chore(deps): update python (#159)

This PR contains the following updates:

| Package | Change | Age | Confidence |
|---|---|---|---|
| [Werkzeug](https://redirect.github.com/pallets/werkzeug)
([changelog](https://werkzeug.palletsprojects.com/page/changes/)) |
`==3.1.3` -> `==3.1.4` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/werkzeug/3.1.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/werkzeug/3.1.3/3.1.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [boto3](https://redirect.github.com/boto/boto3) | `==1.41.2` ->
`==1.41.5` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/boto3/1.41.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/boto3/1.41.2/1.41.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [botocore](https://redirect.github.com/boto/botocore) | `==1.41.2` ->
`==1.41.5` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/botocore/1.41.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/botocore/1.41.2/1.41.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>pallets/werkzeug (Werkzeug)</summary>

###
[`v3.1.4`](https://redirect.github.com/pallets/werkzeug/blob/HEAD/CHANGES.rst#Version-314)

[Compare
Source](https://redirect.github.com/pallets/werkzeug/compare/3.1.3...3.1.4)

Released 2025-11-28

- `safe_join` on Windows does not allow special device names. This
prevents
  reading from these when using `send_from_directory`. `secure_filename`
  already prevented writing to these. :ghsa:`hgf8-39gv-g3f2`
- The debugger pin fails after 10 attempts instead of 11. :pr:`3020`
- The multipart form parser handles a `\r\n` sequence at a chunk
boundary.
  :issue:`3065`
- Improve CPU usage during Watchdog reloader. :issue:`3054`
- `Request.json` annotation is more accurate. :issue:`3067`
- Traceback rendering handles when the line number is beyond the
available
  source lines. :issue:`3044`
- `HTTPException.get_response` annotation and doc better conveys the
  distinction between WSGI and sans-IO responses. :issue:`3056`

</details>

<details>
<summary>boto/boto3 (boto3)</summary>

###
[`v1.41.5`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1415)

[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.41.4...1.41.5)

\======

- api-change:`bedrock-runtime`: \[`botocore`] Bedrock Runtime Reserved
Service Support
- api-change:`compute-optimizer`: \[`botocore`] Compute Optimizer now
identifies idle NAT Gateway resources for cost optimization based on
traffic patterns and backup configuration analysis. Access
recommendations via the GetIdleRecommendations API.
- api-change:`cost-optimization-hub`: \[`botocore`] This release enables
AWS Cost Optimization Hub to show cost optimization recommendations for
NAT Gateway.

###
[`v1.41.4`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1414)

[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.41.3...1.41.4)

\======

- api-change:`ec2`: \[`botocore`] This release adds support to view
Network firewall proxy appliances attached to an existing NAT Gateway
via DescribeNatGateways API NatGatewayAttachedAppliance structure.
- api-change:`network-firewall`: \[`botocore`] Network Firewall release
of the Proxy feature.
- api-change:`organizations`: \[`botocore`] Add support for policy
operations on the S3\_POLICY and BEDROCK\_POLICY policy type.
- api-change:`route53`: \[`botocore`] Adds support for new route53
feature: accelerated recovery.

###
[`v1.41.3`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1413)

[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.41.2...1.41.3)

\======

- api-change:`cloudfront`: \[`botocore`] Add TrustStore,
ConnectionFunction APIs to CloudFront SDK
- api-change:`logs`: \[`botocore`] New CloudWatch Logs feature -
LogGroup Deletion Protection, a capability that allows customers to
safeguard their critical CloudWatch log groups from accidental or
unintended deletion.
- enhancement:awscrt: \[`botocore`] Update awscrt version to 0.29.0

</details>

<details>
<summary>boto/botocore (botocore)</summary>

###
[`v1.41.5`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#1415)

[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.41.4...1.41.5)

\======

- api-change:`bedrock-runtime`: Bedrock Runtime Reserved Service Support
- api-change:`compute-optimizer`: Compute Optimizer now identifies idle
NAT Gateway resources for cost optimization based on traffic patterns
and backup configuration analysis. Access recommendations via the
GetIdleRecommendations API.
- api-change:`cost-optimization-hub`: This release enables AWS Cost
Optimization Hub to show cost optimization recommendations for NAT
Gateway.

###
[`v1.41.4`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#1414)

[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.41.3...1.41.4)

\======

- api-change:`ec2`: This release adds support to view Network firewall
proxy appliances attached to an existing NAT Gateway via
DescribeNatGateways API NatGatewayAttachedAppliance structure.
- api-change:`network-firewall`: Network Firewall release of the Proxy
feature.
- api-change:`organizations`: Add support for policy operations on the
S3\_POLICY and BEDROCK\_POLICY policy type.
- api-change:`route53`: Adds support for new route53 feature:
accelerated recovery.

###
[`v1.41.3`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#1413)

[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.41.2...1.41.3)

\======

- api-change:`cloudfront`: Add TrustStore, ConnectionFunction APIs to
CloudFront SDK
- api-change:`logs`: New CloudWatch Logs feature - LogGroup Deletion
Protection, a capability that allows customers to safeguard their
critical CloudWatch log groups from accidental or unintended deletion.
- enhancement:awscrt: Update awscrt version to 0.29.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 5am on monday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/Nextdoor/gogo).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xOS45IiwidXBkYXRlZEluVmVyIjoiNDIuMTkuOSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

resources/requirements.txt

@@ -1,5 +1,5 @@
-boto3==1.41.2
-botocore==1.41.2
+boto3==1.41.5
+botocore==1.41.5
 certifi==2025.11.12
 chardet==5.2.0
 click==8.3.1
@@ -26,4 +26,4 @@ six==1.17.0
 SQLAlchemy==2.0.44
 uritemplate==4.2.0
 urllib3==2.5.0
-Werkzeug==3.1.3
+Werkzeug==3.1.4