python #624

New issue

Closed

opened 2026-03-03 12:30:53 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 12:30:53 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/fsouza/fake-gcs-server/pull/453
Author: @dependabot[bot]
Created: 3/16/2021
Status: ✅ Merged
Merged: 3/16/2021
Merged by: @dependabot[bot]

Base: main ← Head: dependabot/pip/examples/python/urllib3-1.26.4

📝 Commits (1)

67a4c27 build(deps): bump urllib3 from 1.26.3 to 1.26.4 in /examples/python

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 examples/python/requirements.txt (+1 -1)

📄 Description

Bumps urllib3 from 1.26.3 to 1.26.4.

Release notes

Sourced from urllib3's releases.

1.26.4

⚠️ IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap

Changed behavior of the default SSLContext when connecting to HTTPS proxy during HTTPS requests. The default SSLContext now sets check_hostname=True.

If you or your organization rely on urllib3 consider supporting us via GitHub Sponsors

Changelog

Sourced from urllib3's changelog.

1.26.4 (2021-03-15)

Changed behavior of the default SSLContext when connecting to HTTPS proxy during HTTPS requests. The default SSLContext now sets check_hostname=True.

Commits

a891304 Release 1.26.4
8d65ea1 Merge pull request from GHSA-5phf-pp7p-vc2r
5e34326 Add proper stacklevel to method_allowlist warning
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fsouza/fake-gcs-server/pull/453 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/16/2021 **Status:** ✅ Merged **Merged:** 3/16/2021 **Merged by:** [@dependabot[bot]](https://github.com/apps/dependabot) **Base:** `main` ← **Head:** `dependabot/pip/examples/python/urllib3-1.26.4` --- ### 📝 Commits (1) - [`67a4c27`](https://github.com/fsouza/fake-gcs-server/commit/67a4c278f9a235263242c491bc12880c080c1557) build(deps): bump urllib3 from 1.26.3 to 1.26.4 in /examples/python ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `examples/python/requirements.txt` (+1 -1) </details> ### 📄 Description Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.3 to 1.26.4. <details> <summary>Release notes</summary> Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>. <blockquote> <h2>1.26.4</h2> :warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: <a href="https://urllib3.readthedocs.io/en/latest/v2-roadmap.html">Read more in the v2.0 Roadmap</a> <ul> <li>Changed behavior of the default <code>SSLContext</code> when connecting to HTTPS proxy during HTTPS requests. The default <code>SSLContext</code> now sets <code>check_hostname=True</code>.</li> </ul> If you or your organization rely on urllib3 consider supporting us via <a href="https://github.com/sponsors/urllib3">GitHub Sponsors</a> </blockquote> </details> <details> <summary>Changelog</summary> Sourced from <a href="https://github.com/urllib3/urllib3/blob/1.26.4/CHANGES.rst">urllib3's changelog</a>. <blockquote> <h2>1.26.4 (2021-03-15)</h2> <ul> <li>Changed behavior of the default <code>SSLContext</code> when connecting to HTTPS proxy during HTTPS requests. The default <code>SSLContext</code> now sets <code>check_hostname=True</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/urllib3/urllib3/commit/a8913042b676c510e94fc2b097f6b514ae11a537"><code>a891304</code></a> Release 1.26.4</li> <li><a href="https://github.com/urllib3/urllib3/commit/8d65ea1ecf6e2cdc27d42124e587c1b83a3118b0"><code>8d65ea1</code></a> Merge pull request from GHSA-5phf-pp7p-vc2r</li> <li><a href="https://github.com/urllib3/urllib3/commit/5e3432646ad63749ff0d655c157fe293cdc6c2aa"><code>5e34326</code></a> Add proper stacklevel to method_allowlist warning</li> <li>See full diff in <a href="https://github.com/urllib3/urllib3/compare/1.26.3...1.26.4">compare view</a></li> </ul> </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=urllib3&package-manager=pip&previous-version=1.26.3&new-version=1.26.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- 🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.