[wp-trac] [WordPress Trac] #64752: External Libraries: Update Requests library to version 2.0.17

[WordPress Trac]

#64752: External Libraries: Update Requests library to version 2.0.17
--------------------------------+-----------------------------
 Reporter:  rodrigosprimo       |      Owner:  (none)
     Type:  enhancement         |     Status:  new
 Priority:  normal              |  Milestone:  Awaiting Review
Component:  External Libraries  |    Version:
 Severity:  normal              |   Keywords:
  Focuses:                      |
--------------------------------+-----------------------------
 WordPress currently bundles Requests 2.0.11 (updated in #60838 for WP
 6.6). The latest version is
 [https://github.com/WordPress/Requests/releases/tag/v2.0.17 2.0.17],
 released in December 2025.

 The most notable changes between 2.0.11 and 2.0.17 are PHP 8.5
 compatibility fixes in
 [https://github.com/WordPress/Requests/releases/tag/v2.0.16 2.0.16].

 This update is related to #64634 (updating PHPCompatibilityWP to
 3.0.0-alpha2). Some of the PHP compatibility violations surfaced by that
 update in the Requests library were already fixed upstream in
 [https://github.com/WordPress/Requests/pull/988 Requests#988] (included in
 2.0.16). Updating the bundled copy would resolve those violations without
 needing temporary exclusions in `phpcompat.xml.dist`.

 Release notes for each version:
 - [https://github.com/WordPress/Requests/releases/tag/v2.0.12 2.0.12] -
 Certificate bundle update.
 - [https://github.com/WordPress/Requests/releases/tag/v2.0.13 2.0.13] -
 Certificate bundle update.
 - [https://github.com/WordPress/Requests/releases/tag/v2.0.14 2.0.14] -
 Certificate bundle update. Confirmed PHP 8.4 compatibility.
 - [https://github.com/WordPress/Requests/releases/tag/v2.0.15 2.0.15] -
 Certificate bundle update.
 - [https://github.com/WordPress/Requests/releases/tag/v2.0.16 2.0.16] -
 PHP 8.5 compatibility fixes (see above).
 - [https://github.com/WordPress/Requests/releases/tag/v2.0.17 2.0.17] -
 Certificate bundle update.

 Full diff: https://github.com/WordPress/Requests/compare/v2.0.11...v2.0.17

 My understanding from previous updates is that the certificate bundle
 updates included in these releases can be skipped, as WordPress manages
 its own certificate bundle independently from Requests (see #62812).

 Previous: #33055, #47746, #49922, #53101, #53334, #54504, #58079, #59322,
 #59842, #60838.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64752>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform