Update cairosvg requirement from >=2.9.0 to >=2.9.1

[dependabot]

Updates the requirements on cairosvg to permit the latest version.

Release notes

Sourced from cairosvg's releases.

2.9.1

WARNING: this is a security update.

Specially crafted SVGs with very long paths could lead to exponential rendering times.

• Support path-like objects for the url parameter
• Fix support of Windows paths

Changelog

Sourced from cairosvg's changelog.

Version 2.9.1 released on 2026-09-07

WARNING: this is a security update.

Specially crafted SVGs with very long paths could lead to exponential rendering times.

• Support path-like objects for the url parameter
• Fix support of Windows paths

Version 2.9.0 released on 2026-03-13

WARNING: this is a security update.

Using a lot of recursively nested use tags could lead to long rendering times with relatively small inputs. CairoSVG now stops rendering when more than 100k use tags are rendered.

Using the --unsafe option allows to render larger documents.

• Drop support of Python 3.9, add support of Python 3.14

Version 2.8.2 released on 2025-05-15

• Allow both Unicode strings and bytes as input

Version 2.8.1 released on 2025-05-14

• Allow both text- and bytes-based file objects as input

Version 2.8.0 released on 2025-05-12

• Drop support of Python 3.7 and 3.8, add support of Python 3.12 and 3.13
• Optimize math operations
• Use pathlib
• Close paths for ellipses and circles
• Fix output ratio for SVG surfaces
• Avoid endless loops when updating def attributes
• Round PNG size
• Don’t crash when more than 2 values are given to translate and scale functions

... (truncated)

Commits

• 3b7a250 Version 2.9.1
• 9d63f04 Use a regex-based tokenizer for paths to avoid quadratic compexity
• a4d585e Don’t use O(n) list.pop(0) for vertices, use O(1) deque.popleft()
• 026fbce Merge pull request #449 from SAY-5/feat/url-pathlike
• 6eaa366 feat(url): accept path-like objects for the url parameter
• 0613641 Cut long line
• 50fdfe8 Merge pull request #447 from BudongJW/fix/resub-positional-flags
• 278c227 Fix re.sub positional argument in nt_compatible_path
• 6075040 Cut long line
• babf3df Fix CI
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)