* Restrict requests to < 2.29.0. * Also avoid urllib3, which gets installed in some cases even though it shouldn't.