Skip to content

Bump curl-cffi from 0.14.0 to 0.15.0#9

Merged
JakePeralta7 merged 1 commit intomainfrom
dependabot/pip/curl-cffi-0.15.0
Apr 12, 2026
Merged

Bump curl-cffi from 0.14.0 to 0.15.0#9
JakePeralta7 merged 1 commit intomainfrom
dependabot/pip/curl-cffi-0.15.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 4, 2026

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps curl-cffi from 0.14.0 to 0.15.0.

Release notes

Sourced from curl-cffi's releases.

v0.15.0

🎉 Another release with significant changes!

Highlights

  • http/3 fingerprints, added for Chrome 145, 146 and Firefox 147. To verify http3 fingerprints, visit https://fp.impersonate.pro
  • http/3 proxy support with socks5 udp proxy server.
  • New CLI tool, just called curl-cffi, easier http debugging for both humans and agents. See docs. We also added a skill.
  • Compatibility optimization, curl_cffi is now fully static. Especially for macOS, no dependencies needed and compatible with macOS since 11.0.
  • ⚠️ Security improvement. If you are accepting urls from others and returning the response to them, you are vulnerable to redirection-based SSRF. Disable allow_redirects or at lease set allow_redirects="safe", see the advisory and the docs.
  • Performance optimization: WebSocket improvement and free-threading support.
  • Android is officially supported, closing a 3-years-old issue.
  • New impersonation behaviors, the cookie header behavior and POST boundary are now made exactly the same as browsers. These are not part of tls or http binary fingerprints, but are exploited by WAFs, too.

The list of proxy vendors with udp sock5 support is very limited, so I set up 2 servers for testing. You can simply run:

curl-cffi get https://fp.impersonate.pro/api/http3 --proxy socks5://imp:curl-cffi@206.189.95.199:1080 --http3-only
curl-cffi get https://fp.impersonate.pro/api/http3 --proxy socks5://imp:curl-cffi@24.144.88.46:1080 --http3-only

If you need more udp socks5 servers from us, click the 👀 emoji to vote.

What's Changed

New Contributors

Full Changelog: lexiforest/curl_cffi@v0.14.0...v0.15.0

... (truncated)

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 4, 2026
Bumps [curl-cffi](https://github.com/lexiforest/curl_cffi) from 0.14.0 to 0.15.0.
- [Release notes](https://github.com/lexiforest/curl_cffi/releases)
- [Changelog](https://github.com/lexiforest/curl_cffi/blob/main/docs/changelog.rst)
- [Commits](lexiforest/curl_cffi@v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: curl-cffi
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/curl-cffi-0.15.0 branch from 8d2baf3 to 0091d86 Compare April 12, 2026 17:28
@JakePeralta7 JakePeralta7 merged commit c929fe8 into main Apr 12, 2026
2 checks passed
@JakePeralta7 JakePeralta7 deleted the dependabot/pip/curl-cffi-0.15.0 branch April 12, 2026 17:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant