[Bug] Yanked requests Version 2.32.0 Causing Security Warning

[tlogandesigns]

Description

We’ve encountered a security warning related to requests==2.32.0, which has been yanked from PyPI due to conflicts with CVE-2024-35195 mitigation. When installing dependencies, Poetry/pip warns that this version is no longer recommended for use.

Current Behavior

• During poetry install, the following warning appears:

Warning: The file chosen for install of requests 2.32.0 (requests-2.32.0-py3-none-any.whl) is yanked. Reason for being yanked: Yanked due to conflicts with CVE-2024-35195 mitigation

• This implies there could be a potential security risk or instability with requests==2.32.0.

Expected Behavior

• The project should use a non-yanked version of requests that addresses the security concerns and removes the installation warning.

---

Proposed Resolution

Update requests from 2.32.0 to 2.32.3.

• requests==2.32.3 is available on PyPI and addresses the known security issues related to version 2.32.0.
• By updating the pinned version and regenerating the lock file, the warning will be eliminated and any associated security risks will be mitigated.