vee1e/mitmproxy
1
0
Fork 0
mirror of https://github.com/vee1e/mitmproxy.git synced 2026-09-04 03:37:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
11146 commits 15 branches 121 tags 71 MiB
Commit graph

11146 commits

This branch
This branch
All branches
Author SHA1 Message Date
mitmproxy release bot
6c09d56e4c mitmproxy 12.2.3 2026-05-12 13:02:14 +00:00
Maximilian Hils
f9c2b44acb
Update CHANGELOG.md 2026-05-12 14:57:34 +02:00
Copilot
6bc7f0a4f2
Rename mitmweb XSRF cookie to _mitmproxy_xsrf to recover broken Firefox sessions (#8224) 
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-05-12 12:30:47 +00:00
ChrisJr404
0fb62c456c
docs: document addon live-reload + testing pattern (#8210) 
* docs: document addon live-reload + testing pattern

Issue #6377 asked for addon development docs covering hot reload and
testing. mitmproxy already watches scripts loaded with -s for changes
and re-imports them on save (mitmproxy/addons/script.py: Script.watcher
and the unconditional Script(s, True) at line 218), but that behavior
was undocumented, and there was no canonical example of how to unit-test
a custom addon with mitmproxy.test.taddons / mitmproxy.test.tflow.

Add a "Developing Addons" section to docs/src/content/addons/overview.md
with two subsections:

- Live Reloading: explains the file-watcher behavior, including which
  errors leave the previous version unloaded and which don't.
- Testing Addons: a small example that unit-tests the Counter addon from
  anatomy.py using taddons.context() and tflow.tflow(), plus a pointer
  to tctx.cycle() and the existing test/mitmproxy/addons/ tests for
  patterns that need the full event sequence.

No code changes.

* reduce testing section

Testing helpers are currently a bit ugly and not part of the public API, so let's not put them front center in the docs.

---------

Co-authored-by: Chris (ChrisJr404) <11917633+ChrisJr404@users.noreply.github.com>
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-05-11 14:18:51 +00:00
Emanuele Micheletti
ed564afe94
Reduce generated certificate validity (#8203) 
* Reduce generated certificate validity

* [autofix.ci] apply automated fixes

* make cert backdating more clear

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Maximilian Hils <github@maximilianhils.com>
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-05-11 14:08:05 +00:00
unique-jakub
b464cbf823
Copy issuer's SubjectKeyIdentifier into leaf AuthorityKeyIdentifier (RFC 5280 §4.2.1.2) (#8214) 
* Copy issuer's SubjectKeyIdentifier into leaf AuthorityKeyIdentifier

mitmproxy.certs.dummy_cert previously built the leaf's
AuthorityKeyIdentifier with `from_issuer_public_key()`, which always
derives the keyIdentifier as the SHA-1 of the issuer's BIT STRING public
key. This violates RFC 5280 §4.2.1.2:

  The value of the subject key identifier MUST be the value placed in
  the key identifier field of the authority key identifier extension of
  certificates issued by the subject of this certificate.

Whenever the issuer's stored SKI was generated by any other method
(RFC 7093 truncated SHA-256/384/512, hardware-rooted CAs, or any custom
value), the recomputed AKI mismatches the issuer's SKI and strict TLS
chain builders (`X509_V_FLAG_X509_STRICT`, Python `ssl`, Go
`crypto/x509`) reject the chain with "authority and subject key
identifier mismatch".

The most common modern trigger: cert-manager >=1.18 and Go >=1.25
default to truncated SHA-256 SKIs for FIPS 140-3 compliance, so any
mitmproxy deployment fed a CA from those toolchains breaks.

Fix: prefer the issuer's stored SKI extension verbatim
(AuthorityKeyIdentifier.from_issuer_subject_key_identifier), and only
fall back to the previous behavior when the issuer cert has no SKI
extension at all.

Adds two regression tests:
- test_aki_copies_issuer_ski_non_sha1 verifies that a CA with a
  truncated SHA-256 SKI (as produced by cert-manager / Go 1.25+) yields
  a leaf whose AKI is byte-equal to the issuer's stored SKI.
- test_aki_falls_back_when_issuer_has_no_ski verifies the SKI-absent
  fallback still produces the previous AKI value.

