satisfy dependabot warnings

[jquast]

requirements-update.txt includes web libraries that often get flagged. this is only used for the code generation step, when fetching unicode.org data files. it really is not much of an issue

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (a858022) to head (a3489a1).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff            @@
##            master      #219   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           23        23           
  Lines         1525      1525           
  Branches       365       365           
=========================================
  Hits          1525      1525           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[codspeed-hq]

Merging this PR will not alter performance

✅ 88 untouched benchmarks

---

_{Comparing jq/dependabot (a3489a1) with master (a858022)}