Bump the pip group with 6 updates

[dependabot]

Bumps the pip group with 6 updates:

Package	From	To
boto3	1.35.71	1.35.76
boto3-stubs	1.35.71	1.35.76
anyio	4.6.2.post1	4.7.0
httpx	0.28.0	0.28.1
django	5.1.3	5.1.4
coverage	7.6.8	7.6.9

Updates boto3 from 1.35.71 to 1.35.76

Commits

• a73c078 Merge branch 'release-1.35.76'
• ec12aea Bumping version to 1.35.76
• 8d23369 Add changelog entries from botocore
• 543da72 Merge branch 'release-1.35.75'
• c04fb42 Merge branch 'release-1.35.75' into develop
• e9053d7 Bumping version to 1.35.75
• d3ecf83 Add changelog entries from botocore
• cf1ce04 Merge branch 'release-1.35.74'
• 770fc4b Merge branch 'release-1.35.74' into develop
• 304539d Bumping version to 1.35.74
• Additional commits viewable in compare view

Updates boto3-stubs from 1.35.71 to 1.35.76

Commits

• See full diff in compare view

Updates anyio from 4.6.2.post1 to 4.7.0

Release notes

Sourced from anyio's releases.

4.7.0

• Updated TaskGroup to work with asyncio's eager task factories (#764)
• Added the wait_readable() and wait_writable() functions which will accept an object with a .fileno() method or an integer handle, and deprecated their now obsolete versions (wait_socket_readable() and wait_socket_writable()) (PR by @​davidbrochart)
• Changed EventAdapter (an Event with no bound async backend) to allow set() to work even before an async backend is bound to it (#819)
• Added support for wait_readable() and wait_writable() on ProactorEventLoop (used on asyncio + Windows by default)
• Fixed a misleading ValueError in the context of DNS failures (#815; PR by @​graingert)
• Fixed the return type annotations of readinto() and readinto1() methods in the anyio.AsyncFile class (#825)
• Fixed TaskInfo.has_pending_cancellation() on asyncio returning false positives in cleanup code on Python >= 3.11 (#832; PR by @​gschaffner)
• Fixed cancelled cancel scopes on asyncio calling asyncio.Task.uncancel when propagating a CancelledError on exit to a cancelled parent scope (#790; PR by @​gschaffner)

Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

4.7.0

• Updated TaskGroup to work with asyncio's eager task factories ([#764](https://github.com/agronholm/anyio/issues/764) <https://github.com/agronholm/anyio/issues/764>_)
• Added the wait_readable() and wait_writable() functions which will accept an object with a .fileno() method or an integer handle, and deprecated their now obsolete versions (wait_socket_readable() and wait_socket_writable()) (PR by @​davidbrochart)
• Changed EventAdapter (an Event with no bound async backend) to allow set() to work even before an async backend is bound to it ([#819](https://github.com/agronholm/anyio/issues/819) <https://github.com/agronholm/anyio/issues/819>_)
• Added support for wait_readable() and wait_writable() on ProactorEventLoop (used on asyncio + Windows by default)
• Fixed a misleading ValueError in the context of DNS failures ([#815](https://github.com/agronholm/anyio/issues/815) <https://github.com/agronholm/anyio/issues/815>_; PR by @​graingert)
• Fixed the return type annotations of readinto() and readinto1() methods in the anyio.AsyncFile class ([#825](https://github.com/agronholm/anyio/issues/825) <https://github.com/agronholm/anyio/issues/825>_)
• Fixed TaskInfo.has_pending_cancellation() on asyncio returning false positives in cleanup code on Python >= 3.11 ([#832](https://github.com/agronholm/anyio/issues/832) <https://github.com/agronholm/anyio/issues/832>_; PR by @​gschaffner)
• Fixed cancelled cancel scopes on asyncio calling asyncio.Task.uncancel when propagating a CancelledError on exit to a cancelled parent scope ([#790](https://github.com/agronholm/anyio/issues/790) <https://github.com/agronholm/anyio/pull/790>_; PR by @​gschaffner)

4.6.2

• Fixed regression caused by ([#807](https://github.com/agronholm/anyio/issues/807) <https://github.com/agronholm/anyio/pull/807>_) that prevented the use of parametrized async fixtures

4.6.1

This release contains all the changes from both v4.5.1 and v4.6.0, plus:

• Fixed TaskGroup and CancelScope producing cyclic references in tracebacks when raising exceptions ([#806](https://github.com/agronholm/anyio/issues/806) <https://github.com/agronholm/anyio/pull/806>_) (PR by @​graingert)

4.6.0

This release is the successor to v4.5.0 with Python 3.8 support dropped, and does not contain the changes from v4.5.1.

