Strict httpx requirement blocks updating httpx

[mikicz]

The current httpx requirement blocks updating httpx, which then blocks updating more things that use it.

For example, in our project, this package which we need blocks updating httpx which blocks us from updating pytest-httpx which eventually blocks us from updating pytest itself. That blocks us from resolving CVE-2025-71176.

Would it be possible to look at #103 again, and merge a new release?

[vlouvet]

Hi @mikicz — thanks for the report, and sorry this is blocking your CVE remediation.

Some context on timing that might save you waiting: main here hasn't had a commit since March 2025, and #103 has been open since December 2024.

I maintain an active fork that already carries exactly that change — httpx = ">=0.25,<0.29", which resolves to 0.28.1 — so it should unblock pytest-httpx and pytest for you today:

https://github.com/vlouvet/netsuite

One caveat I want to be upfront about, since dependency resolution is the whole issue for you: the fork isn't published to PyPI, so you'd install it from git:

pip install "netsuite @ git+https://github.com/vlouvet/netsuite.git"

Beyond the httpx range, the fork has picked up OAuth 2.0 (client credentials / JWT bearer), SuiteQL pagination, the 2026.1 REST helpers, and a fix landing shortly that reuses a single httpx.AsyncClient instead of building one per request. I intend to keep the httpx range moving as new versions ship.

You're very welcome to watch the fork if it's useful to you. Happy to help if you hit anything migrating.

@iloveitaly any plans to archive your branch if you will not be actively responding to requests?