From 939ea01d12a673acf6b2d27c681c4e42f36fb17c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 11 May 2026 16:04:30 +0000
Subject: [PATCH 1/2] chore(deps): bump urllib3 from 2.6.3 to 2.7.0

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.6.3 to 2.7.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.6.3...2.7.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index c1f4b07eb..eac4756c6 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -17,7 +17,7 @@ httpx>=0.24.1
 humanize==4.15.0
 cachetools==7.1.1
 requests==2.33.1
-urllib3==2.6.3
+urllib3==2.7.0
 certifi==2026.4.22
 jsonschema==4.26.0
 tabulate==0.10.0

From f82e4ce9eccfedc513aa64d891484596de1ffdc2 Mon Sep 17 00:00:00 2001
From: Matthias <xmatthias@outlook.com>
Date: Mon, 11 May 2026 19:17:13 +0200
Subject: [PATCH 2/2] chore: urllib exclude for security fix

---
 pyproject.toml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pyproject.toml b/pyproject.toml
index c6024a3b5..fc24d1488 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -222,6 +222,7 @@ exclude-newer = "1 week"
 
 [tool.uv.exclude-newer-package]
 ccxt = false
+urllib3 = "4 days"
 
 [tool.ruff]
 line-length = 100