• Dropped support for Python 3.8 (as [#698](https://github.com/agronholm/anyio/issues/698) <https://github.com/agronholm/anyio/issues/698>_ cannot be resolved

... (truncated)

Commits

• c967f5c Bumped up the version
• f47ac5e Rearranged changelog entries
• f316ce5 Allowed Event to be set before it's bound to an async backend (#835)
• 93a5746 Fixed asyncio.Task.cancelling issues (#790)
• 39cf394 Avoid exposing extra variables key and value in anyio.abc (#833)
• a2150f5 Fixed design issues in PR template (#834)
• 0f80611 Added support for wait_readable() and wait_writable() on ProactorEventLoop (#...
• 97d5fe6 Made asyncio TaskGroup work with eager task factories (#822)
• 44405f4 Updated downstream test workflows and their target Python versions
• 93c0cd6 Replaced mentions to run_sync_in_process with to_process.run_sync (#829)
• Additional commits viewable in compare view

Updates httpx from 0.28.0 to 0.28.1

Release notes

Sourced from httpx's releases.

Version 0.28.1

0.28.1 (6th December, 2024)

• Fix SSL case where verify=False together with client side certificates.

Changelog

Sourced from httpx's changelog.

0.28.1 (6th December, 2024)

• Fix SSL case where verify=False together with client side certificates.

Commits

• 26d48e0 Version 0.28.1 (#3445)
• 89599a9 Fix verify=False, cert=... case. (#3442)
• 8ecb86f Add test for request params behavior changes (#3364) (#3440)
• 0cb7e5a Bump the python-packages group with 11 updates (#3434)
• 15e21e9 Updating deprecated docstring Client() class (#3426)
• See full diff in compare view

Updates django from 5.1.3 to 5.1.4

Commits

• 2d4add1 [5.1.x] Bumped version for 5.1.4 release.
• 6943d61 [5.1.x] Fixed CVE-2024-53908 -- Prevented SQL injections in direct HasKeyLook...
• bbc74a7 [5.1.x] Fixed CVE-2024-53907 -- Mitigated potential DoS in strip_tags().
• 5b4d949 [5.1.x] Removed question marks from headings in docs/topics/db/fixtures.txt.
• 6e3e735 [5.1.x] Fixed #35950 -- Restored refreshing of relations when fields deferred.
• ee2698d [5.1.x] Removed reference to "removing older versions of Django" in tutorial.
• bed70e2 [5.1.x] Upgraded to Python 3.12, Ubuntu 24.04, and enabled fail_on_warning fo...
• 5f82a5e [5.1.x] Added stub release notes and release date for 5.1.4, 5.0.10, and 4.2.17.
• 4b26240 [5.1.x] Fixed #35942 -- Fixed createsuperuser crash on Python 3.13+ when user...
• 08ac8c1 [5.1.x] Updated maintainers of Django Debug Toolbar to Django Commons.
• Additional commits viewable in compare view

Updates coverage from 7.6.8 to 7.6.9

Changelog

Sourced from coverage's changelog.

Version 7.6.9 — 2024-12-06

• Fix: Tomas Uribe fixed <pull 1901_>_ a performance problem in the XML report. Large code bases should produce XML reports much faster now.

.. _pull 1901: nedbat/coveragepy#1901

.. _changes_7-6-8:

Commits

• daac76d docs: sample HTML for 7.6.9
• f7d7e42 docs: prep for 7.6.9
• 8fe3b2b docs: thanks, Tomas Uribe for #1901
• 346cfc0 fix: use set instead of list for arcs_executed, fixes poor performance (#1901)
• 484678e fix: COVERAGE_ONE_CORE should mean ctrace if possible
• 37451ed chore: make upgrade doc_upgrade
• bd23445 chore: bump the action-dependencies group with 2 updates (#1899)
• 01cf50c test: add a test to satisfy a condition in results.py
• 74d3c50 chore: make upgrade
• f3b269c build: only comment once on an issue mentioned twice
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions