Update yarl requirement from ~=1.8.2 to ~=1.9.1

[dependabot]

Updates the requirements on yarl to permit the latest version.

Release notes

Sourced from yarl's releases.

1.9.1

Bugfixes

• Marked tests that fail on older Python patch releases (< 3.7.10, < 3.8.8 and < 3.9.2) as expected to fail due to missing a security fix for CVE-2021-23336. ((#850)_)

Changelog

Sourced from yarl's changelog.

1.9.1 (2023-04-21)

Bugfixes

• Marked tests that fail on older Python patch releases (`_)

1.9.0 (2023-04-19)

This release was never published to PyPI, due to issues with the build process.

Features

• Added URL.joinpath(*elements), to create a new URL appending multiple path elements. ([#704](https://github.com/aio-libs/yarl/issues/704) <https://github.com/aio-libs/yarl/issues/704>_)
• Made :py:meth:URL.__truediv__ return NotImplemented if called with an unsupported type — by :user:michaeljpeters. ([#832](https://github.com/aio-libs/yarl/issues/832) <https://github.com/aio-libs/yarl/issues/832>_)

Bugfixes

• Path normalisation for absolute URLs no longer raises a ValueError exception when .. segments would otherwise go beyond the URL path root. ([#536](https://github.com/aio-libs/yarl/issues/536) <https://github.com/aio-libs/yarl/issues/536>_)
• Fixed an issue with update_query() not getting rid of the query when argument is None. ([#792](https://github.com/aio-libs/yarl/issues/792) <https://github.com/aio-libs/yarl/issues/792>_)
• Added some input restrictions on with_port() function to prevent invalid boolean inputs or out of valid port inputs; handled incorrect 0 port representation. ([#793](https://github.com/aio-libs/yarl/issues/793) <https://github.com/aio-libs/yarl/issues/793>_)
• Made :py:meth:URL.build raise a :py:exc:TypeError if the host argument is :py:data:None — by :user:paulpapacz. ([#808](https://github.com/aio-libs/yarl/issues/808) <https://github.com/aio-libs/yarl/issues/808>_)
• Fixed an issue with update_query() getting rid of the query when the argument is empty but not None. ([#845](https://github.com/aio-libs/yarl/issues/845) <https://github.com/aio-libs/yarl/issues/845>_)

Misc

• [#220](https://github.com/aio-libs/yarl/issues/220) <https://github.com/aio-libs/yarl/issues/220>_

1.8.2 (2022-12-03)

This is the first release that started shipping wheels for Python 3.11.

1.8.1 (2022-08-01)

Misc

... (truncated)

Commits

• 6f06f5c Bump the project version to 1.9.1
• 76b2fd0 Mark semicolon-based tests as xfail in specific cases (#852)
• a42bda2 Bump the project version to 1.9.0
• 32cfc2f Support External Classes' __rtruediv__ (#831)
• 164cab0 test_url_query: Expand tests (#220)
• d0ee035 Fix minor test issues (#847)
• eb2f08f Include test for #845 (#846)
• 22df0bb update_query({}) should be a no-op. (#845)
• cc509d1 Bump mypy from 0.971 to 1.2.0 (#841)
• ff38638 Bump sphinx from 5.3.0 to 6.1.3 (#811)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #123.