dev-python/urllib3: update urllib3 to 2.5.0
This change updates the urllib3 package to version 2.5.0. This requires
the addition of a new package, hatch-vcs. However, this new package is
not compatible with python3.8 due to reliance on functools cache which
was introduced in v3.9. To maintain compatibility, this change
introduces a patch that uses lru_cache instead for lower versions.
BUG=b/447009681
TEST=presubmit
RELEASE_NOTE=Updated dev-python/urllib3 to v2.5.0. This resolves
CVE-2025-50181.
Change-Id: Ifb63bf851301fbfe13c7fa62069b10301fec6006
Reviewed-on: https://cos-review.googlesource.com/c/third_party/overlays/portage-stable/+/113104
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: He Gao <hegao@google.com>
16 files changed