cgt-calc: 1.13.0 -> 1.14.0

- loosen defusedxml dep
- 1.14 added a dependency on requests-ratelimiter, but that is broken in
  nixpkgs as it depends on pyrate-limiter 2, but nixpkgs is on 3.9:
  - https://github.com/JWCook/requests-ratelimiter/issues/78
  - https://github.com/NixOS/nixpkgs/pull/437746#issuecomment-3232365968
- Upstream patched to switch cgt-calc to natively use
  pyrate-limiter 3.9, which is unreleased so I had to backport to 1.14:
  https://github.com/KapJI/capital-gains-calculator/pull/715

pkgs/by-name/cg/cgt-calc/package.nix

@@ -1,22 +1,35 @@
 {
   lib,
   fetchFromGitHub,
+  fetchpatch,
   python3Packages,
   withTeXLive ? true,
   texliveSmall,
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "cgt-calc";
-  version = "1.13.0";
+  version = "1.14.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "KapJI";
     repo = "capital-gains-calculator";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-y/Y05wG89nccXyxfjqazyPJhd8dOkfwRJre+Rzx97Hw=";
+    hash = "sha256-6iOlDNlpfCrbRCxEJsRYw6zqOehv/buVN+iU6J6CtIk=";
   };
 
+  patches = [
+    # https://github.com/KapJI/capital-gains-calculator/pull/715
+    (fetchpatch {
+      url = "https://github.com/KapJI/capital-gains-calculator/commit/ec7155c1256b876d5906a3885656489e9fdd798c.patch";
+      hash = "sha256-pfGHSKuDRF0T1hP7kpRC285limd1voqLXcXCP7mAD3s=";
+    })
+  ];
+
+  pythonRelaxDeps = [
+    "defusedxml"
+  ];
+
   build-system = with python3Packages; [
     poetry-core
   ];
@@ -26,6 +39,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     jinja2
     pandas
     requests
+    pyrate-limiter
     types-requests
     yfinance
   ];