v2.32.0

[nateprewitt]

2.32.0 (2024-05-20)

Security

• Fixed an issue where setting verify=False on the first request from a
  Session will cause subsequent requests to the same origin to also ignore
  cert verification, regardless of the value of verify.
  (GHSA-9wx4-h78v-vm56)

Improvements

• verify=True now reuses a global SSLContext which should improve
  request time variance between first and subsequent requests. It should
  also minimize certificate load time on Windows systems when using a Python
  version built with OpenSSL 3.x. (Avoid reloading root certificates to improve concurrent performance #6667)
• Requests now supports optional use of character detection
  (chardet or charset_normalizer) when repackaged or vendored.
  This enables pip and other projects to minimize their vendoring
  surface area. The Response.text() and apparent_encoding APIs
  will default to utf-8 if neither library is present. (Allow optional char detection dependencies in post-packaging #6702)

Bugfixes

• Fixed bug in length detection where emoji length was incorrectly
  calculated in the request content-length. (Enhance super_len to count encoded bytes for str #6589)
• Fixed deserialization bug in JSONDecodeError. (Fix #6628 - JSONDecodeError are not deserializable #6629)
• Fixed bug where an extra leading / (path separator) could lead
  urllib3 to unnecessarily reparse the request URI. (Trim excess leading path separators #6644)

Deprecations

• Requests has officially added support for CPython 3.12 (Add 3.12 classifier and tox configuration #6503)
• Requests has officially added support for PyPy 3.9 and 3.10 (Fix CI #6641)
• Requests has officially dropped support for CPython 3.7 (Drop support for CPython 3.7 #6642)
• Requests has officially dropped support for PyPy 3.7 and 3.8 (Fix CI #6641)

Documentation

• Various typo fixes and doc improvements.

Packaging

• Requests has started adopting some modern packaging practices.
  The source files for the projects (formerly requests) is now located
  in src/requests in the Requests sdist. (Move to src directory #6506)
• Starting in Requests 2.33.0, Requests will migrate to a PEP 517 build system
  using hatchling. This should not impact the average user, but extremely old
  versions of packaging utilities may have issues with the new packaging format.

[sethmlarson]

(PyCon US 2024 edition!)