deps(python): bump limits from 3.13.0 to 5.6.0 in /backend

[dependabot]

Bumps limits from 3.13.0 to 5.6.0.

Release notes

Sourced from limits's releases.

5.6.0

Development

• Move all project metadata to pyproject
• Use uv for development
• Use hatch for package build
• Remove versioneer for versioning

5.5.0

Compatibility

• Relax upper bound of packaging requirement
• Increase upper bound of coredis requirement
• Increase upper bound of redis requirement

5.4.0

Feature

• Relax regular expression used in limits.parse and limits.parse_many to capture any granularity instead of just the hardcoded ones so that custom rate limits can also be extracted using the utility functions. Issue 279

Compatibility

• Add redis 8.0 to CI

5.3.0

Bug Fix

• Fix race condition during expiration of in-memory moving window limits that resulted in incorrectly removing unexpired entries. Issue 277

5.2.0

Bug Fix

• Fix incorrect behavior of the clear method for sliding window counter which effectively did not clear the sliding window for redis, memcached & in memory storage implementations. Issue 276

5.1.0

... (truncated)

Changelog

Sourced from limits's changelog.

v5.6.0

Release Date: 2025-09-29

• Development

  • Move all project metadata to pyproject
  • Use uv for development
  • Use hatch for package build
  • Remove versioneer for versioning

v5.5.0

Release Date: 2025-08-05

• Compatibility

  • Relax upper bound of packaging requirement
  • Increase upper bound of coredis requirement
  • Increase upper bound of redis requirement

v5.4.0

Release Date: 2025-06-16

• Feature

  • Relax regular expression used in limits.parse and limits.parse_many to capture any granularity instead of just the hardcoded ones so that custom rate limits can also be extracted using the utility functions. Issue 279 <https://github.com/alisaifee/limits/issues/279>_

• Compatibility

  • Add redis 8.0 to CI

v5.3.0

Release Date: 2025-06-13

• Bug Fix

  • Fix race condition during expiration of in-memory moving window limits that resulted in incorrectly removing unexpired entries. Issue 277 <https://github.com/alisaifee/limits/issues/277>_

v5.2.0

... (truncated)

Commits

• a85bf87 Update changelog for 5.6.0
• dec525e Fix readthedocs build config
• dd75f85 Update dependabot to use uv
• 36fd316 Update development docs to use uv
• d9368ec Update tagging script to use hatch
• e510a5a Update rtd build config to use uv
• 7a944c2 Use hatch / pyproject for build
• 3281e95 Move redis sentinel to bitnamilegacy
• 8ee64f2 Bump sphinxext-opengraph from 0.12.0 to 0.13.0 (#290)
• dfaa6dd Bump sphinxext-opengraph from 0.11.0 to 0.12.0 (#289)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Summary by cubic

Upgrade limits from 3.13.0 to 5.6.0 in the backend to pull in bug fixes and broader limit parsing. This improves correctness for sliding/moving window limits and may affect edge-case behavior.

• Migration
  • Verify rate limits behave as expected in Redis and in-memory backends.
  • If you use limits.parse/parse_many with custom granularities, confirm parsing still matches expectations.

^{Written for commit fc4eea8. Summary will update on new commits.}

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[cubic-dev-ai]

No issues found across 2 files