vee1e/mitmproxy
1
0
Fork 0
mirror of https://github.com/vee1e/mitmproxy.git synced 2026-09-01 18:27:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
11180 commits 15 branches 121 tags 71 MiB
Commit graph

11180 commits

This branch
This branch
All branches
Author SHA1 Message Date
dependabot[bot]
1d9a5b9a17
build(deps-dev): bump click from 8.3.2 to 8.4.0 (#8306) 
* build(deps-dev): bump click from 8.3.2 to 8.4.0

Bumps [click](https://github.com/pallets/click) from 8.3.2 to 8.4.0.
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](https://github.com/pallets/click/compare/8.3.2...8.4.0)

---
updated-dependencies:
- dependency-name: click
  dependency-version: 8.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-07-03 09:47:48 +02:00
dependabot[bot]
ac5a56ff68
build(deps-dev): bump awscli from 1.44.83 to 1.45.12 in the deploy group (#8305) 
* build(deps-dev): bump awscli from 1.44.83 to 1.45.12 in the deploy group

Bumps the deploy group with 1 update: [awscli](https://github.com/aws/aws-cli).


Updates `awscli` from 1.44.83 to 1.45.12
- [Release notes](https://github.com/aws/aws-cli/releases)
- [Commits](https://github.com/aws/aws-cli/compare/1.44.83...1.45.12)

---
updated-dependencies:
- dependency-name: awscli
  dependency-version: 1.45.12
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: deploy
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-07-03 09:47:22 +02:00
dependabot[bot]
fcc64baa8f
build(deps-dev): bump the tox group with 2 updates (#8304) 
* build(deps-dev): bump the tox group with 2 updates

Bumps the tox group with 2 updates: [tox](https://github.com/tox-dev/tox) and [tox-uv](https://github.com/tox-dev/tox-uv).


Updates `tox` from 4.53.0 to 4.54.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/tox/compare/4.53.0...4.54.0)

Updates `tox-uv` from 1.35.1 to 1.35.2
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](https://github.com/tox-dev/tox-uv/compare/1.35.1...1.35.2)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.54.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tox
- dependency-name: tox-uv
  dependency-version: 1.35.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: tox
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-07-03 09:46:41 +02:00
dependabot[bot]
ccf7afcd43
build(deps-dev): bump the pyinstaller group with 2 updates (#8301) 
* build(deps-dev): bump the pyinstaller group with 2 updates

Bumps the pyinstaller group with 2 updates: [pyinstaller](https://github.com/pyinstaller/pyinstaller) and [pyinstaller-hooks-contrib](https://github.com/pyinstaller/pyinstaller-hooks-contrib).


Updates `pyinstaller` from 6.19.0 to 6.20.0
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst)
- [Commits](https://github.com/pyinstaller/pyinstaller/compare/v6.19.0...v6.20.0)

Updates `pyinstaller-hooks-contrib` from 2026.4 to 2026.5
- [Release notes](https://github.com/pyinstaller/pyinstaller-hooks-contrib/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller-hooks-contrib/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pyinstaller/pyinstaller-hooks-contrib/compare/v2026.4...v2026.5)

---
updated-dependencies:
- dependency-name: pyinstaller
  dependency-version: 6.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pyinstaller
- dependency-name: pyinstaller-hooks-contrib
  dependency-version: '2026.5'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pyinstaller
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-07-03 09:41:51 +02:00
user77
3500dacba0
mitmweb: honor view_order_reversed for live flows (#8288) 
* mitmweb: honor view_order_reversed for live flows

mitmweb only applied view_order_reversed to the initial flow list it
fetches over HTTP. Flows delivered afterwards over the WebSocket were
always appended to the end of the table, so with the option enabled the
newest flow stayed off-screen at the bottom instead of appearing on top.

Track the option in the flows reducer and, when no column sort is active,
insert newly added flows at the front when view_order_reversed is set and
at the back otherwise. This matches the order the server already uses for
the initial list.

Closes #5520

* [autofix.ci] apply automated fixes

* mitmweb: destructure orderReversed in flows reducer for consistency

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-24 20:28:26 +02:00
Julio César Suástegui
c4fa9fb8c8
docs: fix typos (#8285) 2026-06-18 08:51:03 +02:00
Matteo Luppi
c4a42d4d5c
Improve TypeScript typing across mitmweb (#8238) 
* add TypeScript definitions for lodash, qrcode, and react-dom

* improve typing utils.ts

* Improve typing flow/utils.ts

* Improve typing components/common/

* Improve typing components/contentviews/

* Improve typing Eventlog, FlowTable and FlowView

* Improve typing components/Header/

* Improve typing remaining components

* [autofix.ci] apply automated fixes

* add review changes

* [autofix.ci] apply automated fixes

* add fallback

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-05 16:02:20 +02:00
dependabot[bot]
05530de5b3
Bump mypy from 1.20.1 to 1.20.2 in the mypy group across 1 directory (#8266) 
* Bump mypy from 1.20.1 to 1.20.2 in the mypy group across 1 directory

Bumps the mypy group with 1 update in the / directory: [mypy](https://github.com/python/mypy).


Updates `mypy` from 1.20.1 to 1.20.2
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python/mypy/compare/v1.20.1...v1.20.2)

---
updated-dependencies:
- dependency-name: mypy
  dependency-version: 1.20.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: mypy
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-05 15:57:24 +02:00
dependabot[bot]
acbe7ecaae
Bump awscli from 1.44.81 to 1.44.83 in the deploy group (#8267) 
* Bump awscli from 1.44.81 to 1.44.83 in the deploy group

Bumps the deploy group with 1 update: [awscli](https://github.com/aws/aws-cli).


Updates `awscli` from 1.44.81 to 1.44.83
- [Release notes](https://github.com/aws/aws-cli/releases)
- [Commits](https://github.com/aws/aws-cli/compare/1.44.81...1.44.83)

---
updated-dependencies:
- dependency-name: awscli
  dependency-version: 1.44.83
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deploy
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-05 15:57:13 +02:00
Maximilian Hils
8c80414ca4
ci: harden actions (#8271) 2026-06-04 14:01:36 +02:00
dependabot[bot]
61add6ba7b
Bump actions/checkout from 6 to 6.0.2 in the github-actions group (#8269) 
Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 6 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v6.0.2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-03 19:11:06 +02:00
dependabot[bot]
3254b675c2
Bump build from 1.4.2 to 1.4.3 (#8268) 
* Bump build from 1.4.2 to 1.4.3

Bumps [build](https://github.com/pypa/build) from 1.4.2 to 1.4.3.
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/build/compare/1.4.2...1.4.3)

---
updated-dependencies:
- dependency-name: build
  dependency-version: 1.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-03 19:10:40 +02:00
dependabot[bot]
97add89580
Bump ruff from 0.15.8 to 0.15.11 (#8263) 
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.8 to 0.15.11.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.8...0.15.11)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-01 12:43:14 +00:00
dependabot[bot]
c17f92385c
Bump the mypy group with 2 updates (#8256) 
* Bump the mypy group with 2 updates

Bumps the mypy group with 2 updates: [mypy](https://github.com/python/mypy) and [types-requests](https://github.com/python/typeshed).


Updates `mypy` from 1.19.1 to 1.20.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python/mypy/compare/v1.19.1...v1.20.1)

Updates `types-requests` from 2.33.0.20260327 to 2.33.0.20260408
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: mypy
  dependency-version: 1.20.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: mypy
- dependency-name: types-requests
  dependency-version: 2.33.0.20260408
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: mypy
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-01 12:42:37 +00:00
dependabot[bot]
71b61e8a80
Update pydivert requirement from <=2.1.0,>=2.0.3 to >=2.0.3,<=3.1.1 (#8259) 
Updates the requirements on [pydivert](https://github.com/ffalcinelli/pydivert) to permit the latest version.
- [Release notes](https://github.com/ffalcinelli/pydivert/releases)
- [Changelog](https://github.com/ffalcinelli/pydivert/blob/main/CHANGELOG)
- [Commits](https://github.com/ffalcinelli/pydivert/compare/2.0.3...v3.1.1)

