update dev dependencies

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 6b134d1f038f51dd72601e1b054893f874b92bd2..7acd92e5b7e862716bf574ac262851a54f38d14d 100644 (file)
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -9,8 +9,8 @@ jobs:
     outputs:
       hash: ${{ steps.hash.outputs.hash }}
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
-      - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
         with:
           python-version: '3.x'
           cache: pip
@@ -23,7 +23,7 @@ jobs:
       - name: generate hash
         id: hash
         run: cd dist && echo "hash=$(sha256sum * | base64 -w0)" >> $GITHUB_OUTPUT
-      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+      - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
         with:
           path: ./dist
   provenance:
@@ -33,7 +33,7 @@ jobs:
       id-token: write
       contents: write
     # Can't pin with hash due to how this workflow works.
-    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0
+    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
     with:
       base64-subjects: ${{ needs.build.outputs.hash }}
   create-release:
@@ -44,7 +44,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
       - name: create release
         run: >
           gh release create --draft --repo ${{ github.repository }}
@@ -63,11 +63,11 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
-      - uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # v1.8.14
+      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+      - uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # v1.9.0
         with:
           repository-url: https://test.pypi.org/legacy/
           packages-dir: artifact/
-      - uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # v1.8.14
+      - uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # v1.9.0
         with:
           packages-dir: artifact/

diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 0cd6f4a21e689f918b9b0557f2cb5c9e202ed592..afba0d753e62243baef9bb09412bb0a02d48d6c7 100644 (file)
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -32,8 +32,8 @@ jobs:
           - {python: '3.7'}
           - {name: PyPy, python: 'pypy-3.10', tox: pypy310}
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
-      - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
         with:
           python-version: ${{ matrix.python }}
           allow-prereleases: true
@@ -44,8 +44,8 @@ jobs:
   typing:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
-      - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
         with:
           python-version: '3.x'
           cache: pip

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 5b7ebb8780d34eea677222b7f53694c7d4131728..5bee1ca4bd98b345ca89d1b08a5e0afe4c3ccef9 100644 (file)
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -2,7 +2,7 @@ ci:
   autoupdate_schedule: monthly
 repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.4.4
+    rev: v0.6.2
     hooks:
       - id: ruff
       - id: ruff-format

diff --git a/requirements/build.txt b/requirements/build.txt
index 52fd1f69a872325dc847db696b16f76c05ac78ed..96ee8f08ef426ed8745649fe78c9d8b85453ecca 100644 (file)
--- a/requirements/build.txt
+++ b/requirements/build.txt
@@ -1,12 +1,18 @@
 #
-# This file is autogenerated by pip-compile with Python 3.12
+# This file is autogenerated by pip-compile with Python 3.8
 # by the following command:
 #
 #    pip-compile build.in
 #
 build==1.2.1
     # via -r build.in
-packaging==24.0
+importlib-metadata==8.4.0
+    # via build
+packaging==24.1
     # via build
 pyproject-hooks==1.1.0
     # via build
+tomli==2.0.1
+    # via build
+zipp==3.20.0
+    # via importlib-metadata

