Skip to content

Port bpo-39057 to Requests#7427

Merged
nateprewitt merged 1 commit into
mainfrom
cpython_updates
May 11, 2026
Merged

Port bpo-39057 to Requests#7427
nateprewitt merged 1 commit into
mainfrom
cpython_updates

Conversation

@nateprewitt
Copy link
Copy Markdown
Member

This PR ports a fix from CPython to constrain no_proxy behavior to domain boundaries. This was originally undefined behavior when Requests implemented no_proxy support but has since had bug fixes released in both CPython and Curl. We'll follow suit to conform with ecosystem expectations and resolve long standing issue #4795.

@nateprewitt nateprewitt requested a review from sigmavirus24 May 11, 2026 16:43
@nateprewitt nateprewitt linked an issue May 11, 2026 that may be closed by this pull request
@nateprewitt nateprewitt mentioned this pull request May 11, 2026
@nateprewitt nateprewitt merged commit a4f9a59 into main May 11, 2026
61 checks passed
@nateprewitt nateprewitt deleted the cpython_updates branch May 11, 2026 19:24
luketainton pushed a commit to luketainton/repos_pypilot that referenced this pull request May 13, 2026
This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [requests](https://github.com/psf/requests) ([changelog](https://github.com/psf/requests/blob/master/HISTORY.md)) | `==2.33.1` → `==2.34.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.34.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.33.1/2.34.0?slim=true) |

---

### Release Notes

<details>
<summary>psf/requests (requests)</summary>

### [`v2.34.0`](https://github.com/psf/requests/blob/HEAD/HISTORY.md#2340-2026-05-11)

[Compare Source](psf/requests@v2.33.1...v2.34.0)

**Announcements**

- Requests 2.34.0 introduces inline types, replacing those provided by
  typeshed. Public API types should be fully compatible with mypy, pyright,
  and ty. We believe types are comprehensive but if you find issues, please
  report them to the pinned tracking issue.

  Special thanks to [@&#8203;bastimeyer](https://github.com/bastimeyer), [@&#8203;cthoyt](https://github.com/cthoyt), [@&#8203;edgarrmondragon](https://github.com/edgarrmondragon), and [@&#8203;srittau](https://github.com/srittau) for
  helping review and test the types ahead of the release. ([#&#8203;7272](psf/requests#7272))

**Improvements**

- Digest Auth hashing algorithms have added `usedforsecurity=False` to clarify
  security considerations. ([#&#8203;7310](psf/requests#7310))
- Requests added support for Python 3.15 based on beta1. Downstream projects
  should be able to start testing prior to its release in October. ([#&#8203;7422](psf/requests#7422))
- Requests added support for Python 3.14t. ([#&#8203;7419](psf/requests#7419))

**Bugfixes**

- `Response.history` no longer contains a reference to itself, preventing
  accidental looping when traversing the history list. ([#&#8203;7328](psf/requests#7328))
- Requests no longer performs greedy matching on no\_proxy domains. The
  proxy\_bypass implementation has been updated with CPython's fix from
  bpo-39057. ([#&#8203;7427](psf/requests#7427))
- Requests no longer incorrectly strips duplicate leading slashes in
  URI paths. This should address user issues with specific presigned
  URLs. Note the full fix requires urllib3 2.7.0+. ([#&#8203;7315](psf/requests#7315))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNzMuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE3My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->

Reviewed-on: https://git.tainton.uk/repos/pypilot/pulls/443
Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
Co-committed-by: renovate[bot] <renovate-bot@git.tainton.uk>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

no_proxy implementation is too greedy

2 participants