Change8

v2.33.0

Breaking Changes
📦 requestsView on GitHub →
1 breaking1 features🐛 1 fixes🔧 1 symbols

Summary

Version 2.33.0 introduces inline types support and migrates the build system to PEP 517. It also drops support for Python 3.9 and addresses a security vulnerability in path extraction utilities.

⚠️ Breaking Changes

  • The behavior of ``requests.utils.extract_zipped_paths`` has changed to extract contents to a non-deterministic location to prevent malicious file replacement. This only affects applications calling this utility function directly; default usage is unaffected.

Migration Steps

  1. If you use ``requests.utils.extract_zipped_paths`` directly, review its new behavior regarding non-deterministic extraction locations.

✨ New Features

  • Requests is adding inline types (see issue #7271).

🐛 Bug Fixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+.

Affected Symbols