* [autofix.ci] apply automated fixes

* shorten changelog

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-05-11 13:45:24 +00:00
dependabot[bot]
f478061882
Bump pyinstaller-hooks-contrib from 2026.2 to 2026.3 in the pyinstaller group (#8205) 
* Bump pyinstaller-hooks-contrib in the pyinstaller group

Bumps the pyinstaller group with 1 update: [pyinstaller-hooks-contrib](https://github.com/pyinstaller/pyinstaller-hooks-contrib).


Updates `pyinstaller-hooks-contrib` from 2026.2 to 2026.3
- [Release notes](https://github.com/pyinstaller/pyinstaller-hooks-contrib/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller-hooks-contrib/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pyinstaller/pyinstaller-hooks-contrib/compare/v2026.2...v2026.3)

---
updated-dependencies:
- dependency-name: pyinstaller-hooks-contrib
  dependency-version: '2026.3'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pyinstaller
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-11 15:43:34 +02:00
dependabot[bot]
a5f8716bfb
Bump the tox group with 2 updates (#8207) 
* Bump the tox group with 2 updates

Bumps the tox group with 2 updates: [tox](https://github.com/tox-dev/tox) and [tox-uv](https://github.com/tox-dev/tox-uv).


Updates `tox` from 4.49.0 to 4.50.3
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/tox/compare/4.49.0...4.50.3)

Updates `tox-uv` from 1.33.1 to 1.33.4
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](https://github.com/tox-dev/tox-uv/compare/1.33.1...1.33.4)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.50.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tox
- dependency-name: tox-uv
  dependency-version: 1.33.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: tox
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-11 15:43:20 +02:00
dependabot[bot]
96ec8f72b4
Bump awscli from 1.44.53 to 1.44.63 in the deploy group (#8208) 
* Bump awscli from 1.44.53 to 1.44.63 in the deploy group

Bumps the deploy group with 1 update: [awscli](https://github.com/aws/aws-cli).


Updates `awscli` from 1.44.53 to 1.44.63
- [Release notes](https://github.com/aws/aws-cli/releases)
- [Commits](https://github.com/aws/aws-cli/compare/1.44.53...1.44.63)

---
updated-dependencies:
- dependency-name: awscli
  dependency-version: 1.44.63
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deploy
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-11 15:43:09 +02:00
dependabot[bot]
680d2199e8
Bump the github-actions group with 8 updates (#8209) 
Bumps the github-actions group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-node](https://github.com/actions/setup-node) | `6` | `6.3.0` |
| [apple-actions/import-codesign-certs](https://github.com/apple-actions/import-codesign-certs) | `6.0.0` | `6.1.0` |
| [actions/cache](https://github.com/actions/cache) | `5` | `5.0.4` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.7.0` | `4.0.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.12.0` | `4.0.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.7.0` | `4.0.0` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `5.10.0` | `6.0.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.19.2` | `7.0.0` |


Updates `actions/setup-node` from 6 to 6.3.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6...v6.3.0)

Updates `apple-actions/import-codesign-certs` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/apple-actions/import-codesign-certs/releases)
- [Commits](b610f78488...fe74d46e82)

Updates `actions/cache` from 5 to 5.0.4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v5...v5.0.4)

Updates `docker/setup-qemu-action` from 3.7.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](c7c5346462...ce360397dd)

Updates `docker/setup-buildx-action` from 3.12.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](8d2750c68a...4d04d5d948)

Updates `docker/login-action` from 3.7.0 to 4.0.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](c94ce9fb46...b45d80f862)

Updates `docker/metadata-action` from 5.10.0 to 6.0.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](c299e40c65...030e881283)

Updates `docker/build-push-action` from 6.19.2 to 7.0.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](10e90e3645...d08e5c354a)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: apple-actions/import-codesign-certs
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/metadata-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-11 15:43:00 +02:00
Alex Gaynor
373d0b801f
upgrade the version of pyopenssl in the lockfile (#8223) 
follow up to #8219
 2026-05-11 14:17:08 +02:00
Paul Kehrer
3dd268a9be
Bump upper bounds for cryptography and pyOpenSSL (#8219) 
* Bump upper bounds for cryptography and pyOpenSSL

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-05-09 19:54:12 +00:00
Olexandr88
ab470e5397
Fix IP blocking and merge additional DoH blocklists (#8197) 2026-04-28 20:25:50 +02:00
Julio César Suástegui
a8fbfc73fa
fix: avoid IndexError in is_mostly_bin for short tails (#8196) 
* fix: avoid IndexError in is_mostly_bin for short tails

