Bump cherry-picker from 2.2.0 to 2.4.0 (#10256)

Bumps [cherry-picker](https://github.com/python/cherry-picker) from
2.2.0 to 2.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/python/cherry-picker/releases">cherry-picker's
releases</a>.</em></p>
<blockquote>
<h2>cherry-picker-v2.4.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>Add support for Python 3.14 by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/145">python/cherry-picker#145</a></li>
<li>Allow passing a base branch that doesn't have version info by <a
href="https://github.com/Jackenmen"><code>@​Jackenmen</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/70">python/cherry-picker#70</a></li>
<li>Generate <code>__version__</code> at build to avoid slow
<code>importlib.metadata</code> import by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/141">python/cherry-picker#141</a></li>
<li>PyPI metatada: re-add description by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/140">python/cherry-picker#140</a></li>
<li>Remove outdated README info by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/143">python/cherry-picker#143</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/python/cherry-picker/compare/cherry-picker-v2.3.0...cherry-picker-v2.4.0">https://github.com/python/cherry-picker/compare/cherry-picker-v2.3.0...cherry-picker-v2.4.0</a></p>
<h2>cherry-picker v2.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add Python 3.13 to the testing matrix by <a
href="https://github.com/ezio-melotti"><code>@​ezio-melotti</code></a>
in <a
href="https://redirect.github.com/python/cherry-picker/pull/127">python/cherry-picker#127</a>
<ul>
<li>Add Trove classifier for Python 3.13 by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/134">python/cherry-picker#134</a></li>
</ul>
</li>
<li>Drop support for Python 3.8 by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/133">python/cherry-picker#133</a>
<ul>
<li>Update minimum Python version to 3.9 in the configuration by <a
href="https://github.com/OlenaYefymenko"><code>@​OlenaYefymenko</code></a>
in <a
href="https://redirect.github.com/python/cherry-picker/pull/137">python/cherry-picker#137</a></li>
</ul>
</li>
<li>Resolve usernames when the remote ends with a trailing slash by <a
href="https://github.com/AA-Turner"><code>@​AA-Turner</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/110">python/cherry-picker#110</a></li>
<li>Optimize <code>validate_sha()</code> with <code>--max-count=1</code>
by <a href="https://github.com/aloisklink"><code>@​aloisklink</code></a>
in <a
href="https://redirect.github.com/python/cherry-picker/pull/111">python/cherry-picker#111</a></li>
<li>Make # replacing more strict by <a
href="https://github.com/serhiy-storchaka"><code>@​serhiy-storchaka</code></a>
in <a
href="https://redirect.github.com/python/cherry-picker/pull/115">python/cherry-picker#115</a></li>
<li>Remove multiple commit prefixes by <a
href="https://github.com/serhiy-storchaka"><code>@​serhiy-storchaka</code></a>
in <a
href="https://redirect.github.com/python/cherry-picker/pull/118">python/cherry-picker#118</a></li>
<li>Handle whitespace when calculating usernames by <a
href="https://github.com/AA-Turner"><code>@​AA-Turner</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/132">python/cherry-picker#132</a></li>
<li>Generate digital attestations for PyPI (PEP 740) by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/135">python/cherry-picker#135</a></li>
<li>Publish to PyPI using Trusted Publishers by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/94">python/cherry-picker#94</a></li>
<li>Fetch tags so hatch-vcs can set the version number by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/95">python/cherry-picker#95</a></li>
<li>Add release checklist by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/98">python/cherry-picker#98</a>
<ul>
<li>Fix Markdown links by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/101">python/cherry-picker#101</a></li>
</ul>
</li>
<li>Move changelog to own file by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/104">python/cherry-picker#104</a></li>
