Bump requests from 2.34.1 to 2.34.2

[dependabot]

Bumps requests from 2.34.1 to 2.34.2.

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

• Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

• Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Commits

• 6e83187 v2.34.2
• 84d10f0 Move Request.headers back to Mapping (#7441)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

---

Code Review: requests Dependency Bump (2.34.1 → 2.34.2)

This PR contains a single change: bumping requests from 2.34.1 to 2.34.2 in requirements.txt.

---

Code Quality

• ✅ Style guide — A one-line version bump in requirements.txt has no style concerns.
• ✅ No commented-out code — Not applicable.
• ✅ Meaningful variable names — Not applicable.
• ✅ DRY principle — Not applicable.
• ✅ Defects / security — A patch-level bump (2.34.1 → 2.34.2) in the requests library is a routine maintenance update. No logic changes introduced.
• ✅ Project memory (.claude/CLAUDE.md) — No project-level Claude configuration file exists; nothing to consider.

---

Testing

• ✅ Unit/integration tests — No new functions or endpoints were added; no new tests are required for a dependency version bump.
• ✅ Edge cases — Not applicable.
• ✅ Test coverage — Not applicable.

---

Documentation

• ❌ CHANGELOG.md not updated — The CHANGELOG.md exists and follows a structured format, but this dependency bump is not reflected in it. Dependency bumps (especially security or bug-fix patches) should typically be recorded. Consider adding an entry under a new version heading, e.g.:

  ## [Unreleased]
  ### Changed
  - Bump requests from 2.34.1 to 2.34.2

• ✅ README — No change needed.
• ✅ API docs / inline comments — Not applicable.
• ✅ Markdown formatting — No Markdown files were modified.

---

Security

• ✅ No hardcoded credentials — Not applicable.
• ✅ Input validation — Not applicable.
• ✅ Error handling — Not applicable.
• ✅ No sensitive data in logs — Not applicable.
• ✅ No license files (.lic) or AQAAAD-prefixed content — None present in this diff.

---

Summary

Category	Status
Code Quality	✅ Pass
Testing	✅ Pass
Documentation	❌ CHANGELOG not updated
Security	✅ Pass

One minor finding: CHANGELOG.md (requirements.txt line 3) — the patch bump is not documented. Everything else is clean; this is a safe, routine dependency update.

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter