[SYCL] [DOC] Add OpenCL and Level-Zero extension for assert error code #3522
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
added 2 commits
April 9, 2021 17:26
Signed-off-by: Sergey Kanaev <[email protected]>
Signed-off-by: Sergey Kanaev <[email protected]>
Signed-off-by: Sergey Kanaev <[email protected]>
sarnex
pushed a commit
that referenced
this pull request
May 1, 2025
…18283) Bumps the llvm-docs-requirements group in /llvm/docs with 7 updates: | Package | From | To | | --- | --- | --- | | [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.13.3` | `4.13.4` | | [certifi](https://github.com/certifi/python-certifi) | `2025.1.31` | `2025.4.26` | | [markdown](https://github.com/Python-Markdown/markdown) | `3.7` | `3.8` | | [packaging](https://github.com/pypa/packaging) | `24.2` | `25.0` | | [soupsieve](https://github.com/facelessuser/soupsieve) | `2.6` | `2.7` | | [sphinx-automodapi](https://github.com/astropy/sphinx-automodapi) | `0.18.0` | `0.19.0` | | [urllib3](https://github.com/urllib3/urllib3) | `2.3.0` | `2.4.0` | Updates `beautifulsoup4` from 4.13.3 to 4.13.4 Updates `certifi` from 2025.1.31 to 2025.4.26 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/certifi/python-certifi/commit/275c9eb55733a464589c15fb4566fddd4598e5b2"><code>275c9eb</code></a> 2025.04.26 (<a href="https://redirect.github.com/certifi/python-certifi/issues/347">#347</a>)</li> <li><a href="https://github.com/certifi/python-certifi/commit/37883310b51e56570919cdc2d44becc1c6940559"><code>3788331</code></a> Bump actions/setup-python from 5.4.0 to 5.5.0 (<a href="https://redirect.github.com/certifi/python-certifi/issues/346">#346</a>)</li> <li><a href="https://github.com/certifi/python-certifi/commit/9d1f1b782000baedf57026de5b79e193bcb7ef7b"><code>9d1f1b7</code></a> Bump actions/download-artifact from 4.1.9 to 4.2.1 (<a href="https://redirect.github.com/certifi/python-certifi/issues/344">#344</a>)</li> <li><a href="https://github.com/certifi/python-certifi/commit/96b97a5afe26bc1adef98cb0bfe68e34948a73b6"><code>96b97a5</code></a> Bump actions/upload-artifact from 4.6.1 to 4.6.2 (<a href="https://redirect.github.com/certifi/python-certifi/issues/343">#343</a>)</li> <li><a href="https://github.com/certifi/python-certifi/commit/c054ed3ac3d3505efc929b71cfd87a257bbdb6b3"><code>c054ed3</code></a> Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (<a href="https://redirect.github.com/certifi/python-certifi/issues/342">#342</a>)</li> <li><a href="https://github.com/certifi/python-certifi/commit/44547fc77121b12bb276b44b3b2b49cfcbeac06f"><code>44547fc</code></a> Bump actions/download-artifact from 4.1.8 to 4.1.9 (<a href="https://redirect.github.com/certifi/python-certifi/issues/341">#341</a>)</li> <li><a href="https://github.com/certifi/python-certifi/commit/5ea51247afecf1bf4ebfa8f2db3082e89a8bfaed"><code>5ea5124</code></a> Bump actions/upload-artifact from 4.6.0 to 4.6.1 (<a href="https://redirect.github.com/certifi/python-certifi/issues/340">#340</a>)</li> <li><a href="https://github.com/certifi/python-certifi/commit/2f142b7ae0b2d13fee4ba4b9fbd73a9cd5069060"><code>2f142b7</code></a> Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 (<a href="https://redirect.github.com/certifi/python-certifi/issues/339">#339</a>)</li> <li><a href="https://github.com/certifi/python-certifi/commit/80d2ebdc77d2d005f408f789fe2fb1fe5f4e0265"><code>80d2ebd</code></a> Bump actions/setup-python from 5.3.0 to 5.4.0 (<a href="https://redirect.github.com/certifi/python-certifi/issues/337">#337</a>)</li> <li>See full diff in <a href="https://github.com/certifi/python-certifi/compare/2025.01.31...2025.04.26">compare view</a></li> </ul> </details> <br /> Updates `markdown` from 3.7 to 3.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Python-Markdown/markdown/releases">markdown's releases</a>.</em></p> <blockquote> <h2>Release 3.8</h2> <h3>Changed</h3> <ul> <li>DRY fix in <code>abbr</code> extension by introducing method <code>create_element</code> (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1483">#1483</a>).</li> <li>Clean up test directory by removing some redundant tests and port non-redundant cases to the newer test framework.</li> <li>Improved performance of the raw HTML post-processor (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1510">#1510</a>).</li> </ul> <h3>Fixed</h3> <ul> <li>Backslash Unescape IDs set via <code>attr_list</code> on <code>toc</code> (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1493">#1493</a>).</li> <li>Ensure <code>md_in_html</code> processes content inside "markdown" blocks as they are parsed outside of "markdown" blocks to keep things more consistent for third-party extensions (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1503">#1503</a>).</li> <li><code>md_in_html</code> handle tags within inline code blocks better (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1075">#1075</a>).</li> <li><code>md_in_html</code> fix handling of one-liner block HTML handling (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1074">#1074</a>).</li> <li>Ensure <code><center></code> is treated like a block-level element (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1481">#1481</a>).</li> <li>Ensure that <code>abbr</code> extension respects <code>AtomicString</code> and does not process perceived abbreviations in these strings (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1512">#1512</a>).</li> <li>Ensure <code>smarty</code> extension correctly renders nested closing quotes (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1514">#1514</a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md">markdown's changelog</a>.