build(deps-dev): bump python-ldap from 3.4.4 to 3.4.5 in /nipap

[dependabot]

Bumps python-ldap from 3.4.4 to 3.4.5.

Release notes

Sourced from python-ldap's releases.

3.4.5

Released 3.4.5 2025-10-10

Security fixes:

• CVE-2025-61911 (GHSA-r7r6-cc7p-4v5m): Enforce str input in ldap.filter.escape_filter_chars with escape_mode=1; ensure proper escaping. (thanks to lukas-eu)
• CVE-2025-61912 (GHSA-p34h-wq7j-h5v6): Correct NUL escaping in ldap.dn.escape_dn_chars to \00 per RFC 4514. (thanks to aradona91)

Fixes:

• ReconnectLDAPObject now properly reconnects on UNAVAILABLE, CONNECT_ERROR and TIMEOUT exceptions (previously only SERVER_DOWN), fixing reconnection issues especially during server restarts
• Fixed syncrepl.py to use named constants instead of raw decimal values for result types
• Fixed error handling in SearchNoOpMixIn to prevent a undefined variable error

Tests:

• Added comprehensive reconnection test cases including concurrent operation handling and server restart scenarios

Doc/

• Updated installation docs and fixed various documentation typos
• Added ReadTheDocs configuration file

Infrastructure:

• Add testing and document support for Python 3.13

Changelog

Sourced from python-ldap's changelog.

Released 3.5.0 (unreleased)

Breaking:

• ldap.schema.models.SchemaElement.token_defaults class attribute had to go, we couldn't find a safe way to keep it working with subclasses and are unaware of any users either

API changes:

• The deprecated OPT_X_TLS option has been removed, as announced in the 3.4.3 release notes. The OPT_X_TLS_* option constants (such as OPT_X_TLS_NEWCTX and OPT_X_TLS_REQUIRE_CERT) are unaffected.
• ldap.DummyLock has been removed as it has been useless since Python3.7
• ldap.controls.KNOWN_RESPONSE_CONTROLS now only contains ResponseControl types
• Iterating ldap.schema.Entry now correctly iterates over the visible keys, not internal representation
• code better aligns with documentation:
  • ldap.controls.simple.AuthorizationIdentityResponseControl now decodes returned identity as documented
  • LDAPObject's *_s functions actually return None as advertised
  • LDIFParser now correctly ignores unknown url schemes rather than attaching None as value
  • People overriding SyncreplConsumer.syncrepl_present will no longer see SyncDoneControl.refreshDeletes have a value of None
• If using the search MixIn classes (including SyncreplConsumer) and replacing the relevant controls in KNOWN_RESPONSE_CONTROLS at the same time, make sure you subclass the original implementations
• Calling ldap.schema.SubSchema.get_structural_oc with incompatible STRUCTURAL object classes has produced undefined behaviour in the past and it does again. This and ldap.schema.{SubSchema,Entry}.attribute_types with DIT content rules enforced will raise an error in future versions

Fixes:

• ldap.controls.pwdpolicy.PasswordExpiredControl finally returns reported status
• corrected ldap.functions export list to remove long gone items

Deprecations:

• See above note for ldap.schema.SubSchema.get_structural_oc and its users
• ldap.schema.tokenizer.extract_tokens has been replaced with ldap.schema.tokenizer.parse_tokens and will go away eventually
• _ldap module is now a stub forwarding to ldap._ldap, _ldap will go away eventually

Infrastructure:

• Building from source now requires setuptools >= 77, needed for the PEP 639 license metadata in pyproject.toml
• Removed the [install] byte-compile options from setup.cfg, so locally built wheels no longer contain __pycache__ directories

... (truncated)

Commits

• bf666e9 Prepare a new release
• 464fdda Merge commit from fork
• 9f5b2ef Merge commit from fork
• f49bb2d Package python-ldap with pyproject.toml (#589)
• 6ee881c Add support for Python 3.13 (#576)
• 74c6eeb docs(ldapobject): fix typo in docstring
• 8a65862 fix(controls): make sure msg_id is not undefined in error case
• 73b3ec3 fix(ReconnectLDAPObject): Also reconnect on UNAVILABLE, CONNECT_ERROR and TIM...
• 94c6ab2 test: Implement test cases for reconnection handling
• cc98723 Add readthedocs configuration file
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.