---
updated-dependencies:
- dependency-name: pydivert
  dependency-version: 3.1.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-01 11:41:14 +00:00
dependabot[bot]
417558b7ec
Bump click from 8.3.1 to 8.3.2 (#8260) 
Bumps [click](https://github.com/pallets/click) from 8.3.1 to 8.3.2.
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/click/compare/8.3.1...8.3.2)

---
updated-dependencies:
- dependency-name: click
  dependency-version: 8.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-01 11:39:27 +00:00
dependabot[bot]
1eb8844b13
Bump maturin from 1.12.6 to 1.13.1 (#8261) 
Bumps [maturin](https://github.com/pyo3/maturin) from 1.12.6 to 1.13.1.
- [Release notes](https://github.com/pyo3/maturin/releases)
- [Changelog](https://github.com/PyO3/maturin/blob/main/Changelog.md)
- [Commits](https://github.com/pyo3/maturin/compare/v1.12.6...v1.13.1)

---
updated-dependencies:
- dependency-name: maturin
  dependency-version: 1.13.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-01 11:39:04 +00:00
dependabot[bot]
e223ac148c
Bump the tox group with 2 updates (#8257) 
* Bump the tox group with 2 updates

Bumps the tox group with 2 updates: [tox](https://github.com/tox-dev/tox) and [tox-uv](https://github.com/tox-dev/tox-uv).


Updates `tox` from 4.52.0 to 4.53.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/tox/compare/4.52.0...4.53.0)

Updates `tox-uv` from 1.34.0 to 1.35.1
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](https://github.com/tox-dev/tox-uv/compare/1.34.0...1.35.1)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tox
- dependency-name: tox-uv
  dependency-version: 1.35.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tox
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-01 11:38:49 +00:00
dependabot[bot]
eb8ff45411
Bump awscli from 1.44.69 to 1.44.81 in the deploy group (#8258) 
Bumps the deploy group with 1 update: [awscli](https://github.com/aws/aws-cli).


Updates `awscli` from 1.44.69 to 1.44.81
- [Release notes](https://github.com/aws/aws-cli/releases)
- [Commits](https://github.com/aws/aws-cli/compare/1.44.69...1.44.81)

---
updated-dependencies:
- dependency-name: awscli
  dependency-version: 1.44.81
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deploy
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-01 11:38:45 +00:00
dependabot[bot]
cab35dad44
Bump the github-actions group with 6 updates (#8262) 
Bumps the github-actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.3.0` | `6.4.0` |
| [autofix-ci/action](https://github.com/autofix-ci/action) | `1.3.3` | `1.3.4` |
| [apple-actions/import-codesign-certs](https://github.com/apple-actions/import-codesign-certs) | `6.1.0` | `7.0.0` |
| [actions/cache](https://github.com/actions/cache) | `5.0.4` | `5.0.5` |
| [docker/login-action](https://github.com/docker/login-action) | `4.0.0` | `4.1.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.0.0` | `7.1.0` |


Updates `actions/setup-node` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6.3.0...v6.4.0)

Updates `autofix-ci/action` from 1.3.3 to 1.3.4
- [Release notes](https://github.com/autofix-ci/action/releases)
- [Commits](7a166d7532...c5b2d67aa2)

Updates `apple-actions/import-codesign-certs` from 6.1.0 to 7.0.0
- [Release notes](https://github.com/apple-actions/import-codesign-certs/releases)
- [Commits](fe74d46e82...5142e029c4)

Updates `actions/cache` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v5.0.4...v5.0.5)

Updates `docker/login-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](b45d80f862...4907a6ddec)

Updates `docker/build-push-action` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](d08e5c354a...bcafcacb16)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: autofix-ci/action
  dependency-version: 1.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: apple-actions/import-codesign-certs
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-01 11:38:28 +00:00
dependabot[bot]
5455e978ba
Bump pyinstaller-hooks-contrib from 2026.3 to 2026.4 in the pyinstaller group (#8255) 
* Bump pyinstaller-hooks-contrib in the pyinstaller group

Bumps the pyinstaller group with 1 update: [pyinstaller-hooks-contrib](https://github.com/pyinstaller/pyinstaller-hooks-contrib).