diff --git a/requirements/dev.txt b/requirements/dev.txt
index 076912b0b1418f545ff4ba0752e9ab8158aa4973..d78f0cf610d9ef15922cb662dee42922ce4ba1ab 100644 (file)
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -1,22 +1,22 @@
 #
-# This file is autogenerated by pip-compile with Python 3.12
+# This file is autogenerated by pip-compile with Python 3.8
 # by the following command:
 #
 #    pip-compile dev.in
 #
-alabaster==0.7.16
+alabaster==0.7.13
     # via sphinx
-attrs==23.2.0
+attrs==24.2.0
     # via
     #   outcome
     #   trio
-babel==2.15.0
+babel==2.16.0
     # via sphinx
 build==1.2.1
     # via pip-tools
-cachetools==5.3.3
+cachetools==5.5.0
     # via tox
-certifi==2024.2.2
+certifi==2024.7.4
     # via requests
 cfgv==3.4.0
     # via pre-commit
@@ -32,35 +32,43 @@ colorama==0.4.6
     # via tox
 distlib==0.3.8
     # via virtualenv
-docutils==0.21.2
+docutils==0.20.1
     # via sphinx
-filelock==3.14.0
+exceptiongroup==1.2.2
+    # via
+    #   pytest
+    #   trio
+filelock==3.15.4
     # via
     #   tox
     #   virtualenv
-identify==2.5.36
+identify==2.6.0
     # via pre-commit
-idna==3.7
+idna==3.8
     # via
     #   requests
     #   trio
 imagesize==1.4.1
     # via sphinx
+importlib-metadata==8.4.0
+    # via
+    #   build
+    #   sphinx
 iniconfig==2.0.0
     # via pytest
 jinja2==3.1.4
     # via sphinx
 markupsafe==2.1.5
     # via jinja2
-mypy==1.10.0
+mypy==1.11.1
     # via -r typing.in
 mypy-extensions==1.0.0
     # via mypy
-nodeenv==1.8.0
+nodeenv==1.9.1
     # via pre-commit
 outcome==1.3.0.post0
     # via trio
-packaging==24.0
+packaging==24.1
     # via
     #   build
     #   pallets-sphinx-themes
@@ -70,11 +78,11 @@ packaging==24.0
     #   tox
 pallets-sphinx-themes==2.1.3
     # via -r docs.in
-pip-compile-multi==2.6.3
+pip-compile-multi==2.6.4
     # via -r dev.in
 pip-tools==7.4.1
     # via pip-compile-multi
-platformdirs==4.2.1
+platformdirs==4.2.2
     # via
     #   tox
     #   virtualenv
@@ -82,21 +90,23 @@ pluggy==1.5.0
     # via
     #   pytest
     #   tox
-pre-commit==3.7.1
+pre-commit==3.5.0
     # via -r dev.in
 pygments==2.18.0
     # via sphinx
-pyproject-api==1.6.1
+pyproject-api==1.7.1
     # via tox
 pyproject-hooks==1.1.0
     # via
     #   build
     #   pip-tools
-pytest==8.2.0
+pytest==8.3.2
     # via -r tests.in
-pyyaml==6.0.1
+pytz==2024.1
+    # via babel
+pyyaml==6.0.2
     # via pre-commit
-requests==2.31.0
+requests==2.32.3
     # via sphinx
 sniffio==1.3.1
     # via trio
@@ -104,7 +114,7 @@ snowballstemmer==2.2.0
     # via sphinx
 sortedcontainers==2.4.0
     # via trio
-sphinx==7.3.7
+sphinx==7.1.2
     # via
     #   -r docs.in
     #   pallets-sphinx-themes
@@ -112,36 +122,46 @@ sphinx==7.3.7
     #   sphinxcontrib-log-cabinet
 sphinx-issues==4.1.0
     # via -r docs.in
-sphinxcontrib-applehelp==1.0.8
+sphinxcontrib-applehelp==1.0.4
     # via sphinx
-sphinxcontrib-devhelp==1.0.6
+sphinxcontrib-devhelp==1.0.2
     # via sphinx
-sphinxcontrib-htmlhelp==2.0.5
+sphinxcontrib-htmlhelp==2.0.1
     # via sphinx
 sphinxcontrib-jsmath==1.0.1
     # via sphinx
 sphinxcontrib-log-cabinet==1.0.1
     # via -r docs.in
-sphinxcontrib-qthelp==1.0.7
+sphinxcontrib-qthelp==1.0.3
     # via sphinx
-sphinxcontrib-serializinghtml==1.1.10
+sphinxcontrib-serializinghtml==1.1.5
     # via sphinx
+tomli==2.0.1
+    # via
+    #   build
+    #   mypy
+    #   pip-tools
+    #   pyproject-api
+    #   pytest
+    #   tox
 toposort==1.10
     # via pip-compile-multi
-tox==4.15.0
+tox==4.18.0
     # via -r dev.in
-trio==0.25.0
+trio==0.26.2
     # via -r tests.in
-typing-extensions==4.11.0
+typing-extensions==4.12.2
     # via mypy
-urllib3==2.2.1
+urllib3==2.2.2
     # via requests
-virtualenv==20.26.1
+virtualenv==20.26.3
     # via
     #   pre-commit
     #   tox
-wheel==0.43.0
+wheel==0.44.0
     # via pip-tools
+zipp==3.20.0
+    # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
 # pip

