Release 3.18.2 (#350)

3.18.2 (2026-03-12)
-------------------

**Fixed**
- Unprepared URLs when scheme don't contain `http`.
- Edge case false positive scheme detection in url. (#349)
- Netrc don't work when base_url is set. (#348)

Author: Ousret

HISTORY.md

@@ -1,6 +1,14 @@
 Release History
 ===============
 
+3.18.2 (2026-03-12)
+-------------------
+
+**Fixed**
+- Unprepared URLs when scheme don't contain `http`.
+- Edge case false positive scheme detection in url. (#349)
+- Netrc don't work when base_url is set. (#348)
+
 3.18.1 (2026-03-09)
 -------------------
 

src/niquests/__version__.py

@@ -9,9 +9,9 @@
 __url__: str = "https://niquests.readthedocs.io"
 
 __version__: str
-__version__ = "3.18.1"
+__version__ = "3.18.2"
 
-__build__: int = 0x031801
+__build__: int = 0x031802
 __author__: str = "Kenneth Reitz"
 __author_email__: str = "me@kennethreitz.org"
 __license__: str = "Apache-2.0"

src/niquests/models.py

@@ -107,6 +107,7 @@
     get_auth_from_url,
     guess_filename,
     iter_slices,
+    merge_base_url,
     parse_header_links,
     parse_scheme,
     requote_uri,
@@ -382,13 +383,7 @@ def prepare_url(
         """Prepares the given HTTP URL."""
         assert url is not None, "Missing URL in PreparedRequest"
 
-        if base_url is not None:
-            if parse_scheme(url, default="") == "":
-                if base_url.endswith("/"):
-                    base_url = base_url[:-1]
-                if url and not url.startswith("/"):
-                    url = f"/{url}"
-                url = base_url + url
+        url = merge_base_url(base_url, url)
 
         #: Accept objects that have string representations.
         #: We're unable to blindly call unicode/str functions
@@ -410,6 +405,12 @@ def prepare_url(
         if "http" not in parsed_scheme and parsed_scheme not in {
             "asgi",
             "wsgi",
+            "ws",
+            "wss",
+            "see",
+            "psse",
+            "psse+unix",
+            "ws+unix",
         }:
             self.url = url
             return

src/niquests/sessions.py

@@ -100,6 +100,7 @@
     get_auth_from_url,
     get_environ_proxies,
     get_netrc_auth,
+    merge_base_url,
     parse_scheme,
     requote_uri,
     resolve_proxies,
@@ -543,7 +544,7 @@ def prepare_request(self, request: Request) -> PreparedRequest:
         has_authorization_set = "authorization" in self.headers or "authorization" in CaseInsensitiveDict(request.headers)
 
         if self.trust_env and not auth and not self.auth and not has_authorization_set:
-            auth = get_netrc_auth(request.url)
+            auth = get_netrc_auth(merge_base_url(self.base_url, request.url))
 
         p = PreparedRequest()
         p.prepare(

src/niquests/utils.py

@@ -1148,10 +1148,18 @@ def parse_scheme(url: str, default: str | None = None, max_length: int = 11) ->
     enough to use urlparse for it...! We were wasting precious CPU cycles.
     Return used scheme url, lowercased."""
     try:
-        scheme = url[: url.index(":", 1, max_length + 1)]
+        scheme = url[: url.index("://", 1, max_length + 1)]
     except ValueError as e:
         if default is not None:
             return default
+
+        try:
+            outsider_scheme = url[: url.index(":", 1, max_length + 1)]
+
+            return outsider_scheme.lower()
+        except ValueError:
+            pass
+
         raise MissingSchema(f"Invalid URL {url!r}: No scheme supplied. Perhaps you meant https://{url}?") from e
 
     return scheme.lower()
@@ -1443,3 +1451,25 @@ def guess_json_utf(data: bytes) -> str | None:
         return encoding_guess.encoding.replace("_", "-")
 
     return None
+
+
+@typing.overload
+def merge_base_url(base_url: str | None, url: None) -> None: ...
+
+
+@typing.overload
+def merge_base_url(base_url: str | None, url: str) -> str: ...
+
+
+def merge_base_url(base_url: str | None, url: str | None) -> str | None:
+    if base_url is None or url is None:
+        return url
+
+    if parse_scheme(url, default="") == "":
+        if base_url.endswith("/"):
+            base_url = base_url[:-1]
+        if url and not url.startswith("/"):
+            url = f"/{url}"
+        return base_url + url
+
+    return url

tests/test_requests.py

@@ -2799,6 +2799,7 @@ def test_preparing_bad_url(self, url):
             ("http://httpbingo.org", "get", "http://httpbingo.org/get"),
             ("http://api.example.com", "/v1/users", "http://api.example.com/v1/users"),
             ("http://api.example.com", "v1/users", "http://api.example.com/v1/users"),
+            ("https://example.com", "123456789/k:v", "https://example.com/123456789/k:v"),
         ],
     )
     def test_base_url_prepare(self, base_url, url, join_expected):