chore(deps): Bump cython from 3.2.5 to 3.2.8 in /tests

[dependabot]

Bumps cython from 3.2.5 to 3.2.8.

Changelog

Sourced from cython's changelog.

3.2.8 (2026-06-30)

Bugs fixed

• Assigning a Python 3.14+ .__annotate__ function to a Cython compiled function no longer evaluates annotations eagerly. Fixes a regression with @functools.wraps() in Cython 3.2.6. Patch by Jelle Zijlstra. (Github issue :issue:7767)

• In freethreading Python, the necessary object keep-alive while executing user code in .__dealloc__() uses a safer scheme. Patch by Yaxing Cai. (Github issue :issue:7769)

• The local function state used by sys.monitoring read from uninitialised memory. (Github issue :issue:7774)

• The .ag_running flag attribute of async generators was always false on big-endian systems.

3.2.6 (2026-06-24)

Bugs fixed

• @functools.wraps() was broken in Py3.14+ for Cython compiled functions. (Github issue :issue:7675)

• A double-free in the t-string code was fixed. (Github issue :issue:7712)

• The - operator declarations for iterators in libcpp.vector we corrected. Patch by Vadim Markovtsev. (Github issue :issue:7717)

• The shared utility code module no longer uses a temporary file path that changed the C code on each generation. (Github issue :issue:7723)

• On 32 bit platforms, cached constants are no longer made immortal during module import. (Github issue :issue:7744)

Other changes

• Binary wheels are now built with -DNDEBUG to discard runtime assertions from CPython's inline functions.

Commits

• fee6fd6 Prepare release of 3.2.8.
• 2feda19 Fix macro usage in Py3.8.
• 21daa4e Prepare release of 3.2.7.
• 6a69c3c Update changelog.
• 60f2bdc Fix dealloc refcount guard resurrecting dying objects on free-threading (...
• 4f47fd3 Update changelog.
• 1e7ea1e Update changelog.
• 410d60c Fix use of uninitialized monitoring fields in generator/coroutine objects (GH...
• e70ca99 Fix cyfunction annotate setter on Python 3.14 (GH-7768)
• 86ba584 Fix access to the ".ag_running" flag of async generators on big-endian systems.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)