Update dependencies (#9754)

This takes care of the dependabot alerts those with access can see at https://github.com/certbot/certbot/security/dependabot.

Pinning back `cython` is needed because without it, our full test suite will fail when trying to build `pyyaml` on ARM systems.

tools/pinning/current/pyproject.toml

@@ -41,7 +41,11 @@ windows-installer = {path = "../../../windows-installer"}
 # https://discuss.python.org/t/how-to-pin-build-dependencies/8238), we list it
 # as a dependency here to ensure a version of cython is pinned for extra
 # stability.
-cython = "*"
+#
+# We also pin back cython as is currently required by pyyaml. See
+# https://github.com/yaml/pyyaml/pull/702 and
+# https://github.com/yaml/pyyaml/issues/601.
+cython = "<3.0"
 # setuptools-rust is a build dependency of cryptography, and since we don't have
 # a great way of pinning build dependencies, we simply list it here to ensure a
 # working version. Note: if build dependencies of setuptools-rust break at some

tools/pinning/oldest/pyproject.toml

@@ -87,7 +87,11 @@ urllib3 = "1.24.2"
 # build dependencies here to ensure they're pinned for extra stability.
 
 # cython is a build dependency of pyyaml
-cython = "*"
+#
+# We also pin back cython as is currently required by pyyaml. See
+# https://github.com/yaml/pyyaml/pull/702 and
+# https://github.com/yaml/pyyaml/issues/601.
+cython = "<3.0"
 
 # Other dependencies
 # We add any dependencies that must be specified in this file for any another