[pip]: Bump requests from 2.32.4 to 2.32.5

[dependabot]

Bumps requests from 2.32.4 to 2.32.5.

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

• The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

• Added support for Python 3.14.
• Dropped support for Python 3.8 following its end of support.

Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

• The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

• Added support for Python 3.14.
• Dropped support for Python 3.8 following its end of support.

Commits

• b25c87d v2.32.5
• 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
• b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
• 46e939b Update publish workflow to use artifact-id instead of name
• 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
• 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
• 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
• fec96cd Update Makefile rules (#6996)
• d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
• 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Important

Bumps requests from 2.32.4 to 2.32.5, reverting SSLContext caching and updating Python support.

• Dependency Update:
  • Bumps requests from 2.32.4 to 2.32.5 in requirements.txt.
• Bugfixes:
  • Reverts SSLContext caching feature due to issues in requests 2.32.5.
• Deprecations:
  • Adds support for Python 3.14.
  • Drops support for Python 3.8.

^{This description was created by for 248021e. You can customize this summary. It will automatically update as commits are pushed.}

[ellipsis-dev]

PR Summary: Bump requests from 2.32.4 to 2.32.5

This PR updates the requests package from version 2.32.4 to 2.32.5 in the requirements.txt file.

Key Changes in requests 2.32.5:

Bugfixes:

• Reverts the SSLContext caching feature introduced in 2.32.0, which was causing negative impacts across various use cases. The Requests team determined that long-term maintenance of this feature was unsustainable in its current form.

Python Version Support:

• Added support for Python 3.14
• Dropped support for Python 3.8 following its end of support

This update appears to be primarily focused on fixing issues with the SSLContext caching feature and updating Python version compatibility.

---

Note: This is an automated dependency update from Dependabot.

[ellipsis-dev]

Important

Looks good to me! 👍

Reviewed everything up to 248021e in 29 seconds. Click for details.

• Reviewed 9 lines of code in 1 files
• Skipped 0 files when reviewing.
• Skipped posting 1 draft comments. View those below.
• Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.

1. requirements.txt:1

• Draft comment:
  The dependency update from requests==2.32.4 to 2.32.5 looks correct. Ensure that this minor version bump is tested, as it reverts an SSLContext caching feature.
• Reason this comment was not posted:
  Confidence changes required: 0% <= threshold 50% None

Workflow ID: wflow_0O5uhhdfl6g3ddrz

^{You can customize by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.}