chore: update dependencies to patch security vulnerabilities

[Erikpostt]

Description

Dependabot observed multiple vulnerabilities which are caused by outdated dependencies.

Changes

• Update tornado to >=6.4.1 (fixes DoS and cookie injection vulnerabilities)
• Update mistune to >=3.0.2 (fixes ReDoS in LINK_TITLE_RE)
• Update pytest to >=7.4.4 (fixes tmpdir handling vulnerability)
• Update jupyter-server to 2.18.2 (fixes CORS bypass, path traversal)
• Update jupyterlab to 4.5.7 (fixes XSS vulnerabilities)
• Update nbconvert to >=7.17.0 (fixes path traversal in cell attachments)
• Update requests to >=2.32.6 (fixes insecure temp file reuse)
• Update multiple dev dependencies to patch aiohttp issues

[nienketimmermans]

I remember that we previously had issues with newer versions of jupyterlab-widgets, but is that solved now?

[Erikpostt]

A previous error for @nienketimmermans on Windows 11 was No such file or directory. I couldn't find a similar issue online, but did run across InvalidArchiveError in multiple occasions (e.g. here ). This may be due to a max path length set by default on Windows systems (which may pass for me because of my shorter name). There's a proposed solution here, but in the meantime I'll downgrade jupyter-widgets to 3.0.15` and check whether there's any vulnerabilities popping up.