Changelog for python312-requests-2.32.3-1.3.noarch.rpm :

* Thu Aug 29 2024 Steve Kowalik - Remove Requires on python-py, it should have been removed earlier.
* Thu Jun 06 2024 Dirk Müller - update to 2.32.3:
* Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter.
* Fixed issue where Requests started failing to run on Python versions compiled without the `ssl` module.
* Wed May 22 2024 Markéta Machová - Update to 2.32.2
* To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we\'ve renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.
* Tue May 21 2024 Markéta Machová - Update to 2.32.1
* Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification, regardless of the value of verify. (bsc#1224788, CVE-2024-35195)
* verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests.
* Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their vendoring surface area.
* Requests has officially added support for CPython 3.12 and dropped support for CPython 3.7.
* Starting in Requests 2.33.0, Requests will migrate to a PEP 517 build system using hatchling.
* Mon Sep 11 2023 Dirk Müller - switch from unmaintained brotlipy to Brotli (same as urllib3)
* Mon Jun 12 2023 Daniel Garcia - Delete requests-no-hardcoded-version.patch- Security Update to 2.31.0 (bsc#1211674): Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential forwarding of Proxy-Authorization headers to destination servers when following HTTPS redirects. When proxies are defined with user info (https://user:passAATTproxy:8080), Requests will construct a Proxy-Authorization header that is attached to the request to authenticate with the proxy. In cases where Requests receives a redirect response, it previously reattached the Proxy-Authorization header incorrectly, resulting in the value being sent through the tunneled connection to the destination server. Users who rely on defining their proxy credentials in the URL are strongly encouraged to upgrade to Requests 2.31.0+ to prevent unintentional leakage and rotate their proxy credentials once the change has been fully deployed. Users who do not use a proxy or do not supply their proxy credentials through the user information portion of their proxy URL are not subject to this vulnerability. Full details can be read in our Github Security Advisory and CVE-2023-32681.
* Fri May 05 2023 Johannes Kastl - add sle15_python_module_pythons
* Thu May 04 2023 Steve Kowalik - Update to 2.30.0:
* Added support for urllib3 2.0. 
* Defer chunked requests to the urllib3 implementation to improve standardization.
* Relax header component requirements to support bytes/str subclasses.
* Thu Feb 16 2023 David Anes - Don\'t upper limit version of charset_normalized at runtime, too.
* Added change to patch: requests-no-hardcoded-version.patch
* Sat Jan 21 2023 Dirk Müller - update to 2.28.2: - Requests now supports charset\\_normalizer 3.x. - Updated MissingSchema exception to suggest https scheme rather than http.- drop requests-allow-charset-normalizer-3.patch (upstream)
* Mon Oct 31 2022 David Anes - allow using newest version of charset-normalizer (3.0+)
* requests-allow-charset-normalizer-3.patch
* Thu Sep 29 2022 Dirk Müller - requires python 3.7 or newer
* Wed Jun 29 2022 Michael Ströder - rebased requests-no-hardcoded-version.patch- update to 2.28.1
* 2.28.1 (2022-06-29) - Improvements + Speed optimization in iter_content with transition to yield from. (#6170) - Dependencies + Added support for chardet 5.0.0 (#6179) + Added support for charset-normalizer 2.1.0 (#6169)
* 2.28.0 (2022-06-09) - Deprecations + warning Requests has officially dropped support for Python 2.7. warning (#6091) + Requests has officially dropped support for Python 3.6 (including pypy3.6). (#6091) - Improvements + Wrap JSON parsing issues in Request\'s JSONDecodeError for payloads without an encoding to make json() API consistent. (#6097) + Parse header components consistently, raising an InvalidHeader error in all invalid cases. (#6154) + Added provisional 3.11 support with current beta build. (#6155) + Requests got a makeover and we decided to paint it black. (#6095) - Bugfixes + Fixed bug where setting CURL_CA_BUNDLE to an empty string would disable cert verification. All Requests 2.x versions before 2.28.0 are affected. (#6074) + Fixed urllib3 exception leak, wrapping urllib3.exceptions.SSLError with requests.exceptions.SSLError for content and iter_content. (#6057) + Fixed issue where invalid Windows registry entires caused proxy resolution to raise an exception rather than ignoring the entry. (#6149) + Fixed issue where entire payload could be included in the error message for JSONDecodeError. (#6036)
* Wed Jan 05 2022 Michael Ströder - update to 2.27.1
* Fixed parsing issue that resulted in the auth component being dropped from proxy URLs. (#6028)
* Tue Jan 04 2022 Dirk Müller - update to 2.27.0:
* Officially added support for Python 3.10. (#5928)
* Added a `requests.exceptions.JSONDecodeError` to unify JSON exceptions between Python 2 and 3. This gets raised in the `response.json()` method, and is backwards compatible as it inherits from previously thrown exceptions. Can be caught from `requests.exceptions.RequestException` as well. (#5856)
* Improved error text for misnamed `InvalidSchema` and `MissingSchema` exceptions. This is a temporary fix until exceptions can be renamed (Schema->Scheme). (#6017)
* Improved proxy parsing for proxy URLs missing a scheme. This will address recent changes to `urlparse` in Python 3.9+. (#5917)
* Fixed defect in `extract_zipped_paths` which could result in an infinite loop for some paths. (#5851)
* Fixed handling for `AttributeError` when calculating length of files obtained by `Tarfile.extractfile()`. (#5239)
* Fixed urllib3 exception leak, wrapping `urllib3.exceptions.InvalidHeader` with `requests.exceptions.InvalidHeader`. (#5914)
* Fixed bug where two Host headers were sent for chunked requests. (#5391)
* Fixed regression in Requests 2.26.0 where `Proxy-Authorization` was incorrectly stripped from all requests sent with `Session.send`. (#5924)
* Fixed performance regression in 2.26.0 for hosts with a large number of proxies available in the environment. (#5924)
* Fixed idna exception leak, wrapping `UnicodeError` with `requests.exceptions.InvalidURL` for URLs with a leading dot (.) in the domain. (#5414)
* Requests support for Python 2.7 and 3.6 will be ending in 2022. While we don\'t have exact dates, Requests 2.27.x is likely to be the last release series providing support.
* Thu Oct 28 2021 Steve Kowalik - Correct {Build,}Requires for charset_normalizer.- Add trustme to BuildRequires for the test suite.
* Tue Oct 26 2021 Dirk Müller - update to 2.26.0: - `Session.send` now correctly resolves proxy configurations from both the Session and Request. Behavior now matches `Session.request`. (#5681) - Fixed a race condition in zip extraction when using Requests in parallel from zip archive. (#5707) - Instead of `chardet`, use the MIT-licensed `charset_normalizer` for Python3 to remove license ambiguity for projects bundling requests. - Requests now supports `idna` 3.x on Python 3. `idna` 2.x will continue to be used on Python 2 installations. (#5711) - The `requests[security]` extra has been converted to a no-op install. PyOpenSSL is no longer the recommended secure option for Requests. (#5867) - Requests has officially dropped support for Python 3.5. (#5867)- drop 5711.patch: upstream
* Thu Jul 01 2021 Steve Kowalik - Skip test_pyopenssl_redirect due to gh#psf/requests#5846
* Thu Feb 04 2021 Dirk Müller - add 5711.patch from upstream instead to remove idna<3 pin
* Wed Feb 03 2021 Ben Greiner - Don\'t pin idna<3 in the egg-info so that depending packages can install the new idna dropping python2