upgrade `requests` dep to address CVEs?

[bdewilde]

Hi! The version of requests listed as a dependency on this package is constrained to a version from 2018, which has a number of CVEs associated with it, including

• CVE-2023-45803
• CVE-2023-43804
• CVE-2020-26137
• CVE-2023-32681

Would it be possible to upgrade the specific version specified in the dependencies or -- even better -- set a range constraint on the versions that allows for newer requests to be used?