From 65b27afb617a1884d7436eba7dd6933e389cfa52 Mon Sep 17 00:00:00 2001 From: David Lord Date: Fri, 23 Aug 2024 16:49:33 -0700 Subject: [PATCH] update dev dependencies --- .github/workflows/publish.yaml | 16 +++---- .github/workflows/tests.yaml | 8 ++-- .pre-commit-config.yaml | 2 +- requirements/build.txt | 10 +++- requirements/dev.txt | 84 +++++++++++++++++++++------------- requirements/docs.txt | 36 +++++++++------ requirements/tests.txt | 18 +++++--- requirements/tests37.txt | 6 +-- requirements/typing.txt | 8 ++-- 9 files changed, 114 insertions(+), 74 deletions(-) diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 6b134d1f..7acd92e5 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -9,8 +9,8 @@ jobs: outputs: hash: ${{ steps.hash.outputs.hash }} steps: - - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1 with: python-version: '3.x' cache: pip @@ -23,7 +23,7 @@ jobs: - name: generate hash id: hash run: cd dist && echo "hash=$(sha256sum * | base64 -w0)" >> $GITHUB_OUTPUT - - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6 with: path: ./dist provenance: @@ -33,7 +33,7 @@ jobs: id-token: write contents: write # Can't pin with hash due to how this workflow works. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 with: base64-subjects: ${{ needs.build.outputs.hash }} create-release: @@ -44,7 +44,7 @@ jobs: permissions: contents: write steps: - - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 - name: create release run: > gh release create --draft --repo ${{ github.repository }} @@ -63,11 +63,11 @@ jobs: permissions: id-token: write steps: - - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 - - uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # v1.8.14 + - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 + - uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # v1.9.0 with: repository-url: https://test.pypi.org/legacy/ packages-dir: artifact/ - - uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # v1.8.14 + - uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # v1.9.0 with: packages-dir: artifact/ diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml index 0cd6f4a2..afba0d75 100644 --- a/.github/workflows/tests.yaml +++ b/.github/workflows/tests.yaml @@ -32,8 +32,8 @@ jobs: - {python: '3.7'} - {name: PyPy, python: 'pypy-3.10', tox: pypy310} steps: - - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1 with: python-version: ${{ matrix.python }} allow-prereleases: true @@ -44,8 +44,8 @@ jobs: typing: runs-on: ubuntu-latest steps: - - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1 with: python-version: '3.x' cache: pip diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 5b7ebb87..5bee1ca4 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -2,7 +2,7 @@ ci: autoupdate_schedule: monthly repos: - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.4.4 + rev: v0.6.2 hooks: - id: ruff - id: ruff-format diff --git a/requirements/build.txt b/requirements/build.txt index 52fd1f69..96ee8f08 100644 --- a/requirements/build.txt +++ b/requirements/build.txt @@ -1,12 +1,18 @@ # -# This file is autogenerated by pip-compile with Python 3.12 +# This file is autogenerated by pip-compile with Python 3.8 # by the following command: # # pip-compile build.in # build==1.2.1 # via -r build.in -packaging==24.0 +importlib-metadata==8.4.0 + # via build +packaging==24.1 # via build pyproject-hooks==1.1.0 # via build +tomli==2.0.1 + # via build +zipp==3.20.0 + # via importlib-metadata diff --git a/requirements/dev.txt b/requirements/dev.txt index 076912b0..d78f0cf6 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -1,22 +1,22 @@ # -# This file is autogenerated by pip-compile with Python 3.12 +# This file is autogenerated by pip-compile with Python 3.8 # by the following command: # # pip-compile dev.in # -alabaster==0.7.16 +alabaster==0.7.13 # via sphinx -attrs==23.2.0 +attrs==24.2.0 # via # outcome # trio -babel==2.15.0 +babel==2.16.0 # via sphinx build==1.2.1 # via pip-tools -cachetools==5.3.3 +cachetools==5.5.0 # via tox -certifi==2024.2.2 +certifi==2024.7.4 # via requests cfgv==3.4.0 # via pre-commit @@ -32,35 +32,43 @@ colorama==0.4.6 # via tox distlib==0.3.8 # via virtualenv -docutils==0.21.2 +docutils==0.20.1 # via sphinx -filelock==3.14.0 +exceptiongroup==1.2.2 + # via + # pytest + # trio +filelock==3.15.4 # via # tox # virtualenv -identify==2.5.36 +identify==2.6.0 # via pre-commit -idna==3.7 +idna==3.8 # via # requests # trio imagesize==1.4.1 # via sphinx +importlib-metadata==8.4.0 + # via + # build + # sphinx iniconfig==2.0.0 # via pytest jinja2==3.1.4 # via sphinx markupsafe==2.1.5 # via jinja2 -mypy==1.10.0 +mypy==1.11.1 # via -r typing.in mypy-extensions==1.0.0 # via mypy -nodeenv==1.8.0 +nodeenv==1.9.1 # via pre-commit outcome==1.3.0.post0 # via trio -packaging==24.0 +packaging==24.1 # via # build # pallets-sphinx-themes @@ -70,11 +78,11 @@ packaging==24.0 # tox pallets-sphinx-themes==2.1.3 # via -r docs.in -pip-compile-multi==2.6.3 +pip-compile-multi==2.6.4 # via -r dev.in pip-tools==7.4.1 # via pip-compile-multi -platformdirs==4.2.1 +platformdirs==4.2.2 # via # tox # virtualenv @@ -82,21 +90,23 @@ pluggy==1.5.0 # via # pytest # tox -pre-commit==3.7.1 +pre-commit==3.5.0 # via -r dev.in pygments==2.18.0 # via sphinx -pyproject-api==1.6.1 +pyproject-api==1.7.1 # via tox pyproject-hooks==1.1.0 # via # build # pip-tools -pytest==8.2.0 +pytest==8.3.2 # via -r tests.in -pyyaml==6.0.1 +pytz==2024.1 + # via babel +pyyaml==6.0.2 # via pre-commit -requests==2.31.0 +requests==2.32.3 # via sphinx sniffio==1.3.1 # via trio @@ -104,7 +114,7 @@ snowballstemmer==2.2.0 # via sphinx sortedcontainers==2.4.0 # via trio -sphinx==7.3.7 +sphinx==7.1.2 # via # -r docs.in # pallets-sphinx-themes @@ -112,36 +122,46 @@ sphinx==7.3.7 # sphinxcontrib-log-cabinet sphinx-issues==4.1.0 # via -r docs.in -sphinxcontrib-applehelp==1.0.8 +sphinxcontrib-applehelp==1.0.4 # via sphinx -sphinxcontrib-devhelp==1.0.6 +sphinxcontrib-devhelp==1.0.2 # via sphinx -sphinxcontrib-htmlhelp==2.0.5 +sphinxcontrib-htmlhelp==2.0.1 # via sphinx sphinxcontrib-jsmath==1.0.1 # via sphinx sphinxcontrib-log-cabinet==1.0.1 # via -r docs.in -sphinxcontrib-qthelp==1.0.7 +sphinxcontrib-qthelp==1.0.3 # via sphinx -sphinxcontrib-serializinghtml==1.1.10 +sphinxcontrib-serializinghtml==1.1.5 # via sphinx +tomli==2.0.1 + # via + # build + # mypy + # pip-tools + # pyproject-api + # pytest + # tox toposort==1.10 # via pip-compile-multi -tox==4.15.0 +tox==4.18.0 # via -r dev.in -trio==0.25.0 +trio==0.26.2 # via -r tests.in -typing-extensions==4.11.0 +typing-extensions==4.12.2 # via mypy -urllib3==2.2.1 +urllib3==2.2.2 # via requests -virtualenv==20.26.1 +virtualenv==20.26.3 # via # pre-commit # tox -wheel==0.43.0 +wheel==0.44.0 # via pip-tools +zipp==3.20.0 + # via importlib-metadata # The following packages are considered to be unsafe in a requirements file: # pip diff --git a/requirements/docs.txt