<li>Add GHA ecosystem to <code>dependabot.yml</code>. by <a
href="https://github.com/ezio-melotti"><code>@​ezio-melotti</code></a>
in <a
href="https://redirect.github.com/python/cherry-picker/pull/103">python/cherry-picker#103</a></li>
<li>Fix CI: ignore CVE-2023-5752 by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/102">python/cherry-picker#102</a>
<ul>
<li>Revert <a
href="https://redirect.github.com/python/cherry-picker/issues/102">#102</a>
after upstream fix by <a
href="https://github.com/ezio-melotti"><code>@​ezio-melotti</code></a>
in <a
href="https://redirect.github.com/python/cherry-picker/pull/126">python/cherry-picker#126</a></li>
</ul>
</li>
<li>Lint on GitHub Actions via pre-commit by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/93">python/cherry-picker#93</a></li>
<li>Convert README to Markdown by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/python/cherry-picker/pull/125">python/cherry-picker#125</a></li>
<li>Ignore Jinja2 CVE warning in <code>safety</code> dep by <a
href="https://github.com/ezio-melotti"><code>@​ezio-melotti</code></a>
in <a
href="https://redirect.github.com/python/cherry-picker/pull/129">python/cherry-picker#129</a></li>
<li>Remove <code>setuptools</code> installation for <code>safety</code>
3 by <a
href="https://github.com/ezio-melotti"><code>@​ezio-melotti</code></a>
in <a
href="https://redirect.github.com/python/cherry-picker/pull/128">python/cherry-picker#128</a></li>
<li>Update actions/download-artifact to v4 in deploy.yml. by <a
href="https://github.com/ezio-melotti"><code>@​ezio-melotti</code></a>
in <a
href="https://redirect.github.com/python/cherry-picker/pull/131">python/cherry-picker#131</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/ezio-melotti"><code>@​ezio-melotti</code></a>
made their first contribution in <a
href="https://redirect.github.com/python/cherry-picker/pull/103">python/cherry-picker#103</a></li>
<li><a href="https://github.com/AA-Turner"><code>@​AA-Turner</code></a>
made their first contribution in <a
href="https://redirect.github.com/python/cherry-picker/pull/110">python/cherry-picker#110</a></li>
<li><a
href="https://github.com/aloisklink"><code>@​aloisklink</code></a> made
their first contribution in <a
href="https://redirect.github.com/python/cherry-picker/pull/111">python/cherry-picker#111</a></li>
<li><a
href="https://github.com/serhiy-storchaka"><code>@​serhiy-storchaka</code></a>
made their first contribution in <a
href="https://redirect.github.com/python/cherry-picker/pull/115">python/cherry-picker#115</a></li>
<li><a
href="https://github.com/OlenaYefymenko"><code>@​OlenaYefymenko</code></a>
made their first contribution in <a
href="https://redirect.github.com/python/cherry-picker/pull/137">python/cherry-picker#137</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/python/cherry-picker/compare/cherry-picker-v2.0.0...cherry-picker-v2.3.0">https://github.com/python/cherry-picker/compare/cherry-picker-v2.0.0...cherry-picker-v2.3.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/python/cherry-picker/blob/main/CHANGELOG.md">cherry-picker's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.0</h2>
<ul>
<li>Add support for Python 3.14 (<a
href="https://redirect.github.com/python/cherry-picker/pull/145">PR
145</a></li>
<li>Allow passing a base branch that doesn't have version info
(<a href="https://redirect.github.com/python/cherry-picker/pull/70">PR
70</a>
<ul>
<li>This makes cherry-picker useful for projects other than CPython that
don't
have versioned branch names.</li>
</ul>
</li>
</ul>
<h2>2.3.0</h2>
<ul>
<li>Add support for Python 3.13
(<a href="https://redirect.github.com/python/cherry-picker/pull/127">PR
127</a>,
<a href="https://redirect.github.com/python/cherry-picker/pull/134">PR
134</a>)</li>
<li>Drop support for EOL Python 3.8
(<a href="https://redirect.github.com/python/cherry-picker/pull/133">PR
133</a>,
<a href="https://redirect.github.com/python/cherry-picker/pull/137">PR
137</a>)</li>
<li>Resolve usernames when the remote ends with a trailing slash (<a
href="https://redirect.github.com/python/cherry-picker/pull/110">PR
110</a>)</li>
<li>Optimize <code>validate_sha()</code> with <code>--max-count=1</code>
