fix: Apply non-breaking dependency updates from open dependabot PRs

Python (requirements.txt, tools/, web/regression/):
- cryptography 46.0 -> 47.0 (move CFB8 import to decrepit module to
  silence the 47.0 deprecation warning and survive 49.0 removal)
- typer 0.24 -> 0.25 for python>3.9 (drop removed [all] extra)
- safety >=1.9.0 -> >=3.7.0 (CI audit tool)
- requests >=2.21.0 -> >=2.33.1
- testtools 2.8.7 -> 2.9.1
- pycodestyle >=2.5.0 -> >=2.14.0

JavaScript (web/package.json, web/yarn.lock):
- postcss 8.5.6 -> 8.5.12
- moment-timezone 0.6.0 -> 0.6.2
- @tanstack/react-query 5.90 -> 5.100.5

Skipped (genuine breaking changes): @mui/material 7->9 (#9843),
@mui/x-date-pickers 8->9 (#9888).

requirements.txt

@@ -21,7 +21,7 @@ azure-mgmt-subscription==3.1.1
 bcrypt==5.0.*
 boto3==1.42.*
 certifi==2026.4.22
-cryptography==46.0.*
+cryptography==47.0.*
 Flask-Babel==4.0.*
 Flask-Compress==1.*
 Flask-Login==0.*
@@ -58,7 +58,7 @@ SQLAlchemy==2.*
 sqlparse==0.*
 sshtunnel==0.*
 typer[all]==0.23.*; python_version <= '3.9'
-typer[all]==0.24.*; python_version > '3.9'
+typer==0.25.*; python_version > '3.9'
 urllib3==1.26.*; python_version <= '3.9'
 urllib3==2.6.*;  python_version > '3.9'
 user-agents==2.2.0

tools/requirements.txt

@@ -1,5 +1,7 @@
-requests>=2.21.0
+requests>=2.32.5,<2.33; python_version <= '3.9'
-requests[security]>=2.21.0
+requests>=2.33.1; python_version > '3.9'
-safety>=1.9.0
+requests[security]>=2.32.5,<2.33; python_version <= '3.9'
+requests[security]>=2.33.1; python_version > '3.9'
+safety>=3.7.0
 Sphinx==7.4.7
 sphinxcontrib-youtube==1.5.0

web/package.json

@@ -86,7 +86,7 @@
     "@projectstorm/react-diagrams": "^7.0.4",
     "@simonwep/pickr": "^1.9.1",
     "@szhsin/react-menu": "^4.5.1",
-    "@tanstack/react-query": "^5.100.1",
+    "@tanstack/react-query": "^5.100.5",
     "@tanstack/react-table": "^8.21.3",
     "@tanstack/react-virtual": "^3.13.24",
     "@types/react": "^19.2.14",
@@ -119,12 +119,12 @@
     "lodash": "4.*",
     "marked": "^18.0.2",
     "moment": "^2.30.1",
-    "moment-timezone": "^0.6.1",
+    "moment-timezone": "^0.6.2",
     "notificar": "^1.0.1",
     "notistack": "^3.0.2",
     "papaparse": "^5.5.3",
     "path-fx": "^2.1.2",
-    "postcss": "^8.5.10",
+    "postcss": "^8.5.12",
     "rc-dock": "^4.0.0-alpha.2",
     "react": "^19.2.5",
     "react-arborist": "^3.5.0",

web/pgadmin/utils/crypto.py

@@ -16,7 +16,7 @@ import os
 from cryptography.hazmat.backends import default_backend
 from cryptography.hazmat.primitives.ciphers import Cipher
 from cryptography.hazmat.primitives.ciphers.algorithms import AES
-from cryptography.hazmat.primitives.ciphers.modes import CFB8
+from cryptography.hazmat.decrepit.ciphers.modes import CFB8
 
 padding_string = b'}'
 iv_size = AES.block_size // 8

web/regression/requirements.txt

@@ -25,10 +25,11 @@ extras==1.0.0
 fixtures==4.3.2
 linecache2==1.0.0
 pbr==7.0.3
-pycodestyle>=2.5.0
+pycodestyle>=2.14.0
 python-mimeparse==2.0.0
 selenium==4.43.0
 testscenarios==0.5.0; python_version <= '3.9'
 testscenarios==0.6.1; python_version > '3.9'
-testtools==2.9.0
+testtools==2.7.2; python_version <= '3.9'
+testtools==2.9.1; python_version > '3.9'
 traceback2==1.4.0