1786418 - [wpt-sync] Sync PR 35565 - Bump urllib3[secure] from 1.26.9 to 1.26.12 in /tools

Status: RESOLVED INVALID

(Testing :: web-platform-tests, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 35565 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/35565
Details from upstream follow.

dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> wrote:

Bump urllib3[secure] from 1.26.9 to 1.26.12 in /tools

Bumps urllib3[secure] from 1.26.9 to 1.26.12.

Release notes

<p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3[secure]'s releases</a>.</em></p>
<blockquote>
<h2>1.26.12</h2>
<ul>
<li>Deprecated the <code>urllib3[secure]</code> extra and the <code>urllib3.contrib.pyopenssl</code> module. Both will be removed in v2.x. See this <a href="https://github-redirect.dependabot.com/urllib3/urllib3/issues/2680">GitHub issue</a> for justification and info on how to migrate.</li>
</ul>
<h2>1.26.11</h2>
<p><strong>If you or your organization rely on urllib3 consider supporting us via <a href="https://github.com/sponsors/urllib3">GitHub Sponsors</a>.</strong></p>
<p>:warning: <strong>urllib3 v2.0 will drop support for Python 2</strong>: <a href="https://urllib3.readthedocs.io/en/latest/v2-roadmap.html">Read more in the v2.0 Roadmap</a></p>
<ul>
<li>Fixed an issue where reading more than 2 GiB in a call to HTTPResponse.read would raise an OverflowError on Python 3.9 and earlier.</li>
</ul>
<h2>1.26.10</h2>
<p><strong>If you or your organization rely on urllib3 consider supporting us via <a href="https://github.com/sponsors/urllib3">GitHub Sponsors</a>.</strong></p>
<p>:warning: <strong>urllib3 v2.0 will drop support for Python 2</strong>: <a href="https://urllib3.readthedocs.io/en/latest/v2-roadmap.html">Read more in the v2.0 Roadmap</a></p>
<p>:closed_lock_with_key: <strong>This is the first release to be signed with Sigstore!</strong> You can verify the distributables using the <code>.sig</code> and <code>.crt</code> files included on this release.</p>
<ul>
<li>Removed support for Python 3.5</li>
<li>Fixed an issue where a <code>ProxyError</code> recommending configuring the proxy as HTTP instead of HTTPS could appear even when an HTTPS proxy wasn't configured.</li>
</ul>
</blockquote>

Changelog

<p><em>Sourced from <a href="https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3[secure]'s changelog</a>.</em></p>
<blockquote>
<h1>1.26.12 (2022-08-22)</h1>
<ul>
<li>Deprecated the <code>urllib3[secure]</code> extra and the <code>urllib3.contrib.pyopenssl</code> module.
Both will be removed in v2.x. See this <code>GitHub issue <https://github.com/urllib3/urllib3/issues/2680&gt;</code>_
for justification and info on how to migrate.</li>
</ul>
<h1>1.26.11 (2022-07-25)</h1>
<ul>
<li>Fixed an issue where reading more than 2 GiB in a call to <code>HTTPResponse.read</code> would
raise an <code>OverflowError</code> on Python 3.9 and earlier.</li>
</ul>
<h1>1.26.10 (2022-07-07)</h1>
<ul>
<li>Removed support for Python 3.5</li>
<li>Fixed an issue where a <code>ProxyError</code> recommending configuring the proxy as HTTP
instead of HTTPS could appear even when an HTTPS proxy wasn't configured.</li>
</ul>
</blockquote>

Commits

<ul>
<li><a href="https://github.com/urllib3/urllib3/commit/a5b29ac1025f9bb30f2c9b756f3b171389c2c039"><code>a5b29ac</code></a> Add outputs.hashes to build action</li>
<li><a href="https://github.com/urllib3/urllib3/commit/a0b22f820639e6212994ba147f76b60d88185792"><code>a0b22f8</code></a> Release 1.26.12</li>
<li><a href="https://github.com/urllib3/urllib3/commit/13f11172648e880bb4a385fc4425420cd2534516"><code>13f1117</code></a> [1.26] Add SLSA generic generator to publish workflow</li>
<li><a href="https://github.com/urllib3/urllib3/commit/f95b9640604e7dd70d50d81f68fd14a36c082841"><code>f95b964</code></a> Add deprecation warnings for pyOpenSSL and the [secure] extra</li>
<li><a href="https://github.com/urllib3/urllib3/commit/aa3def7d242525e6e854991247c4b68583d15135"><code>aa3def7</code></a> Release 1.26.11</li>
<li><a href="https://github.com/urllib3/urllib3/commit/6f93b8f450b18b4c9f4c6333d759a911a63d15ae"><code>6f93b8f</code></a> Fix <code>OverflowError</code> when TLS is used on some Python versions</li>
<li><a href="https://github.com/urllib3/urllib3/commit/0a5f34d2c2ee6457e8365543243eccd3d1dc9430"><code>0a5f34d</code></a> Set GHA token permissions to be read-only</li>
<li><a href="https://github.com/urllib3/urllib3/commit/ac61b73da703df53707c31030b4ea51aab22d43c"><code>ac61b73</code></a> Backport publish workflow and process to 1.26.x</li>
<li><a href="https://github.com/urllib3/urllib3/commit/1fd77edc1a1373c9a7e762de148f19f1e2edd418"><code>1fd77ed</code></a> Release 1.26.10</li>
<li><a href="https://github.com/urllib3/urllib3/commit/37ba00248424ea3cdf556cc3e7aa81ce0bf40382"><code>37ba002</code></a> [1.26] Update paid contributor program with early feedback</li>
<li>Additional commits viewable in <a href="https://github.com/urllib3/urllib3/compare/1.26.9...1.26.12">compare view</a></li>
</ul>

<br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

<br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)