From 6d6feac1cac65fa0663519db8a8921c121c78984 Mon Sep 17 00:00:00 2001
From: dgw <dgw@technobabbl.es>
Date: Sun, 21 May 2023 05:26:19 -0500
Subject: [PATCH] build: pin urllib3 to <2.0 for now

CI is broken with urllib3 2.x, but the specific package that fails our
tests (vcrpy) is not moving very swiftly to release a fix.

While they debate which versions of urllib3 to support, we just want to
have working CI so we can start merging our slowly growing PR backlog.

Because urllib3 is a transitive dependency of requests, it belongs in
the regular requirement list even though this pin is to fix tests.
---
 pyproject.toml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pyproject.toml b/pyproject.toml
index 1cd12796b..ccfdfb7ff 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -49,6 +49,7 @@ dependencies = [
     "praw>=4.0.0,<8.0.0",
     "geoip2>=4.0,<5.0",
     "requests>=2.24.0,<3.0.0",
+    "urllib3<2.0",  # TODO: unpin when vcrpy etc. will tolerate it
     "dnspython<3.0",
     "sqlalchemy>=1.4,<1.5",
     "importlib_metadata>=3.6",