goshippo / shippo-python-client

Shipping API Python library (USPS, FedEx, UPS and more)
https://goshippo.com/docs
MIT License
123 stars 70 forks source link

Allow versions of requests > 1.24.0 #70

Closed remeika closed 2 years ago

remeika commented 3 years ago

requests==1.24.0 requires the installation of urllib3<1.26. Now there is a CVE published for versions of urllib3< 1.26.5.

Please update this library to accept later versions of requests, so we can upgrade to a secure version of urllib3.

savraj commented 2 years ago

is there a reason the newest version on pypi is stuck at 2.0.2? https://pypi.org/project/shippo/

TysonRV commented 2 years ago

Looking forward to have this as well

jfriedr commented 2 years ago

@savraj @TysonRV Apologies for the delay. I'm in the process of getting this bumped to that version of requests and will follow up here when this is complete.

In the meantime the latest 2.1.0 version has been pushed to pypi.

jfriedr commented 2 years ago

@TysonRV @savraj 2.1.2 has been uploaded and should allow requests 2.27.1 (which still passes all tests). Thanks for your patience.