[PR #132] [MERGED] Bump requests from 2.27.1 to 2.28.0 #177

New issue

Closed

opened 2026-02-27 08:12:13 +03:00 by kerem · 0 comments

kerem commented

2026-02-27 08:12:13 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/kokarare1212/librespot-python/pull/132
Author: @dependabot[bot]
Created: 6/10/2022
Status: ✅ Merged
Merged: 6/12/2022
Merged by: @kokarare1212

Base: main ← Head: dependabot/pip/requests-2.28.0

📝 Commits (1)

a9a6054 Bump requests from 2.27.1 to 2.28.0

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 requirements.txt (+1 -1)

📄 Description

Bumps requests from 2.27.1 to 2.28.0.

Release notes

Sourced from requests's releases.

v2.28.0

2.28.0 (2022-06-09)

Deprecations

⚠️ Requests has officially dropped support for Python 2.7. ⚠️ (#6091)

Requests has officially dropped support for Python 3.6 (including pypy3). (#6091)

Improvements

Wrap JSON parsing issues in Request's JSONDecodeError for payloads without an encoding to make json() API consistent. (#6097)

Parse header components consistently, raising an InvalidHeader error in all invalid cases. (#6154)

Added provisional 3.11 support with current beta build. (#6155)

Requests got a makeover and we decided to paint it black. (#6095)

Bugfixes

Fixed bug where setting CURL_CA_BUNDLE to an empty string would disable cert verification. All Requests 2.x versions before 2.28.0 are affected. (#6074)

Fixed urllib3 exception leak, wrapping urllib3.exceptions.SSLError with requests.exceptions.SSLError for content and iter_content. (#6057)

Fixed issue where invalid Windows registry entires caused proxy resolution to raise an exception rather than ignoring the entry. (#6149)

Fixed issue where entire payload could be included in the error message for JSONDecodeError. (#6079)

New Contributors

@marwanpro made their first contribution in psf/requests#6035

@chyzzqo2 made their first contribution in psf/requests#6036

@Chavithra made their first contribution in psf/requests#6044

@sha016 made their first contribution in psf/requests#5978

@BoboTiG made their first contribution in psf/requests#4766

@davidshivaji made their first contribution in psf/requests#6133

@ogayot made their first contribution in psf/requests#6136

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2280-2022-06-09

Changelog

Sourced from requests's changelog.

2.28.0 (2022-06-09)

Deprecations

⚠️ Requests has officially dropped support for Python 2.7. ⚠️ (#6091)

Requests has officially dropped support for Python 3.6 (including pypy3.6). (#6091)

Improvements

Wrap JSON parsing issues in Request's JSONDecodeError for payloads without an encoding to make json() API consistent. (#6097)

Parse header components consistently, raising an InvalidHeader error in all invalid cases. (#6154)

Added provisional 3.11 support with current beta build. (#6155)

Requests got a makeover and we decided to paint it black. (#6095)

Bugfixes

Fixed bug where setting CURL_CA_BUNDLE to an empty string would disable cert verification. All Requests 2.x versions before 2.28.0 are affected. (#6074)

Fixed urllib3 exception leak, wrapping urllib3.exceptions.SSLError with requests.exceptions.SSLError for content and iter_content. (#6057)

Fixed issue where invalid Windows registry entires caused proxy resolution to raise an exception rather than ignoring the entry. (#6149)

Fixed issue where entire payload could be included in the error message for JSONDecodeError. (#6036)

Commits

da9996f v2.28.0
1dcf3b7 Add GitHub action to automate linting (#6157)
e36f345 Add valdation for header name (#6154)
60865f2 Run 3.11 CI on all platforms (#6155)
3af2f45 Fix output of test_lowlevel tests in case of timeout (#6136)
0f358ea Reduce lock thread runs to daily (#6150)
210095f Tolerate bad registry entries in Windows proxy settings (#6149)
a5e7169 Cleanup the docs sidebar (#6144)
79f2ec3 Grammar fix (#6133)
cb233a1 Fix several ResourceWarnings in test_requests.py (#4766)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/kokarare1212/librespot-python/pull/132 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 6/10/2022 **Status:** ✅ Merged **Merged:** 6/12/2022 **Merged by:** [@kokarare1212](https://github.com/kokarare1212) **Base:** `main` ← **Head:** `dependabot/pip/requests-2.28.0` --- ### 📝 Commits (1) - [`a9a6054`](https://github.com/kokarare1212/librespot-python/commit/a9a605460bcc55d962e037c4fec4e78f5ed6af55) Bump requests from 2.27.1 to 2.28.0 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `requirements.txt` (+1 -1) </details> ### 📄 Description Bumps [requests](https://github.com/psf/requests) from 2.27.1 to 2.28.0. <details> <summary>Release notes</summary> Sourced from <a href="https://github.com/psf/requests/releases">requests's releases</a>. <blockquote> <h2>v2.28.0</h2> <h2>2.28.0 (2022-06-09)</h2> Deprecations <ul> <li>⚠️ Requests has officially dropped support for Python 2.7. ⚠️ (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6091">#6091</a>)</li> <li>Requests has officially dropped support for Python 3.6 (including pypy3). (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6091">#6091</a>)</li> </ul> Improvements <ul> <li>Wrap JSON parsing issues in Request's JSONDecodeError for payloads without an encoding to make <code>json()</code> API consistent. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6097">#6097</a>)</li> <li>Parse header components consistently, raising an InvalidHeader error in all invalid cases. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6154">#6154</a>)</li> <li>Added provisional 3.11 support with current beta build. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6155">#6155</a>)</li> <li>Requests got a makeover and we decided to paint it black. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6095">#6095</a>)</li> </ul> Bugfixes <ul> <li>Fixed bug where setting <code>CURL_CA_BUNDLE</code> to an empty string would disable cert verification. All Requests 2.x versions before 2.28.0 are affected. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6074">#6074</a>)</li> <li>Fixed urllib3 exception leak, wrapping <code>urllib3.exceptions.SSLError</code> with <code>requests.exceptions.SSLError</code> for <code>content</code> and <code>iter_content</code>. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6057">#6057</a>)</li> <li>Fixed issue where invalid Windows registry entires caused proxy resolution to raise an exception rather than ignoring the entry. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6149">#6149</a>)</li> <li>Fixed issue where entire payload could be included in the error message for JSONDecodeError. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6079">#6079</a>)</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/marwanpro"><code>@marwanpro</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/psf/requests/pull/6035">psf/requests#6035</a></li> <li><a href="https://github.com/chyzzqo2"><code>@chyzzqo2</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/psf/requests/pull/6036">psf/requests#6036</a></li> <li><a href="https://github.com/Chavithra"><code>@Chavithra</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/psf/requests/pull/6044">psf/requests#6044</a></li> <li><a href="https://github.com/sha016"><code>@sha016</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/psf/requests/pull/5978">psf/requests#5978</a></li> <li><a href="https://github.com/BoboTiG"><code>@BoboTiG</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/psf/requests/pull/4766">psf/requests#4766</a></li> <li><a href="https://github.com/davidshivaji"><code>@davidshivaji</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/psf/requests/pull/6133">psf/requests#6133</a></li> <li><a href="https://github.com/ogayot"><code>@ogayot</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/psf/requests/pull/6136">psf/requests#6136</a></li> </ul> Full Changelog: <a href="https://github.com/psf/requests/blob/main/HISTORY.md#2280-2022-06-09">https://github.com/psf/requests/blob/main/HISTORY.md#2280-2022-06-09</a> </blockquote> </details> <details> <summary>Changelog</summary> Sourced from <a href="https://github.com/psf/requests/blob/main/HISTORY.md">requests's changelog</a>. <blockquote> <h2>2.28.0 (2022-06-09)</h2> Deprecations <ul> <li>⚠️ Requests has officially dropped support for Python 2.7. ⚠️ (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6091">#6091</a>)</li> <li>Requests has officially dropped support for Python 3.6 (including pypy3.6). (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6091">#6091</a>)</li> </ul> Improvements <ul> <li>Wrap JSON parsing issues in Request's JSONDecodeError for payloads without an encoding to make <code>json()</code> API consistent. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6097">#6097</a>)</li> <li>Parse header components consistently, raising an InvalidHeader error in all invalid cases. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6154">#6154</a>)</li> <li>Added provisional 3.11 support with current beta build. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6155">#6155</a>)</li> <li>Requests got a makeover and we decided to paint it black. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6095">#6095</a>)</li> </ul> Bugfixes <ul> <li>Fixed bug where setting <code>CURL_CA_BUNDLE</code> to an empty string would disable cert verification. All Requests 2.x versions before 2.28.0 are affected. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6074">#6074</a>)</li> <li>Fixed urllib3 exception leak, wrapping <code>urllib3.exceptions.SSLError</code> with <code>requests.exceptions.SSLError</code> for <code>content</code> and <code>iter_content</code>. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6057">#6057</a>)</li> <li>Fixed issue where invalid Windows registry entires caused proxy resolution to raise an exception rather than ignoring the entry. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6149">#6149</a>)</li> <li>Fixed issue where entire payload could be included in the error message for JSONDecodeError. (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6036">#6036</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/psf/requests/commit/da9996fe4dc63356e9467d0a5e10df3d89a8528e"><code>da9996f</code></a> v2.28.0</li> <li><a href="https://github.com/psf/requests/commit/1dcf3b71223b8a5895e7bf28f0c4f4045cfe8af5"><code>1dcf3b7</code></a> Add GitHub action to automate linting (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6157">#6157</a>)</li> <li><a href="https://github.com/psf/requests/commit/e36f34597ca96c40dbb81d63a8fe9ac0860b8dc3"><code>e36f345</code></a> Add valdation for header name (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6154">#6154</a>)</li> <li><a href="https://github.com/psf/requests/commit/60865f21aea4eb319d5b916adcc76de10c64e506"><code>60865f2</code></a> Run 3.11 CI on all platforms (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6155">#6155</a>)</li> <li><a href="https://github.com/psf/requests/commit/3af2f456d8c0a90bd6609f2205cd0b2d0f7f800e"><code>3af2f45</code></a> Fix output of test_lowlevel tests in case of timeout (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6136">#6136</a>)</li> <li><a href="https://github.com/psf/requests/commit/0f358eabe6f8e4c472a5030d9cd513965868bd6c"><code>0f358ea</code></a> Reduce lock thread runs to daily (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6150">#6150</a>)</li> <li><a href="https://github.com/psf/requests/commit/210095fd08f790a1ce640354a91c1a264a291360"><code>210095f</code></a> Tolerate bad registry entries in Windows proxy settings (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6149">#6149</a>)</li> <li><a href="https://github.com/psf/requests/commit/a5e7169e759817ca309f8271c3c4fa79393a22f5"><code>a5e7169</code></a> Cleanup the docs sidebar (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6144">#6144</a>)</li> <li><a href="https://github.com/psf/requests/commit/79f2ec3acc4e24fef6e6ce31ad7b1d4e2f77be31"><code>79f2ec3</code></a> Grammar fix (<a href="https://github-redirect.dependabot.com/psf/requests/issues/6133">#6133</a>)</li> <li><a href="https://github.com/psf/requests/commit/cb233a101d6333cf1895e3f46bde11874fcaba07"><code>cb233a1</code></a> Fix several ResourceWarnings in test_requests.py (<a href="https://github-redirect.dependabot.com/psf/requests/issues/4766">#4766</a>)</li> <li>Additional commits viewable in <a href="https://github.com/psf/requests/compare/v2.27.1...v2.28.0">compare view</a></li> </ul> </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=requests&package-manager=pip&previous-version=2.27.1&new-version=2.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- 🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.