Skip to content

Bump httplib2 from 0.17.4 to 0.20.1 in /megalist_dataflow#39

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/megalist_dataflow/httplib2-0.20.1
Closed

Bump httplib2 from 0.17.4 to 0.20.1 in /megalist_dataflow#39
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/megalist_dataflow/httplib2-0.20.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2021

Copy link
Copy Markdown

Bumps httplib2 from 0.17.4 to 0.20.1.

Changelog

Sourced from httplib2's changelog.

0.20.1

No changes from 0.20.0, re-upload of broken py2 wheel.

0.20.0

IMPORTANT cacerts: remove expired DST Root CA X3, add ISRG Root X1, X2 httplib2/httplib2#200 httplib2/httplib2#203

tls: accept min/max ssl.TLSVersion enum values httplib2/httplib2#191

setup(python_requires=...) may need setuptools update httplib2/httplib2#195

0.19.1

auth header parsing performance optimizations; Thanks to Paul McGuire

Use mock from the standard library on Python>=3.3

0.19.0

auth: parse headers using pyparsing instead of regexp httplib2/httplib2#182

auth: WSSE token needs to be string not bytes httplib2/httplib2#179

0.18.1

explicit build-backend workaround for pip build isolation bug "AttributeError: 'module' object has no attribute 'legacy'" on pip install httplib2/httplib2#169

0.18.0

IMPORTANT security vulnerability CWE-93 CRLF injection Force %xx quote of space, CR, LF characters in uri. Special thanks to Recar https://github.com/Ciyfly for discrete notification. https://cwe.mitre.org/data/definitions/93.html

Commits
  • 4180446 v0.20.1 release
  • a0d1e28 v0.20.0 release
  • 4b7f781 cacerts: add ISRG Root X1, X2
  • f6c2da9 cacerts: Security fix Remove DST Root CA X3, it expires on 2021-09-30
  • ddd0c68 Add python_requires to help pip
  • da32041 Add support for Python 3.8 and 3.9
  • f35d8fb fuzzer: update for new atheris version
  • 37f809f travis: upgrade pypy OS to fix setuptools_scm could not be found
  • 08d6993 tests: test_inject_space failed after bpo-43882 fix
  • df7639f tls: accept min/max ssl.TLSVersion enum values
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [httplib2](https://github.com/httplib2/httplib2) from 0.17.4 to 0.20.1.
- [Release notes](https://github.com/httplib2/httplib2/releases)
- [Changelog](https://github.com/httplib2/httplib2/blob/master/CHANGELOG)
- [Commits](httplib2/httplib2@v0.17.4...v0.20.1)

---
updated-dependencies:
- dependency-name: httplib2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 1, 2021
@dependabot @github

dependabot Bot commented on behalf of github Dec 1, 2021

Copy link
Copy Markdown
Author

Superseded by #47.

@dependabot dependabot Bot closed this Dec 1, 2021
@dependabot dependabot Bot deleted the dependabot/pip/megalist_dataflow/httplib2-0.20.1 branch December 1, 2021 08:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants