build(deps): update niquests requirement from ~=3.16.1 to ~=3.17.0

[dependabot]

Updates the requirements on niquests to permit the latest version.

Release notes

Sourced from niquests's releases.

Version 3.17.0

3.17.0 (2026-01-16)

Added

• Native support for http+unix connections without 3rd party support in both sync and async context. (#315)
• ASGI (e.g. fastapi) app direct usage within AsyncSession and WSGI (e.g. Flask) app direct usage within Session. (#316)
• Passing hooks directly in the Session or AsyncSession constructor. (#321)
• Rate limiter helpers LeakyBucketLimiter and TokenBucketLimiter that can be passed directly to the hooks parameter of Session or AsyncSession for automatic request throttling. (#321)

Fixed

• Method get of CaseInsensitiveDict ambiguous return type. (#288)
• More precise type definitions for PathLike, and IO. (#290)

Changed

• Our typing definitions are now publicly exposed via niquests.typing. This aims to considerably ease extending Niquests.

Misc

• Restore function utils.guess_json_utf from Requests era. (#313)
• Making request with empty url when base_url is set don't add trailing slash at the end. (#319)

Changelog

Sourced from niquests's changelog.

3.17.0 (2026-01-16)

Added

• Native support for http+unix connections without 3rd party support in both sync and async context. (#315)
• ASGI (e.g. fastapi) app direct usage within AsyncSession and WSGI (e.g. Flask) app direct usage within Session. (#316)
• Passing hooks directly in the Session or AsyncSession constructor. (#321)
• Rate limiter helpers LeakyBucketLimiter and TokenBucketLimiter that can be passed directly to the hooks parameter of Session or AsyncSession for automatic request throttling. (#321)

Fixed

• Method get of CaseInsensitiveDict ambiguous return type. (#288)
• More precise type definitions for PathLike, and IO. (#290)

Changed

• Our typing definitions are now publicly exposed via niquests.typing. This aims to considerably ease extending Niquests.

Misc

• Restore function utils.guess_json_utf from Requests era. (#313)
• Making request with empty url when base_url is set don't add trailing slash at the end. (#319)

3.16.1 (2025-12-23)

Fixed

• Accidental deadlock on a specific case within the revocation checks in sync mode (threads).

3.16.0 (2025-12-23)

Added

• Custom strategies for TLS revocation check per Session or AsyncSession via the new revocation_configuration parameter that takes a RevocationConfiguration object.
• Hook can now be created via a custom class. You may now inherit from niquests.LifecycleHook or niquests.AsyncLifecycleHook depending on your use case. This should considerably ease the scenario where you need to create complex hooks.
• Session underlying pooling state inspecting through repr(my_session) for debugging purposes.
• Exposed ServerSentEvent in top level package imports to ease SSE related developments.
• AsyncHTTPDigestAuth counterpart of HTTPDigestAuth for async usage.
• Shortcut to pass default headers via Session or AsyncSession construction.

Fixed

• In high concurrency scenarii the revocation check may run for multiple newly acquired connection causing a performance slowdown at warmup.

3.15.2 (2025-08-16)

Fixed

• The return type of CaseInsensitiveDict.items() could be a list instead of an expected tuple. (#276)
• Omitting hooks (keys) in Session.hooks dict causing an error at merge with request specific hooks.
• CRL cache not persisted when pickling Session.

... (truncated)

Commits

• 33cb5e4 🔖 Release 3.17 (#320)
• 128cc74 Fix typo in quickstart example code comment (#323)
• bc2fff6 🐛 guard asgi in thread startup with lock
• 5f42932 fix: thread asgi lifespan handler (starlette) (#322)
• 8d3ae38 🐛 lifespan handling ThreadAsyncServerGatewayInterface
• 6fd3ef2 🐛 lifespan shutdown race condition
• 74c5187 📝 add docs for app= kwarg
• fdbc2a7 📝 update changelog
• 96d1b7d 🔥 remove debug stmt in tests
• e584737 📝 provisional release date
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)