# What changed in httpx2

> 11 changes in httpx2 2 from its official release notes, upgrade guides and advisories: 4 breaking, 1 security. Each one cited. Sources checked 2026-10-18. HTML: https://unstale.sh/pypi/httpx2/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## httpx2 2

### Breaking changes

- HTTP/1.1 is no longer advertised during TLS protocol negotiation when it is disabled. (2.13.1) — [release notes](https://github.com/pydantic/httpx2/releases/tag/v2.13.1)
- HTTP/2 is preferred during TLS protocol negotiation when enabled. (2.13.1) — [release notes](https://github.com/pydantic/httpx2/releases/tag/v2.13.1)
- The brotli extra on non-CPython implementations now requires brotlicffi 1.2.0.2 or later. (2.13.0) — [release notes](https://github.com/pydantic/httpx2/releases/tag/v2.13.0)
- The trio extra now requires Trio 0.34.0 or later. (2.13.0) — [release notes](https://github.com/pydantic/httpx2/releases/tag/v2.13.0)

### Security

- Adds an explicit CLI counterpart for enabling TLS certificate verification. (2.13.0) — [release notes](https://github.com/pydantic/httpx2/releases/tag/v2.13.0)

### Behavior and default changes

- Entries can match IP CIDR ranges and bracketed IPv6 addresses; requests to addresses in a CIDR range bypass the proxy. (2.14.0) — [release notes](https://github.com/pydantic/httpx2/releases/tag/v2.14.0)

### Fixes and other changes

- When a file is passed as content, Content-Length is calculated from its remaining bytes, respecting its current position. (2.13.1) — [release notes](https://github.com/pydantic/httpx2/releases/tag/v2.13.1)
- The `sni_hostname` extension is honored for TLS inside HTTP proxy tunnels without affecting the proxy's TLS connection. (2.13.1) — [release notes](https://github.com/pydantic/httpx2/releases/tag/v2.13.1)
- The sync WebSocket keepalive thread exits cleanly when a ping races with connection shutdown. (2.13.1) — [release notes](https://github.com/pydantic/httpx2/releases/tag/v2.13.1)
- Avoids nested async generator finalization errors when streamed responses are abandoned early. (2.13.0) — [release notes](https://github.com/pydantic/httpx2/releases/tag/v2.13.0)
- The CLI flag now disables TLS certificate verification as intended. (2.13.0) — [release notes](https://github.com/pydantic/httpx2/releases/tag/v2.13.0)