[Bug 2064453] [NEW] Merge requests from Debian unstable for oracular

Bryce Harrington 2064453 at bugs.launchpad.net
Wed May 1 06:19:51 UTC 2024


Public bug reported:

A merge of requests appears to be available presently.
Upstream: tbd
Debian:   2.31.0+dfsg-1    
Ubuntu:   2.31.0+dfsg-1ubuntu1

If it turns out this needs a sync rather than a merge, please change the
tag 'needs-merge' to 'needs-sync', and (optionally) update the title as
desired.

If this merge pulls in a new upstream version, also consider adding an
entry to the Oracular Release Notes:
https://discourse.ubuntu.com/c/release/38


### New Debian Changes ###

requests (2.31.0+dfsg-1) unstable; urgency=medium

  [ Max-Julian Pogner ]
  * Update upstream homepage, as the previous url would direct browsers
    to a non-existant webserver.

  [ Daniele Tricoli ]
  * New upstream version 2.31.0+dfsg
    - Fix CVE-2023-32681 (Closes: #1036693).
  * Refresh 0001-Remove-remote-images-traking-code-and-ads.patch.
  * Add a patch by Olivier Gayot (thanks Oliver!) to fix autopkgtest when
    http_proxy, https_proxy or no_proxy is set. (Closes: #1011276).
  * debian/control
    - Bump standards version to 4.6.2, no changes needed.
  * Skip tests: test_header_with_subclass_types and
    test_urllib3_pool_connection_closed due connection error.
  * debian/copyright
    - Update copyright years.

 -- Daniele Tricoli <eriol at debian.org>  Mon, 17 Jul 2023 18:31:20 +0200

requests (2.28.1+dfsg-1) unstable; urgency=medium

  [ Lena Voytek ]
  * New upstream version 2.28.1+dfsg
  * debian/patches/0001-Remove-remote-images-traking-code-and-ads.patch
    - Refresh.
  * debian/rules: Disable test_json_decode_persists_doc_attr

  [ Daniele Tricoli ]
  * debian/control
    - Bump standards version to 4.6.1, no changes needed.

 -- Daniele Tricoli <eriol at debian.org>  Thu, 24 Nov 2022 00:23:09 +0100

requests (2.27.1+dfsg-1) unstable; urgency=medium

  [ root ]
  * Update standards version to 4.6.0, no changes needed.

  [ Daniele Tricoli ]
  * New upstream version 2.27.1+dfsg
  * Enable tests both at build time and using autopkgtest.
  * Enable salsa pipelines.
  * debian/copyright
    - Update Files-Excluded rule to remove the logo.
    - Update copyright years.
  * debian/patches/0001-Remove-remote-images-traking-code-and-ads.patch
    - Refresh.
  * debian/patches/0002-Temporary-exclude-requests.codes.patch
    - Drop since fixed upstream.
  * debian/control
    - Add python3-pytest, python3-pytest-httpbin, python3-pytest-mock,
      python3-socks and python3-trustme to Build-Depends.
    - Set python3-requests Multi-Arch: foreign. Thanks Elrond for the report.
      (Closes: #985625)

 -- Daniele Tricoli <eriol at debian.org>  Sun, 20 Mar 2022 17:51:34 +0100

requests (2.25.1+dfsg-2) unstable; urgency=medium

  * debian/control
    - Drop upper bound version for chardet and urllib3. Thanks to sramacher
      and myon for the suggestions. (Closes: #978749)

 -- Daniele Tricoli <eriol at debian.org>  Thu, 31 Dec 2020 17:55:39 +0100

requests (2.25.1+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Refresh patches.
  * debian/control
    - Bump chardet << 5.

 -- Daniele Tricoli <eriol at debian.org>  Thu, 31 Dec 2020 03:01:11 +0100

requests (2.25.0+dfsg-2) unstable; urgency=medium

  * debian/patches/0002-Temporary-exclude-requests.codes.patch
    - Temporary exclude requests.codes to make documentation not fail during
      build. (Closes: #978351)
  * debian/control
    - Bump Standards-Version to 4.5.1 (no changes needed).

 -- Daniele Tricoli <eriol at debian.org>  Wed, 30 Dec 2020 01:23:56 +0100

requests (2.25.0+dfsg-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Set upstream metadata fields: Security-Contact.

  [ Daniele Tricoli ]
  * New upstream version 2.25.0+dfsg
  * debian/patches/0001-Remove-remote-images-traking-code-and-ads.patch
    - Refresh.
  * debian/copyright
    - Drop section for konami.js since it's no more distributed by upstream.
  * debian/control
    - Bump python3-urllib3 to << 1.27.


### Old Ubuntu Delta ###

requests (2.31.0+dfsg-1ubuntu1) mantic; urgency=medium

  * Merge with Debian unstable (LP: #2018104). Remaining changes:
    - d/p/remove-charset-normalizer-dependency.patch: Remove charset-normalizer
      as a dependency of requests (LP #1975541)
  * Dropped changes:
    - d/p/CVE-2023-32681.patch: Unintended leak of Proxy-Authorization header
    [Fixed upstream in 2.31.0]
    - d/p/0002-Fix-tests-with-HTTP-proxy.patch: Fix autopkgtest when
      http_proxy, https_proxy or no_proxy variable is set (LP #1974182)
    [Fixed in 2.31.0+dfsg-1]

 -- Lena Voytek <lena.voytek at canonical.com>  Tue, 25 Jul 2023 14:54:56
-0700

** Affects: requests (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: needs-merge upgrade-software-version

** Changed in: requests (Ubuntu)
    Milestone: None => ubuntu-24.05

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to requests in Ubuntu.
https://bugs.launchpad.net/bugs/2064453

Title:
  Merge requests from Debian unstable for oracular

Status in requests package in Ubuntu:
  New

Bug description:
  A merge of requests appears to be available presently.
  Upstream: tbd
  Debian:   2.31.0+dfsg-1    
  Ubuntu:   2.31.0+dfsg-1ubuntu1

  If it turns out this needs a sync rather than a merge, please change
  the tag 'needs-merge' to 'needs-sync', and (optionally) update the
  title as desired.

