-
Notifications
You must be signed in to change notification settings - Fork 180
Open
Labels
status:newThis issue needs to be reviewedThis issue needs to be reviewedtype:bugSomething isn't workingSomething isn't working
Description
Environment
- ggshield version>=1.43.0
- Operating system (Linux, macOS, Windows): macOS
- Python version : 3.13.5
Describe the bug
While attempting to upgrade urllib3 to version 2.6.0 or higher to resolve security vulnerabilities, we discovered that ggshield 1.43.0 is not compatible with newer urllib3 versions. The ggshield package enforces a dependency constraint requiring:
urllib3 < 2.3.dev0
This prevents us from upgrading urllib3 to a secure version and blocks vulnerability remediation.
Steps to reproduce:
- Install Python environment with urllib3 >= 2.6.0
- Install ggshield==1.43.0
Actual result:
Observe dependency conflict error:
ggshield requires urllib3<2.3.dev0
Expected result:
ggshield should support urllib3 >= 2.6.0 or publish a compatible version that removes the restrictive dependency.
Metadata
Metadata
Assignees
Labels
status:newThis issue needs to be reviewedThis issue needs to be reviewedtype:bugSomething isn't workingSomething isn't working