FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

chore(deps): update dependency requests to v2.32.4 [security] by renovate-bot · Pull Request #1304 · GoogleCloudPlatform/cloud-sql-python-connector · GitHub

/ cloud-sql-python-connector Public

chore(deps): update dependency requests to v2.32.4 [security] - #1304

Merged
kgala2 merged 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/pypi-requests-vulnerability
Jul 11, 2025
ConversationCommits (1)ChecksFiles changed
Merged

chore(deps): update dependency requests to v2.32.4 [security]#1304
kgala2 merged 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/pypi-requests-vulnerability

Conversation

renovate-bot commented Jun 10, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
Requests (source, changelog) ==2.32.3 -> ==2.32.4

GitHub Vulnerability Alerts

CVE-2024-47081

Impact

Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.

Workarounds

For older versions of Requests, use of the .netrc file can be disabled with trust_env=False on your Requests Session (docs).

References

https://github.com/psf/requests/pull/6965
https://seclists.org/fulldisclosure/2025/Jun/2

Release Notes

psf/requests (Requests)

v2.32.4

Compare Source

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted
    environment will retrieve credentials for the wrong hostname/machine from a
    netrc file.

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS.
  • Dropped support for pypy 3.9 following its end of support.

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate-bot requested a review from a team as a code owner June 10, 2025 08:44
renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from 373e6d3 to cd224a3 Compare June 10, 2025 17:53

dpebot commented Jun 10, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from cd224a3 to eb17a5c Compare June 11, 2025 00:09

dpebot commented Jun 11, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from eb17a5c to 62ec159 Compare June 11, 2025 05:09

dpebot commented Jun 11, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from 62ec159 to 74146b4 Compare June 11, 2025 14:54

dpebot commented Jun 11, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from 74146b4 to 7e0043e Compare June 11, 2025 21:10

dpebot commented Jun 11, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from 7e0043e to 91881f3 Compare June 12, 2025 04:55

dpebot commented Jun 12, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from 91881f3 to b34d6fc Compare June 12, 2025 14:58

dpebot commented Jun 12, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from b34d6fc to 3de752c Compare June 12, 2025 21:09

dpebot commented Jun 12, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from 3de752c to bdd8ac9 Compare June 13, 2025 03:06

dpebot commented Jun 13, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from bdd8ac9 to 0933da6 Compare June 13, 2025 07:35

dpebot commented Jun 13, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from 0933da6 to 7486fa6 Compare June 13, 2025 13:31

dpebot commented Jun 13, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from 7486fa6 to 6dee47a Compare June 13, 2025 19:59

dpebot commented Jun 13, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from 6dee47a to 36d28ac Compare June 13, 2025 23:11

dpebot commented Jun 13, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from 36d28ac to 78e9535 Compare June 14, 2025 02:57

dpebot commented Jun 14, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

renovate-bot force-pushed the renovate/pypi-requests-vulnerability branch from 78e9535 to 8881e04 Compare June 14, 2025 07:07

dpebot commented Jul 5, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

17 similar comments

dpebot commented Jul 5, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 5, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 5, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 6, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 6, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 6, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 6, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 6, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 6, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 7, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 7, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 7, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 8, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 8, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 8, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 9, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 9, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 9, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

8 similar comments

dpebot commented Jul 10, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 10, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 10, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 11, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 11, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 11, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 11, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 11, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

dpebot commented Jul 11, 2025

Copy link
Copy Markdown
Collaborator

/gcbrun

This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

kgala2 kgala2 approved these changes

Assignees

kgala2

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

Back | FazBrowse Home | New Git URL