1.7.0+fs7

Includes pinning to single version of requests.

Very unfortunate since this will force us to upgrade pants
for any loosely-configured consumer of requests.

But the cryptography stack is basicallt broken for our version
of Python,pex and pip.

Unwinding that is a backbreaker, should be sometime in 2021
and I hate to think of it

3rdparty/python/requirements.txt

@@ -30,13 +30,13 @@ pystache==0.5.3
 pytest-cov>=2.5,<2.6
 pytest>=3.4,<4.0
 pywatchman==1.4.1
-requests<=2.23.0  # Removed [security] set, the unpinned cryptography is unbuildable for python2.7
+requests==2.24.0  # Pants must match version.
 requests_futures>=0.9.4,<0.10
 scandir==1.2
 setproctitle==1.1.10
 setuptools==30.0.0
 subprocess32==3.2.7
 six>=1.9.0,<2
 thrift>=0.9.1
-urllib3<1.24,>=1.21.1
+urllib3<1.26,>=1.20
 wheel==0.29.0

src/python/pants/VERSION

@@ -1 +1 @@
-1.7.0+fs6
+1.7.0+fs7