Merge pull request #145 from bird-house/urllib-requests

Author: fmigneault

CHANGES.rst

@@ -6,6 +6,7 @@ Unreleased
 
 Changes:
 
+* Pin `requests>=2.32.5` and `urllib3>=2.6.0` for latest security vulnerability fixes.
 * Pin `requests>=2.32.4` to address security vulnerability
   (see `#143 <https://github.com/bird-house/twitcher/pull/143>`_).
 

requirements.txt

@@ -30,10 +30,12 @@ zope.sqlalchemy>=1.3,!=1.4.*
 # oauth2
 pyramid_oauthlib>=0.4.1
 oauthlib<3
-requests>=2.32.4
+requests>=2.32.4; python_version < "3.9"  # noqa
+requests>=2.32.5; python_version >= "3.9"
 requests_oauthlib<1.2.0
 PyJWT>=2
 setuptools==75.3.2; python_version < "3.9"  # noqa
 setuptools>=78.1.1; python_version >= "3.9"
-urllib3>=2.2.2
+urllib3>=2.2.2; python_version < "3.9"  # noqa
+urllib3>=2.6.0; python_version >= "3.9"
 zipp>=3.19.1