nocarryr / python-dispatch / 25711853473
98%

DEFAULT BRANCH: master
Ran
Jobs 7
Files 9
Run time 1min
Badge
Embed â–¾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 97.882%. Remained the same
25711853473

push

github

web-flow 
Bump urllib3 from 2.6.3 to 2.7.0 (#52)

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.6.3 to 2.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>.</em></p>
<blockquote>
<h2>2.7.0</h2>
<h2>🚀 urllib3 is fundraising for HTTP/2 support</h2>
<p><a href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3 is raising ~$40,000 USD</a> to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects <a href="https://opencollective.com/urllib3">please consider contributing financially</a> to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.</p>
<p>Thank you for your support.</p>
<h2>Security</h2>
<p>Addressed high-severity security issues. Impact was limited to specific use cases detailed in the accompanying advisories; overall user exposure was estimated to be marginal.</p>
<ul>
<li>
<p>Decompression-bomb safeguards of the streaming API were bypassed:</p>
<ol>
<li>When <code>HTTPResponse.drain_conn()</code> was called after the response had been read and decompressed partially. (Reported by <a href="https://github.com/Cycloctane"><code>@​Cycloctane</code></a>)</li>
<li>During the second <code>HTTPResponse.read(amt=N)</code> or <code>HTTPResponse.stream(amt=N)</code> call when the response was decompressed using the official <a href="https://pypi.org/project/brotli/">Brotli</a> library. (Reported by <a href="https://github.com/kimkou2024"><code>@​kimkou2024</code></a>)</li>
</ol>
<p>See GHSA-mf9v-mfxr-j63j for details.</p>
</li>
<li>
<p>HTTP pools created using <code>ProxyManager.connection_from_url</code> did not strip sensitive headers specified in <code>Retry.remove_headers_on_redirect</code> whe... (continued)

832 of 850 relevant lines covered (97.88%)

6.61 hits per line

Jobs
ID Job ID Ran Files Coverage
1 run-3.11 - 25711853473.1 9
97.06
 GitHub Action Run
2 run-3.9 - 25711853473.2 9
97.06
 GitHub Action Run
3 run-3.8 - 25711853473.3 9
97.06
 GitHub Action Run
4 run-3.12 - 25711853473.4 9
97.06
 GitHub Action Run
5 run-3.14 - 25711853473.5 6
97.38
 GitHub Action Run
6 run-3.10 - 25711853473.6 9
97.06
 GitHub Action Run
7 run-3.13 - 25711853473.7 9
97.06
 GitHub Action Run
Source Files on build 25711853473