chore(deps): Bump aiomqtt from 2.4.0 to 2.5.0

[dependabot]

Bumps aiomqtt from 2.4.0 to 2.5.0.

Release notes

Sourced from aiomqtt's releases.

v2.5.0

Fixed

• Fix the type hint for Message.payload from PayloadType to bytes (@​meronepy in #370)
• Let exceptions bubble up in Client.__aexit__ instead of suppressing them (@​yujia21 in #375)
• Load TLS certs from the executor thread (@​allenporter in #382)

Changelog

Sourced from aiomqtt's changelog.

[2.5.0] - 2026-01-04

Fixed

• Fix the type hint for Message.payload from PayloadType to bytes (@​meronepy in #370)
• Let exceptions bubble up in Client.__aexit__ instead of suppressing them (@​yujia21 in #375)
• Load TLS certs from the executor thread (@​allenporter in #382)

Commits

• 4e0be01 build: Update lock file
• c00738b build: Bump version for release
• ca652b0 docs: Update changelog for release
• e08754a Add PR #382 to changelog
• 949052f Load TLS certs from the executor thread
• fa96b10 test: remove unnecessary test on aexit
• 48f900f feat: raise disconnect error from failure point #344
• 7e821fe build: Update ruff
• 6830302 fix: Fix the type hint for Message.payload
• 2595695 Fix typing_extensions dep condition
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Automated Code Review

🔍 Linting Results Summary

✅ Black (Code Formatting) - PASSED

✅ Flake8 (Code Quality) - PASSED

✅ isort (Import Sorting) - PASSED

✅ MyPy (Type Checking) - PASSED

✅ Bandit (Security) - PASSED

✅ All Linting Checks Passed!

---

This comment was automatically generated by GitHub Actions. Check the Actions tab for detailed logs.

[github-actions]

📊 Pull Request Analysis Report

🧪 Test Results

Metric	Value
Total Tests	108
✅ Passed	108
❌ Failed	0
⏭️ Skipped	0
💥 Errors	0
📈 Success Rate	100.0%

📋 Coverage Report

Metric	Value
Overall Coverage	89.7%
Total Lines	765
Covered Lines	686
Missing Lines	79

📚 Documentation Report

Metric	Value
Documentation Coverage	100.0%
Status	✅ Up to date

📁 File Coverage Breakdown

• config/__init__.py: 100.0%
• config/config.py: 95.3%
• src/__init__.py: 100.0%
• src/caltopo_reporter.py: 95.5%
• src/gateway.py: 84.4%
• src/gateway_app.py: 83.6%
• src/mqtt_client.py: 92.0%
• src/persistent_dict.py: 90.9%
• src/utils.py: 100.0%

🎯 Recommendations

✅ Excellent Code Quality

• Great work maintaining high test pass rate and coverage!

---

📊 Analysis generated by GitHub Actions • View detailed test report