</em></p> <blockquote> <p>title: Changelog toc_depth: 2</p> <h1>Python-Markdown Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>The format is based on <a href="https://keepachangelog.com/en/1.1.0/">Keep a Changelog</a>, and this project adheres to <a href="https://semver.org/spec/v2.0.0.html">Semantic Versioning</a>. See the <a href="https://github.com/Python-Markdown/markdown/blob/master/docs/contributing.md">Contributing Guide</a> for details.</p> <h2>[Unreleased]</h2> <h3>Fixed</h3> <ul> <li>Fixed dropped content in <code>md_in_html</code> (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1526">#1526</a>).</li> <li>Fixed HTML handling corner case that prevented some content from not being rendered (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1528">#1528</a>).</li> </ul> <h2>[3.8.0] - 2025-04-09</h2> <h3>Changed</h3> <ul> <li>DRY fix in <code>abbr</code> extension by introducing method <code>create_element</code> (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1483">#1483</a>).</li> <li>Clean up test directory by removing some redundant tests and port non-redundant cases to the newer test framework.</li> <li>Improved performance of the raw HTML post-processor (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1510">#1510</a>).</li> </ul> <h3>Fixed</h3> <ul> <li>Backslash Unescape IDs set via <code>attr_list</code> on <code>toc</code> (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1493">#1493</a>).</li> <li>Ensure <code>md_in_html</code> processes content inside "markdown" blocks as they are parsed outside of "markdown" blocks to keep things more consistent for third-party extensions (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1503">#1503</a>).</li> <li><code>md_in_html</code> handle tags within inline code blocks better (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1075">#1075</a>).</li> <li><code>md_in_html</code> fix handling of one-liner block HTML handling (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1074">#1074</a>).</li> <li>Ensure <code><center></code> is treated like a block-level element (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1481">#1481</a>).</li> <li>Ensure that <code>abbr</code> extension respects <code>AtomicString</code> and does not process perceived abbreviations in these strings (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1512">#1512</a>).</li> <li>Ensure <code>smarty</code> extension correctly renders nested closing quotes (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1514">#1514</a>).</li> </ul> <h2>[3.7.0] - 2024-08-16</h2> <h3>Changed</h3> <ul> <li> <p>Refactor <code>abbr</code> Extension</p> <p>A new <code>AbbrTreeprocessor</code> has been introduced, which replaces the now deprecated <code>AbbrInlineProcessor</code>. Abbreviation processing now happens after Attribute Lists, avoiding a conflict between the two extensions (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1460">#1460</a>).</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Python-Markdown/markdown/commit/b34e1d03387be771aa626241fe56f8f0c34243f2"><code>b34e1d0</code></a> Bump version to 3.8</li> <li><a href="https://github.com/Python-Markdown/markdown/commit/e6b71632726c049ab9a7a1b42e816a67f422064b"><code>e6b7163</code></a> Update deploy workflow to normalize version</li> <li><a href="https://github.com/Python-Markdown/markdown/commit/bd67d4862b388c7c2dd1ae90635c633472c2c77c"><code>bd67d48</code></a> Improve changelog validation</li> <li><a href="https://github.com/Python-Markdown/markdown/commit/e912575a903215ebafaeb0fecbdad079d998b9ba"><code>e912575</code></a> Fix incorrect TOC list structure in docs</li> <li><a href="https://github.com/Python-Markdown/markdown/commit/42d4b4336e97485b96c1e4e9fcdb4e8df2501217"><code>42d4b43</code></a> Fix CI badge in README</li> <li><a href="https://github.com/Python-Markdown/markdown/commit/1caf02892487cead069cb0c4bcdd1e876ca6b590"><code>1caf028</code></a> Optimize raw HTML post-processor (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1510">#1510</a>)</li> <li><a href="https://github.com/Python-Markdown/markdown/commit/f6cfc5cca3dd2c313d2fa547b7c88dac656ae506"><code>f6cfc5c</code></a> Use PEP 639 license expressions in project metadata</li> <li><a href="https://github.com/Python-Markdown/markdown/commit/9c6e39ace5e928f37854b3bf1010b209a79e2d63"><code>9c6e39a</code></a> Add Python 3.13 and drop Python 3.8</li> <li><a href="https://github.com/Python-Markdown/markdown/commit/7aae61bea185a4a5c0c48be2619ccc1d294aa381"><code>7aae61b</code></a> Add special case for closing nested quotes</li> <li><a href="https://github.com/Python-Markdown/markdown/commit/0ad5b0abf9560255cf9d24234f7de64c0411ab98"><code>0ad5b0a</code></a> Abbr should respect AtomicStrings</li> <li>Additional commits viewable in <a href="https://github.com/Python-Markdown/markdown/compare/3.7...3.8">compare view</a></li> </ul> </details> <br /> Updates `packaging` from 24.2 to 25.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/packaging/releases">packaging's releases</a>.