (bsc#1216377, CVE-2023-45803): * Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses. Daniel Garcia 2023-10-18 14:25:18 +00:00
  • 027dfe1969 Accepting request 1117485 from devel:languages:python Ana Guerrero 2023-10-13 21:13:49 +00:00
  • 0b3ddc762b Accepting request 1117485 from devel:languages:python Ana Guerrero 2023-10-13 21:13:49 +00:00
  • 761c1d117d Accepting request 1117445 from home:fcrozat:branches:devel:languages:python Matej Cepl 2023-10-12 14:33:44 +00:00
  • 38f3c65f47 Accepting request 1117445 from home:fcrozat:branches:devel:languages:python Matej Cepl 2023-10-12 14:33:44 +00:00
  • b0cb844771 Accepting request 1115892 from devel:languages:python Ana Guerrero 2023-10-06 19:12:45 +00:00
  • f07959f01e Accepting request 1115892 from devel:languages:python Ana Guerrero 2023-10-06 19:12:45 +00:00
  • 71ecb78924 - update to 2.0.6 (bsc#1215968, CVE-2023-43804): * Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect - 2.0.5: * Allowed pyOpenSSL third-party module without any deprecation warning. #3126 * Fixed default blocksize of HTTPConnection classes to match high-level classes. Previously was 8KiB, now 16KiB. #3066 Daniel Garcia 2023-10-05 15:48:58 +00:00
  • 019b8b01df - update to 2.0.6 (bsc#1215968, CVE-2023-43804): * Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect - 2.0.5: * Allowed pyOpenSSL third-party module without any deprecation warning. #3126 * Fixed default blocksize of HTTPConnection classes to match high-level classes. Previously was 8KiB, now 16KiB. #3066 Daniel Garcia 2023-10-05 15:48:58 +00:00
  • 0aa6795e5a Accepting request 1112725 from devel:languages:python Ana Guerrero 2023-09-21 20:20:25 +00:00
  • 31ccd9b7a1 Accepting request 1112725 from devel:languages:python Ana Guerrero 2023-09-21 20:20:25 +00:00
  • 9e2080ddfc * Changed HTTPConnection.request_chunked() to not erroneously emit multiple * Added `urllib3.util.SKIP_HEADER for skipping User-Agent, Accept-Encoding`, - Add missing dependency on python-six (bsc#1150895) - update to 1.25 (bsc#1132663, bsc#1129071, CVE-2019-9740, CVE-2019-11236): * Allow providing a list of headers to strip from requests when redirecting without repeatedly flushing the decoder, to function better on * Accept ca_cert_dir for SSL-related PoolManager configuration. - add python-pyOpenSSL, python-certifi and python-pyasn1 requirements - Comment out test requirements, as tests are disabled anyway, and * Add support for directories of certificate authorities, as * New exception: NewConnectionError, raised when we fail to - Update 0001-Don-t-pin-dependency-to-exact-version.patch * Shuffled around development-related files. If you're maintaining a distro package of urllib3, you may need * Unverified HTTPS requests will trigger a warning on the first * New retry logic and urllib3.util.retry.Retry configuration * All raised exceptions should now wrapped in a urllib3.exceptions.HTTPException-extending exception. urllib3.exceptions.MaxRetryError, including timeout-related exceptions which were previously exempt. Underlying error is * urllib3.exceptions.ConnectionError renamed to * Requesting an empty host will raise * Catch read timeouts over SSL connections as * Fix TLS verification when using a proxy in Python 3.4.1. * Add disable_cache option to urllib3.util.make_headers. * Wrap socket.timeout exception with * Fixed proxy-related bug where connections were being reused * Added socket_options keyword parameter which allows to define * Removed HTTPConnection.tcp_nodelay in favor of * Don't install dummyserver into site-packages as it's only Dirk Mueller 2023-09-21 08:23:11 +00:00
