diff --git a/core/setup.py b/core/setup.py
index 66edb342cd5..9b40a917a8c 100644
--- a/core/setup.py
+++ b/core/setup.py
@@ -61,6 +61,7 @@
         # with major versions in each new minor version of dbt-core.
         "click>=8.0.2,<9",
         "networkx>=2.3,<4",
+        "requests<3.0.0",  # should match dbt-common
         # ----
         # These packages are major-version-0. Keep upper bounds on upcoming minor versions (which could have breaking changes)
         # and check compatibility / bump in each new minor version of dbt-core.
diff --git a/dev-requirements.txt b/dev-requirements.txt
index 77108282a40..41715af753d 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -25,14 +25,11 @@ tox>=3.13
 twine
 types-docutils
 types-PyYAML
-types-freezegun
 types-Jinja2
-types-jsonschema
 types-mock
 types-protobuf
-types-python-dateutil
 types-pytz
-types-requests<2.31.0 # types-requests 2.31.0.8 requires urllib3>=2, but we pin urllib3 ~= 1.0 because of openssl requirement for requests
+types-requests
 types-setuptools
 wheel
 mocker