Updates `pyinstaller-hooks-contrib` from 2026.3 to 2026.4
- [Release notes](https://github.com/pyinstaller/pyinstaller-hooks-contrib/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller-hooks-contrib/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pyinstaller/pyinstaller-hooks-contrib/compare/v2026.3...v2026.4)

---
updated-dependencies:
- dependency-name: pyinstaller-hooks-contrib
  dependency-version: '2026.4'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pyinstaller
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-01 11:37:04 +00:00
Matteo Luppi
2bb0213716
Web: Remove FontAwesome dependency (#8236) 
* Add lucide-react dependency and define Icon wrapper

* Refined icon wrapper component

* Adapt shared primitives

* Adapt contentviews components

* Adapt eventlog

* Adapt flowtable and flowview components

* Adapt header components

* adapt commandBar component

* Adapt modes components

* adapt flowtable header row

* kick out font awesome completely

* update tests and snapshots

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-01 10:39:23 +02:00
vincentdehaan
d87f2fd95e
Fix blank lines in content renderer (#8248) 2026-05-31 18:14:41 +02:00
Aditya Raj
12a292c2e7
Treat carriage return as whitespace in strutils.is_xml (#8243) 
* Treat carriage return as whitespace in strutils.is_xml

is_xml() skipped only tab, LF and space before checking for the
opening "<", so a response body that started with a leading CR
or CRLF (which is what HTTP frames look like, and what some
Windows-side XML producers emit) was not detected as XML.
The XML/HTML content view's auto-detection score then dropped
to 0 instead of the usual 0.4 for those bodies.

XML 1.0 §2.3 defines whitespace as (#x20 | #x9 | #xD | #xA), so
\r (0x0D) belongs in the skip set alongside the other three.
Adds the missing byte plus three assertions in the existing
test_is_xml: \r<foo and \r\n<foo are now recognised, and a
sanity check that \r\nfoo is still rejected.

* [autofix.ci] apply automated fixes

* simplify wording

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-05-21 19:15:31 +02:00
Ariel
782af067f1
fix(web): preserve in-progress filter input across parent re-renders (#8234) 
* fix(web): preserve in-progress filter input across parent re-renders

`FilterInput`'s `onChange` only propagates valid filters to the parent,
so while the user is mid-typing an incomplete or invalid filter (e.g.
`~foo bar`) the local `state.value` intentionally diverges from
`props.value` — the parent still holds the last valid filter. Any
unrelated parent re-render then fires
`UNSAFE_componentWillReceiveProps`, which unconditionally called
`this.setState({ value: nextProps.value })` and clobbered the user's
in-progress text back to the last valid filter.

Gated the sync on `nextProps.value !== this.props.value` so the
component only adopts an externally-changed value. When the parent
re-renders without changing the value prop, the local state is
preserved.

Added a `FilterInputSpec.tsx` regression test alongside the existing
`should handle componentWillReceiveProps` test (which covers the
positive path — external value change still wins). The new test types
`~foo bar` (asserted invalid by the existing `should handle isValid`
test), rerenders with the same value prop, and asserts the in-progress
text survives. The test fails without the fix.

