From 6e5d6fbf138e90c1a74977ad99317d376b6ffc31 Mon Sep 17 00:00:00 2001
From: ovodela <102893727+ovodela@users.noreply.github.com>
Date: Mon, 31 Aug 2026 17:13:23 -0500
Subject: [PATCH] fix: relax requests version from ==2.32.* to >=2.32.0

The ==2.32.* pin prevented using DataProfiler alongside projects that
need requests 2.33+. The security floor (CVE-2024-35195) is 2.32.0,
so >=2.32.0 preserves the fix while allowing future compatible versions.

Also removes a stale comment that was only used to trigger a Mend check.

Closes #716
---
 requirements.txt | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 3ccc4c6f..241f3b72 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,11 +11,10 @@ python-snappy>=0.7.1
 charset-normalizer>=1.3.6
 psutil>=4.0.0
 scipy>=1.10.0
-requests==2.32.*
+requests>=2.32.0
 networkx>=2.5.1
 typing-extensions>=3.10.0.2
 HLL>=2.0.3
 datasketches>=4.1.0
 packaging>=23.0
 boto3>=1.28.61
-# adding comment to trigger mend check