Relax urllib3 upper bound

[NickCrews]

Describe the bug

I am getting dependency conflicts due to the upper bound of urllib3<2.1 for python_version>="3.10". Unless we KNOW that botocore doesn't work with urllib3>=2.1, can we remove this restriction?

this dep constraint was most recently changed in #3034. I read through there and didn't see anything there about why the upper bound was included, but there might be a good reason.

Expected Behavior

I can co-install another package that requires urllib>=2.1

Current Behavior

I can't install that other package.

Reproduction Steps

NA

Possible Solution

No response

Additional Information/Context

No response

SDK version used

main

Environment details (OS name and version, etc.)

NA

[nateprewitt]

Hi @NickCrews,

The reason we currently have the upperbound is due to urllib3's breaking changes in 2.1.0 as announced by urllib3 here. There are also other regressions in 2.2.0 that are breaking for botocore that are being tracked in urllib3/urllib3#3343.

For that reason, we can't move the pin without breaking the majority of botocore users without them taking manual steps to include the pin themselves.

[NickCrews]

Wow, yeah that is a lot of unhappy people in #3111. This makes sense, thank you!

[github-actions]

This issue is now closed. Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.