requirements.txt backports requested

[ggainey]

Downstream user has requested backports to core/3.28 for the following, to allow CVE fixes to our dependencies:

• aiohttp-3.9.4 - should use [noissue]: Update aiohttp requirement from <3.9.5,>=3.8.1 to >=3.8.1,<3.9.6 #5270 , already backported to 3.49, allows 3.9.5
• crypography-42.0.4 - should use [noissue]: Update cryptography requirement from <42.0.6,>=38.0.1 to >=38.0.1,<42.0.8 #5330 to allow up to 42.0.7
• jinja-3.1.4 - should use [noissue]: Update jinja2 requirement from <=3.1.3,>=3.1 to >=3.1,<=3.1.4 #5327

The backport-machinery generally fails on requirements.txt due to conflicts, so this should be manual PRs submitted for the following versions to keep everything in sync:

• 3.28
• 3.39
• 3.49
• 3.53

Should be merged prior to 14-MAY-2024 releases.

[gerrod3]

Is this issue finished, can it be closed?