Bump waitress from 2.1.2 to 3.0.0

[dependabot]

Bumps waitress from 2.1.2 to 3.0.0.

Release notes

Sourced from waitress's releases.

v3.0.0

3.0.0 (2024-02-04)

• Rename "master" git branch to "main"

• Fix a bug that would appear on macOS whereby if we accept() a socket that is already gone, setting socket options would fail and take down the server. See Pylons/waitress#399

• Fixed testing of vendored asyncore code to not rely on particular naming for errno's. See Pylons/waitress#397

• HTTP Request methods and versions are now validated to meet the HTTP standards thereby dropping invalid requests on the floor. See Pylons/waitress#423

• No longer close the connection when sending a HEAD request response. See Pylons/waitress#428

• Always attempt to send the Connection: close response header when we are going to close the connection to let the remote know in more instances. Pylons/waitress#429

• Python 3.7 is no longer supported. Add support for Python 3.11, 3.12 and PyPy 3.9, 3.10. See Pylons/waitress#412

• Document that trusted_proxy may be set to a wildcard value to trust all proxies. See Pylons/waitress#431

Updated Defaults

• clear_untrusted_proxy_headers is set to True by default. See Pylons/waitress#370

Changelog

Sourced from waitress's changelog.

3.0.0 (2024-02-04)

• Rename "master" git branch to "main"

• Fix a bug that would appear on macOS whereby if we accept() a socket that is already gone, setting socket options would fail and take down the server. See Pylons/waitress#399

• Fixed testing of vendored asyncore code to not rely on particular naming for errno's. See Pylons/waitress#397

• HTTP Request methods and versions are now validated to meet the HTTP standards thereby dropping invalid requests on the floor. See Pylons/waitress#423

• No longer close the connection when sending a HEAD request response. See Pylons/waitress#428

• Always attempt to send the Connection: close response header when we are going to close the connection to let the remote know in more instances. Pylons/waitress#429

• Python 3.7 is no longer supported. Add support for Python 3.11, 3.12 and PyPy 3.9, 3.10. See Pylons/waitress#412

• Document that trusted_proxy may be set to a wildcard value to trust all proxies. See Pylons/waitress#431

Updated Defaults

- clear_untrusted_proxy_headers is set to True by default. See
  https://github.com/Pylons/waitress/pull/370

Commits

• 4e0d8c4 Prep 3.0.0
• d59f148 Update CHANGES.txt
• af104eb Merge pull request #431 from Pylons/documentation/trusted_proxy_wildcard
• e0123ee Document wildcard support for trusted_proxy
• 5934be0 Update badges in README.rst
• 838db18 Pyton 3.7 begone, for realsies
• fde4aec Minimum supported Python version is 3.8
• f19cc71 Merge pull request #412 from gforcada/patch-1
• af0fd3d Don't run all PyPy version for macOS/Windows
• 6c8bb63 Set specific toxenv for PyPy
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)