dependency pinning on requests