Conversation
Bumps [requests](https://github.com/psf/requests) from 2.32.4 to 2.33.0. - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.4...v2.33.0) --- updated-dependencies: - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
|
[puLL-Merge] - psf/requests@v2.32.4..v2.33.0 Diffdiff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000000..6cfdfe4b42
--- /dev/null
+++ .github/CODEOWNERS
@@ -0,0 +1,8 @@
+# Restrict all files related to deploying to
+# require lead maintainer approval.
+
+.github/workflows/ @nateprewitt @sigmavirus24
+.github/CODEOWNERS @nateprewitt @sigmavirus24
+src/requests/__version__.py @nateprewitt @sigmavirus24
+HISTORY.md @nateprewitt @sigmavirus24
+pyproject.toml @nateprewitt @sigmavirus24
diff --git .github/workflows/codeql-analysis.yml .github/workflows/codeql-analysis.yml
index 170391ef09..59ae461954 100644
--- .github/workflows/codeql-analysis.yml
+++ .github/workflows/codeql-analysis.yml
@@ -32,7 +32,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
# We must fetch at least the immediate parents so that if this is
# a pull request then we can checkout the head.
@@ -45,7 +45,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+ uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
with:
languages: "python"
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -56,7 +56,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
- uses: github/codeql-action/autobuild@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+ uses: github/codeql-action/autobuild@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
# ℹ️ Command-line programs to run using the OS shell.
# 📚 https://git.io/JvXDl
@@ -70,4 +70,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+ uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
diff --git .github/workflows/lint.yml .github/workflows/lint.yml
index 52b1fe075e..e213b3b580 100644
--- .github/workflows/lint.yml
+++ .github/workflows/lint.yml
@@ -11,9 +11,9 @@ jobs:
timeout-minutes: 10
steps:
- - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Set up Python
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+ uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: "3.x"
- name: Run pre-commit
diff --git .github/workflows/lock-issues.yml .github/workflows/lock-issues.yml
index 7d5a3c6525..e8fe8a5cc2 100644
--- .github/workflows/lock-issues.yml
+++ .github/workflows/lock-issues.yml
@@ -13,7 +13,7 @@ jobs:
if: github.repository_owner == 'psf'
runs-on: ubuntu-latest
steps:
- - uses: dessant/lock-threads@d42e5f49803f3c4e14ffee0378e31481265dda22 # v5.0.0
+ - uses: dessant/lock-threads@7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7 # v6.0.0
with:
issue-lock-inactive-days: 90
pr-lock-inactive-days: 90
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
new file mode 100644
index 0000000000..a44ac97210
--- /dev/null
+++ .github/workflows/publish.yml
@@ -0,0 +1,95 @@
+name: Publish to PyPI
+
+on:
+ push:
+ tags:
+ - "v*"
+ workflow_dispatch:
+ inputs:
+ test-pypi-only:
+ description: "Publish to Test PyPI only"
+ type: boolean
+ default: true
+
+permissions:
+ contents: read
+
+jobs:
+ build:
+ name: "Build dists"
+ runs-on: "ubuntu-latest"
+ outputs:
+ artifact-id: ${{ steps.upload-artifact.outputs.artifact-id }}
+
+ steps:
+ - name: "Checkout repository"
+ uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
+ with:
+ persist-credentials: false
+
+ - name: "Setup Python"
+ uses: "actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405" # v6.2.0
+ with:
+ python-version: "3.x"
+
+ - name: "Install dependencies"
+ run: python -m pip install build==1.4.0
+
+ - name: "Build dists"
+ run: |
+ SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct) \
+ python -m build
+
+ - name: "Upload dists"
+ uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f"
+ id: upload-artifact
+ with:
+ name: "dist"
+ path: "dist/"
+ if-no-files-found: error
+ retention-days: 5
+
+ publish:
+ name: "Publish"
+ if: startsWith(github.ref, 'refs/tags/')
+ needs: ["build"]
+ permissions:
+ id-token: write
+ runs-on: "ubuntu-latest"
+ environment:
+ name: "publish"
+
+ steps:
+ - name: "Download dists"
+ uses: "actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3" # v8.0.0
+ with:
+ artifact-ids: ${{ needs.build.outputs.artifact-id }}
+ path: "dist/"
+
+ - name: "Publish dists to PyPI"
+ uses: "pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e" # v1.13.0
+ with:
+ attestations: true
+
+ publish-test-pypi:
+ name: "Publish to Test PyPI"
+ if: github.event_name == 'workflow_dispatch'
+ needs: ["build"]
+ permissions:
+ id-token: write
+ runs-on: "ubuntu-latest"
+ environment:
+ name: "testpypi"
+
+ steps:
+ - name: "Download dists"
+ uses: "actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3" # v8.0.0
+ with:
+ artifact-ids: ${{ needs.build.outputs.artifact-id }}
+ path: "dist/"
+
+ - name: "Publish dists to Test PyPI"
+ uses: "pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e" # v1.13.0
+ with:
+ repository-url: https://test.pypi.org/legacy/
+ attestations: true
diff --git .github/workflows/run-tests.yml .github/workflows/run-tests.yml
index 052560153c..c9fd81005e 100644
--- .github/workflows/run-tests.yml
+++ .github/workflows/run-tests.yml
@@ -8,11 +8,12 @@ permissions:
jobs:
build:
runs-on: ${{ matrix.os }}
+ continue-on-error: ${{ matrix.python-version == '3.15-dev' }}
timeout-minutes: 10
strategy:
fail-fast: false
matrix:
- python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13", "pypy-3.10", "pypy-3.11"]
+ python-version: ["3.10", "3.11", "3.12", "3.13", "3.14", "3.15-dev", "pypy-3.11"]
os: [ubuntu-22.04, macOS-latest, windows-latest]
