pip prod(deps): bump the pip group with 3 updates

[dependabot]

Bumps the pip group with 3 updates: paramiko, wheel and httpx.

Updates paramiko from 2.11.0 to 3.4.0

Commits

• f0881ba Cut 3.4.0
• 3e4bdf9 Changelog/comment updates
• 30b447b Linting
• 33508c9 Expand MessageOrderError use to handle more packet types
• 96db1e2 Raise exception when sequence numbers rollover during initial kex
• 58785d2 Changelog tweak re: other new Transport kwarg
• 8dcb237 Test-suite-only bugfix: defer did not actually imply skip_verify
• fa46de7 Reset sequence numbers on rekey
• 75e311d Enforce zero seqno on kexinit
• 73f079f Fill in CVE number for Terrapin attack
• Additional commits viewable in compare view

Updates wheel from 0.37.1 to 0.38.1

Changelog

Sourced from wheel's changelog.

Release Notes

0.43.0 (2024-03-11)

• Dropped support for Python 3.7
• Updated vendored packaging to 24.0

0.42.0 (2023-11-26)

• Allowed removing build tag with wheel tags --build ""
• Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them
• Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF
• Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3 (2023-10-30)

• Updated vendored packaging to 23.2
• Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)

0.41.2 (2023-08-22)

• Fixed platform tag detection for GraalPy and 32-bit python running on an aarch64 kernel (PR by Matthieu Darbois)
• Fixed wheel tags to not list directories in RECORD files (PR by Mike Taves)
• Fixed ABI tag generation for GraalPy (PR by Michael Simacek)

0.41.1 (2023-08-05)

• Fixed naming of the data_dir directory in the presence of local version segment given via egg_info.tag_build (PR by Anderson Bravalheri)
• Fixed version specifiers in Requires-Dist being wrapped in parentheses

0.41.0 (2023-07-22)

• Added full support of the build tag syntax to wheel tags (you can now set a build tag like 123mytag)
• Fixed warning on Python 3.12 about onerror deprecation. (PR by Henry Schreiner)
• Support testing on Python 3.12 betas (PR by Ewout ter Hoeven)

0.40.0 (2023-03-14)

• Added a wheel tags command to modify tags on an existing wheel (PR by Henry Schreiner)
• Updated vendored packaging to 23.0
• wheel unpack now preserves the executable attribute of extracted files

... (truncated)

Commits

• 6f1608d Created a new release
• cf8f5ef Moved news item from PR #484 to its proper place
• 9ec2016 Removed install dependency on setuptools (#483)
• 747e1f6 Fixed PyPy SOABI parsing (#484)
• 7627548 [pre-commit.ci] pre-commit autoupdate (#480)
• 7b9e8e1 Test on Python 3.11 final
• a04dfef Updated the pypi-publish action
• 94bb62c Fixed docs not building due to code style changes
• d635664 Updated the codecov action to the latest version
• fcb94cd Updated version to match the release
• Additional commits viewable in compare view

Updates httpx from 0.22.0 to 0.23.0

Release notes

Sourced from httpx's releases.

Version 0.23.0

0.23.0 (23rd May, 2022)

Changed

• Drop support for Python 3.6. (#2097)
• Use utf-8 as the default character set, instead of falling back to charset-normalizer for auto-detection. To enable automatic character set detection, see the documentation. (#2165)

Fixed

• Fix URL.copy_with for some oddly formed URL cases. (#2185)
• Digest authentication should use case-insensitive comparison for determining which algorithm is being used. (#2204)
• Fix console markup escaping in command line client. (#1866)
• When files are used in multipart upload, ensure we always seek to the start of the file. (#2065)
• Ensure that iter_bytes never yields zero-length chunks. (#2068)
• Preserve Authorization header for redirects that are to the same origin, but are an http-to-https upgrade. (#2074)
• When responses have binary output, don't print the output to the console in the command line client. Use output like <16086 bytes of binary data> instead. (#2076)
• Fix display of --proxies argument in the command line client help. (#2125)
• Close responses when task cancellations occur during stream reading. (#2156)
• Fix type error on accessing .request on HTTPError exceptions. (#2158)

Changelog

Sourced from httpx's changelog.

0.23.0 (23rd May, 2022)

Changed

• Drop support for Python 3.6. (#2097)
• Use utf-8 as the default character set, instead of falling back to charset-normalizer for auto-detection. To enable automatic character set detection, see the documentation. (#2165)

Fixed

• Fix URL.copy_with for some oddly formed URL cases. (#2185)
• Digest authentication should use case-insensitive comparison for determining which algorithm is being used. (#2204)
• Fix console markup escaping in command line client. (#1866)
• When files are used in multipart upload, ensure we always seek to the start of the file. (#2065)
• Ensure that iter_bytes never yields zero-length chunks. (#2068)
• Preserve Authorization header for redirects that are to the same origin, but are an http-to-https upgrade. (#2074)
• When responses have binary output, don't print the output to the console in the command line client. Use output like <16086 bytes of binary data> instead. (#2076)
• Fix display of --proxies argument in the command line client help. (#2125)
• Close responses when task cancellations occur during stream reading. (#2156)
• Fix type error on accessing .request on HTTPError exceptions. (#2158)

Commits

• 89cdd90 Version 0.23.0 (#2214)
• 1c33a28 Make charset auto-detection optional. (#2165)
• 940d61b Removed curio from async.md (#2240)
• 14a1704 Switch to explicit typing.Optional throughout (#2096)
• 9673a35 Drop async_generator requirement (#2228)
• 5eba32a Remove RequestBodyUnavailable from module docstring (#2226)
• 6f31bc4 Bump mkdocs-material from 8.1.4 to 8.2.14 (#2218)
• c5eb4b8 Bump cryptography from 36.0.2 to 37.0.2 (#2217)
• 1a526cf Bump actions/checkout from 2 to 3 (#2216)
• 7a53543 Bump actions/setup-python from 1 to 3 (#2215)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.