clarify urllib3 as requirement in pyproject.toml and add back in requestsFetcher as option.

Signed-off-by: NicholasTanz <nicholastanzillo@gmail.com>

Author: NicholasTanz

pyproject.toml

@@ -47,6 +47,7 @@ classifiers = [
 dependencies = [
   "requests>=2.19.1",
   "securesystemslib~=1.0",
+  "urllib3<3,>=1.21.1",
 ]
 dynamic = ["version"]
 
@@ -156,4 +157,4 @@ exclude_also = [
 ]
 [tool.coverage.run]
 branch = true
-omit = [ "tests/*" ]
+omit = [ "tests/*", "tuf/ngclient/_internal/requests_fetcher.py" ]

tuf/ngclient/__init__.py

@@ -8,13 +8,15 @@
 # requests_fetcher is public but comes from _internal for now (because
 # sigstore-python 1.0 still uses the module from there). requests_fetcher
 # can be moved out of _internal once sigstore-python 1.0 is not relevant.
+from tuf.ngclient._internal.requests_fetcher import RequestsFetcher
 from tuf.ngclient._internal.urllib3_fetcher import Urllib3Fetcher
 from tuf.ngclient.config import UpdaterConfig
 from tuf.ngclient.fetcher import FetcherInterface
 from tuf.ngclient.updater import Updater
 
 __all__ = [  # noqa: PLE0604
     FetcherInterface.__name__,
+    RequestsFetcher.__name__,
     Urllib3Fetcher.__name__,
     TargetFile.__name__,
     Updater.__name__,