Update tool versions

[wRAR]

No code changes (but we don't bump flake8 until we drop 3.7).

[wRAR]

Oh, bandit actually failed, I haven't noticed that in its output locally. It triggers https://bandit.readthedocs.io/en/latest/plugins/b113_request_without_timeout.html for code not related to requests, so we should just silence that.

[codecov]

Codecov Report

Merging #5908 (0e7f6e2) into master (5a37af1) will not change coverage.
The diff coverage is n/a.

❗ Current head 0e7f6e2 differs from pull request most recent head 06f492b. Consider uploading reports for the commit 06f492b to get more accurate results

@@           Coverage Diff           @@
##           master    #5908   +/-   ##
=======================================
  Coverage   88.77%   88.77%           
=======================================
  Files         162      162           
  Lines       11165    11165           
  Branches     1814     1814           
=======================================
  Hits         9912     9912           
  Misses        966      966           
  Partials      287      287