pip-requirements.txt: Bump versions of several packages and fix URL

[ghost]

Description

edk2-basetools was depending on old versions of several packages. That was fixed in version 0.1.53. Update pip-requirements.txt to use that version, and bump the versions and dependency expressions of other packages to use or allow use of newer versions.

Also, update the URL to the requirements file format since it's moved.

• Breaking change?
• Impacts security?
• Includes tests?

How This Was Tested

Ran CI locally.

Integration Instructions

N/A

[makubacki]

It's good to get everything updated here. We should be a bit more proactive about merging dependabot PRs to help with this. In some cases, they might need touched up, but they help give build status results per update and highlight potential compatibility problems between modules visible in CI results.

I'm a little hesitant to move to ~= as that will reduce the frequency and therefore regular verification of those checks prior to merge. At the same time, the modules should only be making backward compatible updates.

Dependabot PRs that can be closed (and should have been handled earlier):

• pip: bump edk2-pytool-library from 0.21.8 to 0.21.10 #6052
• pip: bump antlr4-python3-runtime from 4.7.1 to 4.13.2 #6044
• pip: bump edk2-basetools from 0.1.51 to 0.1.53 #6043
• pip: bump regex from 2024.5.15 to 2024.7.24 #5972
• pip: bump edk2-pytool-extensions from 0.27.6 to 0.27.10 #5913

[ghost]

I'm a little hesitant to move to ~= as that will reduce the frequency and therefore regular verification of those checks prior to merge. At the same time, the modules should only be making backward compatible updates.

@makubacki I understand. Would you prefer me to change it back? This change will go in after the stable tag anyway, so there's no rush.

[makubacki]

@makubacki I understand. Would you prefer me to change it back? This change will go in after the stable tag anyway, so there's no rush.

I don't have a strong opinion. I'm okay with this given the patch version is updated as it should be. @Javagedes, who does the edk2-pytool releases for his opinion.

[Javagedes]

I'm fine with '~='. If it's a targeted fix for something in edk2, but not a breaking change, we can always manually make a PR.