chore(deps-dev): update snowflake-connector-python requirement from <5,>=4 to >=4.6.0,<5 in /backend

[dependabot]

Updates the requirements on snowflake-connector-python to permit the latest version.

Release notes

Sourced from snowflake-connector-python's releases.

4.6.0

• v4.6.0(May 28,2026)
  • Dropped support for Python 3.9. The minimum supported version is now Python 3.10.
  • Fixed sdist to only install the minicore binary matching the current platform (SNOW-3526469). Previous 4.x releases copied every platform's minicore .so/.dylib/.dll into the install prefix, breaking downstream packagers (e.g. Homebrew) whose audits reject foreign-arch binaries.
  • Added one in-band telemetry record per successful login describing which connection-identifier fields the user supplied (account_provided, account_with_region, account_org_provided, region_provided, host_provided). No hostname or account value is included. This is gated by the existing server-side CLIENT_TELEMETRY_ENABLED parameter and can additionally be disabled locally by setting SF_TELEMETRY_DISABLE_CONNECTION_SHAPE=true. The telemetry collection is time-boxed and will be removed in a future release.
  • Bumped up vendored urllib3 to 2.7.0

Commits

• 9f72374 Bump up version to 4.6.0 (#2890)
• 0b1d9ce SNOW-3569023: bump vendored urllib3 to 2.7.0 (#2888)
• 0708614 NO-SNOW: drop EOL Python 3.9 support (#2889)
• 714448d SNOW-3351450: emit client_connection_identifier_shape in-band telemetry (#2877)
• c1b03e1 SNOW-3420102: drop stage object on prober cleanup, migrate image to ubuntu (#...
• 52f175c PRODSEC-4321: [supply-chain] Replace third-party URLs with Artifactory (#2868)
• c5d9915 SNOW-3526469: move minicore pruning note to Upcoming Release (#2873)
• 3f14392 SNOW-3526469: prune foreign-arch minicore binaries at build_py (#2871)
• c2b2ba7 Bump up version to 4.5.0 (#2867)
• 0bf4f41 Fix flaky QCC integration test by mocking server response (#2866)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)