Unpin urllib3 dependency

[trvachov]

Description

It seems there is a dependency pin for torchx to a specific version of urllib that was pinned ~3 years ago (

torchx/requirements.txt

Line 9 in 4566149

urllib3<1.27,>=1.21.1

)

Motivation/Background

urllib3 is on version 2.x -- having this specific pin for torchx makes it difficult to co-install torchx with other packages.

Detailed Proposal

Unpin torchx, test it. Possibly modify APIs to be compatible with new urllib3 versions.

Alternatives

Additional context/links

[akuzminsky]

Friendly heads-up: torchx currently allows urllib3 versions only from 1.21.1 up to 1.27 - which sadly includes the GHSA-pq67-6m6q-mj2v vulnerability. Since that issue was patched in urllib3 2.5.0, it’s really important that torchx’s constraints be updated to support urllib3 >= 2.5.0