build(deps): update dulwich requirement from <0.23,>=0.21.7 to >=0.21.7,<1.1 in /requirements

[dependabot]

Updates the requirements on dulwich to permit the latest version.

Release notes

Sourced from dulwich's releases.

1.0.0

What's Changed

• More tests by @​jelmer in jelmer/dulwich#2066
• Document C git compatibility by @​jelmer in jelmer/dulwich#2067
• Remove deprecated functions by @​jelmer in jelmer/dulwich#2068

Full Changelog: jelmer/dulwich@dulwich-0.25.2...dulwich-1.0.0

Changelog

Sourced from dulwich's changelog.

1.0.0 2026-01-17

• Release of 1.0!

  From here on, Dulwich will not break backwards compatibility until 2.0 - although we may print DeprecationWarning when using deprecated functionality.

  Micro releases (1.x.y) will be reserved for important bugfixes.

  Major releases (1.x.0) will introduced new features and functionality, without breaking backwards compatibility.

  (Jelmer Vernooij, #2007)

0.25.2 2026-01-11

• Fix test failure when GPG raises InvalidSigners instead of GPGMEError on systems without usable secret keys. (#2063)

• Object store close() methods can now be called multiple times safely. Object stores now raise ResourceWarning when destroyed with unclosed resources. (Jelmer Vernooij)

0.25.1 2026-01-08

• Add signature vendor system for signing and verifying Git objects. Supports GPG, SSH signatures, and X.509 certificates. (Jelmer Vernooij)

• Add support for partial clone with object filtering. (Jelmer Vernooij)

• Fix sparse pattern matching in worktree operations. (Jelmer Vernooij)

• dulwich.porcelain.status now returns regular strings. (Jelmer Vernooij, #889)

• Fix AssertionError when accessing ref names with length matching binary hash length (e.g., 32 bytes for SHA-256). (Jelmer Vernooij, #2040)

• Fix commit graph parsing failure when processing commits with 3+ parents (octopus merges) with incomplete EXTRA_EDGE_LIST chunk data. (Jelmer Vernooij, #2054)

• Add parse_commit_broken function to parse broken commits. (Valentin Lorentz, Jelmer Vernooij)

• Add basic dulwich.aiohttp module that provides server support. (Jelmer Vernooij)

• Add callback-based authentication support for HTTP and proxy authentication

... (truncated)

Commits

• ca9de6d release dulwich 1.0.0
• d5275f4 Remove deprecated functions (#2068)
• 918d8c1 Remove deprecated functions
• f1022bd Document C git compatibility (#2067)
• 58deddd More tests (#2066)
• 490088a Fix Windows-specific test failures
• 0424ada Document C git compatibility
• 638ee02 Add new test modules to test suite configuration
• 92cb716 Add tests for porcelain notes module
• c495ca3 Add tests to achieve 100% coverage for mailmap module
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)