Bump the optional group with 4 updates (#9888)

* Bump the optional group with 4 updates

Updates the requirements on [coreapi](https://github.com/core-api/python-client), [django-guardian](https://github.com/django-guardian/django-guardian), [pygments](https://github.com/pygments/pygments) and [pyyaml](https://github.com/yaml/pyyaml) to permit the latest version.

Updates `coreapi` from 2.3.1 to 2.3.3
- [Commits](https://github.com/core-api/python-client/compare/2.3.1...2.3.3)

Updates `django-guardian` to 3.2.0
- [Release notes](https://github.com/django-guardian/django-guardian/releases)
- [Commits](https://github.com/django-guardian/django-guardian/compare/v2.4.0...3.2.0)

Updates `pygments` to 2.19.2
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](https://github.com/pygments/pygments/compare/2.17.0...2.19.2)

Updates `pyyaml` to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/compare/5.3.1...6.0.3)

---
updated-dependencies:
- dependency-name: coreapi
  dependency-version: 2.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: optional
- dependency-name: django-guardian
  dependency-version: 3.2.0
  dependency-type: direct:development
  dependency-group: optional
- dependency-name: pygments
  dependency-version: 2.19.2
  dependency-type: direct:development
  dependency-group: optional
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:development
  dependency-group: optional
...

Signed-off-by: dependabot[bot] <support@github.com>

* Add back setuptools

Was added to testing requirements in
https://github.com/encode/django-rest-framework/pull/9818

But that was lost in:
https://github.com/encode/django-rest-framework/pull/9842

Moving to optional dep group as it's only needed for coreapi

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Asif Saif Uddin {"Auvi":"অভি"} <auvipy@gmail.com>
Co-authored-by: Bruno Alla <alla.brunoo@gmail.com>

pyproject.toml

@@ -64,16 +64,18 @@ docs = [
 ]
 optional = [
   # Optional packages which may be used with REST framework.
-  "coreapi==2.3.1",
+  "coreapi==2.3.3",
   "coreschema==0.0.4",
   "django-filter",
-  "django-guardian>=2.4.0,<2.5",
+  "django-guardian>=2.4.0,<3.3",
   "inflection==0.5.1",
   "legacy-cgi; python_version>='3.13'",
   "markdown>=3.3.7",
   "psycopg[binary]>=3.1.8",
-  "pygments~=2.17.0",
+  "pygments>=2.17,<2.20",
-  "pyyaml>=5.3.1,<5.4",
+  "pyyaml>=5.3.1,<6.1",
+  # setuptools is needed for coreapi (imports pkg_resources)
+  "setuptools",
 ]
 django42 = [ "django>=4.2,<5.0" ]
 django50 = [ "django>=5.0,<5.1" ]