https://github.com/elastic/rally/blame/87d729ba5ef9da753eb4f435f9d20ad29b1f553e/pyproject.toml#L50 URLlib is currently pinned at 1.26 which has known security vulnerabilities. Update to modern version.