This is currently pinned because we depend on urllib3 for some important logic. The 1.26 branch continues to receive security fixes, but this will eventually end.

This will require testing to ensure that the create_session API and the Dropbox* classes continue to work properly.