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-05-16 12:54:02 +00:00
Ariel
a4518ab9eb
fix(web): avoid infinite componentDidUpdate loop in FlowTable (#8233) 
* fix(web): avoid infinite componentDidUpdate loop in FlowTable

`FlowTable.componentDidUpdate` calls `this.onViewportUpdate()` on every
update, even when the inputs to `calcVScroll` (the flow list and the row
height) did not change. `onViewportUpdate` reads the current
`viewport.scrollTop`, recomputes `vScroll`, and `setState`s when
`state.viewportTop !== scrollTop` or `vScroll` shape changed. The new
`state.viewportTop` is `Math.min(scrollTop, vScroll.end * rowHeight)`,
so when `vScroll.end * rowHeight < scrollTop` the new state stays
strictly below `scrollTop`, the inequality holds on the next iteration,
and the cycle spins until the browser kills the JS thread.

Gated the call on `prevProps.flowView !== this.props.flowView ||
prevProps.rowHeight !== this.props.rowHeight`. The other
`onViewportUpdate` call sites — `componentDidMount`, the window resize
listener, the viewport `onScroll` handler, and the post-scroll-into-view
call — are unchanged, so user scrolling and resizing still drive the
virtual-scroll window normally.

Added a `FlowTableSpec.tsx` regression test that spies on
`PureFlowTable.prototype.onViewportUpdate` and asserts it is NOT called
after a `select` dispatch (which changes connect-mapped props but leaves
`flowView` and `rowHeight` alone). The test fails without the fix.

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-05-15 10:13:38 +02:00
Ariel
e20a24b54e
fix(web): render AVIF images and IANA icon favicons in the response tab (#8232) 
* fix(web): render AVIF images and IANA icon favicons in the response tab

The `ViewImage` regex in `HttpMessage.tsx` rejected two valid image
content types, so the response tab did not render them inline:

1. `image/avif` was missing from the alternation. AVIF is widely served
   by image CDNs and decoded natively in `<img>` by Chrome 85+,
   Firefox 93+, and Safari 16.1+.
2. `image/vnd.microsoft.icon` (the IANA-canonical `.ico` MIME) never
   matched because the alternation had `vnc.microsoft.icon` — a
   `vnc`/`vnd` typo. The de-facto legacy `image/x-icon` continued to
   work, which made the bug easy to miss. The dots are also unescaped,
   so the regex coincidentally matches `image/vncXmicrosoftXicon` for
   any single character `X`.

Added `avif`, corrected `vnc` → `vnd`, and escaped the dots. Added a
`ViewImage.matches` unit test covering both the additions and the
existing image MIME types.

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-15 10:12:27 +02:00
dependabot[bot]
fb8c1a9862
Bump the tox group across 1 directory with 2 updates (#8226) 
* Bump the tox group across 1 directory with 2 updates

Bumps the tox group with 2 updates in the / directory: [tox](https://github.com/tox-dev/tox) and [tox-uv](https://github.com/tox-dev/tox-uv).


Updates `tox` from 4.50.3 to 4.52.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/tox/compare/4.50.3...4.52.0)

Updates `tox-uv` from 1.33.4 to 1.34.0
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](https://github.com/tox-dev/tox-uv/compare/1.33.4...1.34.0)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.52.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tox
- dependency-name: tox-uv
  dependency-version: 1.34.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tox
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-12 17:43:58 +02:00
dependabot[bot]
e7ad119acd
Update urwid requirement from <=3.0.5,>=2.6.14 to >=2.6.14,<=4.0.0 (#8229) 
* Update urwid requirement from <=3.0.5,>=2.6.14 to >=2.6.14,<=4.0.0

Updates the requirements on [urwid](https://github.com/urwid/urwid) to permit the latest version.
- [Release notes](https://github.com/urwid/urwid/releases)
- [Changelog](https://github.com/urwid/urwid/blob/master/docs/changelog.rst)
- [Commits](https://github.com/urwid/urwid/compare/2.6.14...4.0.0)

---
updated-dependencies:
- dependency-name: urwid
  dependency-version: 4.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-12 16:15:41 +02:00
Matteo Luppi
e33503dbd8
Web: Remove Bootstrap dependency and keep mitmweb styling parity (#8147) 
* migrate bootstrap decoupling with dual classes and local less tokens

* migrate form and utility bootstrap classes to m-/u- styles

* remove remaining Bootstrap class aliases and migrate to internal m-* / u-* classes

