chore(deps): update dependency requests to v2.32.4 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
requests (source, changelog)	==2.32.3 -> ==2.32.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

GitHub Vulnerability Alerts

CVE-2024-47081

Impact

Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.

Workarounds

For older versions of Requests, use of the .netrc file can be disabled with trust_env=False on your Requests Session (docs).

References

https://github.com/psf/requests/pull/6965
https://seclists.org/fulldisclosure/2025/Jun/2

---

Release Notes

psf/requests (requests)

v2.32.4

Compare Source

Security

• CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted
  environment will retrieve credentials for the wrong hostname/machine from a
  netrc file.

Improvements

• Numerous documentation improvements

Deprecations

• Added support for pypy 3.11 for Linux and macOS.
• Dropped support for pypy 3.9 following its end of support.

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ BASH	shellcheck	3		0	0	0.08s
✅ BASH	shfmt	3	0	0	0	0.02s
❌ COPYPASTE	jscpd	yes		1	no	1.85s
✅ JSON	jsonlint	3		0	0	0.16s
✅ JSON	prettier	3	0	0	0	0.32s
✅ JSON	v8r	3		0	0	2.51s
⚠️ MARKDOWN	markdownlint	2	1	26	0	0.71s
✅ MARKDOWN	markdown-link-check	2		0	0	17.35s
✅ MARKDOWN	markdown-table-formatter	2	1	0	0	0.17s
⚠️ PYTHON	pyright	25		18	0	2.97s
✅ PYTHON	ruff	25	0	0	0	0.06s
❌ REPOSITORY	checkov	yes		3	no	12.97s
❌ REPOSITORY	devskim	yes		1	no	1.09s
✅ REPOSITORY	dustilock	yes		no	no	1.59s
✅ REPOSITORY	gitleaks	yes		no	no	0.06s
✅ REPOSITORY	git_diff	yes		no	no	0.0s
❌ REPOSITORY	grype	yes		7	no	22.31s
❌ REPOSITORY	kics	yes		10	no	1.73s
✅ REPOSITORY	secretlint	yes		no	no	0.98s
✅ REPOSITORY	syft	yes		no	no	1.09s
❌ REPOSITORY	trivy	yes		5	no	5.37s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.08s
✅ REPOSITORY	trufflehog	yes		no	no	3.65s
⚠️ SPELL	cspell	43		178	0	6.75s
✅ SPELL	lychee	11		0	0	3.98s
✅ YAML	prettier	5	0	0	0	0.4s
✅ YAML	v8r	5		0	0	2.24s
✅ YAML	yamllint	5		0	0	0.44s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• oxsecurity/megalinter/flavors/cupcake@v8.7.0 (88 linters)

[github-actions]

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
❌ ACTION	actionlint	3		1	0	0.3s
✅ BASH	shellcheck	3		0	0	0.08s
✅ BASH	shfmt	3	0	0	0	0.02s
❌ COPYPASTE	jscpd	yes		1	no	1.7s
✅ JSON	jsonlint	3		0	0	0.17s
✅ JSON	prettier	3	0	0	0	0.31s
✅ JSON	v8r	3		0	0	3.61s
⚠️ MARKDOWN	markdownlint	2	1	26	0	0.7s
✅ MARKDOWN	markdown-link-check	2		0	0	13.23s
✅ MARKDOWN	markdown-table-formatter	2	1	0	0	0.18s
⚠️ PYTHON	pyright	25		18	0	3.12s
✅ PYTHON	ruff	25	0	0	0	0.03s
❌ REPOSITORY	checkov	yes		3	no	13.61s
❌ REPOSITORY	devskim	yes		1	1	1.09s
✅ REPOSITORY	dustilock	yes		no	no	0.44s
✅ REPOSITORY	gitleaks	yes		no	no	0.14s
✅ REPOSITORY	git_diff	yes		no	no	0.0s
❌ REPOSITORY	grype	yes		2	9	23.72s
❌ REPOSITORY	kics	yes		1	10	1.14s
✅ REPOSITORY	secretlint	yes		no	no	1.0s
✅ REPOSITORY	syft	yes		no	no	1.76s
❌ REPOSITORY	trivy	yes		1	9	5.05s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.15s
✅ REPOSITORY	trufflehog	yes		no	no	3.11s
⚠️ SPELL	cspell	43		178	0	7.47s
✅ SPELL	lychee	11		0	0	1.07s
✅ YAML	prettier	5	0	0	0	0.47s
✅ YAML	v8r	5		0	0	2.55s
✅ YAML	yamllint	5		0	0	0.52s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• oxsecurity/megalinter/flavors/cupcake@v8.8.0 (88 linters)