Upgrade marshmallow-related dependencies to newest

Addresses CVE-2025-68480 in marshmallow

Seems sensible to bring the other related dependencies up to date for
compatibility

Moves to compatible release operator so we don’t have explicit pins on
minor/patch versions going forward.

Author: quis

requirements.in

@@ -5,16 +5,16 @@ celery[sqs]==5.6.0
 # Pin kombu to merge of PR #2342 (SQS fair queue / MessageGroupId support) until kombu 5.7 is released
 kombu @ git+https://github.com/celery/kombu.git@860e40a6c904c4d8551577d9f4e8c00f03b6e06c
 Flask-Bcrypt==1.0.1
-flask-marshmallow==1.3.0
+flask-marshmallow~=1.3
 Flask-Migrate==3.1.0
 flask-sqlalchemy==3.1.1
 click-datetime==0.2
 gunicorn[eventlet]~=25.1
 eventlet~=0.40.4
 iso8601==2.1.0
 jsonschema[format]==4.23.0
-marshmallow-sqlalchemy==1.0.0
-marshmallow==3.21.3
+marshmallow-sqlalchemy~=1.0
+marshmallow~=3.21
 psycopg2-binary==2.9.10
 PyJWT==2.10.1
 SQLAlchemy==2.0.41

requirements.txt

@@ -80,7 +80,7 @@ flask==3.1.3
     #   sentry-sdk
 flask-bcrypt==1.0.1
     # via -r requirements.in
-flask-marshmallow==1.3.0
+flask-marshmallow==1.4.0
     # via -r requirements.in
 flask-migrate==3.1.0
     # via -r requirements.in
@@ -141,12 +141,12 @@ markupsafe==3.0.3
     #   mako
     #   sentry-sdk
     #   werkzeug
-marshmallow==3.21.3
+marshmallow==3.26.2
     # via
     #   -r requirements.in
     #   flask-marshmallow
     #   marshmallow-sqlalchemy
-marshmallow-sqlalchemy==1.0.0
+marshmallow-sqlalchemy==1.4.2
     # via -r requirements.in
 mistune==0.8.4
     # via notifications-utils

requirements_for_test.txt

@@ -125,7 +125,7 @@ flask==3.1.3
     #   notifications-utils
 flask-bcrypt==1.0.1
     # via -r requirements.txt
-flask-marshmallow==1.3.0
+flask-marshmallow==1.4.0
     # via -r requirements.txt
 flask-migrate==3.1.0
     # via -r requirements.txt
@@ -207,12 +207,12 @@ markupsafe==3.0.3
     #   jinja2
     #   mako
     #   werkzeug
-marshmallow==3.21.3
+marshmallow==3.26.2
     # via
     #   -r requirements.txt
     #   flask-marshmallow
     #   marshmallow-sqlalchemy
-marshmallow-sqlalchemy==1.0.0
+marshmallow-sqlalchemy==1.4.2
     # via -r requirements.txt
 mistune==0.8.4
     # via