requirements use an older version of requests which gets flagged as potential security risk can we upgrade to 2.21 with out issue?