b/requirements/docs.txt index 2cbd73fa..083b9cdc 100644 --- a/requirements/docs.txt +++ b/requirements/docs.txt @@ -1,28 +1,30 @@ # -# This file is autogenerated by pip-compile with Python 3.12 +# This file is autogenerated by pip-compile with Python 3.8 # by the following command: # # pip-compile docs.in # -alabaster==0.7.16 +alabaster==0.7.13 # via sphinx -babel==2.15.0 +babel==2.16.0 # via sphinx -certifi==2024.2.2 +certifi==2024.7.4 # via requests charset-normalizer==3.3.2 # via requests -docutils==0.21.2 +docutils==0.20.1 # via sphinx -idna==3.7 +idna==3.8 # via requests imagesize==1.4.1 # via sphinx +importlib-metadata==8.4.0 + # via sphinx jinja2==3.1.4 # via sphinx markupsafe==2.1.5 # via jinja2 -packaging==24.0 +packaging==24.1 # via # pallets-sphinx-themes # sphinx @@ -30,11 +32,13 @@ pallets-sphinx-themes==2.1.3 # via -r docs.in pygments==2.18.0 # via sphinx -requests==2.31.0 +pytz==2024.1 + # via babel +requests==2.32.3 # via sphinx snowballstemmer==2.2.0 # via sphinx -sphinx==7.3.7 +sphinx==7.1.2 # via # -r docs.in # pallets-sphinx-themes @@ -42,19 +46,21 @@ sphinx==7.3.7 # sphinxcontrib-log-cabinet sphinx-issues==4.1.0 # via -r docs.in -sphinxcontrib-applehelp==1.0.8 +sphinxcontrib-applehelp==1.0.4 # via sphinx -sphinxcontrib-devhelp==1.0.6 +sphinxcontrib-devhelp==1.0.2 # via sphinx -sphinxcontrib-htmlhelp==2.0.5 +sphinxcontrib-htmlhelp==2.0.1 # via sphinx sphinxcontrib-jsmath==1.0.1 # via sphinx sphinxcontrib-log-cabinet==1.0.1 # via -r docs.in -sphinxcontrib-qthelp==1.0.7 +sphinxcontrib-qthelp==1.0.3 # via sphinx -sphinxcontrib-serializinghtml==1.1.10 +sphinxcontrib-serializinghtml==1.1.5 # via sphinx -urllib3==2.2.1 +urllib3==2.2.2 # via requests +zipp==3.20.0 + # via importlib-metadata diff --git a/requirements/tests.txt b/requirements/tests.txt index de18d477..2b51fdba 100644 --- a/requirements/tests.txt +++ b/requirements/tests.txt @@ -1,28 +1,34 @@ # -# This file is autogenerated by pip-compile with Python 3.12 +# This file is autogenerated by pip-compile with Python 3.8 # by the following command: # # pip-compile tests.in # -attrs==23.2.0 +attrs==24.2.0 # via # outcome # trio -idna==3.7 +exceptiongroup==1.2.2 + # via + # pytest + # trio +idna==3.8 # via trio iniconfig==2.0.0 # via pytest outcome==1.3.0.post0 # via trio -packaging==24.0 +packaging==24.1 # via pytest pluggy==1.5.0 # via pytest -pytest==8.2.0 +pytest==8.3.2 # via -r tests.in sniffio==1.3.1 # via trio sortedcontainers==2.4.0 # via trio -trio==0.25.0 +tomli==2.0.1 + # via pytest +trio==0.26.2 # via -r tests.in diff --git a/requirements/tests37.txt b/requirements/tests37.txt index 578789e7..81c6213c 100644 --- a/requirements/tests37.txt +++ b/requirements/tests37.txt @@ -4,15 +4,15 @@ # # pip-compile tests37.in # -attrs==23.2.0 +attrs==24.2.0 # via # outcome # trio -exceptiongroup==1.2.1 +exceptiongroup==1.2.2 # via # pytest # trio -idna==3.7 +idna==3.8 # via trio importlib-metadata==6.7.0 # via diff --git a/requirements/typing.txt b/requirements/typing.txt index c08a5376..10216b9c 100644 --- a/requirements/typing.txt +++ b/requirements/typing.txt @@ -1,12 +1,14 @@ # -# This file is autogenerated by pip-compile with Python 3.12 +# This file is autogenerated by pip-compile with Python 3.8 # by the following command: # # pip-compile typing.in # -mypy==1.10.0 +mypy==1.11.1 # via -r typing.in mypy-extensions==1.0.0 # via mypy -typing-extensions==4.11.0 +tomli==2.0.1 + # via mypy +typing-extensions==4.12.2 # via mypy -- 2.47.3