build(deps): bump gidgethub from 5.4.0 to 6.0.0

[dependabot]

Bumps gidgethub from 5.4.0 to 6.0.0.

Release notes

Sourced from gidgethub's releases.

6.0.0

What's Changed

• Fix broken links in docs by @​Mariatta in gidgethub/gidgethub#203
• Replace flit by flit_core in build-system by @​tjni in gidgethub/gidgethub#205
• Fix URLs by @​brettcannon in gidgethub/gidgethub#208
• Add support for Python 3.12-3.13 and drop EOL 3.7 by @​hugovk in gidgethub/gidgethub#209
• Update changelog by @​hugovk in gidgethub/gidgethub#212
• Set a maximum version of flit_core for build requirements by @​takluyver in gidgethub/gidgethub#211
• Add expiration parameter to apps.get_jwt by @​jjnesbitt in gidgethub/gidgethub#215
• Make gidgethub.abc.GitHubAPI.getiter() iterative by @​brettcannon in gidgethub/gidgethub#219
• Prepare v5.4.0 release by @​Mariatta in gidgethub/gidgethub#220
• Post-release update 5.4.0.dev by @​Mariatta in gidgethub/gidgethub#222
• Test with Python 3.14 by @​Mariatta in gidgethub/gidgethub#223
• Fix TypeError in 422 error response handling when 'errors' field is a string by @​brettcannon with @​Copilot in gidgethub/gidgethub#225
• Forward of the headers in the HTTPExceptions by @​foutoucour in gidgethub/gidgethub#227
• Document HTTPException.headers by @​brettcannon in gidgethub/gidgethub#230
• Tweak sansio.format_url to handle GHES base URLs by @​brettcannon in gidgethub/gidgethub#234
• Do a bunch of modernization and cleanup by @​brettcannon in gidgethub/gidgethub#232
• Set up zizmor by @​brettcannon in gidgethub/gidgethub#238
• Set up trusted publishing by @​brettcannon in gidgethub/gidgethub#239
• Isolate building from publishing to PyPI by @​brettcannon in gidgethub/gidgethub#240
• Put the project into maintenance mode by @​brettcannon in gidgethub/gidgethub#242
• Replace httpx with httpx2 by @​Mariatta in gidgethub/gidgethub#236
• Modernize GitHub Actions workflows by @​brettcannon with @​Copilot in gidgethub/gidgethub#243
• Move to Pyrefly as the primary type checker by @​brettcannon in gidgethub/gidgethub#244
• Improve rate limit check by ensuring rate_limit is not None before accessing 'remaining' by @​brettcannon in gidgethub/gidgethub#245
• Raise minimum supported Python version to 3.10 by @​brettcannon with @​Copilot in gidgethub/gidgethub#248
• Preserve Router.register handler signatures with ParamSpec by @​brettcannon with @​Copilot in gidgethub/gidgethub#246
• Add manage_rate_limit() hook and requests_in_flight tracking to GitHubAPI by @​brettcannon with @​Copilot in gidgethub/gidgethub#247
• Document that graphql() returns the 'data' key value by @​brettcannon with @​Copilot in gidgethub/gidgethub#249
• Document GitHub handling of misnamed GraphQL variables by @​brettcannon with @​Copilot in gidgethub/gidgethub#251
• Handle 422 responses whose errors list contains strings by @​brettcannon with @​Copilot in gidgethub/gidgethub#250
• Add managed GitHub App JWT authentication by @​brettcannon with @​Copilot in gidgethub/gidgethub#252
• Noxfile touch ups by @​brettcannon in gidgethub/gidgethub#253
• 6.0.0 release by @​brettcannon in gidgethub/gidgethub#254

New Contributors

• @​tjni made their first contribution in gidgethub/gidgethub#205
• @​takluyver made their first contribution in gidgethub/gidgethub#211
• @​jjnesbitt made their first contribution in gidgethub/gidgethub#215
• @​brettcannon with @​Copilot made their first contribution in gidgethub/gidgethub#225
• @​foutoucour made their first contribution in gidgethub/gidgethub#227

Full Changelog: gidgethub/gidgethub@v5.3.0...v6.0.0

Changelog

Sourced from gidgethub's changelog.

6.0.0

• Add managed GitHub App authentication to :class:gidgethub.abc.GitHubAPI through new app_id and private_key constructor arguments. JWTs are generated, cached, and refreshed automatically while explicit per-request credentials continue to take precedence. This design was inspired by Jonathan Sick's (@​jonathansick) earlier implementation in PR [#201](https://github.com/gidgethub/gidgethub/issues/201) <https://github.com/gidgethub/gidgethub/pull/201>_ (Issue [#199](https://github.com/gidgethub/gidgethub/issues/199) <https://github.com/gidgethub/gidgethub/issues/199>_). Generated JWTs now backdate their issue time by 60 seconds to tolerate clock drift, with their expiration measured from that backdated issue time so GitHub's 10 minute limit on the time between issue and expiration is respected.

• Handle 422 responses whose errors entries are strings instead of objects, raising :exc:gidgethub.ValidationError instead of :exc:TypeError (Issue [#139](https://github.com/gidgethub/gidgethub/issues/139) <https://github.com/gidgethub/gidgethub/issues/139>_)

• Add :meth:gidgethub.abc.GitHubAPI.manage_rate_limit as an overridable hook, along with the :attr:gidgethub.abc.GitHubAPI.requests_in_flight attribute, to let users implement their own rate-limit/backpressure strategies (Issue [#19](https://github.com/gidgethub/gidgethub/issues/19) <https://github.com/gidgethub/gidgethub/issues/19>_)

• Add :meth:gidgethub.abc.GitHubAPI.handle_rate_limit_error as an overridable hook, allowing requests that fail with an :exc:~gidgethub.HTTPException to be retried (e.g. after a secondary rate limit or abuse-detection response) (Issue [#19](https://github.com/gidgethub/gidgethub/issues/19) <https://github.com/gidgethub/gidgethub/issues/19>_)

• Add :attr:gidgethub.HTTPException.headers attribute (PR [#227](https://github.com/gidgethub/gidgethub/issues/227) <https://github.com/gidgethub/gidgethub/pull/227>_)

• Add a trailing / to url and remove any leading / in base_url for :func:gidgethub.sansio.format_url (PR [#234](https://github.com/gidgethub/gidgethub/issues/234) <https://github.com/gidgethub/gidgethub/pull/234>_)

• Use httpx2 as a drop-in replacement for httpx backend. The "httpx" extra was updated to use httpx2 and a new httpx2 extra was also added.

• Document that :meth:gidgethub.abc.GitHubAPI.graphql returns the value of the "data" key from the JSON response (Issue [#127](https://github.com/gidgethub/gidgethub/issues/127) <https://github.com/gidgethub/gidgethub/issues/127>_)

• Add support for Python 3.14 and 3.15, and drop support for Python 3.8 and 3.9. The minimum supported Python version is now 3.10.

Commits

• e3755a1 6.0.0 release (#254)
• 2cb3a93 Add Python version support entry to Unreleased changelog
• 8a818e7 Noxfile touch ups (#253)
• 9fc0f84 Add managed GitHub App JWT authentication (#252)
• 8e63d7d Handle 422 responses whose errors list contains strings (#250)
• ece9dd5 Document GitHub handling of misnamed GraphQL variables (#251)
• 60c2c89 Document that graphql() returns the 'data' key value (#249)
• f2e9b7b Add proactive and reactive rate limiting API (#247)
• 7e4c788 Preserve Router.register handler signatures with ParamSpec (#246)
• c026365 Raise minimum Python version to 3.10 (#248)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)