jadepy: update setup.py install deps

What changed, and why it matters

This commit updates two Python library version requirements in the Jade Python package's setup file. It raises the minimum required version of cbor2 (a data-serialization library) from 5.4.6 to 5.9.0, and updates the bleak Bluetooth library from 0.13.0 to 2.1.1 for the optional Bluetooth feature. The commit message gives no security reason for the change, and the diff alone does not show any vulnerability being fixed. It is most likely routine dependency maintenance, but pinning older, possibly insecure library versions can indirectly affect users if those older versions have known security flaws.

Security signals we found

Evidence from the diff

Changed components

diff --git a/setup.py b/setup.py
index ccfe6e2..067c140 100644
--- a/setup.py
+++ b/setup.py
@@ -38,12 +38,12 @@ setup(
         'jadepy'
     ],
     install_requires=[
-        'cbor2>=5.4.6,<6.0.0',
+        'cbor2>=5.9.0,<6.0.0',
         'pyserial>=3.5.0,<4.0.0'
     ],
     extras_require={
         'ble': [
-            'bleak==0.13.0',
+            'bleak==2.1.1',
             'aioitertools==0.8.0'
         ],
         'requests': [