httplib2

https: avoid costly load_verify_locations when SSL certificate validation is disabled https://github.com/httplib2/httplib2/pull/249

No changes in library. Fix automatic pypi release from CI.

BREAKING CHANGE! Python support 3.7+ only

https: Do not rely on ssl.PROTOCOL_TLS, which has been deprecated in Python3.10 https://github.com/httplib2/httplib2/pull/243

https: disable_ssl_certificate_validation caused ValueError: Cannot set verify_mode to CERT_NONE when check_hostname is enabled https://github.com/httplib2/httplib2/pull/231

build(deps): bump cryptography from 37.0.4 to 38.0.3 Reason from cryptography changelog: Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.7, which resolves CVE-2022-3602 and CVE-2022-3786.

Signed-off-by: Sergey Shepelev temotor@gmail.com

proxy: support proxy urls with ipv6 address https://github.com/httplib2/httplib2/pull/217

auth: support pyparsing v3 (AttributeError downcaseTokens) https://github.com/httplib2/httplib2/issues/207

proxy: correct extraction of errno from pysocks ProxyConnectionError https://github.com/httplib2/httplib2/pull/202

No changes from 0.20.0, re-upload of broken py2 wheel.

IMPORTANT cacerts: remove expired DST Root CA X3, add ISRG Root X1, X2 https://github.com/httplib2/httplib2/pull/200 https://github.com/httplib2/httplib2/issues/203

tls: accept min/max ssl.TLSVersion enum values https://github.com/httplib2/httplib2/pull/191

setup(python_requires=...) may need setuptools update https://github.com/httplib2/httplib2/pull/195

auth header parsing performance optimizations; Thanks to Paul McGuire

Use mock from the standard library on Python>=3.3

auth: parse headers using pyparsing instead of regexp https://github.com/httplib2/httplib2/pull/182

auth: WSSE token needs to be string not bytes https://github.com/httplib2/httplib2/pull/179

explicit build-backend workaround for pip build isolation bug "AttributeError: 'module' object has no attribute 'legacy'" on pip install https://github.com/httplib2/httplib2/issues/169

IMPORTANT security vulnerability CWE-93 CRLF injection Force %xx quote of space, CR, LF characters in uri. Special thanks to Recar https://github.com/Ciyfly for discrete notification. https://cwe.mitre.org/data/definitions/93.html

Ship test suite in source dist https://github.com/httplib2/httplib2/pull/168

IronPython2.7: relative import iri2uri fixes ImportError https://github.com/httplib2/httplib2/pull/163

python3 + debug + IPv6 disabled: https raised "IndexError: Replacement index 1 out of range for positional args tuple" https://github.com/httplib2/httplib2/issues/161

python3: no_proxy was not checked with https https://github.com/httplib2/httplib2/issues/160

feature: Http().redirect_codes set, works after follow(_all)_redirects check This allows one line workaround for old gcloud library that uses 308 response without redirect semantics. https://github.com/httplib2/httplib2/issues/156

IMPORTANT cache invalidation change, fix 307 keep method, add 308 Redirects https://github.com/httplib2/httplib2/issues/151

proxy: username/password as str compatible with pysocks https://github.com/httplib2/httplib2/issues/154

python2: regression in connect() error handling https://github.com/httplib2/httplib2/pull/150

add support for password protected certificate files https://github.com/httplib2/httplib2/pull/143

feature: Http.close() to clean persistent connections and sensitive data https://github.com/httplib2/httplib2/pull/149

Python3: PROXY_TYPE_SOCKS5 with str user/pass raised TypeError https://github.com/httplib2/httplib2/pull/145

Python3: Use no_proxy https://github.com/httplib2/httplib2/pull/140

Allow setting TLS max/min versions https://github.com/httplib2/httplib2/pull/138

No changes to library. Distribute py3 wheels.

Catch socket timeouts and clear dead connection https://github.com/httplib2/httplib2/issues/18 https://github.com/httplib2/httplib2/pull/111

Officially support Python 3.7 (package metadata) https://github.com/httplib2/httplib2/issues/123

Drop support for Python 3.3

ca_certs from environment HTTPLIB2_CA_CERTS or certifi https://github.com/httplib2/httplib2/pull/117

PROXY_TYPE_HTTP with non-empty user/pass raised TypeError: bytes required https://github.com/httplib2/httplib2/pull/115

Revert http:443->https workaround https://github.com/httplib2/httplib2/issues/112

eliminate connection pool read race https://github.com/httplib2/httplib2/pull/110

cache: stronger safename https://github.com/httplib2/httplib2/pull/101

No changes, just reupload of 0.11.2 after fixing automatic release conditions in Travis.