</em></p> <blockquote> <h2>25.0</h2> <h2>What's Changed</h2> <ul> <li>Re-add a test for Unicode file name parsing by <a href="https://github.com/Siddhesh-Agarwal"><code>@Siddhesh-Agarwal</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/863">pypa/packaging#863</a></li> <li>Upgrade to ruff 0.9.1 by <a href="https://github.com/DimitriPapadopoulos"><code>@DimitriPapadopoulos</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/865">pypa/packaging#865</a></li> <li>Add support for PEP 738 Android tags by <a href="https://github.com/mhsmith"><code>@mhsmith</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/880">pypa/packaging#880</a></li> <li>feat(markers): support 'extras' and 'dependency_groups' markers by <a href="https://github.com/frostming"><code>@frostming</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/888">pypa/packaging#888</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Siddhesh-Agarwal"><code>@Siddhesh-Agarwal</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/packaging/pull/863">pypa/packaging#863</a></li> <li><a href="https://github.com/mhsmith"><code>@mhsmith</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/packaging/pull/880">pypa/packaging#880</a></li> <li><a href="https://github.com/frostming"><code>@frostming</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/packaging/pull/888">pypa/packaging#888</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/packaging/compare/24.2...25.0">https://github.com/pypa/packaging/compare/24.2...25.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/packaging/blob/main/CHANGELOG.rst">packaging's changelog</a>.</em></p> <blockquote> <p>25.0 - 2025-04-19</p> <pre><code> * PEP 751: Add support for ``extras`` and ``dependency_groups`` markers. (:issue:`885`) * PEP 738: Add support for Android platform tags. (:issue:`880`) </code></pre> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/packaging/commit/f58537628042c7f29780b9d33f31597e7fc9d664"><code>f585376</code></a> Bump for release</li> <li><a href="https://github.com/pypa/packaging/commit/600ecea15b2388037b8dc94883504ca612947576"><code>600ecea</code></a> Add changelog entries</li> <li><a href="https://github.com/pypa/packaging/commit/3910129009b25dd1aa1fe32e644bc891188c56fe"><code>3910129</code></a> support 'extras' and 'dependency_groups' markers (<a href="https://redirect.github.com/pypa/packaging/issues/888">#888</a>)</li> <li><a href="https://github.com/pypa/packaging/commit/8e49b4373731bffb110c9583e64ad802cb67c7ea"><code>8e49b43</code></a> Add support for PEP 738 Android tags (<a href="https://redirect.github.com/pypa/packaging/issues/880">#880</a>)</li> <li><a href="https://github.com/pypa/packaging/commit/e624d8edfaa28865de7b5a7da8bd59fd410e5331"><code>e624d8e</code></a> Bump the github-actions group with 3 updates (<a href="https://redirect.github.com/pypa/packaging/issues/886">#886</a>)</li> <li><a href="https://github.com/pypa/packaging/commit/71f38d872a6e88b28da9d1b270f8512475bc90d4"><code>71f38d8</code></a> Bump the github-actions group with 2 updates (<a href="https://redirect.github.com/pypa/packaging/issues/878">#878</a>)</li> <li><a href="https://github.com/pypa/packaging/commit/9b4922dd3c26c8522d716bec79d7e0ed408631c1"><code>9b4922d</code></a> Bump the github-actions group with 3 updates (<a href="https://redirect.github.com/pypa/packaging/issues/870">#870</a>)</li> <li><a href="https://github.com/pypa/packaging/commit/8510bd9d3bab5571974202ec85f6ef7b0359bfaf"><code>8510bd9</code></a> Upgrade to ruff 0.9.1 (<a href="https://redirect.github.com/pypa/packaging/issues/865">#865</a>)</li> <li><a href="https://github.com/pypa/packaging/commit/9375ec2eff48257967c97d331b9a76019e95bdb0"><code>9375ec2</code></a> Re-add tests for Unicode file name parsing (<a href="https://redirect.github.com/pypa/packaging/issues/863">#863</a>)</li> <li><a href="https://github.com/pypa/packaging/commit/2256ed4ac261309a09daa04cc801abd7cff2e6f0"><code>2256ed4</code></a> Bump the github-actions group across 1 directory with 2 updates (<a href="https://redirect.github.com/pypa/packaging/issues/864">#864</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pypa/packaging/compare/24.2...25.0">compare view</a></li> </ul> </details> <br /> Updates `soupsieve` from 2.6 to 2.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facelessuser/soupsieve/releases">soupsieve's releases</a>.</em></p> <blockquote> <h2>2.7</h2> <ul> <li><strong>NEW</strong>: Add <code>:open</code> pseudo selector.</li> <li><strong>NEW</strong>: Add <code>:muted</code> pseudo selector.</li> <li><strong>NEW</strong>: Recognize the following pseudo selectors: <code>:autofill</code>, <code>:buffering</code>, <code>:fullscreen</code>, <code>:picture-in-picture</code>, <code>:popover-open</code>, <code>:seeking</code>, <code>:stalled</code>, and <code>:volume-locked</code>. These selectors, while recognized, will not match any element as they require a live environment to check element states and browser states. This just prevents Soup Sieve from failing when any of these selectors are specified.</li> <li><strong>NEW</strong>: A number of existing pseudo-classes are no longer noted as experimental.</li> <li><strong>FIX</strong>: Typing fixes.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facelessuser/soupsieve/commit/a616022df73ddc5ecb71092155be9baba876b52d"><code>a616022</code></a> Link license in readme</li> <li><a href="https://github.com/facelessuser/soupsieve/commit/6b22489422a9a7080adb2f465b1e0eaf7672603d"><code>6b22489</code></a> Add new selectors and move some existing selectors out of experimental (<a href="https://redirect.github.com/facelessuser/soupsieve/issues/280">#280</a>)</li> <li><a href="https://github.com/facelessuser/soupsieve/commit/48be2ee7e99d786d22187990e0d9751a07f3e038"><code>48be2ee</code></a> Branch specifiers on badge do not work</li> <li><a href="https://github.com/facelessuser/soupsieve/commit/fcb3aaf85d1842814abab3887a7d7c0860d85f77"><code>fcb3aaf</code></a> Actually update badge</li> <li><a href="https://github.com/facelessuser/soupsieve/commit/fef91c705f2957e826a092d8601aa1d4623d0932"><code>fef91c7</code></a> Update build badge</li> <li><a href="https://github.com/facelessuser/soupsieve/commit/6fdce6992755e58739f138d42ff2da9755950447"><code>6fdce69</code></a> Fix some typing issues revealed with latest BS4 (<a href="https://redirect.github.com/facelessuser/soupsieve/issues/279">#279</a>)</li> <li><a href="https://github.com/facelessuser/soupsieve/commit/6470b9de3bd18949a75ed9fb6f3d311f31c68b96"><code>6470b9d</code></a> Fix a typo in faq.md (<a href="https://redirect.github.com/facelessuser/soupsieve/issues/277">#277</a>)</li> <li><a href="https://github.com/facelessuser/soupsieve/commit/a8080d97a0355e316981cb0c5c887a861c4244e3"><code>a8080d9</code></a> Typos: Remove duplicate words</li> <li>See full diff in <a href="https://github.com/facelessuser/soupsieve/compare/2.6...2.7">compare view</a></li> </ul> </details> <br /> Updates `sphinx-automodapi` from 0.18.0 to 0.19.