[depthfirst-3687] Upgrade multiple packages in ci/requirements.txt

[depthfirst-app]

Overview

• Repair Link

Upgrade

• Upgraded markdown-it-py from 2.0.1 to 2.2.0 in ci/requirements.txt.
• Upgraded Pygments from 2.8.1 to 2.20.0 in ci/requirements.txt.

Changes

• Renamed two generated MCP Plugin code-block artifact files:
  • plugins/moveworks-mcp-plugin/.codeblocks/block_3python → block_3.tsx
  • plugins/moveworks-mcp-plugin/.codeblocks/block_4python → block_4.tsx
• Root cause: Pygments language guessing behavior changed between 2.8.1 and 2.20.0; the existing unlabeled TypeScript/TSX snippets are now detected as TSX instead of Python. The generated artifact contents are unchanged; only the filenames changed to match the new lexer detection result.

Backward Compatibility

• markdown-it-py==2.2.0 supports Python >=3.7.
• Pygments==2.20.0 supports Python >=3.9, so environments running these CI tools on Python 3.8 or older must upgrade Python before installing the new requirements.

Vulnerabilities Fixed

• Addresses GHSA-jrwr-5x3p-hvc3.
• Addresses GHSA-vrjv-mxr7-vjf8.
• Addresses GHSA-mrwq-x4v8-fh7p.
• Addresses GHSA-5239-wwwm-4pmq.

Warnings

• Full discovered validation is currently blocked by pre-existing repository issues unrelated to this dependency upgrade:
  • python -m ci.validate_v3 requires yaml/PyYAML, which is not listed in ci/requirements.txt; with PyYAML installed separately, it fails on an existing missing connectors/moveworks-data-api/logo.png file.
  • python ci/copy_code_blocks.py still fails on baseline stale .codeblocks state outside the Pygments-induced MCP filename changes fixed in this PR.

Verified

• ✅ Resolved/downloaded markdown-it-py==2.2.0.
• ✅ Resolved/downloaded Pygments==2.20.0.
• ✅ Installed ci/requirements.txt successfully with the upgraded pins.
• ✅ Ran python -m compileall ci successfully.
• ✅ Ran configured no-op setup/compile/test commands successfully.
• ⚠️ Ran discovered validation commands and confirmed remaining failures are pre-existing/baseline issues unrelated to the upgraded packages.