Skip to content

Update requests to 2.33.1 - #346

Open
pyup-bot wants to merge 1 commit into
masterfrom
pyup-update-requests-2.32.5-to-2.33.1
Open

Update requests to 2.33.1#346
pyup-bot wants to merge 1 commit into
masterfrom
pyup-update-requests-2.32.5-to-2.33.1

Conversation

@pyup-bot

@pyup-bot pyup-bot commented Apr 8, 2026

Copy link
Copy Markdown
Contributor

This PR updates requests from 2.32.5 to 2.33.1.

Changelog

2.33.1

-------------------

**Bugfixes**
- Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary
files in the tmp directory. (7305)
- Fixed Content-Type header parsing for malformed values. (7309)
- Improved error consistency for malformed header values. (7308)

2.33.0

-------------------

**Announcements**
- 📣 Requests is adding inline types. If you have a typed code base that
uses Requests, please take a look at 7271. Give it a try, and report
any gaps or feedback you may have in the issue. 📣

**Security**
- CVE-2026-25645 ``requests.utils.extract_zipped_paths`` now extracts
contents to a non-deterministic location to prevent malicious file
replacement. This does not affect default usage of Requests, only
applications calling the utility function directly.

**Improvements**
- Migrated to a PEP 517 build system using setuptools. (7012)

**Bugfixes**
- Fixed an issue where an empty netrc entry could cause
malformed authentication to be applied to Requests on
Python 3.11+. (7205)

**Deprecations**
- Dropped support for Python 3.9 following its end of support. (7196)

**Documentation**
- Various typo fixes and doc improvements.
Links

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant