Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of
HTTPAdapter. (#6716)
Fixed issue where Requests started failing to run on Python versions compiled
without the ssl module. (#6724)
v2.32.2
2.32.2 (2024-05-21)
Deprecations
To provide a more stable migration for custom HTTPAdapters impacted
by the CVE changes in 2.32.0, we've renamed _get_connection to
a new public API, get_connection_with_tls_context. Existing custom
HTTPAdapters will need to migrate their code to use this new API.
get_connection is considered deprecated in all versions of Requests>=2.32.0.
A minimal (2-line) example has been provided in the linked PR to ease
migration, but we strongly urge users to evaluate if their custom adapter
is subject to the same issue described in CVE-2024-35195. (#6710)
v2.32.1
2.32.1 (2024-05-20)
Bugfixes
Add missing test certs to the sdist distributed on PyPI.
verify=True now reuses a global SSLContext which should improve
request time variance between first and subsequent requests. It should
also minimize certificate load time on Windows systems when using a Python
version built with OpenSSL 3.x. (#6667)
Requests now supports optional use of character detection
(chardet or charset_normalizer) when repackaged or vendored.
Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of
HTTPAdapter. (#6716)
Fixed issue where Requests started failing to run on Python versions compiled
without the ssl module. (#6724)
2.32.2 (2024-05-21)
Deprecations
To provide a more stable migration for custom HTTPAdapters impacted
by the CVE changes in 2.32.0, we've renamed _get_connection to
a new public API, get_connection_with_tls_context. Existing custom
HTTPAdapters will need to migrate their code to use this new API.
get_connection is considered deprecated in all versions of Requests>=2.32.0.
A minimal (2-line) example has been provided in the linked PR to ease
migration, but we strongly urge users to evaluate if their custom adapter
is subject to the same issue described in CVE-2024-35195. (#6710)
2.32.1 (2024-05-20)
Bugfixes
Add missing test certs to the sdist distributed on PyPI.
verify=True now reuses a global SSLContext which should improve
request time variance between first and subsequent requests. It should
also minimize certificate load time on Windows systems when using a Python
version built with OpenSSL 3.x. (#6667)
Requests now supports optional use of character detection
(chardet or charset_normalizer) when repackaged or vendored.
This enables pip and other projects to minimize their vendoring
surface area. The Response.text() and apparent_encoding APIs
will default to utf-8 if neither library is present. (#6702)
api-change:codebuild: AWS CodeBuild now supports Self-hosted GitHub Actions runners for Github Enterprise
api-change:codeguru-security: This release includes minor model updates and documentation updates.
api-change:elasticache: Update to attributes of TestFailover and minor revisions.
api-change:launch-wizard: This release adds support for describing workload deployment specifications, deploying additional workload types, and managing tags for Launch Wizard resources with API operations.
1.34.116
api-change:acm: add v2 smoke tests and smithy smokeTests trait for SDK testing.
api-change:bedrock-agent: With this release, Knowledge bases for Bedrock adds support for Titan Text Embedding v2.
api-change:bedrock-runtime: This release adds Converse and ConverseStream APIs to Bedrock Runtime
api-change:cloudtrail: CloudTrail Lake returns PartitionKeys in the GetEventDataStore API response. Events are grouped into partitions based on these keys for better query performance. For example, the calendarday key groups events by day, while combining the calendarday key with the hour key groups them by day and hour.
api-change:connect: Adding associatedQueueIds as a SearchCriteria and response field to the SearchRoutingProfiles API
api-change:emr-serverless: The release adds support for spark structured streaming.
api-change:rds: Updates Amazon RDS documentation for Aurora Postgres DBname.
api-change:sagemaker: Adds Model Card information as a new component to Model Package. Autopilot launches algorithm selection for TimeSeries modality to generate AutoML candidates per algorithm.
1.34.115
api-change:athena: Throwing validation errors on CreateNotebook with Name containing /,:,\
api-change:codebuild: AWS CodeBuild now supports manually creating GitHub webhooks
api-change:connect: This release includes changes to DescribeContact API's response by including ConnectedToSystemTimestamp, RoutingCriteria, Customer, Campaign, AnsweringMachineDetectionStatus, CustomerVoiceActivity, QualityMetrics, DisconnectDetails, and SegmentAttributes information from a contact in Amazon Connect.
api-change:glue: Add optional field JobMode to CreateJob and UpdateJob APIs.
api-change:securityhub: Add ROOT type for TargetType model
1.34.114
api-change:dynamodb: Doc-only update for DynamoDB. Specified the IAM actions needed to authorize a user to create a table with a resource-based policy.
api-change:ec2: Providing support to accept BgpAsnExtended attribute
api-change:kafka: Adds ControllerNodeInfo in ListNodes response to support Raft mode for MSK
api-change:swf: This release adds new APIs for deleting activity type and workflow type resources.
1.34.113
api-change:dynamodb: Documentation only updates for DynamoDB.
api-change:iotfleetwise: AWS IoT FleetWise now supports listing vehicles with attributes filter, ListVehicles API is updated to support additional attributes filter.
api-change:managedblockchain: This is a minor documentation update to address the impact of the shut down of the Goerli and Polygon networks.
api-change:codebuild: [botocore] AWS CodeBuild now supports Self-hosted GitHub Actions runners for Github Enterprise
api-change:codeguru-security: [botocore] This release includes minor model updates and documentation updates.
api-change:elasticache: [botocore] Update to attributes of TestFailover and minor revisions.
api-change:launch-wizard: [botocore] This release adds support for describing workload deployment specifications, deploying additional workload types, and managing tags for Launch Wizard resources with API operations.
1.34.116
api-change:acm: [botocore] add v2 smoke tests and smithy smokeTests trait for SDK testing.
api-change:bedrock-agent: [botocore] With this release, Knowledge bases for Bedrock adds support for Titan Text Embedding v2.
api-change:bedrock-runtime: [botocore] This release adds Converse and ConverseStream APIs to Bedrock Runtime
api-change:cloudtrail: [botocore] CloudTrail Lake returns PartitionKeys in the GetEventDataStore API response. Events are grouped into partitions based on these keys for better query performance. For example, the calendarday key groups events by day, while combining the calendarday key with the hour key groups them by day and hour.
api-change:connect: [botocore] Adding associatedQueueIds as a SearchCriteria and response field to the SearchRoutingProfiles API
api-change:emr-serverless: [botocore] The release adds support for spark structured streaming.
api-change:rds: [botocore] Updates Amazon RDS documentation for Aurora Postgres DBname.
api-change:sagemaker: [botocore] Adds Model Card information as a new component to Model Package. Autopilot launches algorithm selection for TimeSeries modality to generate AutoML candidates per algorithm.
1.34.115
api-change:athena: [botocore] Throwing validation errors on CreateNotebook with Name containing /,:,\
api-change:codebuild: [botocore] AWS CodeBuild now supports manually creating GitHub webhooks
api-change:connect: [botocore] This release includes changes to DescribeContact API's response by including ConnectedToSystemTimestamp, RoutingCriteria, Customer, Campaign, AnsweringMachineDetectionStatus, CustomerVoiceActivity, QualityMetrics, DisconnectDetails, and SegmentAttributes information from a contact in Amazon Connect.
api-change:glue: [botocore] Add optional field JobMode to CreateJob and UpdateJob APIs.
api-change:securityhub: [botocore] Add ROOT type for TargetType model
1.34.114
api-change:dynamodb: [botocore] Doc-only update for DynamoDB. Specified the IAM actions needed to authorize a user to create a table with a resource-based policy.
api-change:ec2: [botocore] Providing support to accept BgpAsnExtended attribute
api-change:kafka: [botocore] Adds ControllerNodeInfo in ListNodes response to support Raft mode for MSK
api-change:swf: [botocore] This release adds new APIs for deleting activity type and workflow type resources.
