Nate Prewitt
90fee0876a
Revert caching a default SSLContext ( #6767 )
2025-06-13 10:42:08 -06:00
AHMAD FAIZ
8ff173b186
Clarify error description in cloning instructions
...
This clarifies the error description in the 'Cloning the repository' section of the README. The current wording mentions 'an error about a bad commit', which is somewhat vague. I've updated it to 'an error about a bad commit timestamp', which more accurately describes the nature of the error referenced in issue #2690 .
This small change improves the clarity of the documentation, helping users better understand the potential issue they might encounter when cloning the repository and why they need to use the specified Git flag.
2025-06-10 07:40:33 -05:00
Jonas Fonseca
3f07f990ac
Fix typo in documentation for verify
2025-06-09 21:54:25 -05:00
Ian Stapleton Cordasco
e57b5bf05c
Add Trusted Publishing Release Workflow
...
Rather than rely on manual releases from a developer laptop, let's use
tag pushes to trigger a workflow to publish artifacts to PyPI. This will
leverage trusted publishing and upload attestations as well.
2025-06-09 21:32:45 -05:00
Ian Stapleton Cordasco
021dc729f0
Polish up release tooling for last manual release
Lint code / lint (push) Has been cancelled
Tests / build (macOS-latest, 3.10) (push) Has been cancelled
Tests / build (macOS-latest, 3.11) (push) Has been cancelled
Tests / build (macOS-latest, 3.12) (push) Has been cancelled
Tests / build (macOS-latest, 3.13) (push) Has been cancelled
Tests / build (macOS-latest, 3.8) (push) Has been cancelled
Tests / build (macOS-latest, 3.9) (push) Has been cancelled
Tests / build (macOS-latest, pypy-3.10) (push) Has been cancelled
Tests / build (macOS-latest, pypy-3.11) (push) Has been cancelled
Tests / build (ubuntu-22.04, 3.10) (push) Has been cancelled
Tests / build (ubuntu-22.04, 3.11) (push) Has been cancelled
Tests / build (ubuntu-22.04, 3.12) (push) Has been cancelled
Tests / build (ubuntu-22.04, 3.13) (push) Has been cancelled
Tests / build (ubuntu-22.04, 3.8) (push) Has been cancelled
Tests / build (ubuntu-22.04, 3.9) (push) Has been cancelled
Tests / build (ubuntu-22.04, pypy-3.10) (push) Has been cancelled
Tests / build (ubuntu-22.04, pypy-3.11) (push) Has been cancelled
Tests / build (windows-latest, 3.10) (push) Has been cancelled
Tests / build (windows-latest, 3.11) (push) Has been cancelled
Tests / build (windows-latest, 3.12) (push) Has been cancelled
Tests / build (windows-latest, 3.13) (push) Has been cancelled
Tests / build (windows-latest, 3.8) (push) Has been cancelled
Tests / build (windows-latest, 3.9) (push) Has been cancelled
Tests / build (windows-latest, pypy-3.10) (push) Has been cancelled
Tests / No Character Detection (push) Has been cancelled
Tests / urllib3 1.x (push) Has been cancelled
2025-06-09 11:39:48 -05:00
Ian Stapleton Cordasco
821770e822
Bump version and add release notes for v2.32.4
2025-06-09 11:39:48 -05:00
Piotr Szlazak
59f8aa2adf
Add netrc file search information to authentication documentation ( #6876 )
2025-06-08 12:47:55 -05:00
Arthur Woimbée
5b4b64c346
Add more tests to prevent regression of CVE 2024 47081
...
Remove workaround not needed since py38 for os.path.expanduser.
2025-06-05 09:55:33 -05:00
danigm
7bc45877a8
Add new test to check netrc auth leak ( #6962 )
...
This patch adds a new test that reproduces the security issue reported
here:
https://seclists.org/oss-sec/2025/q2/204
Doing a request to a malicious url with a prefix like "domain.com:@"
will use the "domain.com" netrc credentials in the request to other
domain.
2025-06-05 06:21:46 -05:00
Nate Prewitt
96ba401c12
Only use hostname to do netrc lookup instead of netloc
2025-06-04 10:39:25 -05:00
Nate Prewitt
7341690e84
Merge pull request #6951 from tswast/patch-1
2025-06-01 11:07:17 -07:00
Tim Sweña
6716d7c9f2
remove links
2025-06-01 09:03:51 -05:00
Ian Stapleton Cordasco
a7e1c745dc
Update docs/conf.py
...
Co-authored-by: Nate Prewitt <nate.prewitt@gmail.com >
2025-05-31 11:59:51 -05:00
Tim Sweña (Swast)
c799b8167a
docs: fix dead links to kenreitz.org
2025-05-21 11:08:05 -05:00
Robin
c65c780849
Add two more tests exercising the adapter ( #6936 )
...
Closes #6935
2025-05-03 11:39:14 -05:00
Nate Prewitt
579cd9f233
Drop pypy 3.9 and add pypy 3.11 support
2025-05-01 21:54:57 -05:00
Nate Prewitt
c54d0347e2
Merge pull request #6939 from psf/dependabot/github_actions/actions/setup-python-5.6.0
2025-04-28 10:36:20 -07:00
dependabot[bot]
991f05dcd9
Bump actions/setup-python from 5.5.0 to 5.6.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.5.0 to 5.6.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](8d9ed9ac5c...a26af69be9support@github.com >
2025-04-28 17:28:05 +00:00
Robin
4ce9520a1c
Update lint workflow to ubuntu-24.04
...
Ubuntu 20.04 was the old default and is no longer supported by GitHub Actions
2025-04-23 07:44:05 -05:00
Ian Stapleton Cordasco
42a1dd640c
Merge pull request #6924 from RichieB2B/rfc5280
...
Add key usage extension to test ca.crt
2025-04-15 21:46:50 -05:00
Nate Prewitt
c4c8e20289
Merge pull request #6925 from psf/dependabot/github_actions/actions/setup-python-5.5.0
...
Bump actions/setup-python from 5.4.0 to 5.5.0
2025-03-31 09:43:07 -07:00
dependabot[bot]
a5cb4284e1
Bump actions/setup-python from 5.4.0 to 5.5.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.4.0 to 5.5.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](42375524e2...8d9ed9ac5csupport@github.com >
2025-03-31 16:31:10 +00:00
Richard van den Berg
2019450b43
Add key usage extension to test ca.crt
2025-03-29 14:53:45 +01:00
Nate Prewitt
1764cc938e
Merge pull request #6899 from duzhuoshanwai/main
...
Docs: Add quotes to prevent Zsh wildcard interpretation.
2025-02-20 10:43:13 -08:00
duzhuoshanwai
e946665c59
Update advanced.rst
...
Add quotes to prevent Zsh wildcard interpretation.
2025-02-19 10:05:28 +08:00
Ian Stapleton Cordasco
8ba805fa93
Merge pull request #6897 from cjwatson/fix-test-certificates
...
Add CA constraint to test CA
2025-02-17 06:40:19 -06:00
Colin Watson
9ebebdef98
Regenerate test certificates
...
Created using the following command with OpenSSL 3.4.0:
for cert in expired mtls valid/server; do
make -C tests/certs/$cert clean all
done
2025-02-17 00:41:30 +00:00
Colin Watson
5074096613
Add CA constraint to test CA
...
Otherwise recent versions of OpenSSL reject it as an invalid CA
certificate (at least once the test certificates are regenerated).
Fixes : #6896
2025-02-17 00:39:07 +00:00
Nate Prewitt
1b7c37ef4e
Merge pull request #6529 from anupam-arista/patch-1
2025-02-13 08:49:49 -08:00
anupam-arista
5d31ddbf7b
Update src/requests/models.py
...
Co-authored-by: Ian Stapleton Cordasco <graffatcolmingov@gmail.com >
2025-02-12 17:58:07 +05:30
anupam-arista
a2fd25ff34
Update models.py
2025-02-11 21:28:59 +05:30
anupam-arista
d96f9982a2
Update src/requests/models.py
...
Co-authored-by: Ian Stapleton Cordasco <graffatcolmingov@gmail.com >
2025-02-11 21:25:29 +05:30
anupam-arista
b25f2b5ec2
Merge branch 'psf:main' into patch-1
2025-02-11 07:49:26 +05:30
Nate Prewitt
f761e74a4d
Merge pull request #6880 from jakobheine/td/remove-urlrequired-from-docs
...
docs(exceptions): Remove unused exception URLRequired from documentation
2025-02-10 13:13:26 -08:00
Nate Prewitt
f2a6ae5e32
Merge pull request #6883 from psf/dependabot/github_actions/actions/setup-python-5.4.0
...
Bump actions/setup-python from 5.3.0 to 5.4.0
2025-02-03 08:58:57 -08:00
dependabot[bot]
11f63a330b
Bump actions/setup-python from 5.3.0 to 5.4.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.3.0 to 5.4.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](0b93645e9f...42375524e2support@github.com >
2025-02-03 16:27:40 +00:00
jakobheine
e361622fae
docs(exceptions): Remove unused exception URLRequired from documentation
...
The documentation previously listed `requests.URLRequired` as a valid
exception, suggesting it would be raised for invalid URLs. However,
this exception has been dead code since commit ab27027me@jakobheine.de >
2025-02-01 19:42:06 +00:00
Nate Prewitt
fe0583ba49
Merge pull request #6875 from psf/dependabot/github_actions/github/codeql-action-3.28.5
...
Bump github/codeql-action from 3.27.0 to 3.28.5
2025-01-27 09:39:35 -08:00
dependabot[bot]
8c36da656d
Bump github/codeql-action from 3.27.0 to 3.28.5
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.27.0 to 3.28.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](662472033e...f6091c0113support@github.com >
2025-01-27 16:56:12 +00:00
anupam-arista
b653d80ded
Merge branch 'psf:main' into patch-1
2024-12-13 05:08:45 +05:30
Ian Stapleton Cordasco
23540c93ca
Merge pull request #6824 from psf/nateprewitt-patch-1
...
Remove old macOS runners
2024-11-10 10:18:36 -06:00
Nate Prewitt
ad959acfcf
Remove old macOS runners
2024-11-09 22:50:30 -07:00
Nate Prewitt
a6cf27a77f
Update vulnerability disclosure process ( #6820 )
...
* Update contact point for Vulnerability disclosures
* Fix RedHat Contact
* Point vulnerabilities.rst to our .SECURITY file
2024-11-02 13:13:02 -07:00
Nate Prewitt
ed0b1b5802
Merge pull request #6817 from psf/dependabot/github_actions/actions/setup-python-5.3.0
...
Bump actions/setup-python from 5.2.0 to 5.3.0
2024-10-28 10:24:23 -06:00
Nate Prewitt
1f16cffa43
Merge pull request #6818 from psf/dependabot/github_actions/github/codeql-action-3.27.0
...
Bump github/codeql-action from 3.26.0 to 3.27.0
2024-10-28 10:24:12 -06:00
dependabot[bot]
9787d0c09c
Bump github/codeql-action from 3.26.0 to 3.27.0
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.26.0 to 3.27.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](eb055d739a...662472033esupport@github.com >
2024-10-28 16:05:20 +00:00
dependabot[bot]
26664fa578
Bump actions/setup-python from 5.2.0 to 5.3.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.2.0 to 5.3.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](f677139bbe...0b93645e9fsupport@github.com >
2024-10-28 16:05:11 +00:00
Nate Prewitt
7335bbf480
Merge pull request #6803 from psf/dependabot/github_actions/actions/checkout-4.2.0
...
Bump actions/checkout from 4.1.0 to 4.2.0
2024-09-30 10:32:21 -07:00
dependabot[bot]
0bff2d94e6
Bump actions/checkout from 4.1.0 to 4.2.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8ade135a41...d632683dd7support@github.com >
2024-09-30 16:34:20 +00:00
Ian Stapleton Cordasco
1ae6fc3137
Merge pull request #6802 from graingert/3.13
...
start testing on 3.13rc
2024-09-19 06:19:03 -05:00
