Bump downstream dependencies in CI (#13915)

Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot][email protected]>

Author: pyca-boringbot[bot]

.github/workflows/ci.yml

@@ -423,8 +423,8 @@ jobs:
             PATH: paramiko
           - DOWNSTREAM: pyopenssl
             REPO: pyca/pyopenssl
-            # Latest commit on the pyopenssl main branch, as of Nov 19, 2025.
-            REF: ee0cc61f6c73558936e28a2cf28f3621787c50a0
+            # Latest commit on the pyopenssl main branch, as of Nov 24, 2025.
+            REF: a18fafade8b51fb62f184ec6e953ebf84bc5e23f
             PATH: pyopenssl
           - DOWNSTREAM: pyopenssl-release
             REPO: pyca/pyopenssl
@@ -463,13 +463,13 @@ jobs:
             PATH: mitmproxy
           - DOWNSTREAM: scapy
             REPO: secdev/scapy
-            # Latest commit on the scapy master branch, as of Nov 09, 2025.
-            REF: 325544192c83e08cbd2700e2821ad04fd74e22f9
+            # Latest commit on the scapy master branch, as of Nov 24, 2025.
+            REF: 8e7e73bc6033706a95baf8a73399133dc1520651
             PATH: scapy
           - DOWNSTREAM: sigstore-python
             REPO: sigstore/sigstore-python
-            # Latest commit on the sigstore-python main branch, as of Nov 21, 2025.
-            REF: 85f54ecee53f8edd82384f92cae2cd4117ecf02f
+            # Latest commit on the sigstore-python main branch, as of Nov 24, 2025.
+            REF: e279d803f61fe81eb506dd8d34969a9944f8e52e
             PATH: sigstore-python
     name: "Downstream tests for ${{ matrix.DOWNSTREAM }}"
     timeout-minutes: 15