Update pymongo requirement from ==4.8.* to >=4.8,<4.10

[dependabot]

Updates the requirements on pymongo to permit the latest version.

Release notes

Sourced from pymongo's releases.

PyMongo 4.9.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-9-released/297833

Changelog

Sourced from pymongo's changelog.

Changelog

Changes in Version 4.9.0

.. warning:: Driver support for MongoDB 3.6 reached end of life in April 2024. PyMongo 4.9 will be the last release to support MongoDB 3.6.

.. warning:: PyMongo 4.9 refactors a large portion of internal APIs to support the new asynchronous API beta. As a result, versions of Motor older than 3.6 are not compatible with PyMongo 4.9. Existing users of these versions must either upgrade to Motor 3.6 and PyMongo 4.9, or cap their PyMongo version to < 4.9. Any applications that use private APIs may also break as a result of these internal changes.

PyMongo 4.9 brings a number of improvements including:

• Added support for MongoDB 8.0.
• Added support for Python 3.13.
• A new beta asynchronous API with full asyncio support. This new asynchronous API is a work-in-progress that may change during the beta period before the full release.
• Added support for In-Use Encryption range queries with MongoDB 8.0. Added :attr:~pymongo.encryption.Algorithm.RANGE. sparsity and trim_factor are now optional in :class:~pymongo.encryption_options.RangeOpts.
• Added support for the "delegated" option for the KMIP master_key in :meth:~pymongo.encryption.ClientEncryption.create_data_key.
• pymongocrypt>=1.10 is now required for :ref:In-Use Encryption support.
• Added :meth:~pymongo.cursor.Cursor.to_list to :class:~pymongo.cursor.Cursor, :class:~pymongo.command_cursor.CommandCursor, :class:~pymongo.asynchronous.cursor.AsyncCursor, and :class:~pymongo.asynchronous.command_cursor.AsyncCommandCursor as an asynchronous-friendly alternative to list(cursor).
• Added :meth:~pymongo.mongo_client.MongoClient.bulk_write to :class:~pymongo.mongo_client.MongoClient and :class:~pymongo.asynchronous.mongo_client.AsyncMongoClient, enabling users to perform insert, update, and delete operations against mixed namespaces in a minimized number of round trips. Please see :doc:examples/client_bulk for more information.
• Added support for the namespace parameter to the :class:~pymongo.operations.InsertOne, :class:~pymongo.operations.ReplaceOne, :class:~pymongo.operations.UpdateOne, :class:~pymongo.operations.UpdateMany, :class:~pymongo.operations.DeleteOne, and :class:~pymongo.operations.DeleteMany operations, so they can be used in the new :meth:~pymongo.mongo_client.MongoClient.bulk_write.
• Added :func:repr support to :class:bson.tz_util.FixedOffset.
• Fixed a bug where PyMongo would raise InvalidBSON: unhashable type: 'tzfile' when using :attr:~bson.codec_options.DatetimeConversion.DATETIME_CLAMP or :attr:~bson.codec_options.DatetimeConversion.DATETIME_AUTO with a timezone from dateutil.
• Fixed a bug where PyMongo would raise InvalidBSON: date value out of range

... (truncated)

Commits

• 8b26d4b BUMP 4.9.1
• d0772f2 PYTHON-4773 - Async PyMongo Beta docs update (#1868)
• 2ddd16d BUMP 4.10.0.dev0
• 699d962 BUMP 4.9
• 2c432b5 PYTHON-4768 - Fix atlas connection tests and cleanup uses of raw MongoClients...
• 6d472a1 PYTHON-4738 Skip encryption test_fork on PyPy (#1865)
• 9a71be1 PYTHON-4740 Convert asyncio.TimeoutError to socket.timeout for compat (#1864)
• c136684 PYTHON-4585 Cursor.to_list does not apply client's timeoutMS setting (#1860)
• 40ebc16 PYTHON-4764 Update to use current supported EVG hosts (#1858)
• 163e3d4 PYTHON-4738 - Make test_encryption.TestClientSimple.test_fork sync-only (#1862)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[amotl]

@dependabot recreate

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.