  • b7296f7d04 * Changed HTTPConnection.request_chunked() to not erroneously emit multiple * Added `urllib3.util.SKIP_HEADER for skipping User-Agent, Accept-Encoding`, - Add missing dependency on python-six (bsc#1150895) - update to 1.25 (bsc#1132663, bsc#1129071, CVE-2019-9740, CVE-2019-11236): * Allow providing a list of headers to strip from requests when redirecting without repeatedly flushing the decoder, to function better on * Accept ca_cert_dir for SSL-related PoolManager configuration. - add python-pyOpenSSL, python-certifi and python-pyasn1 requirements - Comment out test requirements, as tests are disabled anyway, and * Add support for directories of certificate authorities, as * New exception: NewConnectionError, raised when we fail to - Update 0001-Don-t-pin-dependency-to-exact-version.patch * Shuffled around development-related files. If you're maintaining a distro package of urllib3, you may need * Unverified HTTPS requests will trigger a warning on the first * New retry logic and urllib3.util.retry.Retry configuration * All raised exceptions should now wrapped in a urllib3.exceptions.HTTPException-extending exception. urllib3.exceptions.MaxRetryError, including timeout-related exceptions which were previously exempt. Underlying error is * urllib3.exceptions.ConnectionError renamed to * Requesting an empty host will raise * Catch read timeouts over SSL connections as * Fix TLS verification when using a proxy in Python 3.4.1. * Add disable_cache option to urllib3.util.make_headers. * Wrap socket.timeout exception with * Fixed proxy-related bug where connections were being reused * Added socket_options keyword parameter which allows to define * Removed HTTPConnection.tcp_nodelay in favor of * Don't install dummyserver into site-packages as it's only Dirk Mueller 2023-09-21 08:23:11 +00:00
  • 053c01be78 Accepting request 1109358 from devel:languages:python Ana Guerrero 2023-09-07 19:12:54 +00:00
  • 75a5048575 Accepting request 1109358 from devel:languages:python Ana Guerrero 2023-09-07 19:12:54 +00:00
  • 65a3dc43cc - update to 1.25.9 (bsc#1177120, CVE-2020-26137): Dirk Mueller 2023-09-06 21:43:15 +00:00
  • d0fe28c368 - update to 1.25.9 (bsc#1177120, CVE-2020-26137): Dirk Mueller 2023-09-06 21:43:15 +00:00
  • 2682ddb5ff Accepting request 1100699 from devel:languages:python Ana Guerrero 2023-07-26 11:22:14 +00:00
  • 7e352a92d4 Accepting request 1100699 from devel:languages:python Ana Guerrero 2023-07-26 11:22:14 +00:00
  • c7e95ee43b - update to 2.0.4: * Added support for union operators to `HTTPHeaderDict * Added BaseHTTPResponse to urllib3.__all__ (#3078 * Fixed `urllib3.connection.HTTPConnection to raise the http.client.connect` audit event to have the same behavior as the standard library HTTP client * Relied on the standard library for checking hostnames in supported PyPy releases Dirk Mueller 2023-07-25 18:37:53 +00:00
  • 33a93f48ea - update to 2.0.4: * Added support for union operators to `HTTPHeaderDict * Added BaseHTTPResponse to urllib3.__all__ (#3078 * Fixed `urllib3.connection.HTTPConnection to raise the http.client.connect` audit event to have the same behavior as the standard library HTTP client * Relied on the standard library for checking hostnames in supported PyPy releases Dirk Mueller 2023-07-25 18:37:53 +00:00
  • 2ff9f6959c Accepting request 1096959 from devel:languages:python Fabian Vogt 2023-07-06 16:28:04 +00:00
  • 53ac5d3711 Accepting request 1096959 from devel:languages:python Fabian Vogt 2023-07-06 16:28:04 +00:00
  • ebc06a4521 - Disable test_deprecated_no_scheme so it needs network connection to run correctly. Daniel Garcia 2023-07-05 11:43:00 +00:00
  • 950622959d - Disable test_deprecated_no_scheme so it needs network connection to run correctly. Daniel Garcia 2023-07-05 11:43:00 +00:00
  • a2ae3b2049 - update to 2.0.3: * Allowed alternative SSL libraries such as LibreSSL, while still issuing a warning as we cannot help users facing issues with implementations other than OpenSSL. * Deprecated URLs which don't have an explicit scheme * Fixed response decoding with Zstandard when compressed data is made of several frames. * Fixed `assert_hostname=False` to correctly skip hostname check. Dirk Mueller 2023-06-19 20:27:38 +00:00
