build(deps): update dash requirement from <3.5.0 to <4.1.0

[dependabot]

Updates the requirements on dash to permit the latest version.

Release notes

Sourced from dash's releases.

Dash Version 4.0.0

Added

• Redesigned dash core components

Added since 4.0.0rc6

• Add a prop to sliders, allow_direct_input, that can be used to disable the inputs rendered with sliders.
• Improve CSS styles in calendar when looking at selected dates outside the current calendar month (show_outside_days=True)

Changelog

Sourced from dash's changelog.

[4.0.0] - 2026-02-03

Added

• Finalize all redesigned dash core components
• Add a prop to sliders, allow_direct_input, that can be used to disable the inputs rendered with sliders.
• Improve CSS styles in calendar when looking at selected dates outside the current calendar month (show_outside_days=True)

[4.0.0rc6] - 2026-01-07

Added

• Restored missing implementation for with_portal and with_full_screen_portal in datepickers

Changed

• Bugfixes for feedback received in rc5: notably, popovers are position: fixed once again.

[4.0.0rc5] - 2025-12-16

Added

• #3464 Add folder upload functionality to dcc.Upload component. When multiple=True, users can now select and upload entire folders in addition to individual files. The folder hierarchy is preserved in filenames (e.g., folder/subfolder/file.txt). Files within folders are filtered according to the accept prop. Folder support is available in Chrome, Edge, and Opera; other browsers gracefully fall back to file-only mode. The uploaded files use the same output API as multiple file uploads.

Changed

• Bugfixes for feedback received in rc4

[4.0.0rc4] - 2025-12-04

Added

• New dcc.Button component that mirrors html.Button but with default styles applied

[4.0.0rc3] - 2025-11-27

• Modernized dcc.Tabs
• Modernized dcc.DatePickerSingle and dcc.DatePickerRange
• DatePicker calendars can now accept translations as an external script, either with Dash's external_scripts or from the assets folder. See documentation for the underlying library that supports this.

Changed

• dcc.Tab now accepts a width prop which can be a pixel or percentage width for an individual tab.
• dcc.Tab can accept other Dash Components for its label, in addition to a simple string.

[4.0.0rc2] - 2025-10-10

Added

• 3468 Modernize dcc.TextArea & dcc.Tooltip
• 3467 Modernize dcc.Loading
• 3453 Modernize dcc.Checklist & dcc.RadioItems

Changed

• Various tweaks and bugfixes to issues reported in 4.0.0rc1

• Dropdown API changes

  • default value of optionHeight is now 'auto' which supports text wrapping of lengthy text on small screens; you can still specify a numeric pixel height if desired

... (truncated)

Commits

• 076f484 Merge pull request #3598 from plotly/master-4.0.0
• 8b6afb1 Build artifacts
• dc067e5 Merge branch 'dev' into master-4.0.0
• 3b42e03 Merge pull request #3595 from plotly/v4
• 91017b8 remove unused css rule
• 48ef3e0 Fix package-lock.json
• 5620664 Merge pull request #3591 from plotly/release/v4
• 3b661bc add release date to changelog
• 0847726 Remove RC tag and update changelog
• 674624b Merge pull request #3571 from plotly/bugfix/rc6-feedback
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)