From e5173e9b581886439819c92ed92678fcb2fa8596 Mon Sep 17 00:00:00 2001
From: Christian Manivong <christian.manivong@gmail.com>
Date: Tue, 27 Oct 2026 12:22:15 +0100
Subject: [PATCH] fix: the floor on urllib3 is 1.26.5
 (NAPALM/driver-standard#6)

urllib3 1.26.4 and older bundle a six whose import hook Python 3.12 no
longer supports (urllib3.packages.six.moves), so the lowest job failed.
---
 CHANGELOG.md   | 2 ++
 pyproject.toml | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 14cd728..d3265a2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,8 @@ All notable changes to this driver. The format follows
   on 3.12, so 3.10 and 3.11 are no longer tested (NAPALM/driver-standard#6).
 - The floor on napalm is 5.1: older releases import `pkg_resources`, which a Python
   3.12 venv no longer has.
+- The floor on urllib3 is 1.26.5: older releases bundle a `six` that Python 3.12
+  cannot import.
 
 ## [0.6.0] - 2026-10-23
 
diff --git a/pyproject.toml b/pyproject.toml
index fe153d1..e600527 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -27,7 +27,7 @@ dependencies = [
     "paramiko>=5.0.0",  # CVE-2026-44405
     "netaddr>=0.7.10",
     "requests>=2.25.0",
-    "urllib3>=1.23",
+    "urllib3>=1.26.5",  # older ones bundle a six that Python 3.12 cannot import
 ]
 
 [project.optional-dependencies]