Skip to content

Bump urllib3 from 2.6.0 to 2.6.3#1935

Open
renovate-pagopa[bot] wants to merge 1 commit intomainfrom
renovate/urllib3-to-2.6.3
Open

Bump urllib3 from 2.6.0 to 2.6.3#1935
renovate-pagopa[bot] wants to merge 1 commit intomainfrom
renovate/urllib3-to-2.6.3

Conversation

@renovate-pagopa
Copy link
Contributor

@renovate-pagopa renovate-pagopa bot commented Jan 9, 2026

This PR contains the following updates:

Package Change Age Confidence
urllib3 (changelog) ==2.6.0 -> ==2.6.3 age confidence

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

For further information on security, please refer to the Confluence page link


Release Notes

urllib3/urllib3 (urllib3)

v2.6.3

Compare Source

==================

  • Fixed a high-severity security issue where decompression-bomb safeguards of
    the streaming API were bypassed when HTTP redirects were followed.
    (GHSA-38jv-5279-wg99 <https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99>__)
  • Started treating Retry-After times greater than 6 hours as 6 hours by
    default. (#&#8203;3743 <https://github.com/urllib3/urllib3/issues/3743>__)
  • Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten.
    (#&#8203;3752 <https://github.com/urllib3/urllib3/issues/3752>__)

v2.6.2

Compare Source

==================

  • Fixed HTTPResponse.read_chunked() to properly handle leftover data in
    the decoder's buffer when reading compressed chunked responses.
    (#&#8203;3734 <https://github.com/urllib3/urllib3/issues/3734>__)

v2.6.1

Compare Source

==================

  • Restore previously removed HTTPResponse.getheaders() and
    HTTPResponse.getheader() methods.
    (#&#8203;3731 <https://github.com/urllib3/urllib3/issues/3731>__)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@renovate-pagopa renovate-pagopa bot added the OER label Jan 9, 2026
@renovate-pagopa renovate-pagopa bot requested review from a team, marcobottaro and tommaso1 as code owners January 9, 2026 05:04
@renovate-pagopa renovate-pagopa bot added the OER label Jan 9, 2026
@changeset-bot
Copy link

changeset-bot bot commented Jan 9, 2026

⚠️ No Changeset found

Latest commit: 3863d8a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions
Copy link
Contributor

Jira Pull request Link

@renovate-pagopa[bot] it seems this Pull Request has no issues that refers to Jira!
Please check it out.
PR's title should be something like: [B2B-1] Title where B2B-1 is the activity's id on Jira.

@github-actions
Copy link
Contributor

Branch is not up to date with base branch

@renovate-pagopa[bot] it seems this Pull Request is not updated with base branch.
Please proceed with a merge or rebase to solve this.

@github-actions
Copy link
Contributor

github-actions bot commented Feb 1, 2026

This pull request is stale because it has been open for 14 days with no activity. If the pull request is still valid, please update it within 21 days to keep it open or merge it, otherwise it will be closed automatically.

@github-actions github-actions bot added the stale label Feb 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants