[Snyk] Security upgrade urllib3 from 2.0.7 to 2.6.0 - #7

This upgrade of urllib3 from version 2.0.7 to 2.6.0 introduces significant breaking changes that require developer action.

Mandatory Code Changes:

• API Removals: Version 2.6.0 removes the deprecated HTTPResponse.getheaders() and HTTPResponse.getheader() methods. Code using these methods will fail.
  • Replace response.getheaders() with the response.headers property.
  • Replace response.getheader(name, default) with response.headers.get(name, default).

Environment Changes:

• Python Version Support: Support for Python 3.7 was removed in version 2.1.0, and support for Python 3.8 was removed in version 2.3.0. Your environment must be running Python 3.9 or newer.

Other Notable Changes:

• The upgrade includes several important security fixes related to resource consumption and decompression vulnerabilities.
• If you use custom content decompressors, you must update them to align with the changed urllib3.response.ContentDecoder API in v2.6.0.

Recommendation: Before merging, audit your codebase for usage of the removed getheaders() and getheader() methods and update them to use the headers property. Ensure your production environment is running Python 3.9 or a more recent version.

Source: urllib3 Changelog

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.