Hackney 4.9 enforces max_body while it reads and returns {:error, {:closed, partial}} for a truncated body; the hackney regression tests now pin that. The certifi override goes, as hackney itself now asks for certifi ~> 2.18.0.
