[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
grpcio	1.85.0 → 1.85.1
grpcio-tools	1.81.1 → 1.85.1
hypothesis (changelog)	6.170.12 → 6.170.14
vcrpy	9.2.0 → 9.4.2

---

Release Notes

grpc/grpc (grpcio)

v1.85.1

Compare Source

This is release gRPC Core 1.85.1 (googol).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Python

---

• Fixes Denial of service in Health Watch RPC (#​43783)
• Fixes Memory leak in AsyncIO client-streaming calls with interceptors (#​43783)

Core

---

• host/:authority handling in the HPACK parser (#​43797)

HypothesisWorks/hypothesis (hypothesis)

v6.170.14: Hypothesis version 6.170.14

Compare Source

This patch adjusts coverage settings for new dependencies; there is no
user-visible change.

The canonical version of these notes (with links) is on readthedocs.

v6.170.13: Hypothesis version 6.170.13

Compare Source

This patch fixes the codemod for deprecated "characters()" arguments,
which previously raised an error when "**kwargs" were also passed.

The canonical version of these notes (with links) is on readthedocs.

kevin1024/vcrpy (vcrpy)

v9.4.2

Compare Source

What's Changed

• Fix urllib3 pools with block=True, e.g. a requests session with HTTPAdapter(pool_block=True), waiting forever for a free connection in a cassette, or when used before, after or across cassettes. A response now returns its connection to the pool once its body has been read, as in urllib3, and vcrpy keeps a pool's free slots when it takes connections out of it as a cassette starts or stops using the pool. A response finished after its cassette has exited gives back only the slot, not the cassette's connection (#​949, #​1094) - thanks @​nk-batman21

Full Changelog: kevin1024/vcrpy@v9.4.1...v9.4.2

v9.4.1

Compare Source

What's Changed

• Don't fail with ImportError: cannot import name 'HTTPHeaderDict' on urllib3 1.x, such as the 1.26 that Debian oldstable ships. The urllib3 stub imported HTTPHeaderDict from the top level of urllib3, which only exports it from 2.0 on, so use_cassette() raised while building its patchers and nothing could be recorded (#​1092, #​1093) - thanks @​inchang-ing

Full Changelog: kevin1024/vcrpy@v9.4.0...v9.4.1

v9.4.0

Compare Source

What's Changed

SOCKS proxies

Requests made through SOCKS proxies with requests and urllib3 (socks5:// and socks5h://, with PySocks installed) are now recorded and played back. urllib3 uses its own connection classes for them, which vcrpy didn't patch, so these requests skipped the cassette entirely (#​547, #​548, #​1087).

Multipart form filtering

filter_post_data_parameters now filters the fields of multipart/form-data request bodies, e.g. requests.post(url, data={"api_key": ...}, files=...). Before, it treated them as urlencoded forms and didn't find their fields, so their values were recorded (#​521, #​1090).

If you match on body: requests are filtered before they're matched, so cassettes recorded with unfiltered multipart bodies need re-recording.

Fixes

• Fix requests escaping a cassette, e.g. a write-protected one not raising CannotOverwriteExistingCassetteException, when a vcr.patch.force_reset() window opened elsewhere is closed late by the garbage collector while the cassette is in use (#​979, #​1051, #​1088) - thanks @​yeion7, from #​1052
• Fix AttributeError: 'str' object has no attribute 'get_all' when requests builds a response from a urllib.request response, e.g. with HTTPAdapter.build_response() (#​956, #​1089)

Full Changelog: kevin1024/vcrpy@v9.3.2...v9.4.0

v9.3.2

Compare Source

What's Changed

• Don't open a real connection for HTTPS requests played back from a cassette in the new_episodes record mode. urllib3 connects before sending a request, before vcrpy knows whether it will be played back, so every such request made a TLS handshake, and failed without network access (#​515, #​1086)
• Raise a clear TypeError when use_cassette() without a path is used as a context manager, instead of KeyError: 'path'. A path can be left out only when decorating a function (#​570)
• Fix filter_post_data_parameters crashing with AttributeError on iterator request bodies, e.g. a generator passed as data. Like file bodies, they're left unfiltered (#​814)
• Docs: document inject_cassette, which passes the cassette to a decorated function, e.g. to rewind it or make assertions (#​207, #​493)

Full Changelog: kevin1024/vcrpy@v9.3.1...v9.3.2

v9.3.1

Compare Source

What's Changed

• Log a warning when a cassette file exists but can't be decoded, instead of silently treating it as empty, where recording could overwrite it (#​501, #​1022) - thanks @​agu2347, and @​philsong4-ai for #​1023
• Request can be imported from vcr, e.g. vcr.Request("GET", uri, body, headers), as the docs already called it (#​759) - thanks @​lewisdawson

Full Changelog: kevin1024/vcrpy@v9.3.0...v9.3.1

v9.3.0

Compare Source

What's Changed

New features

Cassette metadata (#​934, thanks @​hasier): store values that aren't part of an interaction, such as a seed for random IDs a test sends, so they're the same when a cassette is recorded and played back.

with my_vcr.use_cassette("test.yaml") as cass:
    seed = cass.get_metadata("seed", random.getrandbits(128))

The cassette stores default the first time and returns the stored value after that. If the record mode doesn't allow changing the cassette, a missing key raises MissingMetadataError, a CannotOverwriteExistingCassetteException. See the docs.

skip_patchers (#​944, #​1070, thanks @​smoltafet): leave some HTTP libraries unpatched. For example, skip_patchers=["httpx"] stops an httpx client with an aiohttp transport (httpx-aiohttp) from being recorded twice.

filter_nested_post_data_parameters (#​936, #​937, thanks @​tighwm and @​JargeZ): make filter_post_data_parameters also filter keys in nested objects of JSON request bodies, such as JSON-RPC params. It's opt-in, so existing setups don't filter more than before.

ignore_hosts accepts compiled regular expressions (#​779, thanks @​silviumarcu), which match whole host names: ignore_hosts=["example.com", re.compile(r".*\.actions\.githubusercontent\.com")].

allow_playback_repeats also applies while recording (#​878, #​879, thanks @​pyoor): a request that matches one already recorded gets the recorded response, instead of being sent and recorded again. When played back, such requests got the first response anyway.

Fixes

• An empty cassette file is recorded like a missing one, instead of crashing with TypeError or JSONDecodeError (#​579, #​1081, thanks @​nk-batman21)
• aiohttp: requests that aren't recorded, e.g. with ignore_localhost or ignore_hosts, no longer have their response body read by vcrpy, so they stream as usual (#​978, thanks @​AronsonDan)
• urllib3: release_conn() on a streamed response returns its connection to the pool (#​1084, thanks @​edsonsims)
• drop_unused_requests no longer saves an interaction once per playback when allow_playback_repeats is set

Docs and CI

• before_record_response also runs when a cassette is loaded, so it should be idempotent (#​1042, #​1044, thanks @​ciastek)
• Examples use urllib.request instead of Python 2's urllib2 (#​998, thanks @​TejasAmle)
• CI: pre-commit runs on Node.js 24 (#​1072, thanks @​pylaterreur), ruff 0.17.2 (#​1083), Sphinx 9 (#​1082)

Full Changelog: kevin1024/vcrpy@v9.2.0...v9.3.0

---

Configuration

📅 Schedule: (in timezone Australia/Sydney)

• Branch creation
  • "before 6am on wednesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.