Skip to content

Commit

Permalink
Merge #389
Browse files Browse the repository at this point in the history
389: build(deps): bump urllib3 from 1.26.6 to 1.26.7 r=ChrisRBe a=dependabot[bot]

Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.6 to 1.26.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>.</em></p>
<blockquote>
<h2>1.26.7</h2>
<p>:warning: <strong>IMPORTANT: urllib3 v2.0 will drop support for Python 2</strong>: <a href="https://urllib3.readthedocs.io/en/latest/v2-roadmap.html">Read more in the v2.0 Roadmap</a></p>
<ul>
<li>Fixed a bug with HTTPS hostname verification involving IP addresses and lack of SNI</li>
<li>Fixed a bug where IPv6 braces weren't stripped during certificate hostname matching</li>
</ul>
<p><strong>If you or your organization rely on urllib3 consider supporting us via <a href="https://github.com/sponsors/urllib3">GitHub Sponsors</a></strong></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/urllib3/urllib3/blob/1.26.7/CHANGES.rst">urllib3's changelog</a>.</em></p>
<blockquote>
<h2>1.26.7 (2021-09-22)</h2>
<ul>
<li>Fixed a bug with HTTPS hostname verification involving IP addresses and lack
of SNI. (Issue <a href="https://github-redirect.dependabot.com/urllib3/urllib3/issues/2400">#2400</a>)</li>
<li>Fixed a bug where IPv6 braces weren't stripped during certificate hostname
matching. (Issue <a href="https://github-redirect.dependabot.com/urllib3/urllib3/issues/2240">#2240</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/urllib3/urllib3/commit/342aff50ff300d96a58e9be22f27fcee771ce98d"><code>342aff5</code></a> Release 1.26.7</li>
<li><a href="https://github.com/urllib3/urllib3/commit/77acdd13198a41a077294d81d49f6cbc6b028228"><code>77acdd1</code></a> Backport <a href="https://github-redirect.dependabot.com/urllib3/urllib3/issues/2241">#2241</a> and create test for IPv6 proxy cert hostname verification</li>
<li><a href="https://github.com/urllib3/urllib3/commit/906d982ab079ecf7c541e6fd8beb17c84bcc02c1"><code>906d982</code></a> Rely on urllib3 hostname matching for HTTPS proxy validation</li>
<li><a href="https://github.com/urllib3/urllib3/commit/13603ecb4be3bbcd7bd2fd1d650ac659f85a959d"><code>13603ec</code></a> [1.26.x] Reraise error after free in certificate array from PEM loader</li>
<li>See full diff in <a href="https://github.com/urllib3/urllib3/compare/1.26.6...1.26.7">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=urllib3&package-manager=pip&previous-version=1.26.6&new-version=1.26.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • Loading branch information
bors[bot] and dependabot[bot] authored Sep 23, 2021
2 parents a79ef28 + 6e36471 commit 58f5453
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,6 @@ six==1.16.0
toml==0.10.2
typed-ast==1.4.3
typing-extensions==3.10.0.2
urllib3==1.26.6
urllib3==1.26.7
virtualenv==20.8.0
wrapt==1.12.1

0 comments on commit 58f5453

Please sign in to comment.