#urllib3 — Public Fediverse posts

#urllib3 is now available on flopPyPI, thanks @psobot! 💾

#pycon #pyconus #pyconus2026

https://blog.gslin.org/archives/2025/06/23/12484/apscheduler-requests-%e9%81%87%e5%88%b0-oserror-errno-24-too-many-open-files-%e7%9a%84%e5%95%8f%e9%a1%8c/

APScheduler + requests 遇到 OSError: [Errno 24] Too many open files 的問題

#apscheduler #bug #code #collection #flask #gc #gunicorn #pypy #pypy3 #python #requests #source #urllib #urllib3 #workaround

I'm happy to announce that #urllib3 has a new lead maintainer: @illiav 👏 Illia has been contributing to urllib3 for over 3 years now and I'm confident will make a great lead of the project. I'll continue to maintain the project alongside my other co-maintainers @quentinpradet and @shazow

https://github.com/urllib3/urllib3/issues/3629

I can't count how many times I've put import requests behind a warnings filter after urllib3's developers decided they can dictate what libraries the end user has.

https://github.com/urllib3/urllib3/issues/3020

#Python #Requests #Urllib3 #OpenSSL #LibreSSL

Splunk

Set up Splunk enterprise on local system and installed some attack data from here

But the ./bin/requirements.txt file is wrong .. so replace

#requests==2.25.1
requests==2.28.1

#urllib3==2.3.0
urllib3==1.26.12

Then edit the yaml file and this will import the dataset directly into Splunk..

It's here! The 2024 annual report for #urllib3, a relatively quiet year that included work on HTTP/2 and Web Assembly (WASM). We include our plans for Python 2 deprecation, please take a look. $3,300 worth of bounty issues exist today!

https://quentin.pradet.me/blog/urllib3-in-2024.html

Hot off the presses!!! 🔥 Find me at #AllThingsOpen tomorrow and tell me how you're supporting your open source middle-stack for a #urllib3 sticker!

Python's urllib3 has fixed a low severity vulnerability in version 2.2.2, which was released yesterday.
This vulnerability has been assigned CVE-2024-37891.
For those not familiar with urllib3, it describes it's self as

a powerful, user-friendly HTTP client for Python

It is used by many projects and libraries, including the popular requests library.

https://github.com/urllib3/urllib3/security/advisories/GHSA-34jh-p97f-mpxf

#CVE_2024_37891 #urllib3 #pythonSecurity

Po prostu super. #urllib3 teraz wymaga inwazyjnego forka #HyperCorn do testów. Wzdych.

https://github.com/urllib3/urllib3/blob/2.2.0/dev-requirements.txt#L19

#Gentoo #Python

Just great. #urllib3 now requires an intrusive fork of #HyperCorn for testing. Sigh.

https://github.com/urllib3/urllib3/blob/2.2.0/dev-requirements.txt#L19

#Gentoo #Python

#urllib3 landed its first HTTP/2 PR, many more where that came from!

We're still fundraising to release HTTP/2 support, forward this URL to folks who have been wanting HTTP/2 support in #Python:

https://opencollective.com/urllib3/updates/urllib3-is-fundraising-for-http-2-support

📦 We released #urllib3 v2.1.0 today! This release removes many of the features that have been deprecated for removal in v2. Security fixes will continue to be available in v1.26.x thanks to @[email protected]

https://github.com/urllib3/urllib3/releases/tag/2.1.0

#urllib3 v2.0.4 is now available! This was the first release by our new maintainer Illia Volochii 🎉

– #PyPy now uses stdlib hostname verification if possible
– Union operator support for HTTPHeaderDict
– Emits http.client.connect audit events

https://github.com/urllib3/urllib3/releases/tag/2.0.4

New release of #urllib3, v1.26.16 backports a bugfix for PoolManager thread-safety when accessing a high number of distinct origins to not close responses before they complete: https://github.com/urllib3/urllib3/releases/tag/1.26.16

#urllib3 2.0* is a true horror story. Whenever I fix one package not to downgrade my whole testing container to the previous version, I discover another broken package.

The most horrendous part is that they usually aren't broken by deliberate API changes — they rely on implementation details!

#Gentoo #Python

This whole #urllib3 / #OpenSSL situation is getting absurd.

I don't have sympathy for #OpenBSD or #LibreSSL. However, I can understand that they had good reasons to fork OpenSSL, and that switching back today would be hard.

I can understand projects refusing to officially declare support and rejecting workarounds. But pushing LibreSSL hate to the point of blocking #Python implementations that don't link to OpenSSL is just horrible. Users get in the crossfire, again.

https://github.com/urllib3/urllib3/issues/2168

#Docker and #Ansible users rejoice, docker-py now supports #urllib3 v2.0! 🤩

https://github.com/docker/docker-py/releases/tag/6.1.0

Oh, just great!

It turns out that #urllib3 added a totally bonkers OpenSSL version check, and they broke a lot of systems as a result. Ofc the immediate result is dozens of packages pinning urllib3 < 2, and if they continue their negligence it's going to go into hundreds.

Ofc, it is a mess that distro maintainers will have to clean up eventually. I mean, removing the pins when they do not apply to us.

https://github.com/urllib3/urllib3/issues/2168#issuecomment-1535053569
https://github.com/urllib3/urllib3/pull/2705/files#diff-793e73e680de400394dedf7d080fbcef6e74c065ffcc10b8c3dc11217a786e0b

#Gentoo #Python

New #Requests release v2.30.0 which adds explicit support for #urllib3 v2.0.0! 🚀 Let's go!!!

https://github.com/psf/requests/releases/tag/v2.30.0

One thing that the #urllib3 team does that I wonder if other #opensource projects do is ensure someone is around to help in case of disasters. Very similar to on-call but ad-hoc and during fragile moments like releases of new default behaviors/major versions. Do any other projects do this?

New #urllib3 JSON APIs making a cameo in @pamelafox's presentation slides! 🤩 #Python

https://pamelafox.github.io/my-py-talks/pyday-apis/#/9

#urllib3 v2.0.1 has been released with two small fixes:

– Fixed socket leak after failed cert hostname or fingerprint verification (thanks @graingert !)
– Fixed an issue when .read(0) was called on an empty response buffer (thanks @quentinpradet !)

https://github.com/urllib3/urllib3/releases/tag/2.0.1

Over 1 million installs of a new major version in 24 hours (and single-digit number of integration issues 😏) #urllib3

https://pepy.tech/project/urllib3?versions=2.0.0

Next hurdle is being unpinned by Requests, then we'll *really* know if there are any big issues... 😬

Already over 250,000 installs of #urllib3 v2.0.0: https://pepy.tech/project/urllib3?versions=2.0.0

#urllib3 2.0.0 was released! FWICS most of the "breaking" changes are delayed until 2.1.0. However, I'm pretty sure I've seen some project importing vendored six from urllib3, and that's certainly going to break since it is gone ;-).

Ofc pinned <2 in random places is going to be a pain.

https://urllib3.readthedocs.io/en/latest/v2-migration-guide.html

#Python

#urllib3 🥹