We allowed requests-2.32 in order to pick up the security-fix therein. Unfortunately, 2.32 is still not ready for primetime, with symptoms that are breaking our use of requests. We need to re-restrict until 2.32 stabilizes.

See https://hackmd.io/@pulp/CI_https_failures for research/discussion