requests (2.34.2-1) unstable; urgency=medium

  * Team upload.
  * d/copyright: Update (upstream) data, remove excluded files
    Remove field Files-Excluded completely, no need for a resulting 'dfsg'
    suffix anymore.
  * d/watch: Move over to Version 5 syntax
  * d/gbp.conf: Add some more default values
  * New upstream version 2.34.2
    Fixed CVE issue(s) in upstream version 2.33
    CVE-2026-25645: Insecure Temp File Reuse in extract_zipped_paths()
    (Closes: #1132071, #1138296)
  * Rebuild patch queue from patch queue-branch
    Renamed and reworked patch:
    0001-Remove-remote-images-traking-code-and-ads.patch -->
    0001-docs-Remove-linking-to-remote-images-and-GH-button.patch
  * d/control: Use GH project page for Homepage field

 -- Carsten Schoenert <c.schoenert@t-online.de>  Tue, 30 Jun 2026 11:01:43 +0200

requests (2.32.5+dfsg-2) unstable; urgency=medium

  * Team upload.
  * Salsa CI: test <!nocheck> & <!nodoc> build profiles
  * Annotates build-deps with !nodoc or !nocheck
  * Drop "Rules-Requires-Root: no": it is the default now
  * Bump Standards-Version to 4.7.4, drop Priority: tag
  * Set upstream metadata fields: Documentation.
  * Use dh-sequence-* build dependencies instead of dh --with: sphinxdoc.

 -- Alexandre Detiste <tchet@debian.org>  Thu, 25 Jun 2026 21:26:20 +0200

requests (2.32.5+dfsg-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.

 -- Colin Watson <cjwatson@debian.org>  Fri, 29 Aug 2025 11:26:45 +0100

requests (2.32.4+dfsg-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
    - CVE-2024-47081: Fixed an issue where a maliciously crafted URL and
      trusted environment will retrieve credentials for the wrong
      hostname/machine from a netrc file (closes: #1107368).
  * Avoid harmless "date: invalid date '@'" error in autopkgtest.

 -- Colin Watson <cjwatson@debian.org>  Mon, 18 Aug 2025 11:18:19 +0100

requests (2.32.3+dfsg-5) unstable; urgency=medium

  * Team upload.
  * Mark pytest to be test-only.

 -- Bastian Germann <bage@debian.org>  Mon, 24 Mar 2025 07:38:07 +0100

requests (2.32.3+dfsg-4) unstable; urgency=medium

  * Team upload.
  * Upload to unstable.

 -- Colin Watson <cjwatson@debian.org>  Mon, 17 Feb 2025 13:10:15 +0000

requests (2.32.3+dfsg-3) experimental; urgency=medium

  * Team upload.
  * Regenerate test certificates before running tests (closes: #1091503).
  * Switch to autopkgtest-pkg-pybuild.

 -- Colin Watson <cjwatson@debian.org>  Mon, 17 Feb 2025 12:50:27 +0000

requests (2.32.3+dfsg-2) experimental; urgency=medium

  * Team upload to experimental to generate more Pseudo-Excuse for urllib3.
  * Set Rules-Requires-Root: no
  * Use dh-sequence-python3

 -- Alexandre Detiste <tchet@debian.org>  Sun, 24 Nov 2024 20:34:48 +0100

requests (2.32.3+dfsg-1) unstable; urgency=medium

  * Team upload.
  * New upstream release:
    - CVE-2024-35195: Fixed an issue where setting `verify=False` on the
      first request from a Session will cause subsequent requests to the
      _same origin_ to also ignore cert verification, regardless of the
      value of `verify` (closes: #1071593).
  * Use pybuild-plugin-pyproject.
  * Standards-Version: 4.7.0 (no changes required).

 -- Colin Watson <cjwatson@debian.org>  Thu, 13 Jun 2024 11:53:38 +0100

requests (2.31.0+dfsg-2) unstable; urgency=medium

  * Team upload.
  * Fix FTBFS with pytest 8 (Closes: #1063985)

 -- Timo Röhling <roehling@debian.org>  Thu, 16 May 2024 17:28:11 +0200

requests (2.31.0+dfsg-1) unstable; urgency=medium

  [ Max-Julian Pogner ]
  * Update upstream homepage, as the previous url would direct browsers
    to a non-existant webserver.

  [ Daniele Tricoli ]
  * New upstream version 2.31.0+dfsg
    - Fix CVE-2023-32681 (Closes: #1036693).
  * Refresh 0001-Remove-remote-images-traking-code-and-ads.patch.
  * Add a patch by Olivier Gayot (thanks Oliver!) to fix autopkgtest when
    http_proxy, https_proxy or no_proxy is set. (Closes: #1011276).
  * debian/control
    - Bump standards version to 4.6.2, no changes needed.
  * Skip tests: test_header_with_subclass_types and
    test_urllib3_pool_connection_closed due connection error.
  * debian/copyright
    - Update copyright years.

 -- Daniele Tricoli <eriol@debian.org>  Mon, 17 Jul 2023 18:31:20 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog python-requests-doc`.
