(dep) Bump attr

https://www.attrs.org/en/stable/changelog.html#id17
now ’attrs’ can be imported, but is not yet available for attr.{s,ib}