fix(deps): bump user-reaching deps for security advisories (#159)

* fix(deps): bump user-reaching deps for security advisories

Lock bumps for packages bundled in the standalone parallel-cli binary
(anyio, idna, typing-extensions) and in the snowflake/bigquery extras
(snowflake-connector-python, pyjwt, cryptography, pyopenssl, urllib3,
pyasn1). Raise the snowflake extra floor to 4.7.3 so pip installs drop
connectors with the TLS hostname-verification and credential-logging
bugs.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix(deps): hold snowflake-connector-python at 4.7.5

4.8.0 turns OCSP revocation checks off unless ocsp_fail_open is set.
4.7.5 carries the same security fixes without that default change.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix(deps): cap snowflake extra below 5

snowflake-connector-python 5.0.0 is a dependency-level rewrite with no
published changelog. Without a cap, the new 4.7.3 floor would upgrade
existing Python 3.11+ installs straight onto it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: ehe9991

pyproject.toml

@@ -69,7 +69,7 @@ duckdb = [
 ]
 # Snowflake integration
 snowflake = [
-    "snowflake-connector-python>=3.0.0",
+    "snowflake-connector-python>=4.7.3,<5",
 ]
 # SQLAlchemy-based BigQuery connector (for YAML configs and ETL)
 bigquery = [