[renovate] Update Python dependencies (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
certifi	==2024.12.14 -> ==2025.1.31
markupsafe (changelog)	==2.1.5 -> ==3.0.2
pyOpenSSL (source)	24.3.0 -> 25.0.0
pytest-cov (changelog)	5.0.0 -> 6.0.0

---

Release Notes

certifi/python-certifi (certifi)

v2025.1.31

Compare Source

pallets/markupsafe (markupsafe)

v3.0.2

Compare Source

Released 2024-10-18

• Fix compatibility when __str__ returns a str subclass. :issue:472
• Build requires setuptools >= 70.1. :issue:475

v3.0.1

Compare Source

Released 2024-10-08

• Address compiler warnings that became errors in GCC 14. :issue:466
• Fix compatibility with proxy objects. :issue:467

v3.0.0

Compare Source

Released 2024-10-07

• Support Python 3.13 and its experimental free-threaded build. :pr:461
• Drop support for Python 3.7 and 3.8.
• Use modern packaging metadata with pyproject.toml instead of setup.cfg.
  :pr:348
• Change distutils imports to setuptools. :pr:399
• Use deferred evaluation of annotations. :pr:400
• Update signatures for Markup methods to match str signatures. Use
  positional-only arguments. :pr:400
• Some str methods on Markup no longer escape their argument:
  strip, lstrip, rstrip, removeprefix, removesuffix,
  partition, and rpartition; replace only escapes its new
  argument. These methods are conceptually linked to search methods such as
  in, find, and index, which already do not escape their argument.
  :issue:401
• The __version__ attribute is deprecated. Use feature detection, or
  importlib.metadata.version("markupsafe"), instead. :pr:402
• Speed up escaping plain strings by 40%. :pr:434
• Simplify speedups implementation. :pr:437

pyca/pyopenssl (pyOpenSSL)

v25.0.0

Compare Source

Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Deprecations:
^^^^^^^^^^^^^

Changes:
^^^^^^^^

• Corrected type annotations on Context.set_alpn_select_callback, Context.set_session_cache_mode, Context.set_options, Context.set_mode, X509.subject_name_hash, and X509Store.load_locations.
• Deprecated APIs are now marked using warnings.deprecated. mypy will emit deprecation notices for them when used with --enable-error-code deprecated.

pytest-dev/pytest-cov (pytest-cov)

v6.0.0

Compare Source

• Updated various documentation inaccuracies, especially on subprocess handling.
• Changed fail under checks to use the precision set in the coverage configuration.
  Now it will perform the check just like coverage report would.
• Added a --cov-precision cli option that can override the value set in your coverage configuration.
• Dropped support for now EOL Python 3.8.

---

Configuration

📅 Schedule: Branch creation - "after 1am and before 2am on saturday" in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.