* fix tab link colors to match previous blue styling

* update snapshots

* adjust table styling and alignment

* adjust divider style

* adjust flowdetails panel style

* adjust options modal style

* fix icons position and color in capture tab page

* adjust style search,highlight, intercept popovers

* update snapshots

* extract global styles into global.less

* keep behavior aligned with pre-migration Bootstrap (same class names)

* update snapshots

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-12 16:15:20 +02:00
dependabot[bot]
48e58bebcb
Bump types-requests from 2.32.4.20260107 to 2.33.0.20260327 in the mypy group (#8225) 
* Bump types-requests in the mypy group

Bumps the mypy group with 1 update: [types-requests](https://github.com/python/typeshed).


Updates `types-requests` from 2.32.4.20260107 to 2.33.0.20260327
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-requests
  dependency-version: 2.33.0.20260327
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: mypy
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-12 16:14:36 +02:00
dependabot[bot]
2f6f251ee6
Bump awscli from 1.44.63 to 1.44.69 in the deploy group (#8228) 
* Bump awscli from 1.44.63 to 1.44.69 in the deploy group

Bumps the deploy group with 1 update: [awscli](https://github.com/aws/aws-cli).


Updates `awscli` from 1.44.63 to 1.44.69
- [Release notes](https://github.com/aws/aws-cli/releases)
- [Commits](https://github.com/aws/aws-cli/compare/1.44.63...1.44.69)

---
updated-dependencies:
- dependency-name: awscli
  dependency-version: 1.44.69
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deploy
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-12 16:14:29 +02:00
dependabot[bot]
b9958b2f2d
Bump requests from 2.32.5 to 2.33.1 (#8230) 
* Bump requests from 2.32.5 to 2.33.1

Bumps [requests](https://github.com/psf/requests) from 2.32.5 to 2.33.1.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.32.5...v2.33.1)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.33.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-12 16:14:25 +02:00
mitmproxy release bot
e875daffaf reopen main for development 2026-05-12 13:02:14 +00:00
mitmproxy release bot
6c09d56e4c mitmproxy 12.2.3 2026-05-12 13:02:14 +00:00
Maximilian Hils
f9c2b44acb
Update CHANGELOG.md 2026-05-12 14:57:34 +02:00
Copilot
6bc7f0a4f2
Rename mitmweb XSRF cookie to _mitmproxy_xsrf to recover broken Firefox sessions (#8224) 
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-05-12 12:30:47 +00:00
ChrisJr404
0fb62c456c
docs: document addon live-reload + testing pattern (#8210) 
* docs: document addon live-reload + testing pattern

Issue #6377 asked for addon development docs covering hot reload and
testing. mitmproxy already watches scripts loaded with -s for changes
and re-imports them on save (mitmproxy/addons/script.py: Script.watcher
and the unconditional Script(s, True) at line 218), but that behavior
was undocumented, and there was no canonical example of how to unit-test
a custom addon with mitmproxy.test.taddons / mitmproxy.test.tflow.

Add a "Developing Addons" section to docs/src/content/addons/overview.md
with two subsections:

- Live Reloading: explains the file-watcher behavior, including which
  errors leave the previous version unloaded and which don't.
- Testing Addons: a small example that unit-tests the Counter addon from
  anatomy.py using taddons.context() and tflow.tflow(), plus a pointer
  to tctx.cycle() and the existing test/mitmproxy/addons/ tests for
  patterns that need the full event sequence.

No code changes.

* reduce testing section

Testing helpers are currently a bit ugly and not part of the public API, so let's not put them front center in the docs.

---------

Co-authored-by: Chris (ChrisJr404) <11917633+ChrisJr404@users.noreply.github.com>
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-05-11 14:18:51 +00:00
Emanuele Micheletti
ed564afe94
Reduce generated certificate validity (#8203) 
* Reduce generated certificate validity

* [autofix.ci] apply automated fixes

* make cert backdating more clear

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Maximilian Hils <github@maximilianhils.com>
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-05-11 14:08:05 +00:00
unique-jakub
b464cbf823
Copy issuer's SubjectKeyIdentifier into leaf AuthorityKeyIdentifier (RFC 5280 §4.2.1.2) (#8214) 
* Copy issuer's SubjectKeyIdentifier into leaf AuthorityKeyIdentifier

mitmproxy.certs.dummy_cert previously built the leaf's
AuthorityKeyIdentifier with `from_issuer_public_key()`, which always
derives the keyIdentifier as the SHA-1 of the issuer's BIT STRING public
key. This violates RFC 5280 §4.2.1.2:

  The value of the subject key identifier MUST be the value placed in
  the key identifier field of the authority key identifier extension of
  certificates issued by the subject of this certificate.

Whenever the issuer's stored SKI was generated by any other method
(RFC 7093 truncated SHA-256/384/512, hardware-rooted CAs, or any custom
value), the recomputed AKI mismatches the issuer's SKI and strict TLS
chain builders (`X509_V_FLAG_X509_STRICT`, Python `ssl`, Go
`crypto/x509`) reject the chain with "authority and subject key
identifier mismatch".

The most common modern trigger: cert-manager >=1.18 and Go >=1.25
default to truncated SHA-256 SKIs for FIPS 140-3 compliance, so any
mitmproxy deployment fed a CA from those toolchains breaks.

Fix: prefer the issuer's stored SKI extension verbatim
(AuthorityKeyIdentifier.from_issuer_subject_key_identifier), and only
fall back to the previous behavior when the issuer cert has no SKI
extension at all.

Adds two regression tests:
- test_aki_copies_issuer_ski_non_sha1 verifies that a CA with a
  truncated SHA-256 SKI (as produced by cert-manager / Go 1.25+) yields
  a leaf whose AKI is byte-equal to the issuer's stored SKI.
- test_aki_falls_back_when_issuer_has_no_ski verifies the SKI-absent
  fallback still produces the previous AKI value.

* [autofix.ci] apply automated fixes

* shorten changelog

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-05-11 13:45:24 +00:00
dependabot[bot]
f478061882
Bump pyinstaller-hooks-contrib from 2026.2 to 2026.3 in the pyinstaller group (#8205) 
* Bump pyinstaller-hooks-contrib in the pyinstaller group

Bumps the pyinstaller group with 1 update: [pyinstaller-hooks-contrib](https://github.com/pyinstaller/pyinstaller-hooks-contrib).


Updates `pyinstaller-hooks-contrib` from 2026.2 to 2026.3
- [Release notes](https://github.com/pyinstaller/pyinstaller-hooks-contrib/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller-hooks-contrib/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pyinstaller/pyinstaller-hooks-contrib/compare/v2026.2...v2026.3)

---
updated-dependencies:
- dependency-name: pyinstaller-hooks-contrib
  dependency-version: '2026.3'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pyinstaller
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-11 15:43:34 +02:00
dependabot[bot]
a5f8716bfb
Bump the tox group with 2 updates (#8207) 
* Bump the tox group with 2 updates

Bumps the tox group with 2 updates: [tox](https://github.com/tox-dev/tox) and [tox-uv](https://github.com/tox-dev/tox-uv).


Updates `tox` from 4.49.0 to 4.50.3
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/tox/compare/4.49.0...4.50.3)

Updates `tox-uv` from 1.33.1 to 1.33.4
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](https://github.com/tox-dev/tox-uv/compare/1.33.1...1.33.4)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.50.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tox
- dependency-name: tox-uv
  dependency-version: 1.33.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: tox
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-11 15:43:20 +02:00
dependabot[bot]
96ec8f72b4
Bump awscli from 1.44.53 to 1.44.63 in the deploy group (#8208) 
* Bump awscli from 1.44.53 to 1.44.63 in the deploy group

Bumps the deploy group with 1 update: [awscli](https://github.com/aws/aws-cli).


