Skip to content

Bump requests from 2.31.0 to 2.32.5#399

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/requests-2.32.5
Open

Bump requests from 2.31.0 to 2.32.5#399
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/requests-2.32.5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026

Bumps requests from 2.31.0 to 2.32.5.

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

v2.32.4

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS. (#6926)
  • Dropped support for pypy 3.9 following its end of support. (#6926)

v2.32.3

2.32.3 (2024-05-29)

Bugfixes

  • Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)
  • Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

v2.32.2

2.32.2 (2024-05-21)

Deprecations

  • To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API.

... (truncated)

Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS.
  • Dropped support for pypy 3.9 following its end of support.

2.32.3 (2024-05-29)

Bugfixes

  • Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)
  • Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

2.32.2 (2024-05-21)

Deprecations

  • To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

    A minimal (2-line) example has been provided in the linked PR to ease

... (truncated)

Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [requests](https://github.com/psf/requests) from 2.31.0 to 2.32.5.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.31.0...v2.32.5)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 26, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Coverage

Coverage Report
FileStmtsMissCoverMissing
__init__.py60100% 
__main__.py110%5
cli.py3025681%62, 64, 69, 73, 75, 182–185, 230, 233, 237–238, 240, 277, 280, 289, 334, 338, 505–514, 579, 653, 657, 788–791, 794–795, 820–828, 857, 860, 863–864, 882–885, 887
exceptions.py30100% 
config
   __init__.py60100% 
   api_config.py940100% 
   data_columns.py240100% 
   file_config.py140100% 
   logging_config.py27581%31, 49, 67, 70–71
   notification_config.py540100% 
   search_config.py330100% 
containers
   __init__.py30100% 
   api_responses.py2441295%83, 113–114, 116, 146–147, 149, 179–181, 184, 186
   base_container.py23195%38
   data_containers.py74297%36, 48
   examples.py30100% 
   gtc_api_responses.py100100% 
   search_model.py460100% 
   usedirect.py2570100% 
notifications
   __init__.py100100% 
   apprise.py332233%22–26, 30, 35, 40–44, 54, 67–68, 71–77
   base_notifications.py38294%59, 70
   email_notifications.py594032%36, 38, 45–46, 49, 55–56, 58, 62–63, 67, 84–99, 109–111, 114–123
   multi_provider_notifications.py531669%56, 59, 62–63, 65, 82–83, 107, 120–123, 127–130
   ntfy.py301936%23–25, 29–30, 44, 52–55, 59–60, 70–71, 74–78
   pushbullet.py372629%23–28, 33–34, 48–50, 53–54, 58–61, 65–66, 76–77, 80–84
   pushover.py431076%29, 35–36, 39, 66–67, 71, 83, 86–87
   silent_notifications.py160100% 
   slack.py443325%23–26, 31–32, 46–47, 50–51, 54–55, 59–62, 66–67, 77–78, 81–83, 89–90, 92–93, 100–101, 111–113, 119
   telegram.py433030%23–25, 33, 38–39, 54–63, 67–68, 83, 103–105, 115–116, 119–124
   twilio.py342332%22–26, 30, 38, 43–47, 59–60, 72–73, 76–82
   webhook.py301743%26–32, 39–40, 46, 56–61, 65
providers
   __init__.py90100% 
   base_provider.py52786%79, 110–111, 164–167
providers/going_to_camp
   __init__.py00100% 
   going_to_camp_provider.py1932487%66, 73–75, 79, 81, 83, 129, 132, 186, 275–276, 304, 321, 343–345, 391–394, 399, 564, 568
   rec_areas.py20100% 
providers/recreation_dot_gov
   __init__.py00100% 
   recdotgov_camps.py851187%57–58, 117–118, 121, 136–137, 140–141, 149–150
   recdotgov_provider.py2923687%56, 70, 78, 86, 94, 102, 110, 118, 143–144, 152, 155, 216, 378, 381–382, 406, 451–455, 503–504, 532–533, 647–651, 674–675, 698–699, 799
   recdotgov_tours.py1482980%48, 56, 154–155, 158–159, 162–163, 260–267, 271–279, 282–283, 295–296
providers/usedirect
   __init__.py20100% 
   usedirect.py2533685%76, 84, 92, 100, 146, 150, 153, 188, 196, 200, 338–339, 454, 456, 502–504, 508, 510, 513, 620, 720–728, 732–733, 739–741, 758
   variations.py770100% 
providers/xanterra
   __init__.py00100% 
   yellowstone_lodging.py1751690%56, 67, 103, 107–108, 130–131, 140, 275, 284, 360, 410, 413, 427, 447, 523
search
   __init__.py80100% 
   base_search.py3464287%108, 267, 270–271, 273, 276–277, 297, 301, 406, 409, 411, 414, 420, 428–430, 449–452, 456–458, 460–461, 522, 525–526, 528, 585–588, 634, 641–642, 776, 781, 990, 999, 1001
   search_going_to_camp.py761580%40, 103–104, 106, 109, 119–120, 125, 180, 221, 225, 228–229, 246, 258
   search_recreationdotgov.py140894%135, 163, 173, 241–243, 329, 380
   search_usedirect.py94792%47, 95–96, 99, 112–113, 115
   search_yellowstone.py60788%118, 122, 127–128, 167–168, 178
utils
   __init__.py40100% 
   api_utils.py211338%68–77, 80–82
   configure_camply.py584424%28–31, 33–34, 47–48, 52, 54, 66–71, 75–81, 93, 98–103, 110–111, 115–116, 119–121, 124, 129–132, 136–137
   general_utils.py42490%66–67, 69, 73
   logging_utils.py38392%48–49, 51
   yaml_utils.py47882%66–71, 74–75
TOTAL391662584% 

Tests Skipped Failures Errors Time
108 0 💤 0 ❌ 0 🔥 1m 4s ⏱️

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants