Log Message:
py-html-sanitizer: updated to 2.5.0

2.5 (2024-12-19)

- **Vulnerability:** Fixed an issue where normalizing unicode too late in the
  process would keep disallowed tags when using specially crafted HTML. Fixed
  in 2.4.2.
- Fixed missing whitespace while merging adjacent tags.
- Raised the minimum lxml-html-clean version to 0.4 because of a reported
  vulnerability. We were already compatible, but enforcing the lower bound
  makes sense.