馃摝 urllib3 2.6.0 is now available!
It fixes two high-severity security issues related to decompression of response content.
Additionally, the new version:
- switched to the backports.zstd package for the zstd support on Python 3.13 and before
- added explicit support for Python 3.14 and free threading
- removed two deprecated methods
- fixed a few bugs, added new small features, and improved performance
Check details in our release notes https://github.com/urllib3/urllib3/releases/tag/2.6.0