Update cairosvg requirement from <2.6.0,>=1.0.9 to >=1.0.9,<2.7.0

[dependabot[bot]]

Updates the requirements on cairosvg to permit the latest version.

Release notes

Sourced from cairosvg's releases.

2.6.0

• Drop support of Python 3.5 and 3.6, add support of Python 3.9, 3.10 and 3.11
• Support crispEdges value for text antialiasing
• Don’t crash when including CMYK images
• Only update docstrings when not optimized
• Don’t restore current point after empty paths
• Assume that 1ch equals 0.5em
• Fix various deprecation warnings

Changelog

Sourced from cairosvg's changelog.

Version 2.6.0 released on 2023-01-12

• Drop support of Python 3.5 and 3.6, add support of Python 3.9, 3.10 and 3.11
• Support crispEdges value for text antialiasing
• Don’t crash when including CMYK images
• Only update docstrings when not optimized
• Don’t restore current point after empty paths
• Assume that 1ch equals 0.5em
• Fix various deprecation warnings

Version 2.5.2 released on 2021-03-06

• Fix marker path scale

Version 2.5.1 released on 2021-01-06

WARNING: this is a security update.

When processing SVG files, CairoSVG was using two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS).

If an attacker provided a malicious SVG, it could make CairoSVG get stuck processing the file for a very long time.

Other bug fixes:

• Fix marker positions for unclosed paths
• Follow hint when only output_width or output_height is set
• Handle opacity on raster images
• Don’t crash when use tags reference unknown tags
• Take care of the next letter when A/a is replaced by l
• Fix misalignment in node.vertices

Version 2.5.0 released on 2020-10-29

• Drop support of Python 3.5, add support of Python 3.9.
• Add EPS export
• Add background-color, negate-colors, and invert-images options
• Improve support for font weights
• Fix opacity of patterns and gradients
• Support auto-start-reverse value for orient
• Draw images contained in defs
• Add Exif transposition support

... (truncated)

Commits

• f5170f8 Version 2.6.0
• c25a7bf Merge pull request #372 from mscroggs/mscroggs/python-311-deprecation-warning
• 9f501df Didn't mean to add -W error
• 1fdbcd1 Remove python 3.6 (beyond end-of-life) and add python 3.11
• 520968f getdefaultlocale -> getlocale
• adf1fd4 Use pytest instead of setup.py test in README
• 121420d Fully remove pytest command
• 66bbb8e Don’t use pytest plugins anymore
• 82b9283 Don’t use deprecated license_file key anymore
• 95f1107 Use pathlib and importlib instead of deprecated os.path and imp
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[rockstorm101]

Upgrading to cairosvg 2.6.0 has unresolved issues. See 0c296bab07a4e6a11470082156cf078f745a54a2.

@dependabot ignore this minor version

[dependabot[bot]]

OK, I won't notify you about version 2.6.x again, unless you re-open this PR. 😢