Fix deprecated call to utcnow()

[leplatrem]

Without this, the _now() returns a datetime without timezone, and breaks in the real world: mozilla-services/telescope#1493 and mozilla/remote-settings#667

The tests don't catch this because they mock _now() :/

[grahamalama]

The tests don't catch this because they mock _now() :/

Not sure if this needs to be a "fast merge" (e.g. if something is broken), but I wonder if we should modify our tests or _now() in some way so that this kind of thing won't happen again. We seemed to treat a symptom and not a cause.

[leplatrem]

Not sure if this needs to be a "fast merge" (e.g. if something is broken)

Only current 1.0 version is broken, no running service

_now() in some way so that this kind of thing won't happen again. We seemed to treat a symptom and not a cause.

I know exactly what you mean.
I thought of doing like this in the tests but didn't find it very elegant either:

from autograph_utils import _now

def test_now_is_timezone_aware():
    assert _now() > datetime.datetime(2024, 9, 26, tzinfo=timezone.utc)

But I could also add a test that check for expiration without using the fixed_now fixture.