deps(deps-dev): update cython requirement from >=3.2.8 to >=3.2.9

[dependabot]

Updates the requirements on cython to permit the latest version.

Changelog

Sourced from cython's changelog.

3.2.9 (2026-07-24)

Bugs fixed

• Indexing into freshly created lists with an out-of-bounds index could crash. (Github issue :issue:7793)

• Function arguments with default values could end up uninitialised in closures, leading to crashes. Patch by Anthony Donlon. (Github issue :issue:7782)

• bytearray.append(None) could crash. The optimised code was also lacking concurrency guards. (Github issue :issue:7796)

• Some rare corner cases when concatenating text strings were resolved. (Github issue :issue:7799)

• Assignments of builtin string types to typedefs of object could erroneously be rejected. (Github issue :issue:7789)

• Subscripting type failed with a TypeError. (Github issue :issue:5563)

• Manually disabling CYTHON_VECTORCALL in CPython could lead to invalid C code. Patch by Florent Gallaire. (Github issue :issue:7807)

• Some internal Limited API version checks for Py3.12 were corrected. (Github issue :issue:7845)

3.2.8 (2026-06-30)

Bugs fixed

• Assigning a Python 3.14+ .__annotate__ function to a Cython compiled function no longer evaluates annotations eagerly. Fixes a regression with @functools.wraps() in Cython 3.2.6. Patch by Jelle Zijlstra. (Github issue :issue:7767)

• In freethreading Python, the necessary object keep-alive while executing user code in .__dealloc__() uses a safer scheme. Patch by Yaxing Cai. (Github issue :issue:7769)

• The local function state used by sys.monitoring read from uninitialised memory. (Github issue :issue:7774)

• The .ag_running flag attribute of async generators was always false on big-endian systems.

... (truncated)

Commits

• 58b8e6a Prepare release of 3.2.9.
• 211b66a Update changelog.
• 4815016 Fix a few Py_LIMITED_API comparsions (GH-7845)
• 6f3225e Disable type subscripting tests in Py3.8.
• 92cfd8b Disable Py3.9+ code in Py3.8.
• be32acf Update changelog.
• be4a966 Add special case for indexing type (GH-7810)
• 4052f59 [3.2.x] Update OS version for 3.2.x docs (#7814)
• 299791c [3.2.x] [Bug] Fix __Pyx_ArgsSlice_FASTCALL when CYTHON_VECTORCALL is disabled...
• 086398d Update changelog.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)