From a967af935697241fde7d1de006b8841b846fb9b3 Mon Sep 17 00:00:00 2001 From: Justin Mahlik <38999128+jmahlik@users.noreply.github.com> Date: Wed, 18 Oct 2023 14:18:19 -0500 Subject: [PATCH] fix: relax upper bound on urllib in local mode requirements Allows users to upgrade addressing CVE-2023-43804 and CVE-2023-45803 Docker python 6.1 now supports urllib 2+ https://github.com/docker/docker-py/releases/tag/6.1.0 closes #4168 --- requirements/extras/local_requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements/extras/local_requirements.txt b/requirements/extras/local_requirements.txt index 7251612853..c182360128 100644 --- a/requirements/extras/local_requirements.txt +++ b/requirements/extras/local_requirements.txt @@ -1,3 +1,3 @@ -urllib3>=1.26.8,<1.26.15 +urllib3>=1.26.8,<3.0.0 docker>=5.0.2,<7.0.0 PyYAML>=5.4.1,<7