Update nanobind to a commit that includes

* wjakob/nanobind@20a367a
* wjakob/nanobind@27ba245

which are two commits that fix race conditions under Python 3.13 free-threading.

PiperOrigin-RevId: 714967436

third_party/nanobind/workspace.bzl

@@ -5,8 +5,8 @@ load("//third_party:repo.bzl", "tf_http_archive", "tf_mirror_urls")
 def repo():
     tf_http_archive(
         name = "nanobind",
-        strip_prefix = "nanobind-2.4.0",
-        sha256 = "bb35deaed7efac5029ed1e33880a415638352f757d49207a8e6013fefb6c49a7",
-        urls = tf_mirror_urls("https://github.com/wjakob/nanobind/archive/refs/tags/v2.4.0.tar.gz"),
+        strip_prefix = "nanobind-cee104db8606797a63752d2904b2f2795014a125",
+        sha256 = "d5dec3690c0a11b1ca48021ff34238886da7938b7bbbd5c0e946dcef6e6b7e25",
+        urls = tf_mirror_urls("https://github.com/wjakob/nanobind/archive/cee104db8606797a63752d2904b2f2795014a125.tar.gz"),
         build_file = "//third_party/nanobind:nanobind.BUILD",
     )