Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 7, 2026

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
urllib3 (changelog) <2.6.3<2.6.4 age adoption passing confidence

Release Notes

urllib3/urllib3 (urllib3)

v2.6.3

Compare Source

==================

  • Fixed a high-severity security issue where decompression-bomb safeguards of
    the streaming API were bypassed when HTTP redirects were followed.
    (GHSA-38jv-5279-wg99 <https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99>__)
  • Started treating Retry-After times greater than 6 hours as 6 hours by
    default. (#&#8203;3743 <https://github.com/urllib3/urllib3/issues/3743>__)
  • Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten.
    (#&#8203;3752 <https://github.com/urllib3/urllib3/issues/3752>__)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Jan 7, 2026
@renovate renovate bot requested a review from a team as a code owner January 7, 2026 16:42
@renovate renovate bot added the dependencies Pull requests that update a dependency file label Jan 7, 2026
@swiatekm swiatekm merged commit a7d6275 into main Jan 8, 2026
55 of 56 checks passed
@swiatekm swiatekm deleted the renovate/urllib3-2.x branch January 8, 2026 09:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants