Update ArcGIS Module Dependencies for Compatibility with Latest Requests Version

[mibo-dm]

I am encountering an issue while trying to install the ArcGIS module. Our organization has a policy that restricts the installation of the requests module to versions <2.32.1 and >=2.30.0 due to known security vulnerabilities. However, there is a newer version of the requests module available that addresses these vulnerabilities, and it would be beneficial for us to use it.

I would like the ArcGIS module to either update its dependencies to allow for the latest version of the requests module or provide an alternative installation method that does not conflict with our organization's security policies.

I have considered manually installing an older version of the requests module, but this would expose our systems to potential security risks. Another alternative would be to fork the ArcGIS module and modify its dependencies, but this is not ideal as it would require ongoing maintenance.

Does anyone have any better ideas or alternative solutions?
I would appreciate any suggestions or insights from the community on how to resolve this issue effectively.

[mibo-dm]

Is there any update on that topic?

[achapkowski]

We plan on supporting a later version of requests at the next release. The issue was that requests team yanked multiple packages causing a bit of chaos. Due to this, the team felt it was best that we wait until all the things they broke were fixed.