Track GHSA-58pv-8j8x-9vj2

[scottschreckengaust]

pypa/setuptools#5137 (comment)

Vendored dependencies are updated mechanically and the mechanics should be run by a maintainer, so I'll be declining this PR, and following up with one of my own.

@jaraco, thank you for addressing. I'm looking forward to the pull request and release for a setuptools>80.9.0 with an updated specifier for jaraco-context>=6.1.0 to resolve the GHSA-58pv-8j8x-9vj2 "HIGH" vulnerability.

Originally posted by @scottschreckengaust in #5140

[scottschreckengaust]

https://github.com/awslabs/mcp/security/code-scanning/12781