Version 0.23.0

[tomchristie]

Drafting up our next release.

Since we're dropping Python 3.6, this needs to be a median point bump.

One thing I'd like to discuss before we push on with this is resolving #2083 (See PR #2165). The median point bump is a good motivator to drop our charset-normalizer dependancy, so it seems like an efficient use of time to address it as part of this release, if possible.

I'm planning to push on with that by addressing @adriangb's comment, so that we have two alternative approaches for consideration.

---

Release notes...

0.23.0 (23rd May, 2022)

Changed

• Drop support for Python 3.6. (Drop EOL Python 3.6 #2097)
• Use utf-8 as the default character set, instead of falling back to charset-normalizer for auto-detection. To enable automatic character set detection, see the documentation. (Make charset auto-detection optional. #2165)

Fixed

• Fix URL.copy_with for some oddly formed URL cases. (Patch copy_with #2185)
• Digest authentication should use case-insensitive comparison for determining which algorithm is being used. (Case insensitive algorithm detection for digest authentication. #2204)
• Fix console markup escaping in command line client. (Fix console markup escaping issue #1866)
• When files are used in multipart upload, ensure we always seek to the start of the file. (Always rewind files on multipart uploads. #2065)
• Ensure that iter_bytes never yields zero-length chunks. (Ensure that iter_bytes and iter_raw do not ever yield any zero-length chunks. #2068)
• Preserve Authorization header for redirects that are to the same origin, but are an http-to-https upgrade. (Preserve Authorization header on HTTPS redirect (#1850) #2074)
• When responses have binary output, don't print the output to the console in the command line client. Use output like <16086 bytes of binary data> instead. (Suppress binary output on the command line. #2076)
• Fix display of --proxies argument in the command line client help. (Fix cli docs --proxies #2124 #2125)
• Close responses when task cancellations occur during stream reading. (Close responses when on cancellations occur during reading. #2156)
• Fix type error on accessing .request on HTTPError exceptions. (Add request getter/setter to HTTPError #2158)

[hozkok]

This PR seems to be resolving this critical vulnerability. Is there any plan for releasing this soon?

[tomchristie]

Waiting on #2165 and #2228.

[tomchristie]

Considering switching the settings so that I can merge without further reviews.

• Pro: Can address issues such as this release more quickly.
• Con: Side-steps enforcing that we have enough input from wider maintenance team.

[tomchristie]

Thanks @florimondmanca. 🙏🏼