  • b98c002c67 - update to 2.0.3: * Allowed alternative SSL libraries such as LibreSSL, while still issuing a warning as we cannot help users facing issues with implementations other than OpenSSL. * Deprecated URLs which don't have an explicit scheme * Fixed response decoding with Zstandard when compressed data is made of several frames. * Fixed `assert_hostname=False` to correctly skip hostname check. Dirk Mueller 2023-06-19 20:27:38 +00:00
  • e8a8c2a6d9 Accepting request 1087259 from devel:languages:python Dominique Leuenberger 2023-05-19 09:55:22 +00:00
  • bdc2c5de1f Accepting request 1087259 from devel:languages:python Dominique Leuenberger 2023-05-19 09:55:22 +00:00
  • 7b171656b0 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-urllib3?expand=0&rev=157 Dirk Mueller 2023-05-15 15:56:47 +00:00
  • 37e7251f95 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-urllib3?expand=0&rev=157 Dirk Mueller 2023-05-15 15:56:47 +00:00
  • 27eb919afe - update to 2.0.2: * Fixed `HTTPResponse.stream()` to continue yielding bytes if buffered decompressed data was still available to be read even if the underlying socket is closed. This prevents a compressed response from being truncated. Dirk Mueller 2023-05-14 12:37:31 +00:00
  • 99584bdb6f - update to 2.0.2: * Fixed `HTTPResponse.stream()` to continue yielding bytes if buffered decompressed data was still available to be read even if the underlying socket is closed. This prevents a compressed response from being truncated. Dirk Mueller 2023-05-14 12:37:31 +00:00
  • 927c3f301e Ignore a file that does not play well on OBS Steve Kowalik 2023-05-10 07:29:01 +00:00
  • e0dd549ebe Ignore a file that does not play well on OBS Steve Kowalik 2023-05-10 07:29:01 +00:00
  • dc383494bf Drop setuptools BuildRequires Steve Kowalik 2023-05-04 00:49:31 +00:00
  • e2f19e7142 Drop setuptools BuildRequires Steve Kowalik 2023-05-04 00:49:31 +00:00
  • 8342dd0b66 Correct patch name Steve Kowalik 2023-05-03 07:18:28 +00:00
  • 3e7b1f3eb0 Correct patch name Steve Kowalik 2023-05-03 07:18:28 +00:00
  • 9375f787df - Update to 2.0.1: * Fixed a socket leak when fingerprint or hostname verifications fail. * Fixed an error when HTTPResponse.read(0) was the first read call or when the internal response body buffer was otherwise empty. * Removed support for Python 2.7, 3.5, and 3.6. * Removed fallback on certificate commonName in match_hostname() function. * Removed support for Python with an ssl module compiled with LibreSSL, CiscoSSL, wolfSSL, and all other OpenSSL alternatives. * Removed support for OpenSSL versions earlier than 1.1.1. * Removed urllib3.contrib.appengine.AppEngineManager and support for Google App Engine Standard Environment. * Changed ssl_version to instead set the corresponding SSLContext.minimum_version and SSLContext.maximum_version values. * Changed default SSLContext.minimum_version to be TLSVersion.TLSv1_2 in line with Python 3.10. * Changed urllib3.util.create_urllib3_context to not override the system cipher suites with a default value. * Changed multipart/form-data header parameter formatting matches the WHATWG HTML Standard as of 2021-06-10. * Changed HTTPConnection.request() to always use lowercase chunk boundaries when sending requests with Transfer-Encoding: chunked. * Changed enforce_content_length default to True, preventing silent data loss when reading streamed responses. * Changed all parameters in the HTTPConnection and HTTPSConnection constructors to be keyword-only except host and port. * Changed HTTPConnection.getresponse() to set the socket timeout from HTTPConnection.timeout value before reading data from the socket. * Changed name of Retry.BACK0FF_MAX to be Retry.DEFAULT_BACKOFF_MAX. * Changed TLS handshakes to use SSLContext.check_hostname when possible. * Changed the default blocksize to 16KB to match OpenSSL's default read Steve Kowalik 2023-05-03 06:50:37 +00:00
