Bump the pip-packages group with 4 updates

[dependabot]

Updates the requirements on flake8, pyright, prometheus-client and werkzeug to permit the latest version.
Updates flake8 from 6.1.0 to 7.0.0

Commits

• 88a4f9b Release 7.0.0
• 6f3a60d Merge pull request #1906 from PyCQA/upgrade-pyflakes
• cde8570 upgrade pyflakes to 3.2.x
• 2ab9d76 Merge pull request #1903 from PyCQA/pre-commit-ci-update-config
• e27611f [pre-commit.ci] pre-commit autoupdate
• 9d20be1 Merge pull request #1902 from PyCQA/pre-commit-ci-update-config
• 06c1503 [pre-commit.ci] auto fixes from pre-commit.com hooks
• b67ce03 Fix bugbear lints
• c8801c1 [pre-commit.ci] pre-commit autoupdate
• 045f297 Merge pull request #1893 from PyCQA/pre-commit-ci-update-config
• Additional commits viewable in compare view

Updates pyright from 1.1.325 to 1.1.345

Commits

• a13a839 [pyright updated to 1.1.345] Update Version (#244)
• 2186adf Pyright NPM Package update to 1.1.344 (#243)
• 42959f4 Pyright NPM Package update to 1.1.343 (#242)
• 259aa25 [pyright updated to 1.1.342] Update Version (#241)
• c19f1dc [pyright updated to 1.1.341] Update Version (#240)
• 42efa09 Pyright NPM Package update to 1.1.340 (#238)
• 4ac5fab Pyright NPM Package update to 1.1.339 (#237)
• d046635 [pyright updated to 1.1.338] Update Version (#236)
• 75e8293 Add PYRIGHT_PYTHON_PYLANCE_VERSION option (#230)
• 221f037 Pyright NPM Package update to 1.1.337 (#234)
• Additional commits viewable in compare view

Updates prometheus-client from 0.17.1 to 0.19.0

Release notes

Sourced from prometheus-client's releases.

0.19.0 / 2023-11-20

What's Changed

[FEATURE] support HTTPS/TLS in start_http_server. #946 [BUGFIX] fix: error in determining timestamp less than. #979

0.18.0 / 2023-10-30

[CHANGE] Remove support for Python versions < 3.8. #936 [FEATURE] Add mostrecent aggregation to Gauge. #967 [ENHANCEMENT] Typing improvements. #935, #970 [ENHANCEMENT] Allow enabling or disabling _created metrics from code. #973 [BUGFIX] Change #!/usr/bin/python to #!/usr/bin/env python in remaining places. #945

Commits

• 2dcd17e Release 0.19.0
• d8306b7 Merge pull request #980 from prometheus/fix-doc-site-build
• 2fcdfa6 Remove public/api check copied from client_java
• dc14069 Add documentation site (#974)
• fae24b7 Merge pull request #979 from weidongkl/master
• da8d29d fix: error in determining timestamp less than
• 3d78630 support HTTPS/TLS. (#946)
• a000193 Release 0.18.0
• ea78128 Allow enabling/disabling _created metrics from code (#973)
• 546599b Add mostrecent aggregation to Gauge (#967)
• Additional commits viewable in compare view

Updates werkzeug to 2.3.8

Release notes

Sourced from werkzeug's releases.

2.3.8

This is a security release for the 2.3.x feature branch.

• Changes: https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-8

Changelog

Sourced from werkzeug's changelog.

Version 2.3.8

Released 2023-11-08

• Fix slow multipart parsing for large parts potentially enabling DoS attacks. :cwe:CWE-407

Version 2.3.7

Released 2023-08-14

• Use flit_core instead of setuptools as build backend.
• Fix parsing of multipart bodies. :issue:2734
• Adjust index of last newline in data start. :issue:2761
• Parsing ints from header values strips spacing first. :issue:2734
• Fix empty file streaming when testing. :issue:2740
• Clearer error message when URL rule does not start with slash. :pr:2750
• Accept q value can be a float without a decimal part. :issue:2751

Version 2.3.6

Released 2023-06-08

• FileStorage.content_length does not fail if the form data did not provide a value. :issue:2726

Version 2.3.5

Released 2023-06-07

• Python 3.12 compatibility. :issue:2704
• Fix handling of invalid base64 values in Authorization.from_header. :issue:2717
• The debugger escapes the exception message in the page title. :pr:2719
• When binding routing.Map, a long IDNA server_name with a port does not fail encoding. :issue:2700
• iri_to_uri shows a deprecation warning instead of an error when passing bytes. :issue:2708
• When parsing numbers in HTTP request headers such as Content-Length, only ASCII digits are accepted rather than any format that Python's int and float accept. :issue:2716

Version 2.3.4

... (truncated)

Commits

• dc90943 Release version 2.3.8
• f230020 Fix: slow multipart parsing for huge files with few CR/LF characters
• 26f3e95 reformat lines
• 828bab4 Start version 2.3.8
• 3c2ba3d Release version 2.3.7
• ac9974c Fix qvalue parsing (#2753)
• 88f4ed6 qvalue parsing accepts float without decimal
• dd1f137 Fix: Improve Error Message (#2750)
• fdc295a clearer url rule slash error
• a0f4bf4 fix: improve error message
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions