In https://github.com/freedomofpress/securedrop/pull/7606 we bump the develop version of cffi for trixie compatibility, we should bump the prod version of it as well to keep the two in sync. I don't know if that will also require updates to argon2-cffi and cryptography.
