deps: update bcrypt requirement from >=4.0.0 to >=4.3.0 in /cms

[dependabot]

Updates the requirements on bcrypt to permit the latest version.

Changelog

Sourced from bcrypt's changelog.

4.3.0

• Dropped support for Python 3.7.
• We now support free-threaded Python 3.13.
• We now support PyPy 3.11.
• We now publish wheels for free-threaded Python 3.13, for PyPy 3.11 on manylinux, and for ARMv7l on manylinux.

4.2.1

• Bump Rust dependency versions - this should resolve crashes on Python 3.13 free-threaded builds.
• We no longer build manylinux wheels for PyPy 3.9.

4.2.0

• Bump Rust dependency versions
• Removed the BCRYPT_ALLOW_RUST_163 environment variable.

4.1.3

• Bump Rust dependency versions

4.1.2

• Publish both py37 and py39 wheels. This should resolve some errors relating to initializing a module multiple times per process.

4.1.1

• Fixed the type signature on the kdf method.
• Fixed packaging bug on Windows.
• Fixed incompatibility with passlib package detection assumptions.

4.1.0

• Dropped support for Python 3.6.
• Bumped MSRV to 1.64. (Note: Rust 1.63 can be used by setting the BCRYPT_ALLOW_RUST_163 environment variable)

4.0.1

• We now build PyPy manylinux wheels.

... (truncated)

Commits

• 16ba2ab 4.3.0 release (#985)
• 824feec PyPy 3.11 and armv7l wheels (#984)
• 7567284 Add PyPy 3.11 and armv7l to matrix runner (#983)
• cbd9397 Bump actions/download-artifact from 4.1.8 to 4.1.9 (#982)
• 94ba6f7 Update PyO3 to 0.23.5 (#980)
• 18df4c7 Bump portable-atomic from 1.10.0 to 1.11.0 in /src/_bcrypt (#978)
• 11cb6c8 Bump inout from 0.1.3 to 0.1.4 in /src/_bcrypt (#977)
• c0a88cb Bump libc from 0.2.169 to 0.2.170 in /src/_bcrypt (#976)
• 43d3cac Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#975)
• 7a5b990 Bump actions/cache from 4.2.0 to 4.2.1 (#974)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[GeiserX]

@dependabot recreate

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.