(<a href="https://redirect.github.com/python/cherry-picker/pull/111">PR
111</a>)</li>
<li>Make # replacing more strict (<a
href="https://redirect.github.com/python/cherry-picker/pull/115">PR
115</a>)</li>
<li>Remove multiple commit prefixes (<a
href="https://redirect.github.com/python/cherry-picker/pull/118">PR
118</a>)</li>
<li>Handle whitespace when calculating usernames (<a
href="https://redirect.github.com/python/cherry-picker/pull/132">PR
132</a>)</li>
<li>Publish to PyPI using Trusted Publishers (<a
href="https://redirect.github.com/python/cherry-picker/pull/94">PR
94</a>)</li>
<li>Generate digital attestations for PyPI (<a
href="https://peps.python.org/pep-0740/">PEP 740</a>)
(<a href="https://redirect.github.com/python/cherry-picker/pull/135">PR
135</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/python/cherry-picker/commit/34d27ebfaec3cdacd8668f63bdfebb43bcf58d65"><code>34d27eb</code></a>
Update changelog for 2.4.0 (<a
href="https://redirect.github.com/python/cherry-picker/issues/146">#146</a>)</li>
<li><a
href="https://github.com/python/cherry-picker/commit/c81925c40294caef500dcab322777eb6e736055f"><code>c81925c</code></a>
Add support for Python 3.14 (<a
href="https://redirect.github.com/python/cherry-picker/issues/145">#145</a>)</li>
<li><a
href="https://github.com/python/cherry-picker/commit/940787a84e15a622e56ca61a3b6c7c81a86e6e17"><code>940787a</code></a>
Allow passing a base branch that doesn't have version info (<a
href="https://redirect.github.com/python/cherry-picker/issues/70">#70</a>)</li>
<li><a
href="https://github.com/python/cherry-picker/commit/a1552fb35a073b0789bf4f0efb1714f302953c3a"><code>a1552fb</code></a>
Remove outdated README info (<a
href="https://redirect.github.com/python/cherry-picker/issues/143">#143</a>)</li>
<li><a
href="https://github.com/python/cherry-picker/commit/7721133ef148db8a5d6787fd1920a80587d2607b"><code>7721133</code></a>
PyPI metatada: re-add description (<a
href="https://redirect.github.com/python/cherry-picker/issues/140">#140</a>)</li>
<li><a
href="https://github.com/python/cherry-picker/commit/a7d1d0de9d5bcf1461aaae45c28ea8ffa6dfc949"><code>a7d1d0d</code></a>
Generate <code>__version__</code> at build to avoid slow
<code>importlib.metadata</code> import (<a
href="https://redirect.github.com/python/cherry-picker/issues/141">#141</a>)</li>
<li><a
href="https://github.com/python/cherry-picker/commit/71490d0ded27a1dabfacc11ad763fa636e470819"><code>71490d0</code></a>
Exclude bots from generated release notes (<a
href="https://redirect.github.com/python/cherry-picker/issues/139">#139</a>)</li>
<li><a
href="https://github.com/python/cherry-picker/commit/52565cb447f0416a0cc51522a5bea64ec396e323"><code>52565cb</code></a>
Update changelog for 2.3.0 (<a
href="https://redirect.github.com/python/cherry-picker/issues/138">#138</a>)</li>
<li><a
href="https://github.com/python/cherry-picker/commit/7fdaa0846ec6fca37f7778109778dbdb3b66d68c"><code>7fdaa08</code></a>
Update minimum Python version to 3.9 in the configuration (<a
href="https://redirect.github.com/python/cherry-picker/issues/137">#137</a>)</li>
<li><a
href="https://github.com/python/cherry-picker/commit/e2540afb076226e667b832c7c4b5d4669e0fd1af"><code>e2540af</code></a>
Generate digital attestations for PyPI (PEP 740) (<a
href="https://redirect.github.com/python/cherry-picker/issues/135">#135</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python/cherry-picker/compare/cherry-picker-v2.2.0...cherry-picker-v2.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cherry-picker&package-manager=pip&previous-version=2.2.0&new-version=2.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

requirements/constraints.txt

@@ -41,7 +41,7 @@ cfgv==3.4.0
     # via pre-commit
 charset-normalizer==3.4.1
     # via requests
-cherry-picker==2.2.0
+cherry-picker==2.4.0
     # via -r requirements/dev.in
 click==8.1.8
     # via

requirements/dev.txt

@@ -41,7 +41,7 @@ cfgv==3.4.0
     # via pre-commit
 charset-normalizer==3.4.1
     # via requests
-cherry-picker==2.2.0
+cherry-picker==2.4.0
     # via -r requirements/dev.in
 click==8.1.8
     # via