Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update dependency httpx to >=0.28.1,<0.29 #18

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jan 25, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
httpx (changelog) >=0.27.2,<0.28 -> >=0.28.1,<0.29 age adoption passing confidence

Release Notes

encode/httpx (httpx)

v0.28.1

Compare Source

  • Fix SSL case where verify=False together with client side certificates.

v0.28.0

Compare Source

The 0.28 release includes a limited set of deprecations.

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

  • The verify argument as a string argument is now deprecated and will raise warnings.
  • The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

  • The deprecated proxies argument has now been removed.
  • The deprecated app argument has now been removed.
  • JSON request bodies use a compact representation. (#​3363)
  • Review URL percent escape sets, based on WHATWG spec. (#​3371, #​3373)
  • Ensure certifi and httpcore are only imported if required. (#​3377)
  • Treat socks5h as a valid proxy scheme. (#​3178)
  • Cleanup Request() method signature in line with client.request() and httpx.request(). (#​3378)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled because a matching PR was automerged previously.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link
Contributor Author

renovate bot commented Jan 25, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock
Command failed: uv lock --upgrade-package httpx
Using CPython 3.13.1 interpreter at: /opt/containerbase/tools/python/3.13.1/bin/python3
  × No solution found when resolving dependencies:
  ╰─▶ Because only the following versions of httpx[socks] are available:
          httpx[socks]<=0.28.1
          httpx[socks]>0.29
      and litellm==1.59.8 depends on httpx>=0.23.0,<0.28.0, we can conclude
      that litellm==1.59.8 and httpx[socks]>=0.28.1 are incompatible.
      And because only litellm<=1.59.8 is available, we can conclude that
      litellm>=1.59.8 and httpx[socks]>=0.28.1 are incompatible.
      And because your project depends on httpx[socks]>=0.28.1 and
      litellm>=1.59.8, we can conclude that your project's requirements are
      unsatisfiable.

Copy link
Contributor

github-actions bot commented Jan 25, 2025

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 5 0 0.03s
⚠️ BASH bash-exec 2 1 0.01s
✅ BASH shellcheck 2 0 0.03s
✅ BASH shfmt 2 0 0 0.01s
✅ COPYPASTE jscpd yes no 1.46s
✅ JSON jsonlint 5 0 0.21s
✅ JSON prettier 5 0 0 0.36s
✅ JSON v8r 5 0 5.0s
✅ MARKDOWN prettier 13 0 0 1.28s
⚠️ PYTHON pyright 47 60 8.58s
✅ PYTHON ruff 47 0 0 0.04s
✅ REPOSITORY checkov yes no 12.94s
✅ REPOSITORY devskim yes no 0.98s
✅ REPOSITORY dustilock yes no 0.01s
✅ REPOSITORY gitleaks yes no 0.21s
✅ REPOSITORY git_diff yes no 0.01s
✅ REPOSITORY grype yes no 9.34s
✅ REPOSITORY kics yes no 1.15s
✅ REPOSITORY secretlint yes no 1.01s
✅ REPOSITORY syft yes no 1.32s
✅ REPOSITORY trivy yes no 4.92s
✅ REPOSITORY trivy-sbom yes no 0.07s
⚠️ REPOSITORY trufflehog yes 1 2.19s
⚠️ SPELL cspell 83 27 5.36s
⚠️ SPELL lychee 30 2 1.39s
✅ YAML prettier 11 0 0 0.99s
✅ YAML v8r 11 0 5.62s
✅ YAML yamllint 11 0 0.5s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/httpx-0.x branch from 9fa2eb8 to bc4ddff Compare January 26, 2025 07:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant