build(deps): bump pycurl from 7.47.0 to 7.48.0

[dependabot]

Bumps pycurl from 7.47.0 to 7.48.0.

Release notes

Sourced from pycurl's releases.

PycURL 7.48.0

Changes in this release:

• Expose more CURLOPT_SSL_OPTIONS (patch by Scott Talbert)
• Read long description from README.rst instead of duplicating it in setup.py (patch by Scott Talbert)
• Fix test_redir_protocols_setopt (patch by Scott Talbert)
• Add CURL_LOCK_DATA_HSTS as a CurlShare option (patch by Scott Talbert)
• Add libpsl support to vcpkg installs for CI and wheel builds (patch by Scott Talbert)
• Configure nuget repo access as read-only from PRs (patch by Scott Talbert)
• Officially change project URL to https://pycurl.github.io/ (patch by Scott Talbert)
• Replace bare except clauses in examples with specific exception types (patch by Kotesh Kumar Yelamati)
• Add HTTP/3 support in libcurl wheel (patch by Will Noble)
• Fix segfault when calling duphandle() on a closed Curl handle (patch by Jorge Rocamora)
• Fix abort on non-text string arguments (patch by Jorge Rocamora)
• Fix CurlShare leak when close() detaches attached handles (patch by Jorge Rocamora)
• Document that views derived from the callback memoryview are not released (patch by Jorge Rocamora)
• Fix crash when duplicating a handle that uses set_ca_certs() (patch by Jorge Rocamora)
• Add CurlUrl object wrapping libcurl's URL API, with CURLOPT_CURLU support (patch by Jorge Rocamora)
• Fix callback exceptions being replaced by SystemError (patch by Jorge Rocamora)
• Fix test guard silently passing on real libcurl errors (patch by Jorge Rocamora)
• Update the docstring and manifest source lists (patch by Jorge Rocamora)
• Refuse pause() from a thread other than the performing one (patch by Jorge Rocamora)
• Add support for Python 3.15 (patch by Scott Talbert)
• Refuse integers for blob options instead of crashing (patch by Jorge Rocamora)
• Accept buffer objects for blob options (patch by Jorge Rocamora)
• Release all httppost encoded values and unset the form before MIMEPOST (patch by Jorge Rocamora)
• Reject callback return values that do not fit in an int (patch by Jorge Rocamora)
• Clear CurlMulti callbacks before deallocating attached handles (patch by Eric Buehl)
• Serve the test apps from a threaded WSGI server (patch by Jorge Rocamora)
• Add support for missing CURL options (patch by Khavish Anshudass Bhundoo)
• Add CURLOPT_SSL_EC_CURVES & CURLOPT_SSL_SIGNATURE_ALGORITHMS options (patch by Khavish Anshudass Bhundoo)
• Remove unused variable from do_curl_setopt_httppost (patch by Scott Talbert)
• test: silence WSGI test server access logging to stderr (patch by Scott Talbert)
• test: pin down oversized mime data_cb error assertions (patch by Scott Talbert)
• Give vendored OpenSSL a private OPENSSLDIR on Linux manylinux wheels (patch by Scott Talbert)
• Enable -Werror for the pycurl build in cibuildwheel without affecting vcpkg (patch by Scott Talbert)
• Handle libcurl options deprecated in 8.22.0 (patch by Scott Talbert)

Changelog

Sourced from pycurl's changelog.

Version 7.48.0 [requires libcurl-7.19.0 or better] - 2026-09-15

    * Expose more CURLOPT_SSL_OPTIONS (patch by Scott Talbert)
    * Read long description from README.rst instead of duplicating it in setup.py (patch by Scott Talbert)
    * Fix test_redir_protocols_setopt (patch by Scott Talbert)
    * Add CURL_LOCK_DATA_HSTS as a CurlShare option (patch by Scott Talbert)
    * Add libpsl support to vcpkg installs for CI and wheel builds (patch by Scott Talbert)
    * Configure nuget repo access as read-only from PRs (patch by Scott Talbert)
    * Officially change project URL to https://pycurl.github.io/ (patch by Scott Talbert)
    * Replace bare except clauses in examples with specific exception types (patch by Kotesh Kumar Yelamati)
    * Add HTTP/3 support in libcurl wheel (patch by Will Noble)
    * Fix segfault when calling duphandle() on a closed Curl handle (patch by Jorge Rocamora)
    * Fix abort on non-text string arguments (patch by Jorge Rocamora)
    * Fix CurlShare leak when close() detaches attached handles (patch by Jorge Rocamora)
    * Document that views derived from the callback memoryview are not released (patch by Jorge Rocamora)
    * Fix crash when duplicating a handle that uses set_ca_certs() (patch by Jorge Rocamora)
    * Add CurlUrl object wrapping libcurl's URL API, with CURLOPT_CURLU support (patch by Jorge Rocamora)
    * Fix callback exceptions being replaced by SystemError (patch by Jorge Rocamora)
    * Fix test guard silently passing on real libcurl errors (patch by Jorge Rocamora)
    * Update the docstring and manifest source lists (patch by Jorge Rocamora)
    * Refuse pause() from a thread other than the performing one (patch by Jorge Rocamora)
    * Add support for Python 3.15 (patch by Scott Talbert)
    * Refuse integers for blob options instead of crashing (patch by Jorge Rocamora)
    * Accept buffer objects for blob options (patch by Jorge Rocamora)
    * Release all httppost encoded values and unset the form before MIMEPOST (patch by Jorge Rocamora)
    * Reject callback return values that do not fit in an int (patch by Jorge Rocamora)
    * Clear CurlMulti callbacks before deallocating attached handles (patch by Eric Buehl)
    * Serve the test apps from a threaded WSGI server (patch by Jorge Rocamora)
    * Add support for missing CURL options (patch by Khavish Anshudass Bhundoo)
    * Add CURLOPT_SSL_EC_CURVES & CURLOPT_SSL_SIGNATURE_ALGORITHMS options (patch by Khavish Anshudass Bhundoo)
    * Remove unused variable from do_curl_setopt_httppost (patch by Scott Talbert)
    * test: silence WSGI test server access logging to stderr (patch by Scott Talbert)
    * test: pin down oversized mime data_cb error assertions (patch by Scott Talbert)
    * Give vendored OpenSSL a private OPENSSLDIR on Linux manylinux wheels (patch by Scott Talbert)
    * Enable -Werror for the pycurl build in cibuildwheel without affecting vcpkg (patch by Scott Talbert)
    * Handle libcurl options deprecated in 8.22.0 (patch by Scott Talbert)

Commits

• d05452c Release 7.48.0
• 7673aeb Skip installing paramiko on Python 3.15 for now
• 5f60d93 Handle libcurl options deprecated in 8.22.0
• 0913022 Enable -Werror for the pycurl build in cibuildwheel without affecting vcpkg
• 5d8ddfc Give vendored OpenSSL a private OPENSSLDIR on Linux manylinux wheels
• 20dc93b test: pin down oversized mime data_cb error assertions
• 62aa003 test: silence WSGI test server access logging to stderr
• c18288d Remove unused variable from do_curl_setopt_httppost
• ef1eae2 Merge pull request #1064 from khavishbhundoo/task/1063-add-tls-options
• b2510e5 feat: Add CURLOPT_SSL_EC_CURVES & CURLOPT_SSL_SIGNATURE_ALGORITHMS
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Unit Test Results

    1 files      1 suites   10s ⏱️
306 tests 300 ✔️ 6 💤 0 ❌

Results for commit 5c4f55c.