packages/lang/python/python-urllib3/Makefile, branch master

python-urllib3: relax setuptools-scm version constraint

2026-04-02T16:23:54Z

urllib3 2.6.3 pyproject.toml pins setuptools-scm<10 but python-setuptools-scm was recently bumped to 10.0.3, breaking the build. Drop the upper bound via patch to allow building with setuptools-scm 10.x. Also add test.sh to verify core API imports, Retry/Timeout configuration, and PoolManager creation. Signed-off-by: Alexandru Ardelean

python-urllib3: update to 2.6.3

2026-01-10T11:58:47Z

- Fixed HTTPResponse.read_chunked() to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. - Fixed a security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were followed. (CVE-2026-21441) - Started treating Retry-After times greater than 6 hours as 6 hours by default. - Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten. Release notes: https://github.com/urllib3/urllib3/releases/tag/2.6.2 https://github.com/urllib3/urllib3/releases/tag/2.6.3 Signed-off-by: Wei-Ting Yang

python-urllib3: update to 2.6.1

2025-12-12T06:20:31Z

Fix CVE-2025-66418 and CVE-2025-66471. Full release notes: https://github.com/urllib3/urllib3/releases/tag/2.6.0 https://github.com/urllib3/urllib3/releases/tag/2.6.1 Drop 001-setuptools-scm-upper-limit.patch as upstream now supports setuptools-scm v9.x. Signed-off-by: Wei-Ting Yang

python-urllib3: fix builds with setuptools-scm 9.x

2025-11-26T10:22:22Z

- Fix builds for python-urllib3 with setuptools-scm - Patch sourced from upstream (un-released/main branch) Signed-off-by: Austin Lane

python-urllib3: update to 2.5.0

2025-10-02T06:17:48Z

Changelogs can be found in https://github.com/urllib3/urllib3/releases. Signed-off-by: Wei-Ting Yang

python-urllib3: update to 2.0.7

2025-08-14T13:48:28Z

Fix CVE-2023-45803 and CVE-2023-43804. Full changelogs: - https://github.com/urllib3/urllib3/releases/tag/v2.0.5 - https://github.com/urllib3/urllib3/releases/tag/2.0.6 - https://github.com/urllib3/urllib3/releases/tag/2.0.7 Signed-off-by: Wei-Ting Yang

python-urllib3: add hostbuild

2024-12-09T09:29:28Z

Signed-off-by: Austin Lane

lang/python/python-urllib3: fix PKG_CPE_ID

2024-02-04T23:56:22Z

There is not a single CVE linked to urllib3_project:urllib3 so use python:urllib3 instead: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:python:urllib3 Fixes: 6dcaa769d8ce8921dc3bfaf78ab9a8c1cef4a9b9 (python-urllib3: update to version 1.25) Signed-off-by: Fabrice Fontaine

python-urllib3: Update to 2.0.4

2023-09-04T06:33:57Z

The package changed to the hatchling build backend. Signed-off-by: Jeffery To

python-urllib3: update to version 1.25.11

2020-11-03T00:55:24Z

Signed-off-by: Josef Schlehofer