Update cython requirement from <1 to <4 in /sdks/python

[dependabot]

Updates the requirements on cython to permit the latest version.

Changelog

Sourced from cython's changelog.

3.0.0 unified release notes

Cython 3.0.0 has been a very large effort that cleaned up many old warts, introduced many new features, and introduces a couple of intentional behaviour changes, even though the goal remained to stay compatible as much as possible with Cython 0.29.x. For details, see the migration guide_.

.. _migration guide: https://cython.readthedocs.io/en/latest/src/userguide/migrating_to_cy30.html

As the development was spread out over several years, a lot of things have happened in the meantime. Many crucial bugfixes and some features were backported to 0.29.x and are not strictly speaking "new" in Cython 3.0.0.

Major themes in 3.0.0

Compatibility with Python

Since Cython 3.0.0 started development, CPython 3.8-3.11 were released. All these are supported in Cython, including experimental support for the in-development CPython 3.12. On the other end of the spectrum, support for Python 2.6 was dropped.

Cython interacts very closely with the C-API of Python, which is where most of the adaptation work happens. Independently, Cython strives to be able to parse newer Python constructs for use with its pure python_ mode, which has been a focus. In short, this allows to compile a wider range of Python code into optimized C code.

.. _pure python: https://cython.readthedocs.io/en/latest/src/tutorial/pure.html

Implemented PEPs ^^^^^^^^^^^^^^^^

• PEP-3131_: Supporting Non-ASCII Identifiers (Github issue :issue:2601)
• PEP-479_: generator_stop (enabled by default for language_level=3) (Github issue :issue:2580)
• PEP-487_: Simpler customisation of class creation (Github issue :issue:2781)
• PEP-563_: Postponed Evaluation of Annotations (Github issue :issue:3285)
• PEP-570_: Positional-Only Parameters (Github issue :issue:2915)
• PEP-572_: Assignment Expressions (a.k.a. the walrus operator :=) (Github issue :issue:2636)
• PEP-590_: Vectorcall protocol (Github issue :issue:2263)
• PEP-614_: Relaxing Grammar Restrictions On Decorators (Github issue :issue:4570)

Typing support in the sense of PEP-484_ (Github issues :issue:3949, :issue:4243) and PEP-560_ (Github issues :issue:2753, :issue:3537, :issue:3764) was also improved.

.. _PEP-3131: https://www.python.org/dev/peps/pep-3131 .. _PEP-479: https://www.python.org/dev/peps/pep-0479

... (truncated)

Commits

• 2f3a781 Prepare release of Cython 3.0.0.
• ac4f0bb Update changelog.
• 039ef7c In Py2, the extension type might get cleaned up before the objects at system ...
• 8edd90a Prepare second release candidate 3.0.0rc2.
• 7efee97 Update changelog.
• c0a3556 Test including "complex.h" in MSVC (#5527)
• 36a3702 Write the version to stderr as before, but only if stderr is actually capture...
• 8169009 Update changelog and version.
• 864e563 Support hex constants in enums (GH-5525)
• 0c6141a Document @​cython.with_gil (GH-5522)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

Merging #27532 (2e40945) into master (60a609c) will decrease coverage by 0.02%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master   #27532      +/-   ##
==========================================
- Coverage   71.16%   71.15%   -0.02%     
==========================================
  Files         861      861              
  Lines      104560   104560              
==========================================
- Hits        74413    74398      -15     
- Misses      28599    28614      +15     
  Partials     1548     1548              

Flag	Coverage Δ
go	53.67% <ø> (-0.05%)	⬇️
python	80.34% <ø> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

see 6 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[github-actions]

Assigning reviewers. If you would like to opt out of this review, comment assign to next reviewer:

R: @AnandInguva for label python.

Available commands:

• stop reviewer notifications - opt out of the automated review tooling
• remind me after tests pass - tag the comment author after tests pass
• waiting on author - shift the attention set back to the author (any comment or push by the author will return the attention set to the reviewers)

The PR bot will only process comments in the main thread (not review comments).

[AnandInguva]

R: @jrmccluskey

[github-actions]

Stopping reviewer notifications for this pull request: review requested by someone other than the bot, ceding control

[jrmccluskey]

We're going to do this one manually since it's a bigger leap than just updating base_image_requirements.txt, tracking issue is at #27526

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.