Description

This PR updates the httpx dependency to ^0.27.0, which brings in httpcore >=1.0.0 and h11 >=0.16.0. This resolves a known vulnerability in older versions of h11 related to lenient parsing of chunked encoding that could lead to request smuggling under certain conditions.

Motivation behind this PR?

Older versions of h11 (used indirectly via httpx) allowed invalid chunked encoding bodies to be parsed without error, potentially opening up request smuggling vulnerabilities in edge cases involving misconfigured reverse proxies.
This update ensures the project no longer includes a vulnerable version of h11 and improves overall security compliance.

https://github.com/scanapi/scanapi/security/dependabot/31

What type of change is this?

Security Fix

Checklist

• A changelog entry was added, or this PR does not require one. Instructions
• Unit tests were added or updated as needed, or not required for this change. Instructions
• All unit tests pass locally. Instructions
• Docstrings or comments were added or updated as needed, or no documentation changes were required. Instructions
• This PR does not significantly reduce code or docstring coverage.
• Code follows the project’s style guidelines.
• ScanAPI was run locally and the changes were manually verified, or this was not necessary. Instructions
• Commits were squashed, or squashing was not necessary (e.g., only one commit). Instructions

Issue

There is no issue because it is a security vulnerability.