Fix #1514.

Previously, it was reported incorrectly for fragmented messages.

Fix #1522.

Fix previous commit on Python 3.9.

All debug messages and only debug messages should have them.

Fix #1501.

There were 70 links to https://datatracker.ietf.org/doc/html/
vs. 15 links https://www.rfc-editor.org/rfc/.

Also :rfc:`....` links to https://datatracker.ietf.org/doc/html/
by default.

While https://www.ietf.org/process/rfcs/#introduction says:

> The RFC Editor website is the authoritative site for RFCs.

the IETF Datatracker looks a bit better and has more information.

Fix #1539.

Fix #1538.

Fix #1540.

Also add state to threading implementation.

Fix #1537.

PyPy v7.3.17 no longer provides PyPy 3.9.

Also the test suite was flaky under PyPy 3.9.

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix #1680.

Refs #1662.

Fix #1664.

Except when specifically contrasting it with the legacy implementation.

Fix #1644.

See python-trio/sphinxcontrib-trio#399

Refs #1662.

Refs #1641.

This commit will be reverted just after making a release.

Bumps [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) from 3.3.0 to 3.3.1.
- [Release notes](https://github.com/pypa/cibuildwheel/releases)
- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)
- [Commits](pypa/cibuildwheel@v3.3.0...v3.3.1)

---
updated-dependencies:
- dependency-name: pypa/cibuildwheel
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Add support for the new following architectures:
- armv7l
- ppc64le
- riscv64
- s390x

riscv64 support was added in cibuildwheel 3.1.2 [1], so we need a more
recent version of it. Uses the current latest version which is 3.3.1

[1]: https://cibuildwheel.pypa.io/en/stable/changelog/#v312

Signed-off-by: Julien Stephan <jstephan@baylibre.com>

This reverts commit 740c8d3.

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

attest-build-provenance is just a wrapper around attest nowadays.

Bumps [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) from 3.3.1 to 3.4.0.
- [Release notes](https://github.com/pypa/cibuildwheel/releases)
- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)
- [Commits](pypa/cibuildwheel@v3.3.1...v3.4.0)

---
updated-dependencies:
- dependency-name: pypa/cibuildwheel
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Given the lack of established best practicesfor handling redirects
on WebSocket connections, we mimic best practices for HTTP libraries,
even though vulnerabilities affecting HTTP don't always translate to
WebSocket, notably because it's unlikely that an attacker would be
able to control the URI to which a Python WebSocket client connects,
without controlling the client entirely.

Thank Nadav Magier for reporting this security hardening opportunity.