Skip to content

Bump urllib3 from 1.26.7 to 1.26.8

Dariush Mohandes requested to merge dependabot/pip/urllib3-1.26.8 into master

Created by: dependabot[bot]

Bumps urllib3 from 1.26.7 to 1.26.8.

Release notes

Sourced from urllib3's releases.

1.26.8

If you or your organization rely on urllib3 consider supporting us via GitHub Sponsors.

⚠ urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap

⚠ This release will be the last release supporting Python 3.5. Please upgrade to a non-EOL Python version.

  • Added extra message tourllib3.exceptions.ProxyError when urllib3 detects that a proxy is configured to use HTTPS but the proxy itself appears to only use HTTP.
  • Added a mention of the size of the connection pool when discarding a connection due to the pool being full.
  • Added explicit support for Python 3.11.
  • Deprecated the Retry.MAX_BACKOFF class property in favor of Retry.DEFAULT_MAX_BACKOFF to better match the rest of the default parameter names. Retry.MAX_BACKOFF is removed in v2.0.
  • Changed location of the vendored ssl.match_hostname function from urllib3.packages.ssl_match_hostname to urllib3.util.ssl_match_hostname to ensure Python 3.10+ compatibility after being repackaged by downstream distributors.
  • Fixed absolute imports, all imports are now relative.
Changelog

Sourced from urllib3's changelog.

1.26.8 (2022-01-07)

  • Added extra message tourllib3.exceptions.ProxyError when urllib3 detects that a proxy is configured to use HTTPS but the proxy itself appears to only use HTTP.
  • Added a mention of the size of the connection pool when discarding a connection due to the pool being full.
  • Added explicit support for Python 3.11.
  • Deprecated the Retry.MAX_BACKOFF class property in favor of Retry.DEFAULT_MAX_BACKOFF to better match the rest of the default parameter names. Retry.MAX_BACKOFF is removed in v2.0.
  • Changed location of the vendored ssl.match_hostname function from urllib3.packages.ssl_match_hostname to urllib3.util.ssl_match_hostname to ensure Python 3.10+ compatibility after being repackaged by downstream distributors.
  • Fixed absolute imports, all imports are now relative.
Commits
  • b1f60e4 Release 1.26.8
  • 72e72b8 [1.26] Add explicit support for Python 3.11 to packaging metadata
  • 0435b0c Wrap HTTPS/HTTP proxy mismatch error into ProxyError
  • 25d0454 Revert commit bd816ee8 '[1.26] Add exception wrapper for HTTPS proxy connecti...
  • 109b445 Deprecate BACKOFF_MAX in favor of DEFAULT_BACKOFF_MAX
  • dc279bd [1.26] Point setuptools to use standard library distutils as a fallback
  • dc1e68f [1.26] Upload coverage report if check failed
  • a472d6d [1.26] Remove codecov in favor of GHA artifacts to upload and combine coverag...
  • 6bad9ac Test against Python 3.11
  • 06406c5 [1.26] Mention pool size when discarding connections (#2497)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Merge request reports