Update Python requirements, June 2022

[jwhitlock]

Dependabot will only open 5 PRs at a time until we're caught up. Let's catch up!

• gunicorn ( from 19.9.0 to 20.1.0 ) - Changelog - Python support updated, many fixes and documentation updates since 2018.
• django-cors-headers ( from 3.11.0 to 3.13.0 ) - History - Python 3.7 to 3.11 supported, Django 3.2 to 4.1 supported.
• whitenoise ( from 5.3.0 to 6.2.0 ) - Changelog - Python 3.7 to 3.11 supported, Django 3.2 to 4.1, tuneAccept-Encoding and Range header handling.
• black ( from 22.3.0 to 22.6.0 ) - Changes - Releases are date-based, supports some Python 3.11 and later features.
• jwcrypto ( from 1.0 to 1.3.1 ) - Releases - A number of changes, many in packaging and testing. We don't test our usage of jwcrypto, but I did try forwarding and replying to a mask locally with this update.
• google-measurement-protocol ( from 1.0.0 to 1.1.0 ) Commits - Avoid installing typing for Python 3.5 or later. Also, drop support for Python 3.4.
• requests ( from 2.25.1 to 2.28.0 ) - Updates - adds charset-normalizer dependency, drop Python 2.7, 3.5, and 3.6, and add requests.exceptions.JSONDecodeError wrapper.
• cryptography ( from 36.0.2 to 37.0.2 ) - Changelog - Use OpenSSL 3.0.3, deprecate OpenSSL 1.1.0. No changes to our usage of cryptography. We should switch our pyOpenSSL code to cryptography though...
• markus[datadog] ( from 4.0.0 to 4.0.1 ) - History - Markus uses a pytest plugin, no longer imports pytest
• django-filter ( from 21.1 to 22.1 ) - Changes - Calendar versioning, support updates: Python 3.7 through 3.10, Django 3.2 through 4.1.

[netlify]

✅ Deploy Preview for fx-relay-demo canceled.

Name	Link
🔨 Latest commit	84e767c
🔍 Latest deploy log	https://app.netlify.com/sites/fx-relay-demo/deploys/62bb7d2a4ce4f60008f07541

[jwhitlock]

Checked on https://dev.fxprivaterelay.nonprod.cloudops.mozgcp.net:

• Website loads, has CSP
• New alias created
• Alias forwards work
• Alias replies work

I'm going to self-approve this one, since there's almost no code, and I would have been able to approve if Dependabot had opened the PRs.