Downgrading the version of request lib to fix the CVE-2015-2296 (#1105)…

… (#1106)

Signed-off-by: Navneet Verma <[email protected]>
(cherry picked from commit 47ccb1b)

Co-authored-by: Navneet Verma <[email protected]>

benchmarks/perf-tool/okpt/test/steps/steps.py

@@ -796,7 +796,7 @@ def query_index(opensearch: OpenSearch, index_name: str, body: dict,
 
 
 def bulk_index(opensearch: OpenSearch, index_name: str, body: List):
-    return opensearch.bulk(index=index_name, body=body, timeout='5m')
+    return opensearch.bulk(index=index_name, body=body)
 
 def get_segment_stats(opensearch: OpenSearch, index_name: str):
     return opensearch.indices.segments(index=index_name)

benchmarks/perf-tool/requirements.in

@@ -3,5 +3,5 @@ opensearch-py
 PyYAML
 numpy
 h5py
-requests
+requests>=2.1.0,<2.6.0
 psutil

benchmarks/perf-tool/requirements.txt

@@ -1,23 +1,15 @@
 #
-# This file is autogenerated by pip-compile with python 3.9
-# To update, run:
+# This file is autogenerated by pip-compile with Python 3.8
+# by the following command:
 #
 #    pip-compile
 #
-cached-property==1.5.2
-    # via h5py
 cerberus==1.3.4
     # via -r requirements.in
 certifi==2023.7.22
-    # via
-    #   opensearch-py
-    #   requests
-charset-normalizer==2.0.4
-    # via requests
+    # via opensearch-py
 h5py==3.3.0
     # via -r requirements.in
-idna==3.2
-    # via requests
 numpy==1.24.2
     # via
     #   -r requirements.in
@@ -28,12 +20,10 @@ psutil==5.8.0
     # via -r requirements.in
 pyyaml==5.4.1
     # via -r requirements.in
-requests==2.31.0
+requests==2.5.3
     # via -r requirements.in
 urllib3==1.26.6
-    # via
-    #   opensearch-py
-    #   requests
+    # via opensearch-py
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools