uwtools: add 2.9.1, 2.10.0, 2.11.0, 2.17.0

[mathomp4]

This adds uwtools 2.17.0 which was found needed for use with Python 3.13

[RikkiButler20]

Looks like v2.17.0 adds a new depenedncy ecflow, but spack doesn't have the version required so you should probably update that package's recipe too.

[RikkiButler20]

I got all my dependency info from recipe/meta.yaml. Am I looking in the right spot?

[mathomp4]

I order to support all the changes from @RikkiButler20 I had to also do updates to other packages. So I mention the maintainers here:

• iotaa: @maddenp
• py-lxml: none
• py-requests: @adamjstewart
• ecflow: @climbfuji @AlexanderRichert-NOAA

I've also pulled in the versions from #5544 by @eap

[climbfuji]

Thanks for these changes. I'll wait for a resolution of the conversation around removing a version with deprecating it first.

[RikkiButler20]

After everything has been updated could you verify that you were able to build the new versions?

[mathomp4]

After everything has been updated could you verify that you were able to build the new versions?

@RikkiButler20 The answer is yes...with caveats. These all work:

spack install --deprecated uwtools@2.9.1
spack install --deprecated uwtools@2.10.0
spack install --deprecated uwtools@2.11.0
spack install uwtools@2.17.0

Why --deprecated for 2.9.1, 2.10.0, and 2.11.0? These versions require py-requests@2.32, but all available py-requests 2.32 releases are deprecated in Spack due to known CVEs (see #4079 by @adamjstewart). As a result, concretizing this older UWTools release requires --deprecated and newer non-deprecated Requests releases are outside their listed requirements. And you get a fun warning:

==> Warning: using "py-requests@2.32.5" which is a deprecated version

Now, if someone on the uwtools side confirms newer py-requests (2.33.1 and 2.34.2) work with the older versions, we could update the recipe.