Updates `awscli` from 1.44.53 to 1.44.63
- [Release notes](https://github.com/aws/aws-cli/releases)
- [Commits](https://github.com/aws/aws-cli/compare/1.44.53...1.44.63)

---
updated-dependencies:
- dependency-name: awscli
  dependency-version: 1.44.63
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deploy
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-11 15:43:09 +02:00
dependabot[bot]
680d2199e8
Bump the github-actions group with 8 updates (#8209) 
Bumps the github-actions group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-node](https://github.com/actions/setup-node) | `6` | `6.3.0` |
| [apple-actions/import-codesign-certs](https://github.com/apple-actions/import-codesign-certs) | `6.0.0` | `6.1.0` |
| [actions/cache](https://github.com/actions/cache) | `5` | `5.0.4` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.7.0` | `4.0.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.12.0` | `4.0.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.7.0` | `4.0.0` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `5.10.0` | `6.0.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.19.2` | `7.0.0` |


Updates `actions/setup-node` from 6 to 6.3.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6...v6.3.0)

Updates `apple-actions/import-codesign-certs` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/apple-actions/import-codesign-certs/releases)
- [Commits](b610f78488...fe74d46e82)

Updates `actions/cache` from 5 to 5.0.4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v5...v5.0.4)

Updates `docker/setup-qemu-action` from 3.7.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](c7c5346462...ce360397dd)

Updates `docker/setup-buildx-action` from 3.12.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](8d2750c68a...4d04d5d948)

Updates `docker/login-action` from 3.7.0 to 4.0.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](c94ce9fb46...b45d80f862)

Updates `docker/metadata-action` from 5.10.0 to 6.0.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](c299e40c65...030e881283)

Updates `docker/build-push-action` from 6.19.2 to 7.0.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](10e90e3645...d08e5c354a)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: apple-actions/import-codesign-certs
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/metadata-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-11 15:43:00 +02:00
Alex Gaynor
373d0b801f
upgrade the version of pyopenssl in the lockfile (#8223) 
follow up to #8219
 2026-05-11 14:17:08 +02:00
Paul Kehrer
3dd268a9be
Bump upper bounds for cryptography and pyOpenSSL (#8219) 
* Bump upper bounds for cryptography and pyOpenSSL

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-09 19:54:12 +00:00
Olexandr88
ab470e5397
Fix IP blocking and merge additional DoH blocklists (#8197) 2026-04-28 20:25:50 +02:00
Julio César Suástegui
a8fbfc73fa
fix: avoid IndexError in is_mostly_bin for short tails (#8196) 
* fix: avoid IndexError in is_mostly_bin for short tails

`is_mostly_bin` looks up to 4 bytes past the 100-byte cutoff to find a
clean UTF-8 character boundary. when the input is just over 100 bytes
and starts with a continuation byte at index 100, the lookahead reads
past the end of the buffer.

cap the loop end at `len(s)`. existing fallback to `s[:100]` still
covers the case where every byte in the lookahead window is a
continuation byte.

fixes #8188

* [autofix.ci] apply automated fixes

---------

Co-authored-by: Julio César Suástegui <juliosuas@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-04-25 11:24:59 +02:00
Vitaly
c9b063bc65
Use sys.executable instead of python3 in docs build script (#8183) 
* Use sys.executable instead of python3 in docs build script

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-04-19 14:50:02 +02:00
dependabot[bot]
d332cbf19b
Update asgiref requirement from <=3.11.0,>=3.2.10 to >=3.2.10,<=3.11.1 (#8181) 
* Update asgiref requirement from <=3.11.0,>=3.2.10 to >=3.2.10,<=3.11.1

Updates the requirements on [asgiref](https://github.com/django/asgiref) to permit the latest version.
- [Changelog](https://github.com/django/asgiref/blob/main/CHANGELOG.txt)
- [Commits](https://github.com/django/asgiref/compare/3.2.10...3.11.1)

---
updated-dependencies:
- dependency-name: asgiref
  dependency-version: 3.11.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-04-13 19:58:51 +02:00