* Fixed a high-severity security issue where decompression-bomb safeguards of
the streaming API were bypassed when HTTP redirects were followed.
(GHSA-38jv-5279-wg99) (bsc#1256331, CVE-2026-21441)
* Started treating ``Retry-After`` times greater than 6 hours as 6 hours by
default. (#3743)
* Fixed ``urllib3.connection.VerifiedHTTPSConnection`` on Emscripten. (#3752)
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-urllib3?expand=0&rev=194
