CVE-2022-42969 on py dependency of retry package

[gioccher]

The py 1.11.0 library included in this project's dependency graph is affected by CVE-2022-42969, which is a contested CVE and doesn't affect nautobot... but it still shows up in vulnerability scanners.

py is a dependency of retry, which has not received updates since 2016 https://pypi.org/project/retry/#history

pyproject.toml references retry directly

nautobot-app-ssot/pyproject.toml

Line 56 in 8ff0d18

retry = "^0.9.2"

There's a fork of retry that seems an in-place replacement https://pypi.org/project/retry2/ and removes the py dependency.