Update cairosvg requirement from >=2.6.0 to >=2.9.0

[dependabot]

Updates the requirements on cairosvg to permit the latest version.

Release notes

Sourced from cairosvg's releases.

2.9.0

WARNING: this is a security update.

Using a lot of recursively nested use tags could lead to long rendering times with relatively small inputs. CairoSVG now stops rendering when more than 100k use tags are rendered.

Using the --unsafe option allows to render larger documents.

• Drop support of Python 3.9, add support of Python 3.14

Changelog

Sourced from cairosvg's changelog.

Version 2.9.0 released on 2026-03-13

WARNING: this is a security update.

Using a lot of recursively nested use tags could lead to long rendering times with relatively small inputs. CairoSVG now stops rendering when more than 100k use tags are rendered.

Using the --unsafe option allows to render larger documents.

• Drop support of Python 3.9, add support of Python 3.14

Version 2.8.2 released on 2025-05-15

• Allow both Unicode strings and bytes as input

Version 2.8.1 released on 2025-05-14

• Allow both text- and bytes-based file objects as input

Version 2.8.0 released on 2025-05-12

• Drop support of Python 3.7 and 3.8, add support of Python 3.12 and 3.13
• Optimize math operations
• Use pathlib
• Close paths for ellipses and circles
• Fix output ratio for SVG surfaces
• Avoid endless loops when updating def attributes
• Round PNG size
• Don’t crash when more than 2 values are given to translate and scale functions

Version 2.7.1 released on 2023-08-05

• Don’t draw clipPath when defined after reference
• Handle evenodd fill rule with gradients and patterns
• Fix ratio and clip for "image" tags with no size
• Handle data-URLs in safe mode
• Use f-strings

Version 2.7.0 released on 2023-03-20

... (truncated)

Commits

• fe5cae5 Version 2.9.0
• 6dde868 Abort when more than 100k referenced elements are rendered
• a6b3a98 Cut long line again
• ce8b51d Cut long line
• b7818c9 Clarify unsafe option scope without removing security warning
• 9e8c6ed Version 2.8.2
• 1c28b57 De-duplicate input string encoding
• b4670ec Merge pull request #443 from marcelometal/ensure-bytestring-type-before-gzip
• 245b3f2 Ensure bytestring is bytes before checking for gzip header
• e5128ec Version 2.8.1
• Additional commits viewable in compare view