Changelog for
python311-urllib3_1-1.26.20-26.4.noarch.rpm :
* Tue Sep 10 2024 Steve Kowalik
- Update to 1.26.20:
* Fixed a crash where certain standard library hash functions were absent in FIPS-compliant environments.
* Replaced deprecated dash-separated setuptools entries in setup.cfg.
* Backported changes to our tests and CI configuration from v2.x to support testing with CPython 3.12 and 3.13.
* Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect.- Drop patch openssl-3.2.patch:
* No longer required.
* Thu Jan 11 2024 Daniel Garcia - Add upstream patch openssl-3.2.patch, to fix tests with opennssl 3.2.0, gh#urllib3/urllib3#3271
* Sun Jan 07 2024 Ben Greiner - Skip tests which hang during SSL handshakes in python312- Switch to PEP517 build
* Wed Oct 18 2023 Daniel Garcia Moreno - update to 1.26.18 (bsc#1216377, CVE-2023-45803):
* Made body stripped from HTTP requests changing the request method to GET after HTTP 303 \"See Other\" redirect responses.
* Thu Oct 05 2023 Daniel Garcia - update to 1.26.17 (bsc#1215968, CVE-2023-43804):
* Added the Cookie header to the list of headers to strip from
* requests when redirecting to a different host. As before,
* different headers can be set via Retry.remove_headers_on_redirect.
* Tue May 23 2023 Dirk Müller - update to 1.26.16:
* Fixed thread-safety issue where accessing a ``PoolManager`` with many distinct origins would cause connection pools to be closed while requests are in progress- drop support-fixed-ssl-shared_ciphers.patch (obsolete)
* Mon May 22 2023 Steve Kowalik - Add patch support-fixed-ssl-shared_ciphers.patch:
* Support changes to the Python interpreter that fixed how ssl.shared_ciphers behaves.
* Mon May 15 2023 Dirk Müller - rename to python-urllib3_1
* Fri Apr 21 2023 Dirk Müller - add sle15_python_module_pythons (jsc#PED-68)
* Thu Apr 13 2023 Matej Cepl - Make calling of %{sle15modernpython} optional.
* Tue Mar 14 2023 Dirk Müller - update to 1.26.15:
* Fix socket timeout value when ``HTTPConnection`` is reused
* Remove \"!\" character from the unreserved characters in IPv6 Zone ID parsing
* Fix IDNA handling of \'<80>\' byte
* Sat Jan 21 2023 Dirk Müller - update to 1.26.14:
* Fixed parsing of port 0 (zero) returning None, instead of 0.
* Removed deprecated getheaders() calls in contrib module.
* Fri Dec 02 2022 John Paul Adrian Glaubitz - update to 1.26.13
* Deprecated the ``HTTPResponse.getheaders()`` and ``HTTPResponse.getheader()`` methods.
* Fixed an issue where parsing a URL with leading zeroes in the port would be rejected even when the port number after removing the zeroes was valid.
* Fixed a deprecation warning when using cryptography v39.0.0.
* Removed the ``<4`` in the ``Requires-Python`` packaging metadata field.
* Sun Oct 23 2022 Ben Greiner - Fix pycache when undbundling six
* Mon Aug 22 2022 Dirk Müller - update to 1.26.12:
* Deprecated the `urllib3[secure]` extra and the `urllib3.contrib.pyopenssl` module. Both will be removed in v2.x. See this `GitHub issue `_ for justification and info on how to migrate.
* Tue Aug 02 2022 Ben Greiner - update to 1.26.11
* Fix OverflowError when TLS is used on some Python versions
* Sun Jul 24 2022 Dirk Müller - update to 1.26.10:
* Removed support for Python 3.5
* Fixed an issue where a ``ProxyError`` recommending configuring the proxy as HTTP instead of HTTPS could appear even when an HTTPS proxy wasn\'t configured.- refresh remove_mock.patch with extra mock usages
* Tue Apr 19 2022 Steve Kowalik - Remove unneeded BuildRequires of mock.
* Tue Apr 05 2022 Ben Greiner - Remove unbundling off ssl.match_hostname.
* It was only done for the primary python3 flavor
* It is bundled for a reason gh#urllib3/urllib3#2439, gh#urllib3/urllib3#2448
* The tests (and probably urllib3 users) use wildcard patterns not supported by the stdlib- Fix undbundling of six for all flavors- Replace brotlipy recommendation and test with python-Brotli (see release notes below)
* Tue Mar 29 2022 Dirk Müller - update to 1.26.9:
* Changed ``urllib3[brotli]`` extra to favor installing Brotli libraries that are still receiving updates like ``brotli`` and ``brotlicffi`` instead of ``brotlipy``. This change does not impact behavior of urllib3, only which dependencies are installed.
* Fixed a socket leaking when ``HTTPSConnection.connect()`` raises an exception.
* Fixed ``server_hostname`` being forwarded from ``PoolManager`` to ``HTTPConnectionPool`` when requesting an HTTP URL. Should only be forwarded when requesting an HTTPS URL.
* Mon Jan 10 2022 Dirk Müller - update to 1.26.8:
* Added extra message to``urllib3.exceptions.ProxyError`` when urllib3 detects that a proxy is configured to use HTTPS but the proxy itself appears to only use HTTP.
* Added a mention of the size of the connection pool when discarding a connection due to the pool being full.
* Added explicit support for Python 3.11.
* Deprecated the ``Retry.MAX_BACKOFF`` class property in favor of ``Retry.DEFAULT_MAX_BACKOFF`` to better match the rest of the default parameter names. ``Retry.MAX_BACKOFF`` is removed in v2.0.
* Changed location of the vendored ``ssl.match_hostname`` function from ``urllib3.packages.ssl_match_hostname`` to ``urllib3.util.ssl_match_hostname`` to ensure Python 3.10+ compatibility after being repackaged by downstream distributors.
* Fixed absolute imports, all imports are now relative.
* Tue Oct 26 2021 Dirk Müller - update to 1.26.7:
* Fixed a bug with HTTPS hostname verification involving IP addresses and lack of SNI.
* Fixed a bug where IPv6 braces weren\'t stripped during certificate hostname matching.
* Tue Jul 13 2021 Markéta Machová - update to 1.26.6
* Deprecated the urllib3.contrib.ntlmpool module.
* Changed HTTPConnection.request_chunked() to not erroneously emit multiple Transfer-Encoding headers in the case that one is already specified.
* Fixed typo in deprecation message to recommend Retry.DEFAULT_ALLOWED_METHODS.
* Sun Jun 06 2021 Dirk Müller - update to 1.26.5 (bsc#1187045, CVE-2021-33503):
* Fixed deprecation warnings emitted in Python 3.10.
* Updated vendored ``six`` library to 1.16.0.
* Improved performance of URL parser when splitting the authority component.
* Tue Mar 16 2021 Dirk Müller - update to 1.26.4:
* Changed behavior of the default ``SSLContext`` when connecting to HTTPS proxy during HTTPS requests. The default ``SSLContext`` now sets ``check_hostname=True``.
* Thu Jan 28 2021 Dirk Müller - update to 1.26.3:
* Fixed bytes and string comparison issue with headers (Pull #2141)
* Changed ``ProxySchemeUnknown`` error message to be more actionable if the user supplies a proxy URL without a scheme. (Pull #2107)
* Fri Jan 01 2021 Benjamin Greiner - Skip test for RECENT_DATE. It is a test purely for developers. To maintain reproducibility, keep upstreams possibly outdated RECENT_DATE in the source code. (bsc#1181571)