  • ac1b8b3523 - Update to 2.0.1: * Fixed a socket leak when fingerprint or hostname verifications fail. * Fixed an error when HTTPResponse.read(0) was the first read call or when the internal response body buffer was otherwise empty. * Removed support for Python 2.7, 3.5, and 3.6. * Removed fallback on certificate commonName in match_hostname() function. * Removed support for Python with an ssl module compiled with LibreSSL, CiscoSSL, wolfSSL, and all other OpenSSL alternatives. * Removed support for OpenSSL versions earlier than 1.1.1. * Removed urllib3.contrib.appengine.AppEngineManager and support for Google App Engine Standard Environment. * Changed ssl_version to instead set the corresponding SSLContext.minimum_version and SSLContext.maximum_version values. * Changed default SSLContext.minimum_version to be TLSVersion.TLSv1_2 in line with Python 3.10. * Changed urllib3.util.create_urllib3_context to not override the system cipher suites with a default value. * Changed multipart/form-data header parameter formatting matches the WHATWG HTML Standard as of 2021-06-10. * Changed HTTPConnection.request() to always use lowercase chunk boundaries when sending requests with Transfer-Encoding: chunked. * Changed enforce_content_length default to True, preventing silent data loss when reading streamed responses. * Changed all parameters in the HTTPConnection and HTTPSConnection constructors to be keyword-only except host and port. * Changed HTTPConnection.getresponse() to set the socket timeout from HTTPConnection.timeout value before reading data from the socket. * Changed name of Retry.BACK0FF_MAX to be Retry.DEFAULT_BACKOFF_MAX. * Changed TLS handshakes to use SSLContext.check_hostname when possible. * Changed the default blocksize to 16KB to match OpenSSL's default read Steve Kowalik 2023-05-03 06:50:37 +00:00
  • 0f2030b111 Accepting request 1081796 from devel:languages:python Dominique Leuenberger 2023-04-22 19:59:10 +00:00
  • c2b6c67e37 Accepting request 1081796 from devel:languages:python Dominique Leuenberger 2023-04-22 19:59:10 +00:00
  • 06bac857cb Accepting request 1081683 from home:dirkmueller:acdc:as_python3_module Dirk Mueller 2023-04-21 14:01:05 +00:00
  • 00acd29c63 Accepting request 1081683 from home:dirkmueller:acdc:as_python3_module Dirk Mueller 2023-04-21 14:01:05 +00:00
  • eff7ddf428 Accepting request 1073863 from devel:languages:python Dominique Leuenberger 2023-03-25 17:54:04 +00:00
  • a56545f22e Accepting request 1073863 from devel:languages:python Dominique Leuenberger 2023-03-25 17:54:04 +00:00
  • 9fdf098320 * Fix IDNA handling of '<80>' byte Dirk Mueller 2023-03-15 20:47:25 +00:00
  • 30ebc691f3 * Fix IDNA handling of '<80>' byte Dirk Mueller 2023-03-15 20:47:25 +00:00
  • 2ac700f523 - update to 1.26.15: * Fix socket timeout value when `HTTPConnection` is reused * Remove "!" character from the unreserved characters in IPv6 Zone ID parsing * Fix IDNA handling of '€' byte Dirk Mueller 2023-03-14 22:47:38 +00:00
  • 444582fbc7 - update to 1.26.15: * Fix socket timeout value when `HTTPConnection` is reused * Remove "!" character from the unreserved characters in IPv6 Zone ID parsing * Fix IDNA handling of '€' byte Dirk Mueller 2023-03-14 22:47:38 +00:00
  • 59f03c6819 Accepting request 1060116 from devel:languages:python Dominique Leuenberger 2023-01-23 17:30:42 +00:00
  • 7b2511770f Accepting request 1060116 from devel:languages:python Dominique Leuenberger 2023-01-23 17:30:42 +00:00
  • ead6100977 * Fixed parsing of port 0 (zero) returning None, instead of 0. Dirk Mueller 2023-01-21 10:00:32 +00:00