deps(deps): bump websocket-client from 1.8.0 to 1.9.0

[dependabot]

Bumps websocket-client from 1.8.0 to 1.9.0.

Release notes

Sourced from websocket-client's releases.

v1.9.0

1.9.0

Changelog

Sourced from websocket-client's changelog.

• 1.9.0
  • Remove Python 3.8 support (EOL), add Python 3.13 (5f25030)
  • Remove localhost and 127.0.0.1 from default NO_PROXY list (#994)
  • Support IPv6 CIDRs in the no_proxy option (#1033)
  • Fix thread safety condition in teardown() to improve run_forever() (#1015)
  • Fix #1024 by chunking data, recursion in on_error callback, thread leak in _stop_ping_thread(), avoid implicit None in recv() (#1036)
  • Avoid bare except clauses for better error handling (#1036)
  • Fix async (#983)
  • Resolve mypy type errors (#996, #1006, 813d570)
  • Test coverage improvements (#1035, #1036)
  • flake8 linting improvements (#1034)

Commits

• e46a8fe 1.9.0
• ab81eab Bug fixes (#1036)
• 63058ab Run forever socket close fix (#1015)
• 6861ee4 Use ipaddress module for no_proxy parsing (#1033)
• 729bdb8 Coverage improvements (#1035)
• f22579a Linting improvements (#1034)
• 9564030 Change echo URL in docs
• c0fe0f7 apply black formatting
• 813d570 Resolve all mypy errors, with AI assistance
• 6020f37 black formatting fixes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
pip/websocket-client	1.9.0	🟢 3.7	Details Check Score Reason Code-Review ⚠️ 2 Found 8/30 approved changesets -- score normalized to 2 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained ⚠️ 0 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Packaging ⚠️ -1 packaging workflow not detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Security-Policy ⚠️ 0 security policy file not detected License 🟢 10 license file detected Fuzzing 🟢 10 project is fuzzed Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• requirements.txt

[github-actions]

Quality Gates Summary

Blocked: true
Passed: 8 / Failed: 6 / Errors: 0 / Skipped: 0

• [PASS] ruff — ruff check clean
• [FAIL] mypy — mypy type errors found
• [FAIL] pytest — pytest failures
• [PASS] coverage — coverage 80.1% (threshold 80.0%)
• [FAIL] architecture — architecture violations
• [PASS] deadcode — no dead code detected
• [PASS] dependencies — no known vulnerabilities
• [PASS] docs — 7/7 documentation checks passed
• [FAIL] security-pipeline — 1 scanner(s) reported findings
• [FAIL] performance — 1 slow test(s) beyond 20s
• [FAIL] compliance — pip-licenses scan
• [PASS] hygiene — repository hygiene checks passed
• [PASS] packaging — packaging validated: 2 artifacts, all checks passed
• [PASS] git-diff — working tree clean