# Pypy-3.11 can't install openssl-sys with rust
# which prevents us from testing in GHA.
@@ -20,14 +21,16 @@ jobs:
- { python-version: "pypy-3.11", os: "windows-latest" }
steps:
- - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Set up Python ${{ matrix.python-version }}
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+ uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: ${{ matrix.python-version }}
cache: 'pip'
allow-prereleases: true
- name: Install dependencies
+ env:
+ PYO3_USE_ABI3_FORWARD_COMPATIBILITY: ${{ matrix.python-version == '3.15-dev' && '1' || '' }}
run: |
make
- name: Run tests
@@ -41,11 +44,11 @@ jobs:
fail-fast: true
steps:
- - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
- - name: 'Set up Python 3.8'
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+ - name: 'Set up Python 3.10'
+ uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
with:
- python-version: '3.8'
+ python-version: '3.10'
- name: Install dependencies
run: |
make
@@ -61,11 +64,11 @@ jobs:
fail-fast: true
steps:
- - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
- - name: 'Set up Python 3.8'
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+ - name: 'Set up Python 3.10'
+ uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
with:
- python-version: '3.8'
+ python-version: '3.10'
- name: Install dependencies
run: |
make
diff --git .pre-commit-config.yaml .pre-commit-config.yaml
index 0a0515cf87..a5b623cc20 100644
--- .pre-commit-config.yaml
+++ .pre-commit-config.yaml
@@ -5,24 +5,12 @@ repos:
rev: v4.4.0
hooks:
- id: check-yaml
- - id: debug-statements
- id: end-of-file-fixer
- id: trailing-whitespace
-- repo: https://github.com/PyCQA/isort
- rev: 5.12.0
+- repo: https://github.com/astral-sh/ruff-pre-commit
+ rev: v0.9.3
hooks:
- - id: isort
-- repo: https://github.com/psf/black
- rev: 23.7.0
- hooks:
- - id: black
+ - id: ruff
+ args: [--fix]
+ - id: ruff-format
exclude: tests/test_lowlevel.py
-- repo: https://github.com/asottile/pyupgrade
- rev: v3.10.1
- hooks:
- - id: pyupgrade
- args: [--py37-plus]
-- repo: https://github.com/PyCQA/flake8
- rev: 6.1.0
- hooks:
- - id: flake8
diff --git AUTHORS.rst AUTHORS.rst
index 6e017c9a91..703a419a34 100644
--- AUTHORS.rst
+++ AUTHORS.rst
@@ -1,17 +1,17 @@
Requests was lovingly created by Kenneth Reitz.
-Keepers of the Crystals
-```````````````````````
+Requests Maintainers
+````````````````````
+- Ian Stapleton Cordasco <graffatcolmingov@gmail.com> `@sigmavirus24 <https://github.com/sigmavirus24>`_.
- Nate Prewitt `@nateprewitt <https://github.com/nateprewitt>`_.
-- Seth M. Larson `@sethmlarson <https://github.com/sethmlarson>`_.
-Previous Keepers of Crystals
-````````````````````````````
+Previous Maintainers
+````````````````````
+
- Kenneth Reitz <me@kennethreitz.org> `@kennethreitz <https://github.com/kennethreitz>`_, reluctant Keeper of the Master Crystal.
- Cory Benfield <cory@lukasa.co.uk> `@lukasa <https://github.com/lukasa>`_
-- Ian Cordasco <graffatcolmingov@gmail.com> `@sigmavirus24 <https://github.com/sigmavirus24>`_.
-
+- Seth M. Larson `@sethmlarson <https://github.com/sethmlarson>`_.
Patches and Suggestionsdiff --git HISTORY.md HISTORY.md
+2.33.0 (2026-03-25)
+Improvements
+Deprecations
+Deprecations
|
Bumps requests from 2.32.4 to 2.33.0.
Release notes
Sourced from requests's releases.
Changelog
Sourced from requests's changelog.
Commits
bc04dfdv2.33.066d21cbMerge commit from fork8b9bc8fMove badges to top of README (#7293)e331a28Remove unused extraction call (#7292)753fd08docs: fix FAQ grammar in httplib2 example774a0b8docs(socks): same block as other sections9c72a41Bump github/codeql-action from 4.33.0 to 4.34.1ebf7190Bump github/codeql-action from 4.32.0 to 4.33.00e4ae38docs: exclude Response.is_permanent_redirect from API docs (#7244)d568f47docs: clarify Quickstart POST example (#6960)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.