Fix: bump urllib3 floor to 2.8.0

urllib3 2.7.0 is affected by improper certificate validation, resource
allocation without limits and an infinite loop; 2.8.0 fixes all three.
Raise the minimum so the vulnerable version is no longer installable.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Author: reeshika-h

requirements.txt

@@ -2,7 +2,7 @@ python-dotenv>=1.2.2
 # <82: pkg_resources (used by coverage-badge and similar tools) was removed in setuptools 82+
 setuptools>=83.0.0
 requests>=2.33.0,<3.0.0
-urllib3>=2.7.0,<3.0.0
+urllib3>=2.8.0,<3.0.0
 requests-toolbelt>=1.0.0,<2.0.0
 pyotp==2.9.0
 packaging>=24.0

setup.py

@@ -69,7 +69,7 @@ def get_author_email(package):
     install_requires=[
         "requests >= 2.5.4",
         "requests-toolbelt >= 0.3.1",
-        "urllib3 >= 2.7.0,<3.0.0",
+        "urllib3 >= 2.8.0,<3.0.0",
     ],
     extras_require={
         "dev": ["pytest>=7.0", "twine>=4.0.2", "packaging>=24.0", "dotenv>=0.0.5", "pylint>=2.0.0"],