chore(deps-dev): update astroid requirement from <4 to <5

[dependabot]

Updates the requirements on astroid to permit the latest version.

Release notes

Sourced from astroid's releases.

v4.1.2

What's New in astroid 4.1.2?

Release date: 2026-03-22

• Fix crash accessing property fset in generic classes with type annotations. Closes #2996

• Fix infinite recursion caused by cyclic inference in Constraint.

• Fix RecursionError in _compute_mro() when circular class hierarchies are created through runtime name rebinding. Circular bases are now resolved to the original class instead of recursing.

  Closes #2967 Closes pylint-dev/pylint#10821

• Fix DuplicateBasesError crash in dataclass transform when a class has duplicate bases in its MRO (e.g., Protocol appearing both directly and indirectly). Catch MroError at .mro() call sites in brain_dataclasses.py, consistent with the existing pattern elsewhere.

  Closes #2628

• Fix FunctionModel returning descriptor attributes for builtin functions.

  Closes #2743

• Catch MemoryError when inferring f-strings with extremely large format widths (e.g. f'{0:11111111111}') so that inference yields Uninferable instead of crashing.

  Closes #2762

• Fix ValueError in __str__/repr and error messages when nodes have extreme values (very long identifiers or large integers). Clamp pprint width to a minimum of 1 and truncate oversized values in error messages.

  Closes #2764

Changelog

Sourced from astroid's changelog.

What's New in astroid 4.1.2?

Release date: 2026-03-22

• Fix crash accessing property fset in generic classes with type annotations. Closes #2996

• Fix infinite recursion caused by cyclic inference in Constraint.

• Fix RecursionError in _compute_mro() when circular class hierarchies are created through runtime name rebinding. Circular bases are now resolved to the original class instead of recursing.

  Closes #2967 Closes pylint-dev/pylint#10821

• Fix DuplicateBasesError crash in dataclass transform when a class has duplicate bases in its MRO (e.g., Protocol appearing both directly and indirectly). Catch MroError at .mro() call sites in brain_dataclasses.py, consistent with the existing pattern elsewhere.

  Closes #2628

• Fix FunctionModel returning descriptor attributes for builtin functions.

  Closes #2743

• Catch MemoryError when inferring f-strings with extremely large format widths (e.g. f'{0:11111111111}') so that inference yields Uninferable instead of crashing.

  Closes #2762

• Fix ValueError in __str__/repr and error messages when nodes have extreme values (very long identifiers or large integers). Clamp pprint width to a minimum of 1 and truncate oversized values in error messages.

  Closes #2764

What's New in astroid 4.1.1?

Release date: 2026-02-22

• Let UnboundMethodModel inherit from FunctionModel to improve inference of dunder methods for unbound methods.

  Refs #2741

• Filter Unknown from UnboundMethod and Super special attribute

... (truncated)

Commits

• 91dac13 Bump astroid to 4.1.2, update changelog (#3011)
• 796eba8 objectmodel: fix crash analyzing property fset in generic classes with type a...
• ca814f0 Update CI workflow to include maintenance branch (#2999)
• 7593877 [Backport maintenance/4.1.x] Fix cyclic inference by constraints (#2998)
• 3f63f90 Fix builtin functions incorrectly exposing descriptor attributes (#2983)
• be7479e Fix ValueError in str/repr and error messages with extreme values (#2971)
• 1c9938d Fix RecursionError in _compute_mro() on circular class hierarchies (#2968)
• 98938ad [Backport maintenance/4.1.x] Fix DuplicateBasesError crash in dataclass trans...
• 33fabe0 [Backport maintenance/4.1.x] Fix MemoryError when inferring f-string with lar...
• f11d7ae Bump astroid to 4.1.1, update changelog
• Additional commits viewable in compare view

[juhannc]

@dependabot rebase

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.