build(deps-dev): Update python-socketio requirement from >=5.0 to >=5.16.4

[dependabot]

Updates the requirements on python-socketio to permit the latest version.

Release notes

Sourced from python-socketio's releases.

Release 5.16.4

See CHANGES.md for release notes.

Changelog

Sourced from python-socketio's changelog.

python-socketio change log

Release 5.16.4 - 2026-08-07

• Delete incomplete binary packet when client disconnects (commit)

Release 5.16.3 - 2026-06-15

• Catch all exceptions in redis and rabbitmq client managers #1581 (commit)

Release 5.16.2 - 2026-05-21

• Prevent unnecessary resource allocations #1574 (commit)
• Add zizmor to CI builds #1570 (commit)

Release 5.16.1 - 2026-02-06

• Use configured JSON module in managers #1549 (commit)
• Admin UI fixes: remove duplicate tasks, report transport upgrades (commit)
• Switch to Furo documentation template (commit)
• Add Python free-threading to CI #1554 (commit)

Release 5.16.0 - 2025-12-24

• Address deprecation warnings (commit)
• Drop Python 3.8 and 3.9 from CI builds (commit)

Release 5.15.1 - 2025-12-16

• Restore support multiple arguments via pubsub emits #1540 (commit)

Release 5.15.0 - 2025-11-22

• Retry initial Redis connection #1534 ([commit #1](miguelgrinberg/python-socketio@1e903e1) [commit #2](miguelgrinberg/python-socketio@5e898a9))
• Correctly regenerate RabbitMQ binding after a connection failure #1516 (commit) (thanks Gritty_dev!)
• Support ext_type in the MsgPackPacket class #1521 (commit)
• Support sending bytesarrays when using pub/sub managers (commit)
• Fix typos in documentation #1520 (commit) (thanks Lê Nam Khánh!)
• Improvements to the logging documentation (commit)

Release 5.14.3 - 2025-10-29

• Support Python's native ConnectionRefusedError exception to reject a connection #1515 (commit)
• Push binary data to the aiopika client manager #1514 (commit)

Release 5.14.2 - 2025-10-15

• Restore binary message support in message queue setups #1509 (commit)
• Fix formatting of client connection error #1507 (commit)
• Add 3.14 and pypy-3.11 CI tasks (commit)

... (truncated)

Commits

• d0cf609 Release 5.16.4
• 4bec3ef Delete incomplete binary packet when client disconnects
• 1e44ea3 Bump socket.io-parser from 4.2.6 to 4.2.7 in /examples/client/javascript (#15...
• a8568a4 Bump aiohttp from 3.14.1 to 3.14.3 in /examples/server/aiohttp (#1591) #nolog
• 3826ad4 Bump body-parser from 1.20.5 to 1.20.6 in /examples/client/javascript (#1590)...
• 2d21903 Remove failing codecov service
• cb55851 Bump aiohttp from 3.14.0 to 3.14.1 in /examples/server/aiohttp (#1584) #nolog
• 71585b1 Bump tornado from 6.5.5 to 6.5.7 in /examples/server/tornado (#1583) #nolog
• 02950be Version 5.16.4.dev0
• 36c550f Release 5.16.3
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[pip-install-python]

Closing per the network's dependabot policy: this is a floor-raise on a range requirement. Floors encode minimum-compatibility knowledge (the gunicorn floor IS the CVE fact); the resolver already installs the latest release under them, and raising the floor erases that meaning while adding none. Security updates are unaffected — they arrive through GitHub's separate security-update channel. Floor moves happen deliberately via the template's sync specs, every encoding at once.

— 2plot-network ops seat (dependabot-triage)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.