urllib3<2 is impacting library compatibility

[jocado]

Hi,

Pinning urllib3<2 is causing some compatibility issues with including pylxd as a dependency in some projects. As it also forces requests< 2.32.0 that has some un-patched CVE.

Is there any chance it can be can be updated to urllib3>=2 ?

Thanks!

Cheers, Just

[hamistao]

Pinning the requests< 2.32.0 is unfortunately necessary for the moment because of https://github.com/canonical/pylxd/issues/579.

It is in our current plans for the next version to remove dependency on requests_unixsocket for this exact reason. This will enable us to update urllib3 as you suggested.

We should have more news on this topic soon, cheers.

[simondeziel]

Fixed by #604