charset-normalizer released version 3.0.0, requests support <3 - unable to keep up to date packages as a result

[naorlivne]

charset-normalizer released version 3.0.0, requests require charset-normalizer <3, as a result packages can't be kept up to date (possible security issues left unpatched going forward)

The conflict is caused by:

    The user requested charset-normalizer==3.0.0

    requests 2.28.1 depends on charset-normalizer<3 and >=2

this is due to https://github.com/psf/requests/blob/main/setup.py#L62

Seems quite similar to and idna issue I fixed a while back at #5710

Expected Result

Be able to install requests with the latest version of the dependent package

Actual Result

Fails installing with the latest version of charset-normalizer

Reproduction Steps

pip install charset-normalizer==3.0.0
pip install requests

Watch it fails

[naorlivne]

And just now noticed that was fixed at #6261 just not released yet with a new version so gonna close this