Bump the all-pip-dependencies group in /infra with 2 updates

[dependabot]

Bumps the all-pip-dependencies group in /infra with 2 updates: pycurl and boto3.

Updates pycurl from 7.47.0 to 7.48.0

Release notes

Sourced from pycurl's releases.

PycURL 7.48.0

Changes in this release:

• Expose more CURLOPT_SSL_OPTIONS (patch by Scott Talbert)
• Read long description from README.rst instead of duplicating it in setup.py (patch by Scott Talbert)
• Fix test_redir_protocols_setopt (patch by Scott Talbert)
• Add CURL_LOCK_DATA_HSTS as a CurlShare option (patch by Scott Talbert)
• Add libpsl support to vcpkg installs for CI and wheel builds (patch by Scott Talbert)
• Configure nuget repo access as read-only from PRs (patch by Scott Talbert)
• Officially change project URL to https://pycurl.github.io/ (patch by Scott Talbert)
• Replace bare except clauses in examples with specific exception types (patch by Kotesh Kumar Yelamati)
• Add HTTP/3 support in libcurl wheel (patch by Will Noble)
• Fix segfault when calling duphandle() on a closed Curl handle (patch by Jorge Rocamora)
• Fix abort on non-text string arguments (patch by Jorge Rocamora)
• Fix CurlShare leak when close() detaches attached handles (patch by Jorge Rocamora)
• Document that views derived from the callback memoryview are not released (patch by Jorge Rocamora)
• Fix crash when duplicating a handle that uses set_ca_certs() (patch by Jorge Rocamora)
• Add CurlUrl object wrapping libcurl's URL API, with CURLOPT_CURLU support (patch by Jorge Rocamora)
• Fix callback exceptions being replaced by SystemError (patch by Jorge Rocamora)
• Fix test guard silently passing on real libcurl errors (patch by Jorge Rocamora)
• Update the docstring and manifest source lists (patch by Jorge Rocamora)
• Refuse pause() from a thread other than the performing one (patch by Jorge Rocamora)
• Add support for Python 3.15 (patch by Scott Talbert)
• Refuse integers for blob options instead of crashing (patch by Jorge Rocamora)
• Accept buffer objects for blob options (patch by Jorge Rocamora)
• Release all httppost encoded values and unset the form before MIMEPOST (patch by Jorge Rocamora)
• Reject callback return values that do not fit in an int (patch by Jorge Rocamora)
• Clear CurlMulti callbacks before deallocating attached handles (patch by Eric Buehl)
• Serve the test apps from a threaded WSGI server (patch by Jorge Rocamora)
• Add support for missing CURL options (patch by Khavish Anshudass Bhundoo)
• Add CURLOPT_SSL_EC_CURVES & CURLOPT_SSL_SIGNATURE_ALGORITHMS options (patch by Khavish Anshudass Bhundoo)
• Remove unused variable from do_curl_setopt_httppost (patch by Scott Talbert)
• test: silence WSGI test server access logging to stderr (patch by Scott Talbert)
• test: pin down oversized mime data_cb error assertions (patch by Scott Talbert)
• Give vendored OpenSSL a private OPENSSLDIR on Linux manylinux wheels (patch by Scott Talbert)
• Enable -Werror for the pycurl build in cibuildwheel without affecting vcpkg (patch by Scott Talbert)
• Handle libcurl options deprecated in 8.22.0 (patch by Scott Talbert)

Changelog

Sourced from pycurl's changelog.

