Add python packages cbor2 and pyhpke to third party tools

[xtlsheep]

Add new python packages cbor2 and pyhpke to tools/third_party for Google Chrome WPT support. This change is based on the discussion of web-platform-tests/rfcs#208.

Note for cbor2, the imported version is release 5.6.5 which is the last version to support python 3.8 in Web Platform Tests.

cbor2: https://github.com/agronholm/cbor2
pyhpke: https://github.com/dajiaji/pyhpke

[gsnedders]

• Use typing.Mapping instead of collections.abc.Mapping for class FrozenDictin in tools/third_party/cbor2/cbor2/_types.py to avoid python version error.

What error are you avoiding by doing that? Both typing.Mapping and collections.abc.Mapping should exist in Python 3.8 and later.

[xtlsheep]

• Use typing.Mapping instead of collections.abc.Mapping for class FrozenDictin in tools/third_party/cbor2/cbor2/_types.py to avoid python version error.

What error are you avoiding by doing that? Both typing.Mapping and collections.abc.Mapping should exist in Python 3.8 and later.

I got this error:

TypeError: 'ABCMeta' object is not subscriptable

[gsnedders]

Oh, right.

agronholm/cbor2@d9cee77 made the change here to drop Python 3.8 support, but that commit doesn't appear in any release. Is there a reason why we're pulling in the current master branch rather than an actual release?

Relatedly, can you please add to the commit message what versions are being imported, such that anyone in the future could replicate this?

[xtlsheep]

Oh, right.

agronholm/cbor2@d9cee77 made the change here to drop Python 3.8 support, but that commit doesn't appear in any release. Is there a reason why we're pulling in the current master branch rather than an actual release?

Relatedly, can you please add to the commit message what versions are being imported, such that anyone in the future could replicate this?

Good point, are you suggesting that I should import the version which still supports python 3.8?

[xtlsheep]

Oh, right.

agronholm/cbor2@d9cee77 made the change here to drop Python 3.8 support, but that commit doesn't appear in any release. Is there a reason why we're pulling in the current master branch rather than an actual release?

Relatedly, can you please add to the commit message what versions are being imported, such that anyone in the future could replicate this?

Revert cbor2 to release 5.6.5 and I have verified that this version works well with WPT.

[WeizhongX]

@gsnedders is your question all addressed? can you pls approve this one?