pipenv installed the wrong version although it was specified correctly

[EiJayK]

I'm a bit puzzled, and any clarification is much appreciated.

• running the latest version of pipenv 2023.4.29
• running python 3.7

Pipenv installs urllib3 2.0.2, while there is a dependancy that clearly mentions that it needs urllib3<2 (see below)

I would have expected pipenv to install urllib3 = 1.26.5

Below is an extract from pipenv grap | grep urllib3

` - urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.15, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.24.2, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: <2, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]
- urllib3 [required: >=1.21.1,<3, installed: 2.0.2]

• urllib3 [required: >=1.26.0, installed: 2.0.2]`

I didn't expect this. Who can help?

[EiJayK]

@matteius would you have any insight? It's strange because in the case above, shouldn't pipenv throw an error for 2.0.2 ?