Skip to content

chore(deps): bump requests from 2.32.3 to 2.32.4 in /scripts#2034

Open
dependabot[bot] wants to merge 30 commits intomainfrom
dependabot/pip/scripts/requests-2.32.4
Open

chore(deps): bump requests from 2.32.3 to 2.32.4 in /scripts#2034
dependabot[bot] wants to merge 30 commits intomainfrom
dependabot/pip/scripts/requests-2.32.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Jun 10, 2025

Bumps requests from 2.32.3 to 2.32.4.

Release notes

Sourced from requests's releases.

v2.32.4

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS. (#6926)
  • Dropped support for pypy 3.9 following its end of support. (#6926)
Changelog

Sourced from requests's changelog.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS.
  • Dropped support for pypy 3.9 following its end of support.
Commits
  • 021dc72 Polish up release tooling for last manual release
  • 821770e Bump version and add release notes for v2.32.4
  • 59f8aa2 Add netrc file search information to authentication documentation (#6876)
  • 5b4b64c Add more tests to prevent regression of CVE 2024 47081
  • 7bc4587 Add new test to check netrc auth leak (#6962)
  • 96ba401 Only use hostname to do netrc lookup instead of netloc
  • 7341690 Merge pull request #6951 from tswast/patch-1
  • 6716d7c remove links
  • a7e1c74 Update docs/conf.py
  • c799b81 docs: fix dead links to kenreitz.org
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

kensave and others added 30 commits May 16, 2025 18:26
* [feat]: Add a new semantic_search_client crate that provides vector embedding and
    semantic search capabilities for the Amazon Q CLI. This implementation:

    - Supports text embedding generation using Candle and ONNX runtimes
    - Provides hardware acceleration via Metal on macOS
    - Implements efficient vector indexing for semantic search
    - Includes file processing utilities for various file types
    - Supports persistent storage of semantic contexts
    - Includes comprehensive test coverage

    This crate will enable memory bank functionality for Amazon Q, allowing
    users to create, manage, and search through semantic memory contexts.

    🤖 Assisted by [Amazon Q Developer](https://aws.amazon.com/q/developer)

* Update semantic_search_client dependencies in Cargo.toml

* Refactor embedder implementation for Linux platforms to use trait objects

This change modifies the semantic search client to use Box<dyn TextEmbedderTrait>
on Linux platforms instead of directly using CandleTextEmbedder. This provides
more flexibility and consistency with the implementation on macOS and Windows,
allowing for better extensibility and polymorphic behavior across all platforms.

* Update Cargo.lock file

* Remove redundant CandleTextEmbedder import for non-macOS/Windows platforms

* fix(semantic_search): Update conditional compilation flags for embedders

Update conditional compilation flags to match the new embedding model selection logic:
- Replace target_env="musl" conditions with target_os conditions
- Update TextEmbedder trait implementation to use macOS/Windows condition
- Ensure consistent conditions across all files

🤖 Assisted by [Amazon Q Developer](https://aws.amazon.com/q/developer)

---------

Co-authored-by: Kenneth Sanchez V <kennvene@amazon.com>
Co-authored-by: Kenneth Sanchez V <kennvene@amazon.com>
* fix Build

* fix: Removes flakey test

---------

Co-authored-by: Kenneth Sanchez V <kennvene@amazon.com>
- Tools and prompts are sorted by MCP server alphabetically. Built-in tools always come come first
- Within each category (MCP), they are sorted by name alphabetically.
- Slightly adjust /tools footer.
… as default (#1888)

- Removed ONNX embedder implementation and fastembed dependency
- Updated conditional compilation to use Candle on all platforms except Linux ARM
- Fixed duplicate implementations in error.rs
- Updated benchmark tests to remove ONNX references

🤖 Assisted by [Amazon Q Developer](https://aws.amazon.com/q/developer)

Co-authored-by: Kenneth Sanchez V <kennvene@amazon.com>
* chore: update amazon clients

* chore: update windows-core in lockfile

* chore: exclude semantic search crate
* Revert "chore: exclude semantic search crate"

This reverts commit 6fe1e3e.

* fix(semantic_search): Fix VectorIndex is_empty implementation

The VectorIndex.is_empty() method was incorrectly checking if ef_construction
was equal to 100 to determine if the index was empty. This approach was
unreliable and caused test failures. This change adds a proper counter to
track the number of elements in the index and updates is_empty() to check
this counter instead.

🤖 Assisted by [Amazon Q Developer](https://aws.amazon.com/q/developer)

---------

Co-authored-by: Kenneth Sanchez V <kennvene@amazon.com>
* precomputes total number of servers in loading prior to spawning display task

* changes display task to use async task instead of spawn blocking

* waits on notify instead of display task for initial loading

* includes time taken in warning and error

* adds slash command to show mcp server load messages

* includes mcps that fail to start in /mcp

* surfaces command error for mcp servers in non-interactive mode

* only surfaces timeout warning in non-interactive mode with one or more server in the client list

* adds copy change for /mcp

* uses a hash set of server names to keep track of the number of initialized servers

* only shows mcp non-interactive msg in non-interactive mode
* chore: add logs for refreshing token

* fix: save device registration when launching chat
Co-authored-by: Brandon Kiser <bskiser@amazon.com>
* remove autocomplete

* fix cargo

* remove typos config

* remove mise and fix deny

* fix tests
Bumps [requests](https://github.com/psf/requests) from 2.32.3 to 2.32.4.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 10, 2025
@dependabot dependabot bot requested a review from a team as a code owner June 10, 2025 12:38
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants