Skip to content

Bump urllib3 from 1.25.9 to 1.25.10

Guillaume Everarts de Velp requested to merge dependabot/pip/urllib3-1.25.10 into master

Created by: dependabot-preview[bot]

Bumps urllib3 from 1.25.9 to 1.25.10.

Release notes

Sourced from urllib3's releases.

1.25.10

Release: 1.25.10

Changelog

Sourced from urllib3's changelog.

1.25.10 (2020-07-22)

  • Added support for SSLKEYLOGFILE environment variable for logging TLS session keys with use with programs like Wireshark for decrypting captured web traffic (Pull #1867)
  • Fixed loading of SecureTransport libraries on macOS Big Sur due to the new dynamic linker cache (Pull #1905)
  • Collapse chunked request bodies data and framing into one call to send() to reduce the number of TCP packets by 2-4x (Pull #1906)
  • Don't insert None into ConnectionPool if the pool was empty when requesting a connection (Pull #1866)
  • Avoid hasattr call in BrotliDecoder.decompress() (Pull #1858)
Commits
  • 3c3fb02 Release 1.25.10
  • 2e977dc [1.25] Add hardcoded paths to macOS frameworks for Big Sur compatibility. (#1...
  • d69dbbe [1.25] Collapse request chunked data and framing into one send() call (#1906)
  • f5ebafd [1.25] Fix testing of SSLKEYLOGFILE on AppVeyor
  • 97a2adc [1.25] Feature/support env var sslkeylogfile (#1867)
  • 7bef8c6 [1.25] Use nox version that works with Python 3.5.2
  • 1b2294f [1.25] Fix linting for flake8 v3.8
  • 57afd59 [1.25] Don't insert 'None' into ConnectionPool if it was empty
  • 7a4a7a1 [1.25] Change TARPIT_HOST to detect isolated network (#1862)
  • 80ac9a6 [1.25] Avoid hasattr in BrotliDecoder.decompress()
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Merge request reports