New versions of requests that were just released removed the bundled
`cacert.pem` file, causing Homu to be unable to post comments.
Pin requests and all other Homu dependencies to avoid future problems,
now that we are using `upgrade=True` to ensure Homu gets updated.