build(deps): update django-cors-headers requirement from <5.0.0,>=4.7.0 to >=4.9.0,<5.0.0 in /apps/identity-service

[dependabot]

Updates the requirements on django-cors-headers to permit the latest version.

Changelog

Sourced from django-cors-headers's changelog.

4.9.0 (2025-09-18)

• Support Django 6.0.

4.8.0 (2025-09-08)

• Support Python 3.14.

4.7.0 (2025-02-06)

• Support Django 5.2.

4.6.0 (2024-10-29)

• Drop Django 3.2 to 4.1 support.

4.5.0 (2024-10-12)

• Drop Python 3.8 support.

• Support Python 3.13.

4.4.0 (2024-06-19)

• Support Django 5.1.

4.3.1 (2023-11-14)

• Fixed ASGI compatibility on Python 3.12.

  Thanks to Adrian Capitanu for the report in Issue [#908](https://github.com/adamchainz/django-cors-headers/issues/908) <https://github.com/adamchainz/django-cors-headers/issues/908>__ and Rooyal in PR [#911](https://github.com/adamchainz/django-cors-headers/issues/911) <https://github.com/adamchainz/django-cors-headers/pull/911>__.

4.3.0 (2023-10-11)

• Avoid adding the access-control-allow-credentials header to unallowed responses.

  Thanks to Adam Romanek in PR [#888](https://github.com/adamchainz/django-cors-headers/issues/888) <https://github.com/adamchainz/django-cors-headers/pull/888>__.

• Support Django 5.0.

4.2.0 (2023-07-10)

... (truncated)

Commits

• a3a3ad2 Version 4.9.0
• 2f5a94b Correct testing of Django 6.0 (#1015)
• 4356514 Support Django 6.0 (#1014)
• eeaa041 Version 4.8.0
• b760e4d Support Python 3.14 (#1013)
• bf6abfb [pre-commit.ci] pre-commit autoupdate (#1012)
• 5d0c651 Upgrade dependencies (#1011)
• 873fd5f Use uvx to run tox on GitHub Actions (#1010)
• f8aa330 [pre-commit.ci] pre-commit autoupdate (#1009)
• b04460f [pre-commit.ci] pre-commit autoupdate (#1008)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, python, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.