  If this merge pulls in a new upstream version, also consider adding an
  entry to the Oracular Release Notes:
  https://discourse.ubuntu.com/c/release/38

  
  ### New Debian Changes ###

  requests (2.31.0+dfsg-1) unstable; urgency=medium

    [ Max-Julian Pogner ]
    * Update upstream homepage, as the previous url would direct browsers
      to a non-existant webserver.

    [ Daniele Tricoli ]
    * New upstream version 2.31.0+dfsg
      - Fix CVE-2023-32681 (Closes: #1036693).
    * Refresh 0001-Remove-remote-images-traking-code-and-ads.patch.
    * Add a patch by Olivier Gayot (thanks Oliver!) to fix autopkgtest when
      http_proxy, https_proxy or no_proxy is set. (Closes: #1011276).
    * debian/control
      - Bump standards version to 4.6.2, no changes needed.
    * Skip tests: test_header_with_subclass_types and
      test_urllib3_pool_connection_closed due connection error.
    * debian/copyright
      - Update copyright years.

   -- Daniele Tricoli <eriol at debian.org>  Mon, 17 Jul 2023 18:31:20
  +0200

  requests (2.28.1+dfsg-1) unstable; urgency=medium

    [ Lena Voytek ]
    * New upstream version 2.28.1+dfsg
    * debian/patches/0001-Remove-remote-images-traking-code-and-ads.patch
      - Refresh.
    * debian/rules: Disable test_json_decode_persists_doc_attr

    [ Daniele Tricoli ]
    * debian/control
      - Bump standards version to 4.6.1, no changes needed.

   -- Daniele Tricoli <eriol at debian.org>  Thu, 24 Nov 2022 00:23:09
  +0100

  requests (2.27.1+dfsg-1) unstable; urgency=medium

    [ root ]
    * Update standards version to 4.6.0, no changes needed.

    [ Daniele Tricoli ]
    * New upstream version 2.27.1+dfsg
    * Enable tests both at build time and using autopkgtest.
    * Enable salsa pipelines.
    * debian/copyright
      - Update Files-Excluded rule to remove the logo.
      - Update copyright years.
    * debian/patches/0001-Remove-remote-images-traking-code-and-ads.patch
      - Refresh.
    * debian/patches/0002-Temporary-exclude-requests.codes.patch
      - Drop since fixed upstream.
    * debian/control
      - Add python3-pytest, python3-pytest-httpbin, python3-pytest-mock,
        python3-socks and python3-trustme to Build-Depends.
      - Set python3-requests Multi-Arch: foreign. Thanks Elrond for the report.
        (Closes: #985625)

   -- Daniele Tricoli <eriol at debian.org>  Sun, 20 Mar 2022 17:51:34
  +0100

  requests (2.25.1+dfsg-2) unstable; urgency=medium

    * debian/control
      - Drop upper bound version for chardet and urllib3. Thanks to sramacher
        and myon for the suggestions. (Closes: #978749)

   -- Daniele Tricoli <eriol at debian.org>  Thu, 31 Dec 2020 17:55:39
  +0100

  requests (2.25.1+dfsg-1) unstable; urgency=medium

    * New upstream release.
    * Refresh patches.
    * debian/control
      - Bump chardet << 5.

   -- Daniele Tricoli <eriol at debian.org>  Thu, 31 Dec 2020 03:01:11
  +0100

  requests (2.25.0+dfsg-2) unstable; urgency=medium

    * debian/patches/0002-Temporary-exclude-requests.codes.patch
      - Temporary exclude requests.codes to make documentation not fail during
        build. (Closes: #978351)
    * debian/control
      - Bump Standards-Version to 4.5.1 (no changes needed).

   -- Daniele Tricoli <eriol at debian.org>  Wed, 30 Dec 2020 01:23:56
  +0100

  requests (2.25.0+dfsg-1) unstable; urgency=medium

    [ Debian Janitor ]
    * Set upstream metadata fields: Security-Contact.

    [ Daniele Tricoli ]
    * New upstream version 2.25.0+dfsg
    * debian/patches/0001-Remove-remote-images-traking-code-and-ads.patch
      - Refresh.
    * debian/copyright
      - Drop section for konami.js since it's no more distributed by upstream.
    * debian/control
      - Bump python3-urllib3 to << 1.27.


  
  ### Old Ubuntu Delta ###

  requests (2.31.0+dfsg-1ubuntu1) mantic; urgency=medium

    * Merge with Debian unstable (LP: #2018104). Remaining changes:
      - d/p/remove-charset-normalizer-dependency.patch: Remove charset-normalizer
        as a dependency of requests (LP #1975541)
    * Dropped changes:
      - d/p/CVE-2023-32681.patch: Unintended leak of Proxy-Authorization header
      [Fixed upstream in 2.31.0]
      - d/p/0002-Fix-tests-with-HTTP-proxy.patch: Fix autopkgtest when
        http_proxy, https_proxy or no_proxy variable is set (LP #1974182)
      [Fixed in 2.31.0+dfsg-1]

   -- Lena Voytek <lena.voytek at canonical.com>  Tue, 25 Jul 2023 14:54:56
  -0700

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/requests/+bug/2064453/+subscriptions




More information about the foundations-bugs mailing list