Skip to content

release: v4.9.1#818

Merged
fengmk2 merged 2 commits into
4.xfrom
release/v4.9.1
Jun 13, 2026
Merged

release: v4.9.1#818
fengmk2 merged 2 commits into
4.xfrom
release/v4.9.1

Conversation

@github-actions

@github-actions github-actions Bot commented Jun 13, 2026

Copy link
Copy Markdown

Release urllib v4.9.1.

Merging this PR updates the version on 4.x and triggers the release workflow, which publishes to npm (dist-tag latest-4) and creates the GitHub Release after manual approval.

What's Changed

Security

  • Do not forward credential headers (Authorization, Cookie, Proxy-Authorization) on cross-origin redirect, and clear auth/digestAuth, matching the WHATWG Fetch spec and undici's RedirectHandler (fix: do not forward credential headers on cross-origin redirect #812). Same-origin redirects are unchanged and the caller's options object is never mutated.

Dependencies

  • Update runtime dependencies: undici (^7.24.0), qs, form-data, formstream, and type-fest.

Internal

@pkg-pr-new

pkg-pr-new Bot commented Jun 13, 2026

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/node-modules/urllib@818

commit: 413ae4e

@fengmk2 fengmk2 merged commit 25ac386 into 4.x Jun 13, 2026
5 checks passed
@fengmk2 fengmk2 deleted the release/v4.9.1 branch June 13, 2026 13:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant