Bump restrictedpython from 8.2 to 8.4

[dependabot]

Bumps restrictedpython from 8.2 to 8.4.

Changelog

Sourced from restrictedpython's changelog.

8.4 (2026-07-10)

• Add type annotations to the package code. For clarification, restricted Python code does not support type annotations.

• Allow ast.Module, ast.Expression and ast.Interactive as body in compile_restricted_function

• Disallow mode="function" in compile_restricted (it never worked).

• Prevent access to string.Formatter and its unsafe traversal methods via safer_getattr.

8.3 (2026-06-16)

• Switch to PyPI Trusted Publishing for the package release process

• Also validate positional-only argument names (parameters before /) so they cannot start with an underscore, closing a sandbox escape where a positional-only parameter could shadow an injected protected name such as _getattr_, _getitem_, _write_ or _print_.

8.3a1.dev0 (2026-05-29)

• Allow to use the package with Python 3.15 -- Caution: No security audit has been done so far.

Commits

• aff96dd Prepare release 8.4
• 3b47440 Merge commit from fork
• bd256e6 Type Annotations for RestrictedPython (#317)
• 643a43f disallow mode="function" in compile_restricted (#326)
• bbbc3b3 compile_restricted_function fix (docs+code) (#321)
• 059f5c6 compile_restricted_mode fix (docs + code) (#324)
• f1b33e4 update-docs (#320)
• a494259 update docs (#323)
• b9bd4aa vb [ci skip]
• c2250bd Prepare release 8.3 and switch to PyPI Trusted Publishing
• Additional commits viewable in compare view

[cedric05]

@dependabot rebase.

[dependabot]

Superseded by #443.