---
- branch: MAIN
  date: Mon Oct 22 07:55:36 UTC 2018
  files:
  - new: '1.40'
    old: '1.39'
    path: pkgsrc/devel/py-requests/Makefile
    pathrev: pkgsrc/devel/py-requests/Makefile@1.40
    type: modified
  - new: '1.32'
    old: '1.31'
    path: pkgsrc/devel/py-requests/distinfo
    pathrev: pkgsrc/devel/py-requests/distinfo@1.32
    type: modified
  - new: '1.4'
    old: '1.3'
    path: pkgsrc/devel/py-requests/patches/patch-requests_____init____.py
    pathrev: pkgsrc/devel/py-requests/patches/patch-requests_____init____.py@1.4
    type: modified
  - new: '1.6'
    old: '1.5'
    path: pkgsrc/devel/py-requests/patches/patch-setup.py
    pathrev: pkgsrc/devel/py-requests/patches/patch-setup.py@1.6
    type: modified
  id: 20181022T075536Z.ea2b5ed2b975cc452d7abb8a835d8699696759a7
  log: |
    py-requests: updated to 2.20.0

    2.20.0:
    Bugfixes
    Content-Type header parsing is now case-insensitive (e.g. charset=utf8 v Charset=utf8).
    Fixed exception leak where certain redirect urls would raise uncaught urllib3 exceptions.
    Requests removes Authorization header from requests redirected from https to http on the same hostname. (CVE-2018-18074)
    should_bypass_proxies now handles URIs without hostnames (e.g. files).

    Dependencies
    Requests now supports urllib3 v1.24.

    Deprecations
    Requests has officially stopped support for Python 2.6.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/devel/py-requests'
  unixtime: '1540194936'
  user: adam