Update to 2.28.1, rediff patches
One patch replaced by a pytest -k arg (more maintainable this
way). The charset_normalizer sed isn't needed any more (and
didn't do anything any more), upstream changed that dep. Upstream
dropped the cert file in 2017 so we don't need to try and remove
it any more.