`is_mostly_bin` looks up to 4 bytes past the 100-byte cutoff to find a
clean UTF-8 character boundary. when the input is just over 100 bytes
and starts with a continuation byte at index 100, the lookahead reads
past the end of the buffer.

cap the loop end at `len(s)`. existing fallback to `s[:100]` still
covers the case where every byte in the lookahead window is a
continuation byte.

fixes #8188

* [autofix.ci] apply automated fixes

---------

Co-authored-by: Julio César Suástegui <juliosuas@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-04-25 11:24:59 +02:00
Vitaly
c9b063bc65
Use sys.executable instead of python3 in docs build script (#8183) 
* Use sys.executable instead of python3 in docs build script

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-04-19 14:50:02 +02:00
dependabot[bot]
d332cbf19b
Update asgiref requirement from <=3.11.0,>=3.2.10 to >=3.2.10,<=3.11.1 (#8181) 
* Update asgiref requirement from <=3.11.0,>=3.2.10 to >=3.2.10,<=3.11.1

Updates the requirements on [asgiref](https://github.com/django/asgiref) to permit the latest version.
- [Changelog](https://github.com/django/asgiref/blob/main/CHANGELOG.txt)
- [Commits](https://github.com/django/asgiref/compare/3.2.10...3.11.1)

---
updated-dependencies:
- dependency-name: asgiref
  dependency-version: 3.11.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-04-13 19:58:51 +02:00
dependabot[bot]
00ee4e9779
Update pyopenssl requirement from <=25.3.0,>=24.3 to >=24.3,<=26.0.0 in the openssl group (#8180) 
* Update pyopenssl requirement in the openssl group

Updates the requirements on [pyopenssl](https://github.com/pyca/pyopenssl) to permit the latest version.

Updates `pyopenssl` to 26.0.0
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/pyopenssl/compare/24.3.0...26.0.0)

---
updated-dependencies:
- dependency-name: pyopenssl
  dependency-version: 26.0.0
  dependency-type: direct:production
  dependency-group: openssl
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-04-13 19:58:32 +02:00
Maximilian Hils
58370ffb84
Remove cooldown from pyOpenSSL and our own packages 2026-04-13 19:36:34 +02:00
mitmproxy release bot
5dbbd14aa6 reopen main for development 2026-04-12 21:43:57 +00:00
mitmproxy release bot
437fb75d19 mitmproxy 12.2.2 2026-04-12 21:43:57 +00:00
Maximilian Hils
7458ea26cc
remove codacy badge 
The signal-to-noise ratio for "issues" is just too high.
 2026-04-12 23:27:13 +02:00
Maximilian Hils
d8359657d5
Update CHANGELOG.md 2026-04-12 23:23:08 +02:00
Maximilian Hils
71c9234057
Fix LDAP Sanitization (#8178) 
This fixes GHSA-527g-3w9m-29hv.
 2026-04-12 21:14:46 +00:00
Emanuele Micheletti
cc58fc9f38
load pending scripts before dumping options (#8176) 
* fix: include addon options in --options output

* add changelog entry for #4423

* explain why we do this dance

* fix: tests

---------

Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-04-12 22:37:30 +02:00
Maximilian Hils
bf16594f44
SECURITY.md: Exclude DoS from scope (#8171) 2026-04-12 22:36:48 +02:00
nameearly
6d1f71ee2e
correct a parameter (#8172) 
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-04-12 14:17:13 +00:00
Emanuele Micheletti
d1e06b6870
Fix uppercase scheme (#8174) 
* fix: lowercase scheme

* fix: add uppercase proto test

* [autofix.ci] apply automated fixes

* Add RFC reference

Add comments to clarify scheme handling in URL parsing

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-04-12 14:03:14 +00:00
Emanuele Micheletti
e0840a6c97
Fix console command panel losing focus due to incoming traffic (#8173) 
* Fix console command panel losing focus due to incoming traffic

Fix operator precedence bug in ActionBar.sig_update where
`not self.prompting and flow is None or flow == ...` was evaluated as
`(not self.prompting and flow is None) or (flow == ...)`, causing
show_quickhelp() to overwrite the command editor when the focused flow
received updates (e.g. websocket messages).

Fixes #8030

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-04-12 13:56:56 +00:00
Emanuele Micheletti
ca58cd8e07
fix: display failed CONNECT requests in mitmdump (#8175) 
fix: display failed CONNECT requests in mitmdump (#7083)

Handle HttpConnectErrorHook in the dumper addon so that failed CONNECT
requests (e.g. DNS resolution errors) are logged to the terminal.
 2026-04-12 15:52:04 +02:00
Ariel
d482bbaa20
web: Reduce FlowTable Redux subscriptions from O(rows) to O(1) (#8104) 
* web: Reduce FlowTable Redux subscriptions from O(rows) to O(1)

Lift shared state (displayColumnNames, flowIndex) from per-row/per-cell
useAppSelector calls to the FlowTable parent component. This eliminates
N identical Redux subscriptions across all visible rows.

Changes:
- FlowTable.tsx: Fetch displayColumnNames from state.options.web_columns
  in mapStateToProps; pass as prop to FlowRow along with flowIndex.
- FlowRow.tsx: Accept displayColumnNames and flowIndex as props instead
  of useAppSelector. Remove unused useAppSelector import.
- FlowColumns.tsx: Accept optional flowIndex prop in index column;
  use it instead of per-cell useAppSelector(_listIndex).
- FlowTableHead.tsx: Add null guard on displayColumnNames for
  edge-case during initial state hydration.
- FlowRowSpec.tsx: Update test to pass new required props.

* [autofix.ci] apply automated fixes

* fix: pass flowIndex prop in FlowColumnsSpec snapshot test

The index column now uses flowIndex prop instead of
useAppSelector. Pass flowIndex={0} in the generic column
render loop so the snapshot matches the expected numeric
output.

* address review feedback: rename flowIndex to rowNumber, remove defensive guards

- Rename flowIndex → rowNumber per reviewer suggestion
- Make rowNumber required in FlowColumnProps (never undefined)
- Remove unnecessary || [] null guard in FlowTableHead
- Read displayColumnNames from test store instead of hardcoding

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* [autofix.ci] apply automated fixes

* fix: use list position (not view position) for # column

rowNumber now comes from _listIndex (insertion order) instead of
vScroll.start + idx (view position). This preserves the original
behavior where the # column shows the flow's arrival order regardless
of sorting or filtering.

Added test to verify index column displays rowNumber + 1.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* [autofix.ci] apply automated fixes

* docs: add CHANGELOG entry for FlowTable optimization

* [autofix.ci] apply automated fixes

---------

Co-authored-by: Ariel <ariel@captaintech.io>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Maximilian Hils <git@maximilianhils.com>
 2026-04-10 14:39:20 +00:00
dependabot[bot]
12854b955a
Bump codecov/codecov-action from 5 to 5.5.2 in the github-actions group (#8169) 
Bumps the github-actions group with 1 update: [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `codecov/codecov-action` from 5 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-10 16:28:12 +02:00
dependabot[bot]
513be79939
Bump ruff from 0.15.5 to 0.15.8 (#8158) 
* Bump ruff from 0.15.5 to 0.15.8

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.5 to 0.15.8.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.5...0.15.8)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-04-10 16:22:39 +02:00
dependabot[bot]
a8c7c97866
Update tornado requirement from <=6.5.4,>=6.5.0 to >=6.5.0,<=6.5.5 (#8159) 
* Update tornado requirement from <=6.5.4,>=6.5.0 to >=6.5.0,<=6.5.5

Updates the requirements on [tornado](https://github.com/tornadoweb/tornado) to permit the latest version.
- [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst)
- [Commits](https://github.com/tornadoweb/tornado/compare/v6.5.0...v6.5.5)

---
updated-dependencies:
- dependency-name: tornado
  dependency-version: 6.5.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-04-10 16:22:30 +02:00
dependabot[bot]
440865c12f
Bump build from 1.4.0 to 1.4.2 (#8160) 
* Bump build from 1.4.0 to 1.4.2

Bumps [build](https://github.com/pypa/build) from 1.4.0 to 1.4.2.
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/build/compare/1.4.0...1.4.2)

---
updated-dependencies:
- dependency-name: build
  dependency-version: 1.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-04-10 16:22:02 +02:00
Maximilian Hils
65d96dca4c
Add dependabot cooldowns 2026-04-10 16:17:49 +02:00
Ariel
b34f397b4f
fix(web): allow clearing body content to empty in editor (#8149) 
* fix(web): allow clearing body content to empty in editor

The body editor's save function used `editedContent || content || ""`
which treats empty string as falsy, falling back to the original body
content. This makes it impossible to clear a body to empty via the
Edit button — the save always sends the original content.

Changed to `editedContent ?? content ?? ""` so that only `undefined`
(user didn't edit) falls back, while empty string is sent as-is.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* [autofix.ci] apply automated fixes

* test: move body edit tests into HttpMessageSpec.tsx

Move the two body-edit tests from the separate HttpMessageEditSpec.tsx
into HttpMessageSpec.tsx as requested in review. The CodeEditor mock is
now file-scoped, which simplifies the edit-mode snapshot (CodeMirror DOM
replaced by a lightweight textarea stub).

* Update CHANGELOG.md

Co-authored-by: Matteo Luppi <100372313+lups2000@users.noreply.github.com>

* test: use conditional CodeEditor mock to preserve snapshot

Use a mockUseCodeEditor flag so the real CodeEditor renders by default
(keeping the existing snapshot unchanged) and only the body-edit tests
switch to the textarea mock. Rename CVD → cvd for consistency.

* [autofix.ci] apply automated fixes

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Matteo Luppi <100372313+lups2000@users.noreply.github.com>
 2026-04-08 16:49:05 +02:00
Mavik
5a4a12888e
fix: skip inject_event when inject flow type is wrong (#8141) 
* fix: return after inject type mismatch (#5808)

Root cause: warn-only check still called inject_event with invalid flow.

* test: cover inject_tcp dead-connection ValueError (#8141)

---------

Co-authored-by: themavik <themavik@users.noreply.github.com>
Co-authored-by: themavik <maviktech99@gmail.com>
 2026-03-24 07:18:51 +01:00
Opstic
c665530916
Reduce CERT_EXPIRY to 199 days (#8142) 
* Change CERT_EXPIRY to 199 days

* Update CHANGELOG
 2026-03-24 07:10:10 +01:00
oha
b5d14444c6
cleanup: removed unused functions/classes and scripts (#8136) 
* cleanup: removed unused functions/classes and scripts

* changes: revert save_settings() removal .. may be a missing call in export(), flagged in PR for maintainer input.

* fix: restore missing test and clean up bits.py references

* added: add changelog for #8095 under unreleased, removal of several dead functions

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-03-18 07:58:22 +01:00
dependabot[bot]
2a7bb7ba05
Update flask requirement from <=3.1.2,>=3.0 to >=3.0,<=3.1.3 (#8111) 
* Update flask requirement from <=3.1.2,>=3.0 to >=3.0,<=3.1.3

Updates the requirements on [flask](https://github.com/pallets/flask) to permit the latest version.
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/flask/compare/3.0.0...3.1.3)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-03-08 19:37:31 +01:00
dependabot[bot]
45368b5753
Bump the pyinstaller group with 2 updates (#8108) 
* Bump the pyinstaller group with 2 updates

Bumps the pyinstaller group with 2 updates: [pyinstaller](https://github.com/pyinstaller/pyinstaller) and [pyinstaller-hooks-contrib](https://github.com/pyinstaller/pyinstaller-hooks-contrib).


Updates `pyinstaller` from 6.18.0 to 6.19.0
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst)
- [Commits](https://github.com/pyinstaller/pyinstaller/compare/v6.18.0...v6.19.0)

Updates `pyinstaller-hooks-contrib` from 2026.0 to 2026.1
- [Release notes](https://github.com/pyinstaller/pyinstaller-hooks-contrib/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller-hooks-contrib/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pyinstaller/pyinstaller-hooks-contrib/compare/v2026.0...v2026.1)

---
updated-dependencies:
- dependency-name: pyinstaller
  dependency-version: 6.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pyinstaller
- dependency-name: pyinstaller-hooks-contrib
  dependency-version: '2026.1'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pyinstaller
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-03-08 19:37:24 +01:00
dependabot[bot]
b24e5ee449
Bump the tox group with 2 updates (#8109) 
* Bump the tox group with 2 updates

Bumps the tox group with 2 updates: [tox](https://github.com/tox-dev/tox) and [tox-uv](https://github.com/tox-dev/tox-uv).


