Skip to content

chore(deps): bump requests from 2.32.5 to 2.33.0#4712

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/requests-2.33.0
Open

chore(deps): bump requests from 2.32.5 to 2.33.0#4712
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/requests-2.33.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps requests from 2.32.5 to 2.33.0.

Release notes

Sourced from requests's releases.

v2.33.0

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25

Changelog

Sourced from requests's changelog.

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.
Commits
  • bc04dfd v2.33.0
  • 66d21cb Merge commit from fork
  • 8b9bc8f Move badges to top of README (#7293)
  • e331a28 Remove unused extraction call (#7292)
  • 753fd08 docs: fix FAQ grammar in httplib2 example
  • 774a0b8 docs(socks): same block as other sections
  • 9c72a41 Bump github/codeql-action from 4.33.0 to 4.34.1
  • ebf7190 Bump github/codeql-action from 4.32.0 to 4.33.0
  • 0e4ae38 docs: exclude Response.is_permanent_redirect from API docs (#7244)
  • d568f47 docs: clarify Quickstart POST example (#6960)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 26, 2026
@openshift-ci

openshift-ci Bot commented Mar 26, 2026

Copy link
Copy Markdown

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a Azure member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

tuxerrante
tuxerrante reviewed Apr 7, 2026
View reviewed changes
Comment thread requirements.txt
PyYAML==6.0.3
requests==2.32.5
requests==2.33.0
requests-oauthlib==2.0.0

@tuxerrante tuxerrante Apr 7, 2026

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could we align contributor/runtime docs with this bump? requests 2.33.0 drops Python 3.9 support, so environments still on 3.9 may fail at install time even if current docs imply that range is supported.

@cadenmarchese cadenmarchese Jul 2, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@tuxerrante I believe we are already covered here since these are the pins for az CLI development, and our docs already specify that 3.9 is not supported (docs/prepare-your-dev-environment.md#L99)

@cadenmarchese cadenmarchese self-assigned this Jul 2, 2026
cadenmarchese
cadenmarchese approved these changes Jul 2, 2026
View reviewed changes
Comment thread requirements.txt
PyYAML==6.0.3
requests==2.32.5
requests==2.33.0
requests-oauthlib==2.0.0

@cadenmarchese cadenmarchese Jul 2, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@tuxerrante I believe we are already covered here since these are the pins for az CLI development, and our docs already specify that 3.9 is not supported (docs/prepare-your-dev-environment.md#L99)

@cadenmarchese

cadenmarchese commented Jul 2, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

Copilot AI review requested due to automatic review settings July 2, 2026 15:22
@dependabot
dependabot Bot force-pushed the dependabot/pip/requests-2.33.0 branch from 407b1f3 to f799fd2 Compare July 2, 2026 15:22
@dependabot
dependabot Bot requested a review from kevinobriendotca as a code owner July 2, 2026 15:22
Copilot AI reviewed Jul 2, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot can't review bot-authored pull requests automatically. A user with Copilot access can request a review manually.

Copilot AI requested a review from cadenmarchese July 2, 2026 15:31
@cadenmarchese

cadenmarchese commented Jul 2, 2026

Copy link
Copy Markdown
Member

/azp run ci

@azure-pipelines

azure-pipelines Bot commented Jul 2, 2026

Copy link
Copy Markdown
Azure Pipelines successfully started running 1 pipeline(s).

@cadenmarchese

cadenmarchese commented Jul 6, 2026

Copy link
Copy Markdown
Member

/azp run ci

@azure-pipelines

azure-pipelines Bot commented Jul 6, 2026

Copy link
Copy Markdown
Azure Pipelines successfully started running 1 pipeline(s).

@dependabot @cadenmarchese
chore(deps): bump requests from 2.32.5 to 2.33.0
9e0f52e 
Bumps [requests](https://github.com/psf/requests) from 2.32.5 to 2.33.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.33.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.33.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI review requested due to automatic review settings July 7, 2026 15:55
@cadenmarchese
cadenmarchese force-pushed the dependabot/pip/requests-2.33.0 branch from 0e148be to 9e0f52e Compare July 7, 2026 15:55
Copilot AI reviewed Jul 7, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.

Copilot AI review requested due to automatic review settings July 7, 2026 15:55
Copilot AI reviewed Jul 7, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot can't review bot-authored pull requests automatically. A user with Copilot access can request a review manually.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tuxerrante tuxerrante tuxerrante left review comments
Copilot code review Copilot Copilot left review comments
@bennerv bennerv Awaiting requested review from bennerv bennerv is a code owner
@hawkowl hawkowl Awaiting requested review from hawkowl hawkowl is a code owner
@rogbas rogbas Awaiting requested review from rogbas rogbas is a code owner
@mrWinston mrWinston Awaiting requested review from mrWinston mrWinston is a code owner
@jharrington22 jharrington22 Awaiting requested review from jharrington22
@yjst2012 yjst2012 Awaiting requested review from yjst2012 yjst2012 is a code owner
@hlipsig hlipsig Awaiting requested review from hlipsig hlipsig is a code owner
@tiguelu tiguelu Awaiting requested review from tiguelu tiguelu is a code owner
@mociarain mociarain Awaiting requested review from mociarain mociarain is a code owner
@kimorris27 kimorris27 Awaiting requested review from kimorris27 kimorris27 is a code owner
@tsatam tsatam Awaiting requested review from tsatam tsatam is a code owner
@sankur-codes sankur-codes Awaiting requested review from sankur-codes sankur-codes is a code owner
@wanghaoran1988 wanghaoran1988 Awaiting requested review from wanghaoran1988 wanghaoran1988 is a code owner
@alcasim alcasim Awaiting requested review from alcasim alcasim is a code owner
@ventifus ventifus Awaiting requested review from ventifus ventifus is a code owner
@kevinobriendotca kevinobriendotca Awaiting requested review from kevinobriendotca kevinobriendotca is a code owner
@cadenmarchese cadenmarchese Awaiting requested review from cadenmarchese cadenmarchese is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

@cadenmarchese cadenmarchese

Labels

dependencies Pull requests that update a dependency file needs-ok-to-test python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@cadenmarchese @tuxerrante