requests-2.32.2 (Python module)

[Bruce Dubbs]

New minor version.

[Bruce Dubbs]

2.32.1 (2024-05-20)

Bugfixes

• Add missing test certs to the sdist distributed on PyPI.

2.32.0 (2024-05-20)

Security

• Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the _same origin_ to also ignore cert verification, regardless of the value of verify. (​https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56)

Improvements

• verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests. It should also minimize certificate load time on Windows systems when using a Python version built with OpenSSL 3.x.
• Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their vendoring surface area. The Response.text() and apparent_encoding APIs will default to utf-8 if neither library is present.

Bugfixes

• Fixed bug in length detection where emoji length was incorrectly calculated in the request content-length.
• Fixed deserialization bug in JSONDecodeError.
• Fixed bug where an extra leading / (path separator) could lead urllib3 to unnecessarily reparse the request URI.

Deprecations

• Requests has officially added support for CPython 3.12
• Requests has officially added support for PyPy 3.9 and 3.10
• Requests has officially dropped support for CPython 3.7 (
• Requests has officially dropped support for PyPy 3.7 and 3.8

Documentation

• Various typo fixes and doc improvements.

Packaging

• Requests has started adopting some modern packaging practices. The source files for the projects (formerly requests) is now located in src/requests in the Requests sdist.
• Starting in Requests 2.33.0, Requests will migrate to a PEP 517 build system using hatchling. This should not impact the average user, but extremely old versions of packaging utilities may have issues with the new packaging format.

[Bruce Dubbs]

Fixed at commits

6246e0842a Update to sentry_sdk-2.2.1 (Python module).
c6c8877c7e Update to lxml-5.2.2 (Python module).
2996a54605 Mako-1.3.4 (Python module).
421e473976 Update to gi_docgen-2024.1 (Python module).
d498165b94 Update to requests-2.32.1 (Python module).

[Bruce Dubbs]

Now version 2.32.2.

[Bruce Dubbs]

2.32.2 (2024-05-21)

Deprecations

• To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

A minimal (2-line) example has been provided to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195.