chore: update cryptography to >= 42.0.5

[nigzak]

SUMMARY

cryptography has some high CVE findings which are fixed with newer version.
To fix this the min-version in setup.py should be updated to latest version (42.0.5)

CVE-2024-26130⁠ (CVSS 7.5)
CVE-2023-50782⁠ (CVSS 7.5)
CVE-2024-0727⁠ (CVSS 5.5)
CVE-2023-49083⁠ (CVSS 5.9)
(and some low)

BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF

TESTING INSTRUCTIONS

Open final build software and check that cryptography 41.0.5 (or newer) is inside

ADDITIONAL INFORMATION

• Has associated issue:
• Required feature flags:
• Changes UI
• Includes DB Migration (follow approval process in SIP-59)
  • Migration is atomic, supports rollback & is backwards-compatible
  • Confirm DB migration upgrade and downgrade tested
  • Runtime estimates and downtime expectations provided
• Introduces new feature or API
• Removes existing feature or API

[dpgaspar]

We need to keep this at 41.0.2 because there are extra dependencies that colide with it. use base.in instead

[nigzak]

you mean to roll back the changes and only add the 42.0.5 version in base.in instead for now - right?

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 69.57%. Comparing base (1d571ec) to head (44c9eb9).
Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #27249      +/-   ##
==========================================
- Coverage   69.69%   69.57%   -0.12%     
==========================================
  Files        1908     1908              
  Lines       74530    74530              
  Branches     8309     8309              
==========================================
- Hits        51942    51856      -86     
- Misses      20535    20621      +86     
  Partials     2053     2053              

Flag	Coverage Δ
hive	?
mysql	77.97% <ø> (-0.03%)	⬇️
postgres	78.10% <ø> (ø)
presto	?
python	82.88% <ø> (-0.24%)	⬇️
sqlite	77.61% <ø> (ø)
unit	56.51% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[dpgaspar]

This is being done here: #27281 snowflake just updated and released.
After 27281 is merged I think we can close this one

[sadpandajoe]

This is being done here: #27281 snowflake just updated and released. After 27281 is merged I think we can close this one

I just merged #27281 so you can rebase and bump if you need to.

[nigzak]

cryptography 42.0.4 also has no findings (CVE scan) and it is already in master
=> closing this pull request now because it is outdated