[1.2.2] Backport 5157, 5158 and 5159 (and 5151, 5154 for CI to pass)

[emkll]

Status

Ready for review

Description of Changes

Towards #5156 , maybe supersedes #5160 #5161

Backports the following changes into the 1.2.2 release branch:

• Update psutil to 5.7.0 #5157
• Update builder image #5158
• adds --allow-unsafe flag to pip-compile and pins setuptools #5159

Also includes CI fixes introduced in #5154 and #5151

Testing

Changes should include all commits introduced in the following PRs and conflicts were resolved properly (there were conflicts while cherry-picking #5159 : docker-requirements are not present ):

• updated markupsafe dependency to 1.1.1 #5151
• updated TBB version to 9.0.5 #5154
• Update psutil to 5.7.0 #5157
• Update builder image #5158
• adds --allow-unsafe flag to pip-compile and pins setuptools #5159

Deployment

Any special considerations for deployment? Consider both:

1. Upgrading existing production instances: through git repo for Admin workstation, and deb packages for server components
2. New installs: through git repo for Admin workstation, and deb packages for server components

[zenmonkeykstop]

Commits present and versions updated. WFM once CI passes!