Skip to content

Bump httplib2 from 0.14.0 to 0.18.1

cylon-x requested to merge dependabot-pip-httplib2-0.18.1 into develop

Bumps httplib2 from 0.14.0 to 0.18.1.

Changelog

Sourced from httplib2's changelog.

0.18.1

explicit build-backend workaround for pip build isolation bug "AttributeError: 'module' object has no attribute 'legacy'" on pip install httplib2/httplib2#169

0.18.0

IMPORTANT security vulnerability CWE-93 CRLF injection Force %xx quote of space, CR, LF characters in uri. Special thanks to Recar https://github.com/Ciyfly for discrete notification. https://cwe.mitre.org/data/definitions/93.html

0.17.4

Ship test suite in source dist httplib2/httplib2#168

0.17.3

IronPython2.7: relative import iri2uri fixes ImportError httplib2/httplib2#163

0.17.2

python3 + debug + IPv6 disabled: https raised "IndexError: Replacement index 1 out of range for positional args tuple" httplib2/httplib2#161

0.17.1

python3: no_proxy was not checked with https httplib2/httplib2#160

0.17.0

feature: Http().redirect_codes set, works after follow(_all)_redirects check This allows one line workaround for old gcloud library that uses 308 response without redirect semantics. httplib2/httplib2#156

0.16.0

IMPORTANT cache invalidation change, fix 307 keep method, add 308 Redirects httplib2/httplib2#151

proxy: username/password as str compatible with pysocks httplib2/httplib2#154

0.15.0

... (truncated)

Commits

Merge request reports