minimum `request` version bumped to 2.36