deps: relax urllib3 dependency to >=2.2.2,<3

deps: relax urllib3 dependency to >=2.2.2,<3

Author: alexpasmantier

changelog.d/20260217_102505_alexandre.pasmantier_relax_urllib3_pin.md

@@ -0,0 +1,3 @@
+### Changed
+
+- Relax `urllib3` dependency pin from `~=2.2.2` to `>=2.2.2,<3`, allowing compatibility with newer urllib3 versions (#1160).

pdm.lock

@@ -46,7 +46,7 @@ dependencies = [
     "requests~=2.32.0",
     "rich~=12.5.1",
     "typing-extensions~=4.12.2",
-    "urllib3~=2.2.2",
+    "urllib3>=2.2.2,<3",
     "truststore>=0.10.1; python_version >= \"3.10\"",
 ]
 
@@ -63,7 +63,7 @@ build-backend = "pdm.backend"
 [tool.pdm.resolution.overrides]
 # vcrpy requires urllib3 < 2 if Python is < 3.10, but it works for us with
 # Python 3.9, so force urllib3 version.
-urllib3 = "2.2.3"
+urllib3 = ">=2.2.2,<3"
 
 # pyinstaller limits Python version to < 3.13, making it incompatible with us
 pyinstaller = "6.7.0"