build(deps): bump requests from 2.33.1 to 2.34.0 (#1778)

Co-authored-by: Jussi Kukkonen <jkukkonen@google.com>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>

Author: dependabot[bot]

install/requirements.txt

@@ -585,9 +585,9 @@ pyopenssl==26.2.0 \
     --hash=sha256:4f9d971bc5298b8bc1fab282803da04bf000c755d4ad9d99b52de2569ca19a70 \
     --hash=sha256:8c6fcecd1183a7fc897548dfe388b0cdb7f37e018200d8409cf33959dbe35387
     # via sigstore
-requests==2.32.5 \
-    --hash=sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6 \
-    --hash=sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf
+requests==2.34.0 \
+    --hash=sha256:7d62fe92f50eb82c529b0916bb445afa1531a566fc8f35ffdc64446e771b856a \
+    --hash=sha256:917520a21b767485ce7c588f4ebb917c436b24a31231b44228715eaeb5a52c60
     # via sigstore
 rfc3161-client==1.0.6 \
     --hash=sha256:0b3920334f7334ec3bb9c319d53a5d08cd43b6883f75e2669cfd869cd264d53a \

pyproject.toml

@@ -67,7 +67,6 @@ dev = [
   # NOTE(ww): ruff is under active development, so we pin conservatively here
   # and let Dependabot periodically perform this update.
   "ruff<0.15.16",
-  "types-requests",
   "types-pyOpenSSL",
   "mkdocs-material[imaging]",
   "mkdocstrings-python",

sigstore/_internal/__init__.py

@@ -19,7 +19,7 @@
 subject to any stability guarantees.
 """
 
-from requests import __version__ as requests_version
+from requests import __version__ as requests_version  # type: ignore[attr-defined]
 
 from sigstore import __version__ as sigstore_version
 

sigstore/_internal/rekor/client.py

@@ -181,7 +181,7 @@ def post(
         """
         data = {"entries": [expected_entry.model_dump(mode="json", by_alias=True)]}
 
-        resp: requests.Response = self.session.post(self.url, json=data)
+        resp: requests.Response = self.session.post(self.url, json=data)  # type: ignore[arg-type]
         try:
             resp.raise_for_status()
         except requests.HTTPError as http_error: