Vendor requests 0.14.2 and urllib3 1.5+dev with it