Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
389: build(deps): bump urllib3 from 1.26.6 to 1.26.7 r=ChrisRBe a=dependabot[bot] Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.6 to 1.26.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>.</em></p> <blockquote> <h2>1.26.7</h2> <p>:warning: <strong>IMPORTANT: urllib3 v2.0 will drop support for Python 2</strong>: <a href="https://urllib3.readthedocs.io/en/latest/v2-roadmap.html">Read more in the v2.0 Roadmap</a></p> <ul> <li>Fixed a bug with HTTPS hostname verification involving IP addresses and lack of SNI</li> <li>Fixed a bug where IPv6 braces weren't stripped during certificate hostname matching</li> </ul> <p><strong>If you or your organization rely on urllib3 consider supporting us via <a href="https://github.com/sponsors/urllib3">GitHub Sponsors</a></strong></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/blob/1.26.7/CHANGES.rst">urllib3's changelog</a>.</em></p> <blockquote> <h2>1.26.7 (2021-09-22)</h2> <ul> <li>Fixed a bug with HTTPS hostname verification involving IP addresses and lack of SNI. (Issue <a href="https://github-redirect.dependabot.com/urllib3/urllib3/issues/2400">#2400</a>)</li> <li>Fixed a bug where IPv6 braces weren't stripped during certificate hostname matching. (Issue <a href="https://github-redirect.dependabot.com/urllib3/urllib3/issues/2240">#2240</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/urllib3/urllib3/commit/342aff50ff300d96a58e9be22f27fcee771ce98d"><code>342aff5</code></a> Release 1.26.7</li> <li><a href="https://github.com/urllib3/urllib3/commit/77acdd13198a41a077294d81d49f6cbc6b028228"><code>77acdd1</code></a> Backport <a href="https://github-redirect.dependabot.com/urllib3/urllib3/issues/2241">#2241</a> and create test for IPv6 proxy cert hostname verification</li> <li><a href="https://github.com/urllib3/urllib3/commit/906d982ab079ecf7c541e6fd8beb17c84bcc02c1"><code>906d982</code></a> Rely on urllib3 hostname matching for HTTPS proxy validation</li> <li><a href="https://github.com/urllib3/urllib3/commit/13603ecb4be3bbcd7bd2fd1d650ac659f85a959d"><code>13603ec</code></a> [1.26.x] Reraise error after free in certificate array from PEM loader</li> <li>See full diff in <a href="https://github.com/urllib3/urllib3/compare/1.26.6...1.26.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=urllib3&package-manager=pip&previous-version=1.26.6&new-version=1.26.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ``@dependabot` rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - ``@dependabot` rebase` will rebase this PR - ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it - ``@dependabot` merge` will merge this PR after your CI passes on it - ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it - ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging - ``@dependabot` reopen` will reopen this PR if it is closed - ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information