1.34.113
api-change:dynamodb: [botocore] Documentation only updates for DynamoDB.
api-change:iotfleetwise: [botocore] AWS IoT FleetWise now supports listing vehicles with attributes filter, ListVehicles API is updated to support additional attributes filter.
api-change:managedblockchain: [botocore] This is a minor documentation update to address the impact of the shut down of the Goerli and Polygon networks.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the primary-deps group with 5 updates in the / directory:
3.21.1
3.21.2
2.31.0
2.32.3
1.34.74
1.34.117
1.34.74
1.34.117
3.27.1
3.27.2
Updates
marshmallow
from 3.21.1 to 3.21.2Changelog
Sourced from marshmallow's changelog.
Commits
511b8c5
Bump version and update changelog03f56a4
Merge pull request #2264 from marshmallow-code/allow_timestamp_058fbbcd
Encapsulate timestamp boolean check in utils6e72beb
DateTime field: reject timestamp True/False845f573
DateTime field: allow timestamp 0183c411
Merge pull request #2263 from marshmallow-code/pre-commit-ci-update-config2d6e5c2
Use format specifiers instead of percent formata2ee924
[pre-commit.ci] pre-commit autoupdate38dc356
[pre-commit.ci] pre-commit autoupdateccc8c72
Bump sphinx from 7.3.6 to 7.3.7Updates
requests
from 2.31.0 to 2.32.3Release notes
Sourced from requests's releases.
... (truncated)
Changelog
Sourced from requests's changelog.
... (truncated)
Commits
0e322af
v2.32.3e188799
Don't create default SSLContext if ssl module isn't present (#6724)145b539
Merge pull request #6716 from sigmavirus24/bug/6715b1d73dd
Don't use default SSLContext with custom poolmanager kwargs6badbac
Update HISTORY.mda62a2d3
Allow for overriding of specific pool key params88dce9d
v2.32.2c98e4d1
Merge pull request #6710 from nateprewitt/api_rename92075b3
Add deprecation warningaa1461b
Move _get_connection to get_connection_with_tls_contextUpdates
botocore
from 1.34.74 to 1.34.117Changelog
Sourced from botocore's changelog.
... (truncated)
Commits
56fa487
Merge branch 'release-1.34.117'900d9ed
Bumping version to 1.34.1172f04ce2
Update to latest models2cdf7fc
Merge branch 'release-1.34.116'c7d7b96
Merge branch 'release-1.34.116' into develop2d4ada4
Bumping version to 1.34.1162684c02
Update endpoints modeld42df74
Update to latest modelsaea01e5
Merge branch 'release-1.34.115'1f7932b
Merge branch 'release-1.34.115' into developUpdates
boto3
from 1.34.74 to 1.34.117Changelog
Sourced from boto3's changelog.
... (truncated)
Commits
006e016
Merge branch 'release-1.34.117'1b228ea
Bumping version to 1.34.117adb9f74
Add changelog entries from botocorebfcc451
Merge branch 'release-1.34.116'05019ed
Merge branch 'release-1.34.116' into develope2e0979
Bumping version to 1.34.1163372d1d
Add changelog entries from botocore335a1e9
Merge branch 'release-1.34.115'53faaee
Merge branch 'release-1.34.115' into develop70b7e9c
Bumping version to 1.34.115Updates
slack-sdk
from 3.27.1 to 3.27.2Release notes
Sourced from slack-sdk's releases.
Commits
70cf7ba
version 3.27.2a1c0d3e
Fix #1496 Async client uses blocking call when uploading file with v2 (#1498)694ec2f
Fix #1468RichTextElement.elements
items are never promoted to a proper Pyt...059dd68
Omit two websocket_client/websockets tests due to their instability on GitHub...f8906fe
Update pytest-cov requirement from <5,>=2 to >=2,<6 (#1488)2ea061e
Simplify dependencies for dependabot (#1484)b7a2323
Update dependabot.yml (#1481)c490966
Bump codecov/codecov-action from 3 to 4 (#1469)9bb1801
Bump actions/setup-python from 4 to 5 (#1471)6e8462d
Update flake8 requirement from <7,>=5.0.4 to >=5.0.4,<8 (#1474)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show