new release needed to bump httpcore

[ori-shem-tov]

httpcore Version 1.0.9 was recently released resolving GHSA-vqfr-h8mv-ghfj with h11 dependency update. (encode/httpcore#1008).

Since httpcore is a dependency of httpx, a new release is needed.

[tomchristie]

Is it?

[ori-shem-tov]

Is it a dependency?

[tomchristie]

Blocked for time-wasting. No longer prepared to put up with accounts spamming maintainer attention.

[tomchristie]

Options here...

• We continue to liberally block accounts as needed, until there's a sustained behavior change.
• We lock issues & discussions to read-only.

I'm okay with option 1 here. I'm in zero-tolerance policy mode right now towards attention spamming / social DDOS.

[tomchristie]

Hi @ori-shem-tov.

Thanks for getting in touch via email, I've unblocked your account as a result.
Unfortunately we receive a large amount of attention spamming, and I'm having to work through how to impose might stricter communication boundaries as a result.

Here is our httpcore dependency... https://github.com/encode/httpx/blob/master/pyproject.toml#L33

We're pinned against httpcore==1.* so I don't believe any action is required here.