Update dependency pyOpenSSL to v25 (#2013)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [pyOpenSSL](https://pyopenssl.org/)
([source](https://redirect.github.com/pyca/pyopenssl)) | major |
`==23.3.0` -> `==25.0.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pyca/pyopenssl (pyOpenSSL)</summary>

###
[`v25.0.0`](https://redirect.github.com/pyca/pyopenssl/blob/HEAD/CHANGELOG.rst#2500-2025-01-12)

[Compare
Source](https://redirect.github.com/pyca/pyopenssl/compare/24.3.0...25.0.0)

Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Deprecations:
^^^^^^^^^^^^^

Changes:
^^^^^^^^

- Corrected type annotations on `Context.set_alpn_select_callback`,
`Context.set_session_cache_mode`, `Context.set_options`,
`Context.set_mode`, `X509.subject_name_hash`, and
`X509Store.load_locations`.
- Deprecated APIs are now marked using `warnings.deprecated`. `mypy`
will emit deprecation notices for them when used with
`--enable-error-code deprecated`.

###
[`v24.3.0`](https://redirect.github.com/pyca/pyopenssl/blob/HEAD/CHANGELOG.rst#2430-2024-11-27)

[Compare
Source](https://redirect.github.com/pyca/pyopenssl/compare/24.2.1...24.3.0)

Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- Removed the deprecated `OpenSSL.crypto.CRL`, `OpenSSL.crypto.Revoked`,
`OpenSSL.crypto.dump_crl`, and `OpenSSL.crypto.load_crl`.
`cryptography.x509`'s CRL functionality should be used instead.
- Removed the deprecated `OpenSSL.crypto.sign` and
`OpenSSL.crypto.verify`. `cryptography.hazmat.primitives.asymmetric`'s
signature APIs should be used instead.

Deprecations:
^^^^^^^^^^^^^

- Deprecated `OpenSSL.rand` - callers should use `os.urandom()` instead.
- Deprecated `add_extensions` and `get_extensions` on
`OpenSSL.crypto.X509Req` and `OpenSSL.crypto.X509`. These should have
been deprecated at the same time `X509Extension` was. Users should use
pyca/cryptography's X.509 APIs instead.
- Deprecated `OpenSSL.crypto.get_elliptic_curves` and
`OpenSSL.crypto.get_elliptic_curve`, as well as passing the reult of
them to `OpenSSL.SSL.Context.set_tmp_ecdh`, users should instead pass
curves from `cryptography`.
- Deprecated passing `X509` objects to
`OpenSSL.SSL.Context.use_certificate`,
`OpenSSL.SSL.Connection.use_certificate`,
`OpenSSL.SSL.Context.add_extra_chain_cert`, and
`OpenSSL.SSL.Context.add_client_ca`, users should instead pass
`cryptography.x509.Certificate` instances. This is in preparation for
deprecating pyOpenSSL's `X509` entirely.
- Deprecated passing `PKey` objects to
`OpenSSL.SSL.Context.use_privatekey` and
`OpenSSL.SSL.Connection.use_privatekey`, users should instead pass
`cryptography` priate key instances. This is in preparation for
deprecating pyOpenSSL's `PKey` entirely.

Changes:
^^^^^^^^

-   `cryptography` maximum version has been increased to 44.0.x.
- `OpenSSL.SSL.Connection.get_certificate`,
`OpenSSL.SSL.Connection.get_peer_certificate`,
`OpenSSL.SSL.Connection.get_peer_cert_chain`, and
`OpenSSL.SSL.Connection.get_verified_chain` now take an
`as_cryptography` keyword-argument. When `True` is passed then
`cryptography.x509.Certificate` are returned, instead of
`OpenSSL.crypto.X509`. In the future, passing `False` (the default) will
be deprecated.

###
[`v24.2.1`](https://redirect.github.com/pyca/pyopenssl/blob/HEAD/CHANGELOG.rst#2421-2024-07-20)

[Compare
Source](https://redirect.github.com/pyca/pyopenssl/compare/24.1.0...24.2.1)

Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Deprecations:
^^^^^^^^^^^^^

Changes:
^^^^^^^^

-   Fixed changelog to remove sphinx specific restructured text strings.

###
[`v24.1.0`](https://redirect.github.com/pyca/pyopenssl/blob/HEAD/CHANGELOG.rst#2410-2024-03-09)

[Compare
Source](https://redirect.github.com/pyca/pyopenssl/compare/24.0.0...24.1.0)

Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

-   Removed the deprecated `OpenSSL.crypto.PKCS12` and
`OpenSSL.crypto.NetscapeSPKI`. `OpenSSL.crypto.PKCS12` may be replaced
by the [PKCS#12](https://redirect.github.com/PKCS/pyopenssl/issues/12)
APIs in the `cryptography` package.

Deprecations:
^^^^^^^^^^^^^

Changes:
^^^^^^^^

###
[`v24.0.0`](https://redirect.github.com/pyca/pyopenssl/blob/HEAD/CHANGELOG.rst#2400-2024-01-22)

[Compare
Source](https://redirect.github.com/pyca/pyopenssl/compare/23.3.0...24.0.0)

Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Deprecations:
^^^^^^^^^^^^^

Changes:
^^^^^^^^

- Added `OpenSSL.SSL.Connection.get_selected_srtp_profile` to determine
which SRTP profile was negotiated.
    `#&#8203;1279 <https://github.com/pyca/pyopenssl/pull/1279>`\_.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - "every weekday" (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>

Author: pulumi-renovate[bot]

aws-py-oidc-provider-pulumi-cloud/requirements.txt

@@ -6,7 +6,7 @@ charset-normalizer==3.4.1
 cryptography==44.0.1
 idna==3.10
 pycparser==2.22
-pyOpenSSL==23.3.0
+pyOpenSSL==25.0.0
 requests==2.32.3
 pulumi-tls>=5.0.0,<6.0.0
 urllib3==2.3.0