From bd25ba431a8a6ff5bdc49a6747fa993348be6da6 Mon Sep 17 00:00:00 2001
From: Lauro Foletti <25608942+lfoletti@users.noreply.github.com>
Date: Wed, 4 Nov 2026 18:29:08 +0100
Subject: [PATCH] deps: bound curl_cffi below 0.17

The CI installs the extras from pyproject.toml, not from the lock, and now gets curl_cffi 0.17.0. With 0.17.0, test_imitation_envoie_une_empreinte_de_navigateur fails: the impersonated request sends no User-Agent. The lock pins 0.16.3. The bound keeps the CI on the tested version until the code is adapted to 0.17.
---
 pyproject.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pyproject.toml b/pyproject.toml
index ce015ce..39f5025 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -23,7 +23,7 @@ inspect = [
 ]
 # Empreinte TLS Chrome (curl_cffi) et décompression br
 tls = [
-    "curl_cffi>=0.15",
+    "curl_cffi>=0.15,<0.17",  # 0.17 n'envoie plus l'en-tête User-Agent de l'empreinte imitée
     "brotli>=1.2.1",
 ]
 # Gestes humains et préparation des profils (warmup, gestes)