📌(back) pin urllib3 to version 2.0.7

Botocore is still not compatible with urllib3 version 2.1.0 The version 2.1.0 of urllib3 may contains several BC according to this issue : boto/botocore#3065
openfun · Nov 28, 2023 · 1882595 · 1882595
1 parent f1418b3
commit 1882595
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/renovate.json b/renovate.json
@@ -37,6 +37,16 @@
         "mcr.microsoft.com/playwright"
       ],
       "versioning": "semver"
+    },
+    {
+      "groupName": "allowed urllib3 versions",
+      "matchManagers": [
+        "setup-cfg"
+      ],
+      "matchPackageNames": [
+        "urllib3"
+      ],
+      "allowedVersions": "<2.1.0"
     }
   ]
 }
diff --git a/src/backend/setup.cfg b/src/backend/setup.cfg
@@ -60,7 +60,7 @@ install_requires =
     social-auth-app-django==5.4.0
     social-auth-core[saml]==4.5.0
     social-edu-federation==2.1.1
-    urllib3==2.1.0
+    urllib3==2.0.7
     uvicorn[standard]==0.24.0.post1
     whitenoise==6.6.0
     xmpppy==0.7.1