Fix HTTP(S)ConnectionWithTimeout AttributeError proxy_info https://github.com/httplib2/httplib2/pull/97

Add DigiCert Global Root G2 serial 033af1e6a711a9a0bb2864b11d09fae5 https://github.com/httplib2/httplib2/pull/91

python3 proxy support https://github.com/httplib2/httplib2/pull/90

If no_proxy environment value ends with comma then proxy is not used https://github.com/httplib2/httplib2/issues/11

fix UnicodeDecodeError using socks5 proxy https://github.com/httplib2/httplib2/pull/64

Respect NO_PROXY env var in proxy_info_from_url https://github.com/httplib2/httplib2/pull/58

NO_PROXY=bar was matching foobar (suffix without dot delimiter) New behavior matches curl/wget:

• no_proxy=foo.bar will only skip proxy for exact hostname match
• no_proxy=.wild.card will skip proxy for any.subdomains.wild.card https://github.com/httplib2/httplib2/issues/94

Bugfix for Content-Encoding: deflate https://stackoverflow.com/a/22311297

Fix certificate validation on Python<=2.7.8 without ssl.CertificateError https://github.com/httplib2/httplib2/issues/45

Fixes in this release:

https://github.com/jcgregorio/httplib2/pull/313

Fix incorrect ResponseNotReady exceptions, retry on transient errors.

Fixes in this release:

https://github.com/jcgregorio/httplib2/pull/296

    There was a problem with headers when a binary string is passed (like
    b'Authorization').

https://github.com/jcgregorio/httplib2/pull/276

    Default to doing DNS resolution through a proxy server if present.

Heartbleed

More fixes for the App Engine support.

Added a new feature that allows you to supply your own provider for the CA_CERTS file. Just create a module named ca_certs_locater that has a method get() that returns the file location of the CA_CERTS file.

Lots of clean up of the code formatting to make it more consistent.

More fixes for App Engine, now less likely to swallow important exceptions. Adding proxy_info_from_* methods to Python3. Reviewed in https://codereview.appspot.com/6588078/. Added GeoTrust cert Make httplib2.Http() instances pickleable. Reviewed in https://codereview.appspot.com/6506074/

The following issues have been fixed:

229 python3 httplib2 clobbers multiple headers of same key 230 Expose meaningful exception for App Engine URLFetch ResponseTooLargeError 231 Expose App Engine URLFetch DeadlineExceededError for debugging purposes

Fixes for App Engine 2.7.

Keys are lowercase in a Response object, regardless of how Response object is constructed. Add control so that Authorization: headers aren't forwarded on a 3xx response by default. Set the reason correctly when running on App Engine. Patch from Alain Vongsouvanh. Reviewed in http://codereview.appspot.com/6422051/ Fix proxy socks for SSL connections. Fixes issue #199. You can now set httplib2.RETRIES to the number of retries before a request is considered to fail It is set to a default of 2 to mimic the traditional behavior of httplib2.

The following issues have been addressed:

 223 HEAD requests fail calling the close() method of ResponseDict instance.
 222 Can't disable cert validation in appengine
 204 Credentials can leak in HTTP redirects
 210 Different API between Python 2 and Python 3 version breaks wsgi_intercept
 214 ValueError on malformated cache entries
 204 Credentials can leak in HTTP redirects

ProxyInfo objects now can construct themselves from environment variables commonly-used in Unix environments. By default, the Http class will construct a ProxyInfo instance based on these environment variables. To achieve the previous behavior, where environment variables are ignored, pass proxy_info=None to Http().

The following issues have been addressed:

Issue 159: automatic detection of proxy configuration.
Issue 179: Allow unicode in proxy hostname.
Issue 194: Added support for setuptools.
Fixes for HTTP CONNECT proxies.

Fix failure to install cacerts.txt for 2.x installs.

The two major changes in this release are SSL Certificate checking and App Engine support. By default the certificates of an HTTPS connection are checked, but that can be disabled via disable_ssl_certificate_validation. The second change is that on App Engine there is a new connection object that utilizes the urlfetch capabilities on App Engine, including setting timeouts and validating certificates.

The following issues have been addressed:

Fixes issue 72. Always lowercase authorization header.
Fix issue 47. Redirects that become a GET should not have a body.
Fixes issue 19. Set Content-location on redirected HEAD requests
Fixes issue 139. Redirect with a GET on 302 regardless of the originating method.
Fixes issue 138. Handle unicode in headers when writing and retrieving cache entries. Who says headers have to be ASCII!
Add certificate validation. Work initially started by Christoph Kern.
Set a version number. Fixes issue # 135.
Sync to latest version of socks.py
Add gzip to the user-agent, in case we are making a request to an app engine project: http://code.google.com/appengine/kb/general.html#compression
Uses a custom httplib shim on App Engine to wrap urlfetch, as opposed
Add default support for optimistic concurrency on PATCH requests
Fixes issue 126. IPv6 under various conditions would fail.
Fixes issue 131. Handle socket.timeout's that occur during send.
proxy support: degrade gracefully when socket.socket is unavailable