Updates `tox` from 4.34.1 to 4.47.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/tox/compare/4.34.1...4.47.0)

Updates `tox-uv` from 1.29.0 to 1.33.0
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](https://github.com/tox-dev/tox-uv/compare/1.29.0...1.33.0)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.47.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tox
- dependency-name: tox-uv
  dependency-version: 1.33.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tox
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-03-08 19:37:13 +01:00
dependabot[bot]
2cef60b70f
Update pyparsing requirement from <=3.3.1,>=2.4.2 to >=2.4.2,<=3.3.2 (#8113) 
* Update pyparsing requirement from <=3.3.1,>=2.4.2 to >=2.4.2,<=3.3.2

Updates the requirements on [pyparsing](https://github.com/pyparsing/pyparsing) to permit the latest version.
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](https://github.com/pyparsing/pyparsing/compare/pyparsing_2.4.2...3.3.2)

---
updated-dependencies:
- dependency-name: pyparsing
  dependency-version: 3.3.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-03-08 16:46:35 +01:00
dependabot[bot]
f2f46a1774
Bump maturin from 1.11.5 to 1.12.6 (#8114) 
* Bump maturin from 1.11.5 to 1.12.6

Bumps [maturin](https://github.com/pyo3/maturin) from 1.11.5 to 1.12.6.
- [Release notes](https://github.com/pyo3/maturin/releases)
- [Changelog](https://github.com/PyO3/maturin/blob/main/Changelog.md)
- [Commits](https://github.com/pyo3/maturin/compare/v1.11.5...v1.12.6)

---
updated-dependencies:
- dependency-name: maturin
  dependency-version: 1.12.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-03-08 16:46:26 +01:00
dependabot[bot]
33bf8c7b5d
Bump awscli from 1.44.29 to 1.44.49 in the deploy group (#8110) 
* Bump awscli from 1.44.29 to 1.44.49 in the deploy group

Bumps the deploy group with 1 update: [awscli](https://github.com/aws/aws-cli).


Updates `awscli` from 1.44.29 to 1.44.49
- [Release notes](https://github.com/aws/aws-cli/releases)
- [Commits](https://github.com/aws/aws-cli/compare/1.44.29...1.44.49)

---
updated-dependencies:
- dependency-name: awscli
  dependency-version: 1.44.49
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deploy
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-03-08 16:46:19 +01:00
dependabot[bot]
ebbdd5f3e7
Update urwid requirement from <=3.0.3,>=2.6.14 to >=2.6.14,<=3.0.5 (#8115) 
* Update urwid requirement from <=3.0.3,>=2.6.14 to >=2.6.14,<=3.0.5

Updates the requirements on [urwid](https://github.com/urwid/urwid) to permit the latest version.
- [Release notes](https://github.com/urwid/urwid/releases)
- [Changelog](https://github.com/urwid/urwid/blob/master/docs/changelog.rst)
- [Commits](https://github.com/urwid/urwid/compare/2.6.14...3.0.5)

---
updated-dependencies:
- dependency-name: urwid
  dependency-version: 3.0.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-03-08 16:45:35 +01:00
dependabot[bot]
a15dd23635
Bump ruff from 0.14.10 to 0.15.4 (#8116) 
* Bump ruff from 0.14.10 to 0.15.4

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.14.10 to 0.15.4.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.14.10...0.15.4)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* [autofix.ci] apply automated fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-03-08 16:45:10 +01:00
dependabot[bot]
c32d1bbf33
Bump the github-actions group with 5 updates (#8112) 
Bumps the github-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [autofix-ci/action](https://github.com/autofix-ci/action) | `1.3.2` | `1.3.3` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `6` | `7` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `7` | `8` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.18.0` | `6.19.2` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `3` | `4` |


Updates `autofix-ci/action` from 1.3.2 to 1.3.3
- [Release notes](https://github.com/autofix-ci/action/releases)
- [Commits](635ffb0c97...7a166d7532)

Updates `actions/upload-artifact` from 6 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

Updates `actions/download-artifact` from 7 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

Updates `docker/build-push-action` from 6.18.0 to 6.19.2
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](263435318d...10e90e3645)

Updates `actions/attest-build-provenance` from 3 to 4
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v3...v4)

---
updated-dependencies:
- dependency-name: autofix-ci/action
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 6.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/attest-build-provenance
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-08 12:48:50 +01:00
Maximilian Hils
d4b394a3bf
Fix overzealous lockfile upgrades (#8125) 2026-03-08 11:47:38 +00:00
Daniil Sivak
6d073bbe84
Console: Option to hide quickhelp UI (#5746) (#8095) 
* Option to hide quickhelp UI

Closes #5746

* Added CHANGELOG.md entry

* [autofix.ci] apply automated fixes

* Accidentally broke CHANGELOG.md formatting

* PR review edits

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-03-06 18:06:56 +01:00