WebsocketNetwork.Stop has the same gap. innerStop sweeps wn.peers
before the HTTP server shuts down, so a handshake that completes in
between is registered. Nothing closes that peer. Shutdown ignores
hijacked connections and the wsPeer loops don't watch wn.ctx, so the
peer outlives Stop.

innerStop now sets peersClosed under peersLock, and addPeer rejects
late peers. addPeer reports whether it registered the peer. ServeHTTP
and tryConnect close a rejected peer, wait for its loops to exit, and
skip the connected logs and telemetry. That also applies to the
existing didSignalClose rejection.

addPeer now releases the identity of any peer it rejects. Before, a
closing peer that was never registered kept its identity entry,
because removePeer only clears identities for registered peers. Later
connections with the same identity were then dropped as duplicates.

P2PNetwork.Stop sweeps wsPeers in innerStop before it closes the host.
A stream handler that completes in between registers a wsPeer that
nothing closes. Once host.Close resets its stream, the peer's read loop
logs and emits telemetry, possibly after Stop returns.

innerStop now sets wsPeersClosed under wsPeersLock. A new addPeer
checks it and didSignalClose in the same critical section as the
insert. The throttle slot claim moves into addPeer, so only a
registered peer holds a slot. baseWsStreamHandler closes a rejected
peer and waits for its loops to exit. A rejected peer also releases
its identity.

Found while reviewing #6744.

Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.35.4 to 21.7.13.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.35.4...21.7.13)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 21.7.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.8.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.8.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.8.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [axios](https://github.com/axios/axios) from 1.10.0 to 1.20.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.10.0...v1.20.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 2.0.2 to 2.1.7.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v2.0.2...v2.1.7)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 2.1.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

chore(deps): bump github.com/yuin/goldmark from 1.8.5 to 1.8.6 in /arckit in the minor-and-patch group

chore(deps): bump https://github.com/rvben/rumdl-pre-commit from v0.2.46 to 0.2.77

- Teller listeners require the expected origin and source window
- signTransaction checks each returned signed txn against the requested txID
- Pera Web connect rejects accounts that are not valid Algorand addresses

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>