Skip to content

Bump multipart from 1.1.0 to 1.2.2#291

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/multipart-1.2.2
Open

Bump multipart from 1.1.0 to 1.2.2#291
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/multipart-1.2.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 12, 2026

Bumps multipart from 1.1.0 to 1.2.2.

Release notes

Sourced from multipart's releases.

v1.2.2

Full Changelog: defnull/multipart@v1.2.1...v1.2.2

This release contains security fixes. See GHSA-p2m9-wcp5-6qw3

v1.2.1

Full Changelog: defnull/multipart@v1.2.0...v1.2.1

v1.2.0

Full Changelog: defnull/multipart@v1.1.0...v1.2.0

Changelog

Sourced from multipart's changelog.

========= Changelog

This project follows Semantic Versioning (major.minor.patch), with the exception that behavior changes are allowed in minor releases as long as the change corrects behavior to match documentation, specification or expectation. In other words: Bugfixes do not count as backward incompatible changes, even if they technically change behavior from incorrect to correct and may break applications that rely on incorrect or undefined behavior or undocumented APIs. EOL Python versions may also be dropped during minor releases.

Release 1.4 (not released yet)

  • change: Dropped support for Python 3.8 and 3.8 (both EOL)
  • change: Raise mor helpful :exc:ParserStateError instead of implicit :exc:AssertionError or :exc:TypeError when the parser is used incorrectly.
  • feat: Hardened (and faster) header validation.
  • git: Change default brach to main

Release 1.3

This release adds new APIs and contains internal or non-breaking api changes.

  • feat: New convenience methods :meth:PushMultipartParser.parse_blocking and :meth:PushMultipartParser.parse_async.
  • feat: Nicer error messages when reading from a closed MultipartPart.
  • feat: Improved typing.
  • change: segment is now a required constructor argument for MultipartPart and changed position. The constructor is not part of the public API, so this should not break user code.
  • fix/change: Closing a MultipartPart should set its file to None, not False.

Release 1.2

This release improves error handling, documentation and performance, fixes several parser edge-cases and adds new functionality. API changes are backwards compatible.

  • feat: Split up MultipartError into more specific exceptions and add HTTP status code hints. All exceptions are subclasses of MultipartError.
  • feat: New parse_form_data(ignore_errors) parameter to throw exceptions in non-strict mode, or suppress exceptions in strict mode. Default behavior does not change (throw in strict-mode, ignore in non-strict mode).

... (truncated)

Commits
  • eeaff60 Release of 1.2.2
  • d6f79b3 fix: Header parser performance
  • 0071a55 Release of 1.2.1
  • 1c87607 build: Explicitly list additional sdist files.
  • 970f764 Release of 1.2.0
  • d28f0ce build: Link to readthedocs.org in project metadata
  • cff5a25 build: Depend on sphinx-autobuild in dev mode.
  • f6f30ef docs: Finalize changelog for release
  • 54209b9 docs: Enable github banner and fixed sidebar
  • 382e8ae fix: Behavior of MultiDict.get(index=999)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [multipart](https://github.com/defnull/multipart) from 1.1.0 to 1.2.2.
- [Release notes](https://github.com/defnull/multipart/releases)
- [Changelog](https://github.com/defnull/multipart/blob/main/CHANGELOG.rst)
- [Commits](defnull/multipart@v1.1.0...v1.2.2)

---
updated-dependencies:
- dependency-name: multipart
  dependency-version: 1.2.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants