update requests per CVE-2024-35195

[geekosaur]

Template B: This PR does not modify behaviour or interface

E.g. the PR only touches documentation or tests, does refactorings, etc.

Include the following checklist in your PR:

• [x] Patches conform to the coding conventions.
• [x] Is this a PR that fixes CI? If so, it will need to be backported to older cabal release branches (ask maintainers for directions).

[geekosaur]

@mergify backport 3.12

[mergify[bot]]

backport 3.12

✅ Backports have been created

• #10109 update requests per CVE-2024-35195 (backport #10037) has been created for branch 3.12

[ulysses4ever]

Needs a merge label.

[geekosaur]

I completely forgot about it until I scanned through the open PRs a few minutes ago.