LCORE-1080: Bump-up urllib3 to version 2.6.2

[tisnik]

Description

Bump-up urllib3 to version 2.6.2

Type of change

• Refactor
• New feature
• Bug fix
• CVE fix
• Optimization
• Documentation Update
• Configuration Update
• Bump-up service version
• Bump-up dependent library
• Bump-up library or tool used for development (does not change the final image)
• CI configuration change
• Konflux configuration change
• Unit tests improvement
• Integration tests improvement
• End to end tests improvement

Tools used to create PR

Identify any AI code assistants used in this PR (for transparency and review context)

• Assisted-by: N/A
• Generated by: N/A

Related Tickets & Documents

• Related Issue #LCORE-1080

Summary by CodeRabbit

• Chores
  • Updated urllib3 dependency to version 2.6.2.
  • Updated package integrity metadata to match the new dependency release.
  • No functional, behavioral, or public API changes; existing features remain unaffected.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

Walkthrough

urllib3 is bumped from 2.6.1 to 2.6.2 in pyproject.toml and both architecture-specific requirements files, with their associated checksum/hash entries updated. No code, API, or exported-entity changes were made.

Changes

Cohort / File(s)	Summary
Dependency updates pyproject.toml, requirements.aarch64.txt, requirements.x86_64.txt	urllib3 version changed from 2.6.1 → 2.6.2; corresponding sha256 hash entries updated in both requirements files. No other functional or structural changes.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

• Simple, consistent dependency/version and hash updates across three files.

Possibly related PRs

• LCORE-1082: Bump-up urllib3 to 2.5.0 #883: Also updates urllib3 version and associated hashes in requirements files.

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The pull request title clearly and specifically describes the main change: bumping urllib3 from 2.6.1 to 2.6.2, which aligns with all file modifications (requirements.aarch64.txt, requirements.x86_64.txt, and pyproject.toml).
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment

---

📜 Recent review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 792ccf9 and 0681546.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (3)

• pyproject.toml (1 hunks)
• requirements.aarch64.txt (1 hunks)
• requirements.x86_64.txt (1 hunks)

🚧 Files skipped from review as they are similar to previous changes (2)

• requirements.x86_64.txt
• requirements.aarch64.txt

🧰 Additional context used

📓 Path-based instructions (1)

pyproject.toml

📄 CodeRabbit inference engine (CLAUDE.md)

pyproject.toml: Configure pylint with source-roots = "src"
Exclude src/auth/k8s.py from pyright type checking

Files:

• pyproject.toml

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (8)

• GitHub Check: build-pr
• GitHub Check: Konflux kflux-prd-rh02 / lightspeed-stack-on-pull-request
• GitHub Check: E2E: server mode / azure
• GitHub Check: E2E: library mode / azure
• GitHub Check: E2E: library mode / ci
• GitHub Check: E2E: server mode / vertexai
• GitHub Check: E2E: library mode / vertexai
• GitHub Check: E2E: server mode / ci

🔇 Additional comments (1)

pyproject.toml (1)

55-55: urllib3 2.6.2 is valid and secure.

urllib3 2.6.2 exists on PyPI and was released December 11, 2025. The patch version bump includes minor bug fixes such as correcting HTTP version debug logs, removing Python 3.8 support, adding Python 3.13 support, fixing chunked request body encoding, and addressing ResourceWarning and compatibility issues. No breaking changes are introduced between 2.6.1 and 2.6.2, and no known security vulnerabilities affect either version.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}