Update marshmallow requirement from <4,>=3.19.0 to >=3.19.0,<5 (#1210)

Updates the requirements on
[marshmallow](https://github.com/marshmallow-code/marshmallow) to permit
the latest version.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst">marshmallow's
changelog</a>.</em></p>
<blockquote>
<p>4.0.0 (2025-04-16)</p>
<hr />
<p>See :ref:<code>upgrading_4_0</code> for a guide on updating your
code.</p>
<p>Features:</p>
<ul>
<li>Typing: Add types to all <code>Field
&lt;marshmallow.fields.Field&gt;</code> constructor kwargs
(:issue:<code>2285</code>).
Thanks :user:<code>navignaw</code> for the suggestion.</li>
<li><code>DateTime &lt;marshmallow.fields.DateTime&gt;</code>,
<code>Date &lt;marshmallow.fields.Date&gt;</code>, <code>Time
&lt;marshmallow.fields.Time&gt;</code>,
<code>TimeDelta &lt;marshmallow.fields.TimeDelta&gt;</code>, and
<code>Enum &lt;marshmallow.fields.Enum&gt;</code>
accept their internal value types as valid input
(:issue:<code>1415</code>).
Thanks :user:<code>bitdancer</code> for the suggestion.</li>
<li><code>@validates &lt;marshmallow.validates&gt;</code> accepts
multiple field names (:issue:<code>1960</code>).
<em>Backwards-incompatible</em>: Decorated methods now receive
<code>data_key</code> as a keyword argument.
Thanks :user:<code>dpriskorn</code> for the suggestion and
:user:<code>dharani7998</code> for the PR.</li>
</ul>
<p>Other changes:</p>
<ul>
<li>
<p>Typing: <code>Field &lt;marshmallow.fields.Field&gt;</code> is now a
generic type with a type argument for the internal value type.</p>
</li>
<li>
<p><code>marshmallow.fields.UUID</code> no longer subclasses
<code>marshmallow.fields.String</code>.</p>
</li>
<li>
<p><code>marshmallow.Schema.load</code> no longer silently fails to call
schema validators when a generator is passed (:issue:<code>1898</code>).
The typing of <code>data</code> is also updated to be more accurate.
Thanks :user:<code>ziplokk1</code> for reporting.</p>
</li>
<li>
<p><em>Backwards-incompatible</em>: Use
<code>datetime.date.fromisoformat</code>,
<code>datetime.time.fromisoformat</code>, and
<code>datetime.datetime.fromisoformat</code> from the standard library
to deserialize dates, times and datetimes (:pr:<code>2078</code>).
As a consequence of this change:</p>
<ul>
<li>Time with time offsets are now supported.</li>
<li>YYYY-MM-DD is now accepted as a datetime and deserialized as naive
00:00 AM.</li>
<li><code>from_iso_date</code>, <code>from_iso_time</code> and
<code>from_iso_datetime</code> are removed from
<code>marshmallow.utils</code>.</li>
</ul>
</li>
<li>
<p>Remove <code>isoformat</code>, <code>to_iso_time</code> and
<code>to_iso_datetime</code> from <code>marshmallow.utils</code>
(:pr:<code>2766</code>).</p>
</li>
<li>
<p>Remove <code>from_rfc</code>, and <code>rfcformat</code> from
<code>marshmallow.utils</code> (:pr:<code>2767</code>).</p>
</li>
<li>
<p>Remove <code>is_keyed_tuple</code> from
<code>marshmallow.utils</code> (:pr:<code>2768</code>).</p>
</li>
<li>
<p>Remove <code>get_fixed_timezone</code> from
<code>marshmallow.utils</code> (:pr:<code>2773</code>).</p>
</li>
<li>
<p><em>Backwards-incompatible</em>:
<code>marshmallow.fields.Boolean</code> no longer serializes non-boolean
values (:pr:<code>2725</code>).</p>
</li>
<li>
<p><em>Backwards-incompatible</em>: Rename <code>schema</code> parameter
to <code>parent</code> in
<code>marshmallow.fields.Field._bind_to_schema</code>
(:issue:<code>1360</code>).</p>
</li>
<li>
<p><em>Backwards-incompatible</em>: Rename <code>pass_many</code>
parameter to <code>pass_collection</code> in pre/post processing methods
(:issue:<code>1369</code>).</p>
</li>
<li>
<p><em>Backwards-incompatible</em>:
<code>marshmallow.fields.TimeDelta</code> no longer truncates float
values when
deserializing (:pr:<code>2654</code>). This allows microseconds to be
preserved, e.g.</p>
</li>
</ul>
<p>.. code-block:: python</p>
<pre><code>from marshmallow import fields
<p>field = fields.TimeDelta()</p>
<h1>Before</h1>
<p>field.deserialize(12.9)
datetime.timedelta(seconds=12)</p>
<h1>datetime.timedelta(seconds=12)</h1>
<p></code></pre></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/marshmallow-code/marshmallow/commit/84b15960272c16525c945ae99749e505310612a9"><code>84b1596</code></a>
Bump version and update changelog</li>
<li><a
href="https://github.com/marshmallow-code/marshmallow/commit/a715b9e4bde6c46769e8819faa21649ebec937b6"><code>a715b9e</code></a>
Bump sphinx-issues from 5.0.0 to 5.0.1 (<a
href="https://redirect.github.com/marshmallow-code/marshmallow/issues/2819">#2819</a>)</li>
<li><a
href="https://github.com/marshmallow-code/marshmallow/commit/5c136b11f90f130d321ee2985bb7aaa764258fb9"><code>5c136b1</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/marshmallow-code/marshmallow/issues/2817">#2817</a>)</li>
<li><a
href="https://github.com/marshmallow-code/marshmallow/commit/df1daf03fa79aae61f8aaa85de2a16f1ff63a0de"><code>df1daf0</code></a>
Bump sphinxext-opengraph from 0.9.1 to 0.10.0 (<a
href="https://redirect.github.com/marshmallow-code/marshmallow/issues/2818">#2818</a>)</li>
<li><a
href="https://github.com/marshmallow-code/marshmallow/commit/2fc8207da9cf0cf1d9b9b4ab76d4d0478b588325"><code>2fc8207</code></a>
<a href="https://github.com/validates"><code>@​validates</code></a>
accepts multiple field names (<a
href="https://redirect.github.com/marshmallow-code/marshmallow/issues/1965">#1965</a>)</li>
<li><a
href="https://github.com/marshmallow-code/marshmallow/commit/b7026f3b2622cffc981588b647526fa9525f063d"><code>b7026f3</code></a>
Bump sphinx from 8.1.3 to 8.2.3</li>
<li><a
href="https://github.com/marshmallow-code/marshmallow/commit/c495e525aeff224bf14c2996f5aecf84e4a1ed5b"><code>c495e52</code></a>
[pre-commit.ci] pre-commit autoupdate</li>
<li><a
href="https://github.com/marshmallow-code/marshmallow/commit/f0c6afb430a6d032300658c898752d6c7732b188"><code>f0c6afb</code></a>
Add missing fields to <strong>all</strong> (<a
href="https://redirect.github.com/marshmallow-code/marshmallow/issues/2809">#2809</a>)</li>
<li><a
href="https://github.com/marshmallow-code/marshmallow/commit/ef06fbe2e51ab6f1626c758098d4fc6ecdd8368a"><code>ef06fbe</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/marshmallow-code/marshmallow/issues/2808">#2808</a>)</li>
<li><a
href="https://github.com/marshmallow-code/marshmallow/commit/ffedbfee649d96fad7393a9cdf5ceb5118965631"><code>ffedbfe</code></a>
Merge branch '3.x-line' into dev</li>
<li>Additional commits viewable in <a
href="https://github.com/marshmallow-code/marshmallow/compare/3.19.0...4.0.0">compare
view</a></li>
</ul>
</details>
<br />

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Author: llucax

pyproject.toml

@@ -35,7 +35,7 @@ dependencies = [
   "networkx >= 2.8, < 4",
   "numpy >= 1.26.4, < 2",
   "typing_extensions >= 4.6.1, < 5",
-  "marshmallow >= 3.19.0, < 4",
+  "marshmallow >= 3.19.0, < 5",
   "marshmallow_dataclass >= 8.7.1, < 9",
 ]
 dynamic = ["version"]