Update dependency httpie to v3 #24
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![mend-for-github-com[bot]](https://avatars.githubusercontent.com/in/30796?s=60&v=4){kind=small}
mend-for-github-com
bot
added
the
security fix
Autoclosing SkippedThis PR has been flagged for autoclosing, however it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==0.2.0->==3.1.0By merging this PR, the below issues will be automatically resolved and closed:
Release Notes
httpie/httpie
v3.1.0Compare Source
autothemes. (#1300)--quietso that it will now suppress all python level warnings. (#1271)--cert-key-passand prompts. (#946)httpie cli export-argscommand for exposing the parser specification for thehttp/httpscommands. (#1293)v3.0.2Compare Source
What’s new in HTTPie for Terminal 3.0 →
httpiewhen there is a presence of a config withdefault_options. (#1280)v3.0.1Compare Source
What’s new in HTTPie for Terminal 3.0 →
v3.0.0Compare Source
What’s new in HTTPie for Terminal 3.0 →
httpie pluginsinterface for plugin management. (#566)--auth-type=bearer(#1215).$ https ://pie.dev→https://pie.dev). (#1195)--form/--multipartwhen using JSON only operators (:=/:=@​). (#1212)--streamwhenContent-Typeistext/event-stream. (#376)--meta/-vvor--print=m. (#243)pie-dark/pie-light(andpie) styles that match with HTTPie for Web and Desktop. (#1237)--ignore-stdin, when there is no incoming data from stdin. (#1255)Content-Typespecifiescharset. (#1242)--rawis used with--chunked. (#1253)fruitytoauto. (#1266)v2.6.0Compare Source
What’s new in HTTPie for Terminal 2.6.0 →
Content-Typedoesn’t include it. (#1110, #1168)--response-charsetto allow overriding the response encoding for terminal display purposes. (#1168)--response-mimeto allow overriding the response mime type for coloring and formatting for the terminal. (#1168)-qor--quiettwice (e.g.-qq) (#1175)--debugoutput. (#1165)v2.5.0Compare Source
What’s new in HTTPie for Terminal 2.5.0 →
--rawto allow specifying the raw request body without extra processing asan alternative to
stdin. (#534)--continue --downloadwith a single byte to be downloaded left. (#1032)--verboseHTTP 307 redirects with streamed request body. (#1088)Cookie:followed by other headers. (#1126)v2.4.0Compare Source
--sessioncookie expiration based onSet-Cookie: max-age=<n>. (#1029)--check-statuswarning with--quietas well, not only when the output is redirected. (#1026)--session(#1020).v2.3.0Compare Source
http pie.dev/post @​file).--chunkedto enable chunked transfer encoding (#753).--multipartto allowmultipart/form-dataencoding for non-file--formrequests as well.--boundaryto allow a custom boundary string formultipart/form-datarequests.--quiet, -qflag to enforce silent behaviour.expiresdates inSet-Cookieheaders (#963).v2.2.0Compare Source
$XDG_CONFIG_HOME(#920).Set-Cookie-triggered cookie expiration (#853).--format-optionsto allow disabling sorting, etc. (#128)--sortedand--unsortedshortcuts for (un)setting all sorting-related--format-options. (#128)--ciphersto allow configuring OpenSSL ciphers (#870).netrcsupport for auth plugins. Enabled for--auth-type=basicand
digest, 3rd parties may opt in (#718, #719, #852, #934).v2.1.0Compare Source
--path-as-isto bypass dot segment (/../or/./)URL squashing (#895).
Acceptheader value for JSON requests fromapplication/json, */*toapplication/json, */*;q=0.5to clearly indicate preference (#488).
--formfile upload mixed with redirectedstdinerror handling(#840).
v2.0.0Compare Source
--offlineto allow building an HTTP request and printing it but notactually sending it over the network.
with one-by-one processing of each HTTP request or response as they become
available. This means that you can see headers immediately,
see what is being sent even if the request fails, etc.
--timeoutlimit.--max-headersto allow setting the max header limit.--compressto allow request body compression.--ignore-netrcto allow bypassing credentials from.netrc.httpsalias command withhttps://as the default scheme.$ALL_PROXYdocumentation.tests/to the PyPi package for the convenience ofdownstream package maintainers.
stdinwas a closed fd.--debugoutput formatting.v1.0.3Compare Source
Fixed CVE-2019-10751 — the way the output filename is generated for
--downloadrequests without--outputresulting in a redirect hasbeen changed to only consider the initial URL as the base for the generated
filename, and not the final one. This fixes a potential security issue under
the following scenario:
--downloadrequest with no explicit--outputis made (e.g.,$ http -d example.org/file.txt), instructing httpie togenerate the output filename
from the
Content-Dispositionresponse header, or from the URL if the headeris not provided.
instead of the expected response the URL returns a redirect to another
URL, e.g.,
attacker.example.org/.bash_profile, whose response doesnot provide a
Content-Dispositionheader (i.e., the base for thegenerated filename becomes
.bash_profileinstead offile.txt)..bash_profile(i.e., no unique suffix is added to the generated filename).
as reported by httpie in the console output
(e.g.,
Downloading 100.00 B to ".bash_profile").Reported by Raul Onitza and Giulio Comi.
v1.0.2Compare Source
v1.0.0Compare Source
--style=autowhich follows the terminal ANSI color styles.--ssl=tls1.3(available once implemented in upstream libraries).
true/falseas valid values for--verify(in addition to
yes/no) and the boolean value is case-insensitive.--stylefromsolarizedtoauto(on Windows it staysfruity).v0.9.9Compare Source
v0.9.8Compare Source
7for plugin errors.curses-less Python installations.REQUEST_ITEMarg incorrectly being reported as required.CTRL-Cinterrupt handling.130for keyboard interrupts.v0.9.7Compare Source
v0.9.6to ensure some of the newer HTTP features work out of the box
for macOS users (starting with HTTPie 0.9.4.).
Header:, and send anempty value with
Header;.--default-scheme <URL_SCHEME>to enable things like$ alias https='http --default-scheme=https.-Ias a shortcut for--ignore-stdin.extras/httpie-completion.fishin the GitHub repo).
requeststo 2.10.0 so that SOCKS support can be added viapip install requests[socks].Acceptheader fromapplication/jsonto
application/json, */*.and trailing whitespace is removed.
v0.9.4Compare Source
Content-Typeof files uploaded inmultipart/form-datarequests--ssl=<PROTOCOL>to specify the desired SSL/TLS protocol versionto use for HTTPS requests.
--json, -jto work around incorrectContent-Type--allto show intermediate responses such as redirects (with--follow)--history-print, -P WHATto specify formatting of intermediate responses--max-redirects=N(default 30)-Aas short name for--auth-type-Fas short name for--followimplicit_content_typeconfig option(use
"default_options": ["--form"]instead)stdoutdoesn't trigger an error anymore when--output FILEis set
--styleback tosolarizedfor better supportof light and dark terminals
--debugoutput--sessionwhen used with--download--downloadto trim too long filenames before saving the fileContent-Typewith multiple+subtypepartsv0.9.3Compare Source
--stylefromsolarizedtomonokai'requests.packages.urllib3' has no attribute 'disable_warnings'errors that occurred in some installations
--authprompt on Windowsv0.9.2Compare Source
Content-Typetoapplication/jsonas UTF-8is the default JSON encoding
v0.9.1Compare Source
(see httpie-unixsocket
and httpie-http2)
v0.9.0Compare Source
--certand--cert-keyparameters to specify a client sidecertificate and private key for SSL
curses\now only escapes special characters (the ones that are used as key-value
separators by HTTPie)
unittesttopytestwheelsupportCONTRIBUTINGUser-Agentoverwriting when used within a session--output=/dev/nullon Linuxv0.8.0field=@​file.txtandfield:=@​file.jsonfor embeddingthe contents of text and JSON files into request data
Hostheader value output so that it doesn't containcredentials, if included in the URL
v0.7.0Compare Source
--ignore-stdin.--helpoutput.Content-Dispositionparsing for--downloadmode.v0.6.0Compare Source
--sessionand--session-read-onlynow also accept paths tosession files (eg.
http --session=/tmp/session.json example.org)v0.5.1Compare Source
Content-*andIf-*request headers are not stored in sessionsanymore as they are request-specific
v0.5.0Compare Source
--downloadv0.4.1Compare Source
setup.pyv0.4.0Compare Source
--no-optionfor every--optionto be config-friendlylast value is used
v0.3.1Compare Source
v0.3.0Compare Source
--allow-redirectsto--followhttp --help2for timed-out requests(
--pretty=all,--pretty=colorsand--pretty=format)--uglyhas bee removed in favor of--pretty=nonev0.2.7Compare Source
--stream, -Scan be used to enablestreaming also with
--prettyand to ensure a more frequent outputflushing
--pretty=none)--headers)--output FILEto store output into a file(piping results in corrupted data on Windows)
multipart/form-datarequests--tracebackto--debugv0.2.6Compare Source
--headersis now-h(-thas beenremoved, for usage use
--help)(e.g.,
http -f url a=1 a=2)--check-statusto exit with an error on HTTP 3xx, 4xx and5xx (3, 4, and 5, respectively)
the default behaviour is to only print the response body
(It can still be overwritten via the
--printflag.)param==value)v0.2.5Compare Source
improved readability
Content-Type(http URL @​/path)--verbosev0.2.4Compare Source
v0.2.3Compare Source
v0.2.2Compare Source
METHODpositional argument can now be omitted (defaults toGET, or toPOSTwith data)v0.2.1Compare Source
requests-0.12.1in
pygments-1.5