dependabot[bot] opened a new pull request, #12864: URL: https://github.com/apache/gluten/pull/12864
Bumps [httplib2](https://github.com/httplib2/httplib2) from 0.20.2 to 0.32.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/httplib2/httplib2/blob/master/CHANGELOG";>httplib2's changelog</a>.</em></p> <blockquote> <p>0.32.0</p> <p>Python support 3.8+ only</p> <p>decompression limited by size and ratio</p> <p>decoder foundation to support more compression algorithms</p> <p>0.31.2</p> <p>build(deps): pp.DelimitedList (camel case) only available in pyparsing>=3.1 <a href="https://redirect.github.com/httplib2/httplib2/issues/255";>httplib2/httplib2#255</a></p> <p>DO NOT use 0.31.1</p> <p>0.31.1</p> <p>auth: use pyparsing v3 PEP8-compliant method names <a href="https://redirect.github.com/httplib2/httplib2/pull/253";>httplib2/httplib2#253</a></p> <p>0.31.0</p> <p>https: avoid costly load_verify_locations when SSL certificate validation is disabled <a href="https://redirect.github.com/httplib2/httplib2/pull/249";>httplib2/httplib2#249</a></p> <p>0.30.2</p> <p>No changes in library. Fix automatic pypi release from CI.</p> <p>0.30.1</p> <p>restore socks proxy support, was broken in 0.30.0 <a href="https://redirect.github.com/httplib2/httplib2/issues/251";>httplib2/httplib2#251</a></p> <p>0.30.0</p> <p>BREAKING CHANGE! Python support 3.7+ only</p> <p>https: Do not rely on ssl.PROTOCOL_TLS, which has been deprecated in Python3.10 <a href="https://redirect.github.com/httplib2/httplib2/pull/243";>httplib2/httplib2#243</a></p> <p>0.22.0</p> <p>https: disable_ssl_certificate_validation caused ValueError: Cannot set verify_mode to CERT_NONE when check_hostname is enabled <a href="https://redirect.github.com/httplib2/httplib2/pull/231";>httplib2/httplib2#231</a></p> <p>build(deps): bump cryptography from 37.0.4 to 38.0.3 Reason from cryptography changelog: Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.7, which resolves CVE-2022-3602 and CVE-2022-3786.</p> <p>0.21.0</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/httplib2/httplib2/commit/ba9bf505cd899f522f2bb58ca608444adf49afc1";><code>ba9bf50</code></a> v0.32.0 release</li> <li><a href="https://github.com/httplib2/httplib2/commit/87581ad6cf752fe3da2090c59058261d2d00a427";><code>87581ad</code></a> decompression limited by size and ratio; require python 3.8+</li> <li><a href="https://github.com/httplib2/httplib2/commit/a99a11fba8d5fa3bb9c47827e5cbfd641dfb88d3";><code>a99a11f</code></a> v0.31.2 release</li> <li><a href="https://github.com/httplib2/httplib2/commit/370010a12ef4b97ebeeac59f52d071de7bc3faa8";><code>370010a</code></a> dep-compat: pp.DelimitedList (camel case) only available in pyparsing>=3.1</li> <li><a href="https://github.com/httplib2/httplib2/commit/6d2ea322d53a03d058cd8e63c12871cdd1127ca9";><code>6d2ea32</code></a> v0.31.1 release</li> <li><a href="https://github.com/httplib2/httplib2/commit/d1b0ce329667f0b0047381c089e53ea1055f2fca";><code>d1b0ce3</code></a> auth: use pyparsing v3 PEP8-compliant method names</li> <li><a href="https://github.com/httplib2/httplib2/commit/3288ba77ccb1924a6a79350f300ebb84140ec064";><code>3288ba7</code></a> chore: harden publishing. use github attestations</li> <li><a href="https://github.com/httplib2/httplib2/commit/26cfea5d07a5817cf214d9978c856c91abf4e078";><code>26cfea5</code></a> v0.31.0 release</li> <li><a href="https://github.com/httplib2/httplib2/commit/cbd3d21004374997167d9b8ab36b4ec211881a57";><code>cbd3d21</code></a> chore: CI use trusted publishing</li> <li><a href="https://github.com/httplib2/httplib2/commit/147d7d5d00b4cd383dbdda839089237aa0c2a836";><code>147d7d5</code></a> https: avoid costly load_verify_locations when SSL certificate validation is ...</li> <li>Additional commits viewable in <a href="https://github.com/httplib2/httplib2/compare/v0.20.2...v0.32.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/gluten/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
