build(deps): bump invenio-access from 7.0.2 to 7.1.0

[dependabot]

Bumps invenio-access from 7.0.2 to 7.1.0.

Changelog

Sourced from invenio-access's changelog.

.. SPDX-FileCopyrightText: 2015-2022 CERN. SPDX-FileCopyrightText: 2024-2026 Graz University of Technology. SPDX-FileCopyrightText: 2025 KTH Royal Institute of Technology. SPDX-FileCopyrightText: 2026 TU Wien. SPDX-License-Identifier: MIT

Changes

Version v7.1.0 (released 2026-09-21)

• tests: remove obsolete performance test

  • With the performance improvements from the previous two commits the ratio between w/ and w/o cache is closer to 1.2-1.5x compared to the old 10x improvement. Leaving this kind of test thus, doesn't make sense anymore, since there's no way to disable the request cache.

• perf(cache): reuse action expansions within requests

  • Per-result permission checks caused thousands of repeated shared-cache reads in a single search response.
  • Request scoping removes repeated work while keeping writes, deletes, and cross-request invalidation coherent.

• perf: evaluate needs/excludes once per Permission.allows()

Version v7.0.2 (released 2026-08-04)

• fix(build): include mo files
• fix(ci): run tests on maint-*

Version v7.0.1 (released 2026-07-16)

• chore(setup): migrate from setuptools to hatchling
• chore(cleanup): remove outdated and unnecessary file

Version v7.0.0 (released 2026-06-16)

• chore(setup): bump dependencies
• chore(git-blame): ignore the SPDX license header commit
• chore(licenses): update license headers to use SPDX

Version v6.0.0 (released 2026-05-28)

• chore(setup): bump dependencies
• fix: better dependencies after communities tests

Version v5.1.0 (released 2026-02-17)

• feat: change role.name to role.id for identity.provides RoleNeed

Version v5.0.0 (released 2026-01-27)

... (truncated)

Commits

• 39abcfa release: v7.1.0
• 2981954 tests: remove obsolete performance test
• 5ce9c27 perf(cache): reuse action expansions within requests
• 5ddd5ee perf: evaluate needs/excludes once per Permission.allows()
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like invenio-access is up-to-date now, so this is no longer needed.