typeguard>=4.0.1 requires typing_extension>=4.7.0, which is beyond the upper bound that Tensorflow sets on it. This has already been fixed in Tensorflow (removing the cap) and will go into the next release, expected Sep 6 https://discuss.tensorflow.org/t/upcoming-tensorflow-2-14-branch-cut-release-dates/18220.
In the meantime, just to keep CI running, restrict the typeguard version to avoid the clash (Tensorflow is not a direct dependency of cabinetry and only enters as optional pyhf backend). This is not a great solution but should be good enough, as the next version of Tensorflow in 3 weeks will allow removing that version restriction again anyway.