From 704d8b67908317f0d0519aa06a4bf263a753e859 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 2 Jan 2026 14:20:15 +0000
Subject: [PATCH] Bump urllib3 from 1.26.6 to 2.6.0

Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.6 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.26.6...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 chainforge/requirements.txt | 2 +-
 setup.py                    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/chainforge/requirements.txt b/chainforge/requirements.txt
index d944ff58..72e73361 100644
--- a/chainforge/requirements.txt
+++ b/chainforge/requirements.txt
@@ -3,7 +3,7 @@ flask[async]
 flask_cors
 requests
 openai
-urllib3==1.26.6
+urllib3==2.6.0
 mistune>=2.0
 platformdirs
 cryptography
diff --git a/setup.py b/setup.py
index aea90c5d..3d76470b 100644
--- a/setup.py
+++ b/setup.py
@@ -22,7 +22,7 @@ def readme():
         "flask_cors",
         "requests",
         "platformdirs",
-        "urllib3==1.26.6",
+        "urllib3==2.6.0",
         "openai",
         "cryptography",
         "mistune>=2.0",  # for LLM response markdown parsing