Httpx

Latest version: v0.27.0

Safety actively analyzes 628903 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 9 of 13

0.9.5

Not secure
Fixed

- Fix Host header and HSTS rewrites when an explicit `:80` port is included in URL. (Pull 649)
- Query Params on the URL string are merged with any `params=...` argument. (Pull 653)
- More robust behavior when closing connections. (Pull 640)
- More robust behavior when handling HTTP/2 headers with trailing whitespace. (Pull 637)
- Allow any explicit `Content-Type` header to take precedence over the encoding default. (Pull 633)

0.9.4

Not secure
Fixed

- Added expiry to Keep-Alive connections, resolving issues with acquiring connections. (Pull 627)
- Increased flow control windows on HTTP/2, resolving download speed issues. (Pull 629)

0.9.3

Not secure
Fixed

- Fixed HTTP/2 with autodetection backend. (Pull 614)

0.9.2

Not secure
* Released due to packaging build artifact.

0.9.1

Not secure
* Released due to packaging build artifact.

0.9.0

Not secure
The 0.9 releases brings some major new features, including:

* A new streaming API.
* Autodetection of either asyncio or trio.
* Nicer timeout configuration.
* HTTP/2 support off by default, but can be enabled.

We've also removed all private types from the top-level package export.

In order to ensure you are only ever working with public API you should make
sure to only import the top-level package eg. `import httpx`, rather than
importing modules within the package.

Added

- Added concurrency backend autodetection. (Pull 585)
- Added `Client(backend='trio')` and `Client(backend='asyncio')` API. (Pull 585)
- Added `response.stream_lines()` API. (Pull 575)
- Added `response.is_error` API. (Pull 574)
- Added support for `timeout=Timeout(5.0, connect_timeout=60.0)` styles. (Pull 593)

Fixed

- Requests or Clients with `timeout=None` now correctly always disable timeouts. (Pull 592)
- Request 'Authorization' headers now have priority over `.netrc` authentication info. (Commit 095b691)
- Files without a filename no longer set a Content-Type in multipart data. (Commit ed94950)

Changed

- Added `httpx.stream()` API. Using `stream=True` now results in a warning. (Pull 600, 610)
- HTTP/2 support is switched to "off by default", but can be enabled explicitly. (Pull 584)
- Switched to `Client(http2=True)` API from `Client(http_versions=["HTTP/1.1", "HTTP/2"])`. (Pull 586)
- Removed all private types from the top-level package export. (Pull 608)
- The SSL configuration settings of `verify`, `cert`, and `trust_env` now raise warnings if used per-request when using a Client instance. They should always be set on the Client instance itself. (Pull 597)
- Use plain strings "TUNNEL_ONLY" or "FORWARD_ONLY" on the HTTPProxy `proxy_mode` argument. The `HTTPProxyMode` enum still exists, but its usage will raise warnings. (610)
- Pool timeouts are now on the timeout configuration, not the pool limits configuration. (Pull 563)
- The timeout configuration is now named `httpx.Timeout(...)`, not `httpx.TimeoutConfig(...)`. The old version currently remains as a synonym for backwards compatibility. (Pull 591)

---

Page 9 of 13

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.