Version 7.48.0 [requires libcurl-7.19.0 or better] - 2026-09-15

    * Expose more CURLOPT_SSL_OPTIONS (patch by Scott Talbert)
    * Read long description from README.rst instead of duplicating it in setup.py (patch by Scott Talbert)
    * Fix test_redir_protocols_setopt (patch by Scott Talbert)
    * Add CURL_LOCK_DATA_HSTS as a CurlShare option (patch by Scott Talbert)
    * Add libpsl support to vcpkg installs for CI and wheel builds (patch by Scott Talbert)
    * Configure nuget repo access as read-only from PRs (patch by Scott Talbert)
    * Officially change project URL to https://pycurl.github.io/ (patch by Scott Talbert)
    * Replace bare except clauses in examples with specific exception types (patch by Kotesh Kumar Yelamati)
    * Add HTTP/3 support in libcurl wheel (patch by Will Noble)
    * Fix segfault when calling duphandle() on a closed Curl handle (patch by Jorge Rocamora)
    * Fix abort on non-text string arguments (patch by Jorge Rocamora)
    * Fix CurlShare leak when close() detaches attached handles (patch by Jorge Rocamora)
    * Document that views derived from the callback memoryview are not released (patch by Jorge Rocamora)
    * Fix crash when duplicating a handle that uses set_ca_certs() (patch by Jorge Rocamora)
    * Add CurlUrl object wrapping libcurl's URL API, with CURLOPT_CURLU support (patch by Jorge Rocamora)
    * Fix callback exceptions being replaced by SystemError (patch by Jorge Rocamora)
    * Fix test guard silently passing on real libcurl errors (patch by Jorge Rocamora)
    * Update the docstring and manifest source lists (patch by Jorge Rocamora)
    * Refuse pause() from a thread other than the performing one (patch by Jorge Rocamora)
    * Add support for Python 3.15 (patch by Scott Talbert)
    * Refuse integers for blob options instead of crashing (patch by Jorge Rocamora)
    * Accept buffer objects for blob options (patch by Jorge Rocamora)
    * Release all httppost encoded values and unset the form before MIMEPOST (patch by Jorge Rocamora)
    * Reject callback return values that do not fit in an int (patch by Jorge Rocamora)
    * Clear CurlMulti callbacks before deallocating attached handles (patch by Eric Buehl)
    * Serve the test apps from a threaded WSGI server (patch by Jorge Rocamora)
    * Add support for missing CURL options (patch by Khavish Anshudass Bhundoo)
    * Add CURLOPT_SSL_EC_CURVES & CURLOPT_SSL_SIGNATURE_ALGORITHMS options (patch by Khavish Anshudass Bhundoo)
    * Remove unused variable from do_curl_setopt_httppost (patch by Scott Talbert)
    * test: silence WSGI test server access logging to stderr (patch by Scott Talbert)
    * test: pin down oversized mime data_cb error assertions (patch by Scott Talbert)
    * Give vendored OpenSSL a private OPENSSLDIR on Linux manylinux wheels (patch by Scott Talbert)
    * Enable -Werror for the pycurl build in cibuildwheel without affecting vcpkg (patch by Scott Talbert)
    * Handle libcurl options deprecated in 8.22.0 (patch by Scott Talbert)

Commits

• d05452c Release 7.48.0
• 7673aeb Skip installing paramiko on Python 3.15 for now
• 5f60d93 Handle libcurl options deprecated in 8.22.0
• 0913022 Enable -Werror for the pycurl build in cibuildwheel without affecting vcpkg
• 5d8ddfc Give vendored OpenSSL a private OPENSSLDIR on Linux manylinux wheels
• 20dc93b test: pin down oversized mime data_cb error assertions
• 62aa003 test: silence WSGI test server access logging to stderr
• c18288d Remove unused variable from do_curl_setopt_httppost
• ef1eae2 Merge pull request #1064 from khavishbhundoo/task/1063-add-tls-options
• b2510e5 feat: Add CURLOPT_SSL_EC_CURVES & CURLOPT_SSL_SIGNATURE_ALGORITHMS
• Additional commits viewable in compare view

Updates boto3 from 1.43.93 to 1.43.98

Commits

• 3314d84 Merge branch 'release-1.43.98'
• 3a3637f Bumping version to 1.43.98
• d802350 Add changelog entries from botocore
• ed7de96 Merge branch 'release-1.43.97'
• fba1e41 Merge branch 'release-1.43.97' into develop
• 275709c Bumping version to 1.43.97
• a5c0088 Add changelog entries from botocore
• 2be9967 Merge branch 'release-1.43.96'
• bc62489 Merge branch 'release-1.43.96' into develop
• 6e1774a Bumping version to 1.43.96
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.11%. Comparing base (29460cd) to head (68d5c43).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #654      +/-   ##
==========================================
+ Coverage   96.10%   96.11%   +0.01%     
==========================================
  Files         132      132              
  Lines        6363     6363              
==========================================
+ Hits         6115     6116       +1     
+ Misses        248      247       -1     

see 1 file with indirect coverage changes

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 29460cd...68d5c43. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.