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astropy/sphinx-automodapi/releases">sphinx-automodapi's releases</a>.</em></p> <blockquote> <h2>v0.19.0</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>MAINT: adding python 3.13 to the tests by <a href="https://github.com/bsipocz"><code>@bsipocz</code></a> in <a href="https://redirect.github.com/astropy/sphinx-automodapi/pull/191">astropy/sphinx-automodapi#191</a></li> <li>MNT: Use hash for Action workflow versions and update if needed by <a href="https://github.com/pllim"><code>@pllim</code></a> in <a href="https://redirect.github.com/astropy/sphinx-automodapi/pull/192">astropy/sphinx-automodapi#192</a></li> <li>Compatibility with Sphinx 8.2, minor clean up by <a href="https://github.com/pllim"><code>@pllim</code></a> in <a href="https://redirect.github.com/astropy/sphinx-automodapi/pull/196">astropy/sphinx-automodapi#196</a></li> <li>DOC: Unpin outdated RTD sphinx maxversion by <a href="https://github.com/pllim"><code>@pllim</code></a> in <a href="https://redirect.github.com/astropy/sphinx-automodapi/pull/199">astropy/sphinx-automodapi#199</a></li> <li>Add option to document properties using autoproperty instead of autoattribute by <a href="https://github.com/WilliamJamieson"><code>@WilliamJamieson</code></a> in <a href="https://redirect.github.com/astropy/sphinx-automodapi/pull/197">astropy/sphinx-automodapi#197</a></li> <li>MAINT: some generic cleanups by <a href="https://github.com/bsipocz"><code>@bsipocz</code></a> in <a href="https://redirect.github.com/astropy/sphinx-automodapi/pull/206">astropy/sphinx-automodapi#206</a></li> <li>CI: install all test dependencies for test job by <a href="https://github.com/bsipocz"><code>@bsipocz</code></a> in <a href="https://redirect.github.com/astropy/sphinx-automodapi/pull/207">astropy/sphinx-automodapi#207</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/WilliamJamieson"><code>@WilliamJamieson</code></a> made their first contribution in <a href="https://redirect.github.com/astropy/sphinx-automodapi/pull/197">astropy/sphinx-automodapi#197</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/astropy/sphinx-automodapi/compare/v0.18.0...v0.19.0">https://github.com/astropy/sphinx-automodapi/compare/v0.18.0...v0.19.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/astropy/sphinx-automodapi/blob/main/CHANGES.rst">sphinx-automodapi's changelog</a>.</em></p> <blockquote> <h2>0.19.0 (2025-04-17)</h2> <ul> <li> <p>Add <code>automodsumm_properties_are_attributes</code> configuration to control if class properties are treated with <code>autoattribute</code> or <code>autoproperty</code>. <a href="https://redirect.github.com/astropy/sphinx-automodapi/issues/197">#197</a></p> </li> <li> <p>Fixes compatibility with Sphinx 8.2. <a href="https://redirect.github.com/astropy/sphinx-automodapi/issues/196">#196</a></p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astropy/sphinx-automodapi/commit/58f82096ab8e528d08a13a8613d16b939d0fbb50"><code>58f8209</code></a> Finalizing changelog for v0.19.0</li> <li><a href="https://github.com/astropy/sphinx-automodapi/commit/6a95b555b921a9b9632f27a7dbfc438ee20a9acc"><code>6a95b55</code></a> CI: hacking around wildchar</li> <li><a href="https://github.com/astropy/sphinx-automodapi/commit/4963a9e2f4deb5dda9129bcb85dde97014b9ed18"><code>4963a9e</code></a> Merge pull request <a href="https://redirect.github.com/astropy/sphinx-automodapi/issues/207">#207</a> from bsipocz/MAINT_fix_release_job</li> <li><a href="https://github.com/astropy/sphinx-automodapi/commit/be65dd11cd7abb8e535c1fc9fe62068f2d67c452"><code>be65dd1</code></a> CI: install actual test dependencies from config rather than manually listing...</li> <li><a href="https://github.com/astropy/sphinx-automodapi/commit/fac5a71f5630d8d6ef384fcb66da720229d4797a"><code>fac5a71</code></a> Merge pull request <a href="https://redirect.github.com/astropy/sphinx-automodapi/issues/206">#206</a> from bsipocz/MAINT_bot_cleanup</li> <li><a href="https://github.com/astropy/sphinx-automodapi/commit/5a5d9ced88c01476867be314e5388dc7201c64f2"><code>5a5d9ce</code></a> MAINT: adding mailmap to cleanup duplicates</li> <li><a href="https://github.com/astropy/sphinx-automodapi/commit/27ce711ac71f1b1ac61717fcd5bab5a736b85ec2"><code>27ce711</code></a> MAINT: exclude bots from release notes</li> <li><a href="https://github.com/astropy/sphinx-automodapi/commit/3db7b8d794a2783634078ca4ea45192ed50426a3"><code>3db7b8d</code></a> Merge pull request <a href="https://redirect.github.com/astropy/sphinx-automodapi/issues/202">#202</a> from astropy/dependabot/github_actions/actions-f2e6fc...</li> <li><a href="https://github.com/astropy/sphinx-automodapi/commit/c5d3b7fe1928fae6fb463279ee41ca86bafd96d8"><code>c5d3b7f</code></a> Bump actions/setup-python from 5.4.0 to 5.5.0 in the actions group</li> <li><a href="https://github.com/astropy/sphinx-automodapi/commit/54a3ac30762d6fe1c0ee4adab612a94c1e95d9e2"><code>54a3ac3</code></a> Merge pull request <a href="https://redirect.github.com/astropy/sphinx-automodapi/issues/197">#197</a> from WilliamJamieson/autoproperty</li> <li>Additional commits viewable in <a href="https://github.com/astropy/sphinx-automodapi/compare/v0.18.0...v0.19.0">compare view</a></li> </ul> </details> <br /> Updates `urllib3` from 2.3.0 to 2.4.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>.</em></p> <blockquote> <h2>2.4.0</h2> <h2>🚀 urllib3 is fundraising for HTTP/2 support</h2> <p><a href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3 is raising ~$40,000 USD</a> to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects <a href="https://opencollective.com/urllib3">please consider contributing financially</a> to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.</p> <p>Thank you for your support.</p> <h1>Features</h1> <ul> <li>Applied PEP 639 by specifying the license fields in pyproject.toml. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3522">#3522</a>)</li> <li>Updated exceptions to save and restore more properties during the pickle/serialization process. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3567">#3567</a>)</li> <li>Added <code>verify_flags</code> option to <code>create_urllib3_context</code> with a default of <code>VERIFY_X509_PARTIAL_CHAIN</code> and <code>VERIFY_X509_STRICT</code> for Python 3.13+. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3571">#3571</a>)</li> </ul> <h1>Bugfixes</h1> <ul> <li>Fixed a bug with partial reads of streaming data in Emscripten. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3555">#3555</a>)</li> </ul> <h1>Misc</h1> <ul> <li>Switched to uv for installing development dependecies. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3550">#3550</a>)</li> <li>Removed the <code>multiple.intoto.jsonl</code> asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3566">#3566</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3's changelog</a>.</em></p> <blockquote> <h1>2.4.0 (2025-04-10)</h1> <h2>Features</h2> <ul> <li>Applied PEP 639 by specifying the license fields in pyproject.toml. (<code>[#3522](urllib3/urllib3#3522) <https://github.com/urllib3/urllib3/issues/3522></code>__)</li> <li>Updated exceptions to save and restore more properties during the pickle/serialization process. (<code>[#3567](urllib3/urllib3#3567) <https://github.com/urllib3/urllib3/issues/3567></code>__)</li> <li>Added <code>verify_flags</code> option to <code>create_urllib3_context</code> with a default of <code>VERIFY_X509_PARTIAL_CHAIN</code> and <code>VERIFY_X509_STRICT</code> for Python 3.13+. (<code>[#3571](urllib3/urllib3#3571) <https://github.com/urllib3/urllib3/issues/3571></code>__)</li> </ul> <h2>Bugfixes</h2> <ul> <li>Fixed a bug with partial reads of streaming data in Emscripten. (<code>[#3555](urllib3/urllib3#3555) <https://github.com/urllib3/urllib3/issues/3555></code>__)</li> </ul> <h2>Misc</h2> <ul> <li>Switched to uv for installing development dependecies. (<code>[#3550](urllib3/urllib3#3550) <https://github.com/urllib3/urllib3/issues/3550></code>__)</li> <li>Removed the <code>multiple.intoto.jsonl</code> asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (<code>[#3566](urllib3/urllib3#3566) <https://github.com/urllib3/urllib3/issues/3566></code>__)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/urllib3/urllib3/commit/a5ff7ac3bbb8659e2ec3ed41dd43889f06a7d7bc"><code>a5ff7ac</code></a> Release 2.4.0</li> <li><a href="https://github.com/urllib3/urllib3/commit/a135db29f72f828b0ef7314b856d19696a6f48ba"><code>a135db2</code></a> Upgrade memray and coverage to fix macOS tests (<a href="https://redirect.github.com/urllib3/urllib3/issues/3589">#3589</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/8f40e71612505a9985b0a58ad793cd84ec97614a"><code>8f40e71</code></a> Upgrade the publishing action to get correct licensing info on PyPI (<a href="https://redirect.github.com/urllib3/urllib3/issues/3585">#3585</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/3ff4e49ddf889554cf295b4a2e1189d066b60c71"><code>3ff4e49</code></a> Add a link to the 2024 annual report (<a href="https://redirect.github.com/urllib3/urllib3/issues/3586">#3586</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/75709c1dbd6770618f061fd0b8a6950c7741f17b"><code>75709c1</code></a> Set verify flags in <code>create_urllib3_context</code> (<a href="https://redirect.github.com/urllib3/urllib3/issues/3577">#3577</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/5c8f82a2f1c1b7a8360f0c84b5a88f25df070811"><code>5c8f82a</code></a> Bump astral-sh/setup-uv from 5.3.0 to 5.4.1 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3580">#3580</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/42e90d894b30ef8b897708eb1cdfa24e83cf5067"><code>42e90d8</code></a> Bump actions/setup-python from 5.4.0 to 5.5.0 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3579">#3579</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/3e8f2db735dcaced6a3b777aa1966f40c018af7c"><code>3e8f2db</code></a> Stop using Ubuntu 20.04 and 22.04 in CI (<a href="https://redirect.github.com/urllib3/urllib3/issues/3570">#3570</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/e29db82a6df5f9a9acbb6997899f93bda79bb61e"><code>e29db82</code></a> Update exceptions to have more of their attributes pickled (<a href="https://redirect.github.com/urllib3/urllib3/issues/3572">#3572</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/f8a0c4360ad67aefd79317279ee90c72d5d18697"><code>f8a0c43</code></a> Add PyPy 3.11 to CI</li> <li>Additional commits viewable in <a href="https://github.com/urllib3/urllib3/compare/2.3.0...2.4.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
sarnex
pushed a commit
that referenced
this pull request
Jun 20, 2025
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.2.2 to 2.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>.</em></p> <blockquote> <h2>2.5.0</h2> <h2>🚀 urllib3 is fundraising for HTTP/2 support</h2> <p><a href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3 is raising ~$40,000 USD</a> to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects <a href="https://opencollective.com/urllib3">please consider contributing financially</a> to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.</p> <p>Thank you for your support.</p> <h1>Security issues</h1> <p>urllib3 2.5.0 fixes two moderate security issues:</p> <ul> <li>Pool managers now properly control redirects when <code>retries</code> is passed — CVE-2025-50181 reported by <a href="https://github.com/sandumjacob"><code>@sandumjacob</code></a> (5.3 Medium, GHSA-pq67-6m6q-mj2v)</li> <li>Redirects are now controlled by urllib3 in the Node.js runtime — CVE-2025-50182 (5.3 Medium, GHSA-48p4-8xcf-vxj5)</li> </ul> <h1>Features</h1> <ul> <li>Added support for the <code>compression.zstd</code> module that is new in Python 3.14. See <a href="https://peps.python.org/pep-0784/">PEP 784</a> for more information. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3610">#3610</a>)</li> <li>Added support for version 0.5 of <code>hatch-vcs</code> (<a href="https://redirect.github.com/urllib3/urllib3/issues/3612">#3612</a>)</li> </ul> <h1>Bugfixes</h1> <ul> <li>Raised exception for <code>HTTPResponse.shutdown</code> on a connection already released to the pool. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3581">#3581</a>)</li> <li>Fixed incorrect <code>CONNECT</code> statement when using an IPv6 proxy with <code>connection_from_host</code>. Previously would not be wrapped in <code>[]</code>. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3615">#3615</a>)</li> </ul> <h2>2.4.0</h2> <h2>🚀 urllib3 is fundraising for HTTP/2 support</h2> <p><a href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3 is raising ~$40,000 USD</a> to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects <a href="https://opencollective.com/urllib3">please consider contributing financially</a> to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.</p> <p>Thank you for your support.</p> <h1>Features</h1> <ul> <li>Applied PEP 639 by specifying the license fields in pyproject.toml. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3522">#3522</a>)</li> <li>Updated exceptions to save and restore more properties during the pickle/serialization process. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3567">#3567</a>)</li> <li>Added <code>verify_flags</code> option to <code>create_urllib3_context</code> with a default of <code>VERIFY_X509_PARTIAL_CHAIN</code> and <code>VERIFY_X509_STRICT</code> for Python 3.13+. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3571">#3571</a>)</li> </ul> <h1>Bugfixes</h1> <ul> <li>Fixed a bug with partial reads of streaming data in Emscripten. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3555">#3555</a>)</li> </ul> <h1>Misc</h1> <ul> <li>Switched to uv for installing development dependecies. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3550">#3550</a>)</li> <li>Removed the <code>multiple.intoto.jsonl</code> asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3566">#3566</a>)</li> </ul> <h2>2.3.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3's changelog</a>.</em></p> <blockquote> <h1>2.5.0 (2025-06-18)</h1> <h2>Features</h2> <ul> <li>Added support for the <code>compression.zstd</code> module that is new in Python 3.14. See <code>PEP 784 <https://peps.python.org/pep-0784/></code>_ for more information. (<code>[#3610](urllib3/urllib3#3610) <https://github.com/urllib3/urllib3/issues/3610></code>__)</li> <li>Added support for version 0.5 of <code>hatch-vcs</code> (<code>[#3612](urllib3/urllib3#3612) <https://github.com/urllib3/urllib3/issues/3612></code>__)</li> </ul> <h2>Bugfixes</h2> <ul> <li>Fixed a security issue where restricting the maximum number of followed redirects at the <code>urllib3.PoolManager</code> level via the <code>retries</code> parameter did not work.</li> <li>Made the Node.js runtime respect redirect parameters such as <code>retries</code> and <code>redirects</code>.</li> <li>Raised exception for <code>HTTPResponse.shutdown</code> on a connection already released to the pool. (<code>[#3581](urllib3/urllib3#3581) <https://github.com/urllib3/urllib3/issues/3581></code>__)</li> <li>Fixed incorrect <code>CONNECT</code> statement when using an IPv6 proxy with <code>connection_from_host</code>. Previously would not be wrapped in <code>[]</code>. (<code>[#3615](urllib3/urllib3#3615) <https://github.com/urllib3/urllib3/issues/3615></code>__)</li> </ul> <h1>2.4.0 (2025-04-10)</h1> <h2>Features</h2> <ul> <li>Applied PEP 639 by specifying the license fields in pyproject.toml. (<code>[#3522](urllib3/urllib3#3522) <https://github.com/urllib3/urllib3/issues/3522></code>__)</li> <li>Updated exceptions to save and restore more properties during the pickle/serialization process. (<code>[#3567](urllib3/urllib3#3567) <https://github.com/urllib3/urllib3/issues/3567></code>__)</li> <li>Added <code>verify_flags</code> option to <code>create_urllib3_context</code> with a default of <code>VERIFY_X509_PARTIAL_CHAIN</code> and <code>VERIFY_X509_STRICT</code> for Python 3.13+. (<code>[#3571](urllib3/urllib3#3571) <https://github.com/urllib3/urllib3/issues/3571></code>__)</li> </ul> <h2>Bugfixes</h2> <ul> <li>Fixed a bug with partial reads of streaming data in Emscripten. (<code>[#3555](urllib3/urllib3#3555) <https://github.com/urllib3/urllib3/issues/3555></code>__)</li> </ul> <h2>Misc</h2> <ul> <li>Switched to uv for installing development dependecies. (<code>[#3550](urllib3/urllib3#3550) <https://github.com/urllib3/urllib3/issues/3550></code>__)</li> <li>Removed the <code>multiple.intoto.jsonl</code> asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (<code>[#3566](urllib3/urllib3#3566) <https://github.com/urllib3/urllib3/issues/3566></code>__)</li> </ul> <h1>2.3.0 (2024-12-22)</h1> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/urllib3/urllib3/commit/aaab4eccc10c965897540b21e15f11859d0b62e7"><code>aaab4ec</code></a> Release 2.5.0</li> <li><a href="https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f"><code>7eb4a2a</code></a> Merge commit from fork</li> <li><a href="https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857"><code>f05b132</code></a> Merge commit from fork</li> <li><a href="https://github.com/urllib3/urllib3/commit/d03fe327a71d09728512217149f269763671f296"><code>d03fe32</code></a> Fix HTTP tunneling with IPv6 in older Python versions</li> <li><a href="https://github.com/urllib3/urllib3/commit/11661e9bb4278e43d081f47a516e287a928c2206"><code>11661e9</code></a> Bump github/codeql-action from 3.28.0 to 3.29.0 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3624">#3624</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/6a0ecc6b16fe30f721021b44a81d19615098c71e"><code>6a0ecc6</code></a> Update v2 migration guide to 2.4.0 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3621">#3621</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/8e32e60d9024c05bc6f7adda08bdf6c539d0b0d4"><code>8e32e60</code></a> Raise exception for shutdown on a connection already released to the pool (<a href="https://redirect.github.com/urllib3/urllib3/issues/3">#3</a>...</li> <li><a href="https://github.com/urllib3/urllib3/commit/9996e0fbf90b77083ad3c73737a6c6395703faa9"><code>9996e0f</code></a> Fix emscripten CI for Chrome 137+ (<a href="https://redirect.github.com/urllib3/urllib3/issues/3599">#3599</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/4fd1a99a59725faf0efc946ce3b6bc9a194420af"><code>4fd1a99</code></a> Bump RECENT_DATE (<a href="https://redirect.github.com/urllib3/urllib3/issues/3617">#3617</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/c4b5917e911a90c8bf279448df8952a682294135"><code>c4b5917</code></a> Add support for the new <code>compression.zstd</code> module in Python 3.14 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3611">#3611</a>)</li> <li>Additional commits viewable in <a href="https://github.com/urllib3/urllib3/compare/2.2.2...2.5.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/intel/llvm/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
bader
pushed a commit
that referenced
this pull request
Jun 24, 2025
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.2.3 to 2.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>.</em></p> <blockquote> <h2>2.5.0</h2> <h2>🚀 urllib3 is fundraising for HTTP/2 support</h2> <p><a href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3 is raising ~$40,000 USD</a> to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects <a href="https://opencollective.com/urllib3">please consider contributing financially</a> to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.</p> <p>Thank you for your support.</p> <h1>Security issues</h1> <p>urllib3 2.5.0 fixes two moderate security issues:</p> <ul> <li>Pool managers now properly control redirects when <code>retries</code> is passed — CVE-2025-50181 reported by <a href="https://github.com/sandumjacob"><code>@sandumjacob</code></a> (5.3 Medium, GHSA-pq67-6m6q-mj2v)</li> <li>Redirects are now controlled by urllib3 in the Node.js runtime — CVE-2025-50182 (5.3 Medium, GHSA-48p4-8xcf-vxj5)</li> </ul> <h1>Features</h1> <ul> <li>Added support for the <code>compression.zstd</code> module that is new in Python 3.14. See <a href="https://peps.python.org/pep-0784/">PEP 784</a> for more information. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3610">#3610</a>)</li> <li>Added support for version 0.5 of <code>hatch-vcs</code> (<a href="https://redirect.github.com/urllib3/urllib3/issues/3612">#3612</a>)</li> </ul> <h1>Bugfixes</h1> <ul> <li>Raised exception for <code>HTTPResponse.shutdown</code> on a connection already released to the pool. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3581">#3581</a>)</li> <li>Fixed incorrect <code>CONNECT</code> statement when using an IPv6 proxy with <code>connection_from_host</code>. Previously would not be wrapped in <code>[]</code>. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3615">#3615</a>)</li> </ul> <h2>2.4.0</h2> <h2>🚀 urllib3 is fundraising for HTTP/2 support</h2> <p><a href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3 is raising ~$40,000 USD</a> to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects <a href="https://opencollective.com/urllib3">please consider contributing financially</a> to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.</p> <p>Thank you for your support.</p> <h1>Features</h1> <ul> <li>Applied PEP 639 by specifying the license fields in pyproject.toml. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3522">#3522</a>)</li> <li>Updated exceptions to save and restore more properties during the pickle/serialization process. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3567">#3567</a>)</li> <li>Added <code>verify_flags</code> option to <code>create_urllib3_context</code> with a default of <code>VERIFY_X509_PARTIAL_CHAIN</code> and <code>VERIFY_X509_STRICT</code> for Python 3.13+. