[FEATURE] update rich dependency

[bollwyvl]

• What are you trying to do?

Use jake without installing packages with known (even if disputed) CVEs such as CVE-2022-40899

• What feature or behavior is this required for?

e.g. running jake on its own environment

• How could we solve this issue? (Not knowing is okay!)

Consider updating the rich pin to ^13.2.0, which replaces commonmark (and therefore future) with markdown-it-py, rather than having multiple potential markdown parser engines for a given jake release.

• Anything else?

cc @bhamail / @DarthHater

[madpah]

Great idea @bollwyvl - but this does depend on jake deprecating support for Python 3.6 (which I also support).

[maarre]

This old version of rich also limits twine to 3.x.x. twine is in version 4.0.2.

[rxm7706]

Running into the same issue with an environment with airflow - minimum version of rich required is. rich = ">=12.0,<14.0"