chore(deps): Update dep casbin to 1.41.9

[mikyll]

Description

Lua Casbin version 1.41.9 fixes bug 157 with PR 158.

Consequences

This allows to escape commas in policy rules and is especially useful for {N,M} pattern quantifier, which would otherwise throw an error ("invalid policy size"), since it considers the comma as a CSV field separator.

The affected plugin is authz-casbin which depends on Casbin.

Example

show/hide

Model file:

[request_definition]
r = sub, obj, act
[policy_definition]
p = sub, obj, act
[policy_effect]
e = some(where (p.eft == allow))
[matchers]
m = regexMatch(r.sub, p.sub) && regexMatch(r.obj, p.obj) && regexMatch(r.act, p.act)

Policy file:

p, bob, "/httpbin/test/authz-casbin/[a-z]{3,5}/test", GET

HTTP Request:

 curl -s -i "localhost:9080/httpbin/test/authz-casbin/abcd/test" -H "user: bob"

Error invalid policy size:

2024/07/11 10:08:46 [error] 63#63: *85813 lua entry thread aborted: runtime error: ...apisix_src//deps/share/lua/5.1/src/main/CoreEnforcer.lua:423: invalid policy size
stack traceback:
coroutine 0:
        [C]: in function 'error'
        ...apisix_src//deps/share/lua/5.1/src/main/CoreEnforcer.lua:423: in function 'enforceEx'
        ...apisix_src//deps/share/lua/5.1/src/main/CoreEnforcer.lua:534: in function 'enforce'
        .../apisix/plugins/scm/custom/apisix/plugins/authz-casbin.lua:123: in function 'phase_func'
        /home/apisix/apisix_src/apisix/plugin.lua:1155: in function 'run_plugin'
        /home/apisix/apisix_src/apisix/init.lua:696: in function 'http_access_phase'
        access_by_lua(nginx.conf:319):2: in main chunk, client: 172.18.0.1, server: _, request: "GET /httpbin/test/authz-casbin/abcd/test HTTP/1.1", host: "localhost:9080"

Checklist

• I have explained the need for this PR and the problem it solves
• I have explained the changes or the new features added to this PR
• I have added tests corresponding to this change
• I have updated the documentation to reflect this change
• I have verified that this change is backward compatible (If not, please discuss on the APISIX mailing list first)