• 2.1.3 a77cf5e782

    2.1.3
    All checks were successful
    / pr-review (push) Has been skipped
    / gitleaks (push) Successful in 13s
    / pr-review (release) Has been skipped
    / gitleaks (release) Successful in 27s
    / checks (push) Successful in 3m40s
    / publish (push) Has been skipped
    / checks (release) Successful in 3m47s
    / deploy-docs (release) Has been skipped
    / publish (release) Successful in 31s
    / deploy-docs (push) Successful in 1m26s
    Stable

    marvin8 released this 2026-09-13 19:52:19 +00:00 | 0 commits to main since this release

    Signed by marvin8
    SSH key fingerprint: SHA256:B4Q+9pbWSIqGYTl3Ub/FPrBSqAVd2OkCR13hYRG5wek

    [2.1.3] - 2026-09-14

    • Security: httpx2 requirement raised to ~=2.12 (which pins its matching httpcore2), clearing four advisories in the HTTP stack (PYSEC-2026-3844/3846/3848/3849)

    Commits

    • 🔀 Merge branch 'fix/issue-33-bump-httpx2-security' 5769c50
    • 📝 drop the build-side floor from the intro security bullet 8b764f8
    • 📝 correct the consumer guidance in the release notes 1518eb6
    • 📝 drop the already-released mkdocs-material advisory from the intro post b1fe70e
    • 🔧 pin pysentry sources to osv,pypi to stop partial-scan flakes 6200129
    • 📝 per-advisory bullets and floor-accurate wording in release notes 7f8ea93
    • 📝 precision fixes to release notes from third review wave 3da2737
    • 📝 scope the httpcore2 floor claim to longwei's own build aec2334
    • 🔧 constrain httpcore2>=2.12.0 for PYSEC-2026-3844 and reword release notes 0288996
    • ⬆️ bump: httpx2 to ~=2.12 to address PYSEC-2026-3844/3846/3848/3849 3789294
    Downloads