Skip to content

Update dependency requests to v2.33.0 - autoclosed - #85

Closed
renovate[bot] wants to merge 1 commit into
devfrom
renovate/requests-2.x
Closed

Update dependency requests to v2.33.0 - autoclosed#85
renovate[bot] wants to merge 1 commit into
devfrom
renovate/requests-2.x

Conversation

@renovate

@renovaterenovateBot commented Nov 22, 2025

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

PackageChangeAgeConfidence
requests (source, changelog)==2.32.4==2.33.0ageconfidence

Release Notes

psf/requests (requests)

v2.33.0

Compare Source

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that
    uses Requests, please take a look at #​7271. Give it a try, and report
    any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645requests.utils.extract_zipped_paths now extracts
    contents to a non-deterministic location to prevent malicious file
    replacement. This does not affect default usage of Requests, only
    applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#​7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause
    malformed authentication to be applied to Requests on
    Python 3.11+. (#​7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#​7196)

Documentation

  • Various typo fixes and doc improvements.

v2.32.5

Compare Source

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created
    a new class of issues in Requests that have had negative impact across a number
    of use cases. The Requests team has decided to revert this feature as long term
    maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovaterenovateBot changed the title Update dependency requests to v2.32.5Update dependency requests to v2.33.0Mar 25, 2026
@renovate
renovateBotforce-pushed the renovate/requests-2.x branch from d5a99ae to 0d5fdcfCompareMarch 25, 2026 17:15
@renovaterenovateBot changed the title Update dependency requests to v2.33.0Update dependency requests to v2.33.0 - autoclosedMar 26, 2026
@renovaterenovateBot closed this Mar 26, 2026
@renovate
renovateBot deleted the renovate/requests-2.x branch March 26, 2026 16:29
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants