Merge pull request #12 from springload/fix/pip-audit_pin_urllib3

Pin urllib3 to < 2.0
springload · May 10, 2023 · 3e493d7 · 3e493d7
2 parents 12ef1be + ab1bbed
commit 3e493d7
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/requirements/static_analysis.txt b/requirements/static_analysis.txt
@@ -6,6 +6,9 @@ flake8-docstrings
 flake8-print
 flake8-spellcheck
 isort~=5.10
+# urllib3 v2 updates break cachecontrol, an upstream dependency of pip-audit
+# https://github.com/ionrock/cachecontrol/pull/294
+urllib3<2
 # Pip-audit 2.5.3 changes package resolution
 # and attempts to install psycopg2 from source
 pip-audit==2.5.2