<p dir="auto">We are using piprot in our security build. recently our build is getting failed because of the following risk given by piprot.</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="python-piprot  medium  urllib3            Module is one or more minor versions out of date  Upgrade to v1.25.2 (Current: v1.24.2)"><pre class="notranslate"><code class="notranslate">python-piprot  medium  urllib3            Module is one or more minor versions out of date  Upgrade to v1.25.2 (Current: v1.24.2)
</code></pre></div>
<p dir="auto">could you please let us know whether there is version upgrade possible in any time soon</p>
<p dir="auto">Thanks in advance</p>
<p dir="auto">Support for <code class="notranslate">urllib3</code> <a href="https://github.com/urllib3/urllib3/releases/tag/1.25">v1.25</a> (released today/yesterday). The usual yada-yada "my CI is broken".</p>
<p dir="auto">Multiple packages that we depend on (eg <code class="notranslate">google.cloud.storage</code>, <code class="notranslate">azure.storage</code>) have strict version-check on <code class="notranslate">requests</code> using <code class="notranslate">pkg_resources.require('requests &gt;= 2.18.0')</code>. Any unmet dependencies in the chain below and including <code class="notranslate">requests</code> will cause the check to fail and raise an exception. <code class="notranslate">urllib3&lt;1.25</code> is currently one such dependency.</p>
<h2 dir="auto">Expected Result</h2>
<p dir="auto">No exception raised on import</p>
<h2 dir="auto">Actual Result</h2>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="pkg_resources.ContextualVersionConflict: (urllib3 1.25 (/usr/local/lib/python3.6/dist-packages), Requirement.parse('urllib3&lt;1.25,&gt;=1.21.1'), {'requests'})

The above exception was the direct cause of the following exception:
ImportError: ``requests &gt;= 2.18.0`` is required by the ``google.resumable_media.requests`` subpackage.
It can be installed via
    pip install google-resumable-media[requests]."><pre class="notranslate"><code class="notranslate">pkg_resources.ContextualVersionConflict: (urllib3 1.25 (/usr/local/lib/python3.6/dist-packages), Requirement.parse('urllib3&lt;1.25,&gt;=1.21.1'), {'requests'})

The above exception was the direct cause of the following exception:
ImportError: ``requests &gt;= 2.18.0`` is required by the ``google.resumable_media.requests`` subpackage.
It can be installed via
    pip install google-resumable-media[requests].
</code></pre></div>
<h2 dir="auto">Reproduction Steps</h2>
<div class="highlight highlight-source-shell notranslate position-relative overflow-auto" dir="auto" data-snippet-clipboard-copy-content="pip3 install sentry-sdk google-cloud-storage"><pre class="notranslate">pip3 install sentry-sdk google-cloud-storage</pre></div>
<div class="highlight highlight-source-python notranslate position-relative overflow-auto" dir="auto" data-snippet-clipboard-copy-content="&gt;&gt;&gt; from google.cloud import storage"><pre class="notranslate"><span class="pl-c1">&gt;&gt;</span><span class="pl-c1">&gt;</span> <span class="pl-k">from</span> <span class="pl-s1">google</span>.<span class="pl-s1">cloud</span> <span class="pl-k">import</span> <span class="pl-s1">storage</span></pre></div>
<h2 dir="auto">System Information</h2>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="/home/laurie/env-tmp/lib/python3.6/site-packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.25) or chardet (3.0.4) doesn't match a supported version!
  RequestsDependencyWarning)
{
  &quot;chardet&quot;: {
    &quot;version&quot;: &quot;3.0.4&quot;
  },
  &quot;cryptography&quot;: {
    &quot;version&quot;: &quot;&quot;
  },
  &quot;idna&quot;: {
    &quot;version&quot;: &quot;2.8&quot;
  },
  &quot;implementation&quot;: {
    &quot;name&quot;: &quot;CPython&quot;,
    &quot;version&quot;: &quot;3.6.7&quot;
  },
  &quot;platform&quot;: {
    &quot;release&quot;: &quot;4.18.0-17-generic&quot;,
    &quot;system&quot;: &quot;Linux&quot;
  },
  &quot;pyOpenSSL&quot;: {
    &quot;openssl_version&quot;: &quot;&quot;,
    &quot;version&quot;: null
  },
  &quot;requests&quot;: {
    &quot;version&quot;: &quot;2.21.0&quot;
  },
  &quot;system_ssl&quot;: {
    &quot;version&quot;: &quot;1010100f&quot;
  },
  &quot;urllib3&quot;: {
    &quot;version&quot;: &quot;1.25&quot;
  },
  &quot;using_pyopenssl&quot;: false
}"><pre class="notranslate"><code class="notranslate">/home/laurie/env-tmp/lib/python3.6/site-packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.25) or chardet (3.0.4) doesn't match a supported version!
  RequestsDependencyWarning)
{
  "chardet": {
    "version": "3.0.4"
  },
  "cryptography": {
    "version": ""
  },
  "idna": {
    "version": "2.8"
  },
  "implementation": {
    "name": "CPython",
    "version": "3.6.7"
  },
  "platform": {
    "release": "4.18.0-17-generic",
    "system": "Linux"
  },
  "pyOpenSSL": {
    "openssl_version": "",
    "version": null
  },
  "requests": {
    "version": "2.21.0"
  },
  "system_ssl": {
    "version": "1010100f"
  },
  "urllib3": {
    "version": "1.25"
  },
  "using_pyopenssl": false
}
</code></pre></div>