fix: the floor on urllib3 is 1.26.5 (NAPALM/driver-standard#6)

urllib3 1.26.4 and older bundle a six whose import hook Python 3.12 no
longer supports (urllib3.packages.six.moves), so the lowest job failed.

CHANGELOG.md

@@ -11,6 +11,8 @@ All notable changes to this driver. The format follows
   on 3.12, so 3.10 and 3.11 are no longer tested (NAPALM/driver-standard#6).
 - The floor on napalm is 5.1: older releases import `pkg_resources`, which a Python
   3.12 venv no longer has.
+- The floor on urllib3 is 1.26.5: older releases bundle a `six` that Python 3.12
+  cannot import.
 
 ## [0.6.0] - 2026-10-23
 

pyproject.toml

@@ -27,7 +27,7 @@ dependencies = [
     "paramiko>=5.0.0",  # CVE-2026-44405
     "netaddr>=0.7.10",
     "requests>=2.25.0",
-    "urllib3>=1.23",
+    "urllib3>=1.26.5",  # older ones bundle a six that Python 3.12 cannot import
 ]
 
 [project.optional-dependencies]