Update pyroma requirement from >=3.1 to >=5.0.1

[dependabot]

Updates the requirements on pyroma to permit the latest version.

Changelog

Sourced from pyroma's changelog.

5.0.1 (2025-12-09)

• check-manifest was missing from the requirements list.

• Passing in multiple tests to be skipped now actually works. [Matt Norton]

5.0 (2025-07-15)

• Re-releasing as final.

5.0b2 (2025-07-10)

• Fixed a bug that failed to find license-expression fields.

5.0b1 (2025-07-04)

• Changed the internal metadata names to match Core Metadata. This brings less confusion, especially since setuptools and PyPI aren't exactly the same either, so let's pick the offical standard and run with it.

• Added a rating for if the wheel fails to build. Unfortunately it's impossible to get a proper error out of it, so the message tells you to run python -m build.

5.0a1 (2025-07-02)

• Removed support for fetching data via monkey-patching setup.py.

• Added a warning if you have only a setup.cfg, something that is working with some tools, but is not officially supported.

• Some general cleanups and simplifications thanks to those changes.

4.3.3 (2025-07-03)

• Licensing specifications are less flexible than I thought. Updated to reflect that.

... (truncated)

Commits

• dd478a6 Preparing release 5.0.1
• 347aee8 Comments, updates, contributor
• edc7319 Fix only skipping last listed test in CLI arg (#122)
• fe72145 Updated GitHub Actions (#119)
• e3acb37 Switch to tox in make as well (#120)
• 9723f41 Fixed typo (#117)
• 8ee23ca Back to development: 5.1
• 919b688 Preparing release 5.0
• 941bcf7 Pyroma version is now too old.
• c139ee5 Pyroma 5.0 (#112)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.