chore(deps): Update cattrs requirement from <25.3,>=1.8 to >=1.8,<25.4 in /packages/@jsii/python-runtime (#4948)

Updates the requirements on [cattrs](https://github.com/python-attrs/cattrs) to permit the latest version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/python-attrs/cattrs/releases">cattrs's releases</a>.</em></p>
<blockquote>
<h2>v25.3.0</h2>
<ul>
<li><strong>Potentially breaking</strong>: <a href="https://docs.python.org/3/library/collections.abc.html#collections.abc.Set">Abstract sets</a> are now structured into frozensets.
This allows hashability, better immutability and is more consistent with the <a href="https://docs.python.org/3/library/collections.abc.html#collections.abc.Set"><code>collections.abc.Set</code></a> type.
See <a href="https://catt.rs/en/latest/migrations.html#abstract-sets-structuring-into-frozensets">Migrations</a> for steps to restore legacy behavior. (<a href="https://redirect.github.com/python-attrs/cattrs/pull/686">#686</a>)</li>
<li>Python 3.14 is now supported and part of the test matrix. (<a href="https://redirect.github.com/python-attrs/cattrs/pull/653">#653</a>)</li>
<li>Fix unstructuring NewTypes with the {class}<code>BaseConverter</code>. (<a href="https://redirect.github.com/python-attrs/cattrs/pull/684">#684</a>)</li>
<li>Make some Hypothesis tests more robust. (<a href="https://redirect.github.com/python-attrs/cattrs/pull/684">#684</a>)</li>
<li>{func}<code>cattrs.strategies.include_subclasses</code> now works with generic parent classes and the tagged union strategy. (<a href="https://redirect.github.com/python-attrs/cattrs/pull/683">#683</a>)</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/danarmak"><code>@​danarmak</code></a> made their first contribution in <a href="https://redirect.github.com/python-attrs/cattrs/pull/683">python-attrs/cattrs#683</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/python-attrs/cattrs/compare/v25.2.0...v25.3.0">https://github.com/python-attrs/cattrs/compare/v25.2.0...v25.3.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/python-attrs/cattrs/blob/main/HISTORY.md">cattrs's changelog</a>.</em></p>
<blockquote>
<h2>25.3.0 (2025-10-07)</h2>
<ul>
<li><strong>Potentially breaking</strong>: <a href="https://docs.python.org/3/library/collections.abc.html#collections.abc.Set">Abstract sets</a> are now structured into frozensets.
This allows hashability, better immutability and is more consistent with the <a href="https://docs.python.org/3/library/collections.abc.html#collections.abc.Set"><code>collections.abc.Set</code></a> type.
See <a href="https://catt.rs/en/latest/migrations.html#abstract-sets-structuring-into-frozensets">Migrations</a> for steps to restore legacy behavior.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/686">#686</a>)</li>
<li>Python 3.14 is now supported and part of the test matrix.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/653">#653</a>)</li>
<li>Fix unstructuring NewTypes with the {class}<code>BaseConverter</code>.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/684">#684</a>)</li>
<li>Make some Hypothesis tests more robust.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/684">#684</a>)</li>
<li>{func}<code>cattrs.strategies.include_subclasses</code> now works with generic parent classes and the tagged union strategy.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/683">#683</a>)</li>
</ul>
<h2>25.2.0 (2025-08-31)</h2>
<ul>
<li><strong>Potentially breaking</strong>: Sequences are now structured into tuples.
This allows hashability, better immutability and is more consistent with the <a href="https://docs.python.org/3/library/collections.abc.html#collections.abc.Sequence"><code>collections.abc.Sequence</code></a> type.
See <a href="https://catt.rs/en/latest/migrations.html#sequences-structuring-into-tuples">Migrations</a> for steps to restore legacy behavior.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/663">#663</a>)</li>
<li>Add a <code>use_alias</code> parameter to {class}<code>cattrs.Converter</code>.
{func}<code>cattrs.gen.make_dict_unstructure_fn_from_attrs</code>, {func}<code>cattrs.gen.make_dict_unstructure_fn</code>,
{func}<code>cattrs.gen.make_dict_structure_fn_from_attrs</code>, {func}<code>cattrs.gen.make_dict_structure_fn</code>
and {func}<code>cattrs.gen.typeddicts.make_dict_structure_fn</code> will use the value for the <code>use_alias</code> parameter from the given converter by default now.
If you're using these functions directly, the old behavior can be restored by passing in the desired value directly.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/596">#596</a> <a href="https://redirect.github.com/python-attrs/cattrs/pull/660">#660</a>)</li>
<li>The <a href="https://catt.rs/en/stable/strategies.html#union-passthrough">union passthrough strategy</a> now by default accepts ints for unions that contain floats but not ints,
