I found the source of the infinite recursion.
If you experiment with poetry.lock, you can find that dvc depends on dvc-http and dvc-http depends on dvc!
poetry.lock was reproducible on my machine, so poetry.lock is not damaged.
I don’t know how to resolve this kind of issue. Maybe make an issue to the upstream and change the below code which includes dvc under install_requires?
In the meantime, you would have to manually delete dvc = "*" in [package.dependencies] of dvc-http.
Without dvc in pyproject.toml, the project is free of infinite recursion. (But I haven’t check whether it builds to the end without error.)