[Snyk] Security upgrade urllib3 from 1.26.14 to 1.26.18

[Woodpile37]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • tools/requirements.txt

Vulnerabilities that will be fixed

By pinning:

Severity	Priority Score (*)	Issue	Upgrade	Breaking Change	Exploit Maturity
	61/1000 Why? Confidentiality impact: High, Integrity impact: None, Availability impact: None, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): High, Attack Complexity: High, Attack Vector: Adjacent, EPSS: 0.01055, Social Trends: No, Days since published: 0, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: Medium, Package Popularity Score: 100, Impact: 5.99, Likelihood: 1.01, Score Version: V5	Information Exposure Through Sent Data SNYK-PYTHON-URLLIB3-6002459	urllib3: 1.26.14 -> 1.26.18	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 2294333

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[codeautopilot]

Pull Request Summary

Your organization has reached the subscribed usage limit. You can upgrade your plan at https://www.codeautopilot.com/#pricing

---

Current plan usage: 100.54%

---

Have feedback or need help?

Discord
Documentation
[email protected]

[bridgecrew]

Bridgecrew has found errors in this PR ⬇️

[bridgecrew]

aiohttp 3.8.5 / requirements.txt

Total vulnerabilities: 1

Critical: 0	High: 1	Medium: 0	Low: 0

Vulnerability ID	Severity	CVSS	Fixed in	Status
PRISMA-2023-0024	HIGH	7.5	-	Open

[bridgecrew]

taskcluster 47.1.2 / requirements.txt

  Unknown License (NOT_FOUND)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

[bridgecrew]

mohawk 1.1.0 / requirements.txt

  Unknown License (MPL 2.0 (Mozilla Public License))

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

[bridgecrew]

slugid 2.0.0 / requirements.txt

  Unknown License (MPL 2.0)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.