Version 0.28.0.

[tomchristie]

Okay, here's version 0.28 with nice clean deprecations for our more constrained SSL API...

---

0.28.0 (28th November, 2024)

The 0.28 release includes a limited set of deprecations.

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

• The verify argument as a string argument is now deprecated and will raise warnings.
• The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

• The deprecated proxies argument has now been removed.
• The deprecated app argument has now been removed.
• JSON request bodies use a compact representation. (Ensure JSON representation is compact. #3363)
• Review URL percent escape sets, based on WHATWG spec. (Review URL percent escaping sets, from whatwg. #3371, Review urlescape percent-safe set, and use + behavior for form spaces. #3373)
• Ensure certifi and httpcore are only imported if required. (made dependencies on certifi and httpcore only load when required #3377)
• Treat socks5h as a valid proxy scheme. (add socks5h proxy support #3178)
• Cleanup Request() method signature in line with client.request() and httpx.request(). (Cleanup Request method parameter. #3378)

[tomchristie]

For comparison, SSL implementation before and after.
Much simpler and more comprehensible, even including deprecations.

Revised documentation is here... https://github.com/encode/httpx/blob/version-0.28-deprecations-only/docs/advanced/ssl.md

[tomchristie]

Oh... one other thing... we should probably also drop Python 3.8 support here, as EOL.

https://devguide.python.org/versions/

[zanieb]

Love deprecation warnings :)

[zanieb]

I would suggest waiting until 1.0 to drop 3.8 support, since it's not really costing us anything. (But I don't feel strongly)

[tomchristie]

I would suggest waiting until 1.0 to drop 3.8 support.

I can work with that, yep.