)]}'
{
  "commit": "2cf7ba4bb76f630ff7f2c83cab0b5294db65107b",
  "tree": "17a59ab3dbf11ee491727d3973c16268a1be15c3",
  "parents": [
    "ff1388356b0d47b6249dc606ae4ba521df54a06f"
  ],
  "author": {
    "name": "dependabot[bot]",
    "email": "49699333+dependabot[bot]@users.noreply.github.com",
    "time": "Tue Apr 15 17:40:24 2025 +0900"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Tue Apr 15 08:40:24 2025 +0000"
  },
  "message": "build(deps): bump urllib3 from 2.3.0 to 2.4.0 in /tools/publish (#2775)\n\nBumps [urllib3](https://github.com/urllib3/urllib3) from 2.3.0 to 2.4.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/releases\"\u003eurllib3\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.4.0\u003c/h2\u003e\n\u003ch2\u003e🚀 urllib3 is fundraising for HTTP/2 support\u003c/h2\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support\"\u003eurllib3\nis raising ~$40,000 USD\u003c/a\u003e to release HTTP/2 support and ensure\nlong-term sustainable maintenance of the project after a sharp decline\nin financial support. If your company or organization uses Python and\nwould benefit from HTTP/2 support in Requests, pip, cloud SDKs, and\nthousands of other projects \u003ca\nhref\u003d\"https://opencollective.com/urllib3\"\u003eplease consider contributing\nfinancially\u003c/a\u003e to ensure HTTP/2 support is developed sustainably and\nmaintained for the long-haul.\u003c/p\u003e\n\u003cp\u003eThank you for your support.\u003c/p\u003e\n\u003ch1\u003eFeatures\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eApplied PEP 639 by specifying the license fields in pyproject.toml.\n(\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3522\"\u003e#3522\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdated exceptions to save and restore more properties during the\npickle/serialization process. (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3567\"\u003e#3567\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003everify_flags\u003c/code\u003e option to\n\u003ccode\u003ecreate_urllib3_context\u003c/code\u003e with a default of\n\u003ccode\u003eVERIFY_X509_PARTIAL_CHAIN\u003c/code\u003e and\n\u003ccode\u003eVERIFY_X509_STRICT\u003c/code\u003e for Python 3.13+. (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3571\"\u003e#3571\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBugfixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug with partial reads of streaming data in Emscripten. (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3555\"\u003e#3555\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eMisc\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSwitched to uv for installing development dependecies. (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3550\"\u003e#3550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemoved the \u003ccode\u003emultiple.intoto.jsonl\u003c/code\u003e asset from GitHub\nreleases. Attestation of release files since v2.3.0 can be found on\nPyPI. (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3566\"\u003e#3566\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/blob/main/CHANGES.rst\"\u003eurllib3\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.4.0 (2025-04-10)\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eApplied PEP 639 by specifying the license fields in pyproject.toml.\n(\u003ccode\u003e[#3522](https://github.com/urllib3/urllib3/issues/3522)\n\u0026lt;https://github.com/urllib3/urllib3/issues/3522\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003cli\u003eUpdated exceptions to save and restore more properties during the\npickle/serialization process.\n(\u003ccode\u003e[#3567](https://github.com/urllib3/urllib3/issues/3567)\n\u0026lt;https://github.com/urllib3/urllib3/issues/3567\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003everify_flags\u003c/code\u003e option to\n\u003ccode\u003ecreate_urllib3_context\u003c/code\u003e with a default of\n\u003ccode\u003eVERIFY_X509_PARTIAL_CHAIN\u003c/code\u003e and\n\u003ccode\u003eVERIFY_X509_STRICT\u003c/code\u003e for Python 3.13+.\n(\u003ccode\u003e[#3571](https://github.com/urllib3/urllib3/issues/3571)\n\u0026lt;https://github.com/urllib3/urllib3/issues/3571\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug with partial reads of streaming data in Emscripten.\n(\u003ccode\u003e[#3555](https://github.com/urllib3/urllib3/issues/3555)\n\u0026lt;https://github.com/urllib3/urllib3/issues/3555\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eMisc\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSwitched to uv for installing development dependecies.\n(\u003ccode\u003e[#3550](https://github.com/urllib3/urllib3/issues/3550)\n\u0026lt;https://github.com/urllib3/urllib3/issues/3550\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003cli\u003eRemoved the \u003ccode\u003emultiple.intoto.jsonl\u003c/code\u003e asset from GitHub\nreleases. Attestation of release files since v2.3.0 can be found on\nPyPI. (\u003ccode\u003e[#3566](https://github.com/urllib3/urllib3/issues/3566)\n\u0026lt;https://github.com/urllib3/urllib3/issues/3566\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/commit/a5ff7ac3bbb8659e2ec3ed41dd43889f06a7d7bc\"\u003e\u003ccode\u003ea5ff7ac\u003c/code\u003e\u003c/a\u003e\nRelease 2.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/commit/a135db29f72f828b0ef7314b856d19696a6f48ba\"\u003e\u003ccode\u003ea135db2\u003c/code\u003e\u003c/a\u003e\nUpgrade memray and coverage to fix macOS tests (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3589\"\u003e#3589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/commit/8f40e71612505a9985b0a58ad793cd84ec97614a\"\u003e\u003ccode\u003e8f40e71\u003c/code\u003e\u003c/a\u003e\nUpgrade the publishing action to get correct licensing info on PyPI (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3585\"\u003e#3585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/commit/3ff4e49ddf889554cf295b4a2e1189d066b60c71\"\u003e\u003ccode\u003e3ff4e49\u003c/code\u003e\u003c/a\u003e\nAdd a link to the 2024 annual report (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3586\"\u003e#3586\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/commit/75709c1dbd6770618f061fd0b8a6950c7741f17b\"\u003e\u003ccode\u003e75709c1\u003c/code\u003e\u003c/a\u003e\nSet verify flags in \u003ccode\u003ecreate_urllib3_context\u003c/code\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3577\"\u003e#3577\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/commit/5c8f82a2f1c1b7a8360f0c84b5a88f25df070811\"\u003e\u003ccode\u003e5c8f82a\u003c/code\u003e\u003c/a\u003e\nBump astral-sh/setup-uv from 5.3.0 to 5.4.1 (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3580\"\u003e#3580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/commit/42e90d894b30ef8b897708eb1cdfa24e83cf5067\"\u003e\u003ccode\u003e42e90d8\u003c/code\u003e\u003c/a\u003e\nBump actions/setup-python from 5.4.0 to 5.5.0 (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3579\"\u003e#3579\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/commit/3e8f2db735dcaced6a3b777aa1966f40c018af7c\"\u003e\u003ccode\u003e3e8f2db\u003c/code\u003e\u003c/a\u003e\nStop using Ubuntu 20.04 and 22.04 in CI (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3570\"\u003e#3570\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/commit/e29db82a6df5f9a9acbb6997899f93bda79bb61e\"\u003e\u003ccode\u003ee29db82\u003c/code\u003e\u003c/a\u003e\nUpdate exceptions to have more of their attributes pickled (\u003ca\nhref\u003d\"https://redirect.github.com/urllib3/urllib3/issues/3572\"\u003e#3572\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/commit/f8a0c4360ad67aefd79317279ee90c72d5d18697\"\u003e\u003ccode\u003ef8a0c43\u003c/code\u003e\u003c/a\u003e\nAdd PyPy 3.11 to CI\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/urllib3/urllib3/compare/2.3.0...2.4.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003durllib3\u0026package-manager\u003dpip\u0026previous-version\u003d2.3.0\u0026new-version\u003d2.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after\nyour CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\nand block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating\nit. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "5f8a33c3f54b6984cc32c73b9efe7eb22ca2167d",
      "old_mode": 33188,
      "old_path": "tools/publish/requirements_darwin.txt",
      "new_id": "eaec72c01cfaca616a2a1494fc86707ff304cbe5",
      "new_mode": 33188,
      "new_path": "tools/publish/requirements_darwin.txt"
    },
    {
      "type": "modify",
      "old_id": "40d987b16d6e3a937aaaea99a408c3305324275c",
      "old_mode": 33188,
      "old_path": "tools/publish/requirements_linux.txt",
      "new_id": "5fdc742a885bd7e30ded9aca373e74186b3eaba7",
      "new_mode": 33188,
      "new_path": "tools/publish/requirements_linux.txt"
    },
    {
      "type": "modify",
      "old_id": "c8bc0bb258022156a662cf84128b24426a47fa00",
      "old_mode": 33188,
      "old_path": "tools/publish/requirements_universal.txt",
      "new_id": "97cbef0221cfe55ee83fb7cef13b7b434b2277fe",
      "new_mode": 33188,
      "new_path": "tools/publish/requirements_universal.txt"
    },
    {
      "type": "modify",
      "old_id": "1980812d15b9ec031861dfd92e2f0139fe433e8a",
      "old_mode": 33188,
      "old_path": "tools/publish/requirements_windows.txt",
      "new_id": "458414009e2ee160baa371080e183ededc6344c3",
      "new_mode": 33188,
      "new_path": "tools/publish/requirements_windows.txt"
    }
  ]
}