feat(DEVC-2097): urllib3 upgrade + fix for MAX_RETRY_COUNT

Author: kossman

CHANGELOG.md

@@ -6,6 +6,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.15.2] - 2026-01-14
+### Security
+- Upgraded internal dependency `urllib3` to version `urllib3 >= 2.6.3, <3.0.0` since `2.5.0` has [these](https://security.snyk.io/package/pip/urllib3/2.5.0) vulnerabilities
+### Fixed
+- Fixed issue with `MAX_RETRY_COUNT` 
+
+
 ## [1.15.1] - 2025-10-06
 ### Fixed
 - Logging duplication on CloudWatch side

pyproject.toml

@@ -6,7 +6,7 @@ build-backend = "setuptools.build_meta"
 name = "corva-sdk"
 description = "SDK for building Corva DevCenter Python apps."
 readme = "README.md"
-version = "1.15.1"
+version = "1.15.2"
 license = { text = "The Unlicense" }
 authors = [
   { name = "Jordan Ambra", email = "jordan.ambra@corva.ai" }
@@ -18,7 +18,7 @@ dependencies = [
   "pydantic >=1.8.2, <2.0.0",
   "redis >=5.2.1, <6.0.0",
   "requests >=2.32.3, <3.0.0",
-  "urllib3==2.5.0"
+  "urllib3 >= 2.6.3, <3.0.0",
 ]
 classifiers = [
   "Development Status :: 5 - Production/Stable",

src/corva/configuration.py

@@ -1,18 +1,44 @@
 import datetime
+import logging
+from typing import Any
 
-import pydantic
+from pydantic import AnyHttpUrl, BaseSettings, validator
 
+logger = logging.getLogger("corva")
+
+DEFAULT_MAX_RETRY_COUNT = 3
+
+def _parse_max_retry_count(value: Any) -> int:
+    if value is None or value == "":
+        return DEFAULT_MAX_RETRY_COUNT
+
+    try:
+        if isinstance(value, bool):
+            raise TypeError
+        if isinstance(value, int):
+            return value
+        if isinstance(value, str):
+            return int(value.strip())
+    except (TypeError, ValueError):
+        pass
+
+    logger.warning(
+        "Invalid MAX_RETRY_COUNT value %r; using default %d.",
+        value,
+        DEFAULT_MAX_RETRY_COUNT,
+    )
+    return DEFAULT_MAX_RETRY_COUNT
 
 def parse_truthy(v):
     if isinstance(v, bool):
         return v
     return str(v or "").strip().lower() in {"1", "true", "t", "yes", "y", "on"}
 
 
-class Settings(pydantic.BaseSettings):
+class Settings(BaseSettings):
     # api
-    API_ROOT_URL: pydantic.AnyHttpUrl
-    DATA_API_ROOT_URL: pydantic.AnyHttpUrl
+    API_ROOT_URL: AnyHttpUrl
+    DATA_API_ROOT_URL: AnyHttpUrl
 
     # cache
     CACHE_URL: str
@@ -35,14 +61,18 @@ class Settings(pydantic.BaseSettings):
     POOL_BLOCK: bool = True  # Wait until connection released
 
     # retry
-    MAX_RETRY_COUNT: int = 3  # If `0` then retries will be disabled
+    MAX_RETRY_COUNT: int = DEFAULT_MAX_RETRY_COUNT  # If `0` then retries will be disabled
     BACKOFF_FACTOR: float = 1.0
 
     OTEL_LOG_SENDING_DISABLED: bool = False
 
-    _validate_otel_log_sending_disabled = pydantic.validator(
+    _validate_otel_log_sending_disabled = validator(
         "OTEL_LOG_SENDING_DISABLED", pre=True, allow_reuse=True
     )(parse_truthy)
 
+    @validator("MAX_RETRY_COUNT", pre=True)
+    def parse_max_retry_count(cls, v: Any) -> int:
+        return _parse_max_retry_count(v)
+
 
 SETTINGS = Settings()

src/version.py

@@ -1 +1 @@
-VERSION = "1.15.1"
+VERSION = "1.15.2"