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3571">#3571</a>)</li> </ul> <h1>Bugfixes</h1> <ul> <li>Fixed a bug with partial reads of streaming data in Emscripten. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3555">#3555</a>)</li> </ul> <h1>Misc</h1> <ul> <li>Switched to uv for installing development dependecies. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3550">#3550</a>)</li> <li>Removed the <code>multiple.intoto.jsonl</code> asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3566">#3566</a>)</li> </ul> <h2>2.3.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3's changelog</a>.</em></p> <blockquote> <h1>2.5.0 (2025-06-18)</h1> <h2>Features</h2> <ul> <li>Added support for the <code>compression.zstd</code> module that is new in Python 3.14. See <code>PEP 784 <https://peps.python.org/pep-0784/></code>_ for more information. (<code>[#3610](urllib3/urllib3#3610) <https://github.com/urllib3/urllib3/issues/3610></code>__)</li> <li>Added support for version 0.5 of <code>hatch-vcs</code> (<code>[#3612](urllib3/urllib3#3612) <https://github.com/urllib3/urllib3/issues/3612></code>__)</li> </ul> <h2>Bugfixes</h2> <ul> <li>Fixed a security issue where restricting the maximum number of followed redirects at the <code>urllib3.PoolManager</code> level via the <code>retries</code> parameter did not work.</li> <li>Made the Node.js runtime respect redirect parameters such as <code>retries</code> and <code>redirects</code>.</li> <li>Raised exception for <code>HTTPResponse.shutdown</code> on a connection already released to the pool. (<code>[#3581](urllib3/urllib3#3581) <https://github.com/urllib3/urllib3/issues/3581></code>__)</li> <li>Fixed incorrect <code>CONNECT</code> statement when using an IPv6 proxy with <code>connection_from_host</code>. Previously would not be wrapped in <code>[]</code>. (<code>[#3615](urllib3/urllib3#3615) <https://github.com/urllib3/urllib3/issues/3615></code>__)</li> </ul> <h1>2.4.0 (2025-04-10)</h1> <h2>Features</h2> <ul> <li>Applied PEP 639 by specifying the license fields in pyproject.toml. (<code>[#3522](urllib3/urllib3#3522) <https://github.com/urllib3/urllib3/issues/3522></code>__)</li> <li>Updated exceptions to save and restore more properties during the pickle/serialization process. (<code>[#3567](urllib3/urllib3#3567) <https://github.com/urllib3/urllib3/issues/3567></code>__)</li> <li>Added <code>verify_flags</code> option to <code>create_urllib3_context</code> with a default of <code>VERIFY_X509_PARTIAL_CHAIN</code> and <code>VERIFY_X509_STRICT</code> for Python 3.13+. (<code>[#3571](urllib3/urllib3#3571) <https://github.com/urllib3/urllib3/issues/3571></code>__)</li> </ul> <h2>Bugfixes</h2> <ul> <li>Fixed a bug with partial reads of streaming data in Emscripten. (<code>[#3555](urllib3/urllib3#3555) <https://github.com/urllib3/urllib3/issues/3555></code>__)</li> </ul> <h2>Misc</h2> <ul> <li>Switched to uv for installing development dependecies. (<code>[#3550](urllib3/urllib3#3550) <https://github.com/urllib3/urllib3/issues/3550></code>__)</li> <li>Removed the <code>multiple.intoto.jsonl</code> asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (<code>[#3566](urllib3/urllib3#3566) <https://github.com/urllib3/urllib3/issues/3566></code>__)</li> </ul> <h1>2.3.0 (2024-12-22)</h1> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/urllib3/urllib3/commit/aaab4eccc10c965897540b21e15f11859d0b62e7"><code>aaab4ec</code></a> Release 2.5.0</li> <li><a href="https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f"><code>7eb4a2a</code></a> Merge commit from fork</li> <li><a href="https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857"><code>f05b132</code></a> Merge commit from fork</li> <li><a href="https://github.com/urllib3/urllib3/commit/d03fe327a71d09728512217149f269763671f296"><code>d03fe32</code></a> Fix HTTP tunneling with IPv6 in older Python versions</li> <li><a href="https://github.com/urllib3/urllib3/commit/11661e9bb4278e43d081f47a516e287a928c2206"><code>11661e9</code></a> Bump github/codeql-action from 3.28.0 to 3.29.0 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3624">#3624</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/6a0ecc6b16fe30f721021b44a81d19615098c71e"><code>6a0ecc6</code></a> Update v2 migration guide to 2.4.0 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3621">#3621</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/8e32e60d9024c05bc6f7adda08bdf6c539d0b0d4"><code>8e32e60</code></a> Raise exception for shutdown on a connection already released to the pool (<a href="https://redirect.github.com/urllib3/urllib3/issues/3">#3</a>...</li> <li><a href="https://github.com/urllib3/urllib3/commit/9996e0fbf90b77083ad3c73737a6c6395703faa9"><code>9996e0f</code></a> Fix emscripten CI for Chrome 137+ (<a href="https://redirect.github.com/urllib3/urllib3/issues/3599">#3599</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/4fd1a99a59725faf0efc946ce3b6bc9a194420af"><code>4fd1a99</code></a> Bump RECENT_DATE (<a href="https://redirect.github.com/urllib3/urllib3/issues/3617">#3617</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/c4b5917e911a90c8bf279448df8952a682294135"><code>c4b5917</code></a> Add support for the new <code>compression.zstd</code> module in Python 3.14 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3611">#3611</a>)</li> <li>Additional commits viewable in <a href="https://github.com/urllib3/urllib3/compare/2.2.3...2.5.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/intel/llvm/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.