when configured to be able to handle both ints and floats.
This more closely matches the <a href="https://typing.python.org/en/latest/spec/special-types.html#special-cases-for-float-and-complex">current typing behavior</a>.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/656">#656</a> <a href="https://redirect.github.com/python-attrs/cattrs/pull/668">#668</a>)</li>
<li>Fix unstructuring of generic classes with stringified annotations.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/661">#661</a> <a href="https://redirect.github.com/python-attrs/cattrs/issues/662">#662</a></li>
<li>For {class}<code>cattrs.errors.StructureHandlerNotFoundError</code> and {class}<code>cattrs.errors.ForbiddenExtraKeysError</code>
correctly set {attr}<code>BaseException.args</code> in <code>super()</code> and hence make them pickable.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/666">#666</a>)</li>
<li>The default disambiguation hook factory is now only enabled for converters with <code>unstructure_strat=AS_DICT</code> (the default).
Since the strategy doesn't support tuples, it is skipped for <code>unstructure_strat=AS_TUPLE</code> converters.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/673">#673</a>)</li>
<li>Switch to <a href="https://docs.astral.sh/uv/"><code>uv</code></a> and <a href="https://just.systems/man/en/"><code>just</code></a> in lieu of PDM, tox and Make.
See <a href="https://catt.rs/en/v25.2.0/contributing.html#get-started">the Contributing section</a> for new workflow instructions.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/671">#671</a>)</li>
</ul>
<h2>25.1.1 (2025-06-04)</h2>
<ul>
<li>Fixed <code>AttributeError: no attribute '__parameters__'</code> while structuring attrs classes that inherit from parametrized generic aliases from <code>collections.abc</code>.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/654">#654</a> <a href="https://redirect.github.com/python-attrs/cattrs/pull/655">#655</a>)</li>
</ul>
<h2>25.1.0 (2025-05-31)</h2>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/python-attrs/cattrs/commit/f8663b3a67e222aaf302ac4a04a892ec39090e1e"><code>f8663b3</code></a> v25.3.0</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/88af007e5f601b54b50a0aca72c0d0f876ce02e2"><code>88af007</code></a> Enable Python 3.14 (<a href="https://redirect.github.com/python-attrs/cattrs/issues/653">#653</a>)</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/5a1bb1a598cab8038bce8030ec32602815ad64ad"><code>5a1bb1a</code></a> Split <code>test_baseconverter.py::test_310_union_field_roundtrip</code> into two to mak...</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/f0c0a5383e78a92dc858326dc0c298d1647356b7"><code>f0c0a53</code></a> Structure abstract sets to frozensets (<a href="https://redirect.github.com/python-attrs/cattrs/issues/686">#686</a>)</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/64f6305ff9105279be905129235c391bc0d830d5"><code>64f6305</code></a> Fix include_subclasses strategy with a generic parent and tagged_union (backp...</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/75bfffac24957a7f034ab455513b37359e3e41c2"><code>75bfffa</code></a> Improve Hypothesis test robustness (<a href="https://redirect.github.com/python-attrs/cattrs/issues/684">#684</a>)</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/727aa894d48bbd31ed1923627ed160a90932d077"><code>727aa89</code></a> v25.2.0</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/7943a6a80fc0ec3a03468dd4c4eff123620625ad"><code>7943a6a</code></a> Added missing imports to hook factory decorator example. (<a href="https://redirect.github.com/python-attrs/cattrs/issues/677">#677</a>)</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/3e242bf41e60ecc91b25bf5c7700e39161817775"><code>3e242bf</code></a> Update coverage, use the new <code>run.patch</code> setting (<a href="https://redirect.github.com/python-attrs/cattrs/issues/676">#676</a>)</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/53fb4519e1a48db6b2a35e2761eb78414c5fc17c"><code>53fb451</code></a> Introduce Justfile, use uv (<a href="https://redirect.github.com/python-attrs/cattrs/issues/671">#671</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/python-attrs/cattrs/compare/v1.8.0...v25.3.0">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Author: dependabot[bot]

packages/@jsii/python-runtime/setup.py

@@ -31,7 +31,7 @@
     },
     install_requires=[
         "attrs>=21.2,<26.0",
-        "cattrs>=1.8,<25.3",
+        "cattrs>=1.8,<25.4",
         "importlib_resources>=5.2.0",
         "publication>=0.0.3",  # This is used by all generated code.
         # 4.3.0 is incompatible with generated bindings, see https://github.com/aws/jsii/issues/4658