Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update ArcGIS Module Dependencies for Compatibility with Latest Requests Version #2173

Closed
mibo-dm opened this issue Dec 2, 2024 · 2 comments

Comments

@mibo-dm
Copy link

mibo-dm commented Dec 2, 2024

I am encountering an issue while trying to install the ArcGIS module. Our organization has a policy that restricts the installation of the requests module to versions <2.32.1 and >=2.30.0 due to known security vulnerabilities. However, there is a newer version of the requests module available that addresses these vulnerabilities, and it would be beneficial for us to use it.

I would like the ArcGIS module to either update its dependencies to allow for the latest version of the requests module or provide an alternative installation method that does not conflict with our organization's security policies.

I have considered manually installing an older version of the requests module, but this would expose our systems to potential security risks. Another alternative would be to fork the ArcGIS module and modify its dependencies, but this is not ideal as it would require ongoing maintenance.

Does anyone have any better ideas or alternative solutions?
I would appreciate any suggestions or insights from the community on how to resolve this issue effectively.

@mibo-dm
Copy link
Author

mibo-dm commented Mar 24, 2025

Is there any update on that topic?

@achapkowski
Copy link
Contributor

We plan on supporting a later version of requests at the next release. The issue was that requests team yanked multiple packages causing a bit of chaos. Due to this, the team felt it was best that we wait until all the things they broke were fixed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants