build(deps): bump the uv group across 1 directory with 2 updates

[dependabot]

Bumps the uv group with 2 updates in the / directory: soupsieve and tornado.

Updates soupsieve from 2.8 to 2.8.4

Release notes

Sourced from soupsieve's releases.

2.8.4

• FIX: Fix another inefficient attribute pattern (@​mauriceng98).
• FIX: Limit total number of selectors processed in a pattern to prevent massive selector requests (@​mauriceng98).

2.8.3

• FIX: Fix inefficient attribute pattern.

2.8.2

• FIX: Ensure custom selectors or namespace dictionaries reject non-string keys (@​mundanevision20).
• FIX: Fix handling of :in-range and :out-of-range with end of year weeks (@​mundanevision20).
• FIX: Fix a potential infinite loop in the pretty printing debug function (@​mundanevision20).

2.8.1

• FIX: Changes in tests to accommodate latest Python HTML parser changes.

Commits

• 28108ab Limit excessive selectors
• ef18872 Fix test for Windows
• eb43976 Merge commit from fork
• 3a661b2 Fix typo in pseudo-classes.md (#294)
• 0cb533d Update hatchling version requirement in pyproject.toml (#290)
• 5aedc41 Update doc theme
• d7c4784 Attribute pattern fix (#289)
• 09e106d Fix grammar
• 09b2769 Update docs
• c6e80fc Various fixes by @​mundanevision20 (#288)
• Additional commits viewable in compare view

Updates tornado from 6.5.7 to 6.5.8

Changelog

Sourced from tornado's changelog.

Release notes

.. toctree:: :maxdepth: 2

releases/v6.5.8 releases/v6.5.7 releases/v6.5.6 releases/v6.5.5 releases/v6.5.4 releases/v6.5.3 releases/v6.5.2 releases/v6.5.1 releases/v6.5.0 releases/v6.4.2 releases/v6.4.1 releases/v6.4.0 releases/v6.3.3 releases/v6.3.2 releases/v6.3.1 releases/v6.3.0 releases/v6.2.0 releases/v6.1.0 releases/v6.0.4 releases/v6.0.3 releases/v6.0.2 releases/v6.0.1 releases/v6.0.0 releases/v5.1.1 releases/v5.1.0 releases/v5.0.2 releases/v5.0.1 releases/v5.0.0 releases/v4.5.3 releases/v4.5.2 releases/v4.5.1 releases/v4.5.0 releases/v4.4.3 releases/v4.4.2 releases/v4.4.1 releases/v4.4.0 releases/v4.3.0 releases/v4.2.1 releases/v4.2.0 releases/v4.1.0 releases/v4.0.2 releases/v4.0.1 releases/v4.0.0 releases/v3.2.2

... (truncated)

Commits

• a55abe3 Merge pull request #3704 from bdarnell/security-6.5.8
• fc79488 docs: add additional credit to release notes
• 7b01763 Fix test_strip_headers_on_redirect's URL-embedded-credentials cases
• d72fff8 release notes and version bump for 6.5.8
• b168818 auth: Formally deprecated OpenIDMixin
• da28476 web: Also check for semicolons in deprecated mixed-case cookie args
• 8d6363e httputil: Enforce a new limit on the number of arguments in a request
• de85b3f httputil: Apply multipart max_parts limit earlier
• See full diff in compare view

[nstarman]

@dependabot rebase