chore: Bump vulnerable pytest

[alexander-alderman-webb]

Description

Resolve https://github.com/getsentry/sentry-conventions/security/dependabot/51

PR Checklist

• I have run yarn test and verified that the tests pass.
• I have run yarn generate to generate and format code and docs.

If an attribute was added:

• The attribute is in a namespace (e.g. nextjs.function_id, not function_id)
• I have used the correct value for pii (i.e. maybe or true. Use false only for values that should never be scrubbed such as IDs)

If an attribute was deprecated:

• I've followed the policies described in CONTRIBUTING.md

[github-actions]

Semver Impact of This PR

🟢 Patch (bug fixes)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

New Features ✨

Attributes

• Add calculated performance scores by loewenheim in #355
• Add rpc.response.status_code attribute by alexander-alderman-webb in #352
• Add rpc.method attribute by alexander-alderman-webb in #351
• Add app vitals start attributes by buenaflor in #353
• Add process.runtime.engine.* attributes by chargome in #347

Bug Fixes 🐛

• (attributes) Change several deprecation statuses to normalize to align with ingestion paths by constantinius in #350
• (create) Replace angle brackets in file names by loewenheim in #356

Internal Changes 🔧

• (gh) Remove myself from CODEOWNERS by lcian in #354

• Bump vulnerable pytest by alexander-alderman-webb in #360

• Bump vulnerable js packages by chargome in #359

---

_{🤖 This preview updates automatically when you update the PR.}