diff --git a/requirements/docs.txt b/requirements/docs.txt
index 2cbd73fa818f9eaea77873f8ce3836e55da88d1d..083b9cdc06ad9c7ae8bd5e32ee1f4e7bcc2809d2 100644 (file)
--- a/requirements/docs.txt
+++ b/requirements/docs.txt
@@ -1,28 +1,30 @@
 #
-# This file is autogenerated by pip-compile with Python 3.12
+# This file is autogenerated by pip-compile with Python 3.8
 # by the following command:
 #
 #    pip-compile docs.in
 #
-alabaster==0.7.16
+alabaster==0.7.13
     # via sphinx
-babel==2.15.0
+babel==2.16.0
     # via sphinx
-certifi==2024.2.2
+certifi==2024.7.4
     # via requests
 charset-normalizer==3.3.2
     # via requests
-docutils==0.21.2
+docutils==0.20.1
     # via sphinx
-idna==3.7
+idna==3.8
     # via requests
 imagesize==1.4.1
     # via sphinx
+importlib-metadata==8.4.0
+    # via sphinx
 jinja2==3.1.4
     # via sphinx
 markupsafe==2.1.5
     # via jinja2
-packaging==24.0
+packaging==24.1
     # via
     #   pallets-sphinx-themes
     #   sphinx
@@ -30,11 +32,13 @@ pallets-sphinx-themes==2.1.3
     # via -r docs.in
 pygments==2.18.0
     # via sphinx
-requests==2.31.0
+pytz==2024.1
+    # via babel
+requests==2.32.3
     # via sphinx
 snowballstemmer==2.2.0
     # via sphinx
-sphinx==7.3.7
+sphinx==7.1.2
     # via
     #   -r docs.in
     #   pallets-sphinx-themes
@@ -42,19 +46,21 @@ sphinx==7.3.7
     #   sphinxcontrib-log-cabinet
 sphinx-issues==4.1.0
     # via -r docs.in
-sphinxcontrib-applehelp==1.0.8
+sphinxcontrib-applehelp==1.0.4
     # via sphinx
-sphinxcontrib-devhelp==1.0.6
+sphinxcontrib-devhelp==1.0.2
     # via sphinx
-sphinxcontrib-htmlhelp==2.0.5
+sphinxcontrib-htmlhelp==2.0.1
     # via sphinx
 sphinxcontrib-jsmath==1.0.1
     # via sphinx
 sphinxcontrib-log-cabinet==1.0.1
     # via -r docs.in
-sphinxcontrib-qthelp==1.0.7
+sphinxcontrib-qthelp==1.0.3
     # via sphinx
-sphinxcontrib-serializinghtml==1.1.10
+sphinxcontrib-serializinghtml==1.1.5
     # via sphinx
-urllib3==2.2.1
+urllib3==2.2.2
     # via requests
+zipp==3.20.0
+    # via importlib-metadata

diff --git a/requirements/tests.txt b/requirements/tests.txt
index de18d477d944c9e30a17fb4b6f82a5dbb280ce7c..2b51fdbad885f8fa0323d2f35fa0eb82b7ab036d 100644 (file)
--- a/requirements/tests.txt
+++ b/requirements/tests.txt
@@ -1,28 +1,34 @@
 #
-# This file is autogenerated by pip-compile with Python 3.12
+# This file is autogenerated by pip-compile with Python 3.8
 # by the following command:
 #
 #    pip-compile tests.in
 #
-attrs==23.2.0
+attrs==24.2.0
     # via
     #   outcome
     #   trio
-idna==3.7
+exceptiongroup==1.2.2
+    # via
+    #   pytest
+    #   trio
+idna==3.8
     # via trio
 iniconfig==2.0.0
     # via pytest
 outcome==1.3.0.post0
     # via trio
-packaging==24.0
+packaging==24.1
     # via pytest
 pluggy==1.5.0
     # via pytest
-pytest==8.2.0
+pytest==8.3.2
     # via -r tests.in
 sniffio==1.3.1
     # via trio
 sortedcontainers==2.4.0
     # via trio
-trio==0.25.0
+tomli==2.0.1
+    # via pytest
+trio==0.26.2
     # via -r tests.in

diff --git a/requirements/tests37.txt b/requirements/tests37.txt
index 578789e7a1b0a6c738f584b141b5e19c4a63546c..81c6213c0e42cbed48e9afbd5c6803177f2c15c9 100644 (file)
--- a/requirements/tests37.txt
+++ b/requirements/tests37.txt
@@ -4,15 +4,15 @@
 #
 #    pip-compile tests37.in
 #
-attrs==23.2.0
+attrs==24.2.0
     # via
     #   outcome
     #   trio
-exceptiongroup==1.2.1
+exceptiongroup==1.2.2
     # via
     #   pytest
     #   trio
-idna==3.7
+idna==3.8
     # via trio
 importlib-metadata==6.7.0
     # via

diff --git a/requirements/typing.txt b/requirements/typing.txt
index c08a5376731e6b4f3bbc55bde9079d2b00e0f4e3..10216b9c473e532e2debc802eac00ee928d9fbc1 100644 (file)
--- a/requirements/typing.txt
+++ b/requirements/typing.txt
@@ -1,12 +1,14 @@
 #
-# This file is autogenerated by pip-compile with Python 3.12
+# This file is autogenerated by pip-compile with Python 3.8
 # by the following command:
 #
 #    pip-compile typing.in
 #
-mypy==1.10.0
+mypy==1.11.1
     # via -r typing.in
 mypy-extensions==1.0.0
     # via mypy
-typing-extensions==4.11.0
+tomli==2.0.1
+    # via mypy
+typing-extensions==4.12.2
     # via mypy