Skip to content

Bump the patch-minor group across 1 directory with 2 updates#89

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/patch-minor-0c5fe2ce84
Open

Bump the patch-minor group across 1 directory with 2 updates#89
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/patch-minor-0c5fe2ce84

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 12, 2026 •
edited
Loading

Bumps the patch-minor group with 2 updates in the / directory: requests and pika.

Updates requests from 2.33.1 to 2.34.0

Release notes

Sourced from requests's releases.

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2340-2026-05-11

Changelog

Sourced from requests's changelog.

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)
Commits

Updates pika from 1.3.2 to 1.4.0

Release notes

Sourced from pika's releases.

1.4.0

https://pypi.org/project/pika/1.4.0/ | GitHub milestone

What's Changed

... (truncated)

Changelog

Sourced from pika's changelog.

1.4.0 (2026-05-06)

Full Changelog

Implemented enhancements:

Closed issues:

  • Add Hatch scripts to standardize developer commands #1578
  • Fix outdated and broken documentation across the project #1568
  • Update Codecov default branch and badge #1563
  • GitHub actions workflows and test code need updates for RabbitMQ 4.3 #1547
  • datetime.datetime.utcfromtimestamp() is deprecated #1539
  • URLParameters这个类有bug #1533
  • Custom transport #1532
  • x-delay value is being returned in the header as a UINT64 and not a SINT16 #1531
  • Pika should advertise the exchange_exchange_bindings client capability #1530
  • Missing type annotations #1523
  • There is no info about return type of queue_declare() method of pika.channel #1522
  • Getting the user who sent the message #1510
  • Where is examples/consume_recover_retry.py ? #1499
  • Type Hint Issue with arguments parameter in queue_declare method of BlockingChannel Class - (expected "DeclareOk | None" [arg-type]) #1482
  • queue_declare does not receive the callback at random times #1480
  • There is no current event loop in thread #1479
  • Cannot find reference 'exceptions' in '__init__.pyi' #1473
  • Convert to pytest #1469
  • Add a CI lint check using ruff and fix all findings #1371
  • Add support for proxy configuration (Socks5) #1359
  • BlockingIOError: [WinError 10035] A non-blocking socket operation could not be completed immediately #1314

Merged pull requests:

... (truncated)

Commits
  • 305fbe6 pika 1.4.0
  • 9a3a6e5 Merge pull request #1577 from pika/doc/project-scope-update
  • f750ce3 Merge branch 'main' into doc/project-scope-update
  • ccfe924 Ensure that pip is run the same way in each workflow.
  • 47129ca Caching pip artifacts actually does not accomplish anything.
  • 0a721f7 Fix copyright year and document legacy-python.yaml workflow
  • f7f51db Merge branch 'main' into doc/project-scope-update
  • 6e62833 Merge pull request #1579 from pika/feature/gh-1578-hatch
  • 3d038ad Remove test-requirements.txt and all references to it, since it is superseded...
  • 540db57 Fix formatting issue in legacy-python CI workflow for virtualenv installation
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the patch-minor group across 1 directory with 2 updates
0b21511 
Bumps the patch-minor group with 2 updates in the / directory: [requests](https://github.com/psf/requests) and [pika](https://github.com/pika/pika).


Updates `requests` from 2.33.1 to 2.34.0
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.1...v2.34.0)

Updates `pika` from 1.3.2 to 1.4.0
- [Release notes](https://github.com/pika/pika/releases)
- [Changelog](https://github.com/pika/pika/blob/main/CHANGELOG.md)
- [Commits](pika/pika@1.3.2...1.4.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-minor
- dependency-name: pika
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants