Bumps from dependabot

[ifosch]

When renaming master to main, the dependabot branches were mistakenly removed. This applies the same changes:

• Bump py 1.8.1 to 1.10.0
• Bump urllib3 from 1.25.9 to 1.26.5