Update several dependencies.

ICTU · Aug 17, 2024 · b1b81c8 · b1b81c8
1 parent 4188cc8
commit b1b81c8
Show file tree

Hide file tree

Showing 26 changed files with 104 additions and 96 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -3,7 +3,7 @@ name: Release
 on:
   push:
     tags:
-      - 'v*'
+      - "v*"
 
 jobs:
   push_to_registry:
@@ -20,59 +20,59 @@ jobs:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
       - name: Push Database to Docker Hub
-        uses: docker/build-push-action@v6.6.1
+        uses: docker/build-push-action@v6.7.0
         with:
           context: components/database
           platforms: linux/amd64,linux/arm64
           tags: ictu/quality-time_database:${{ github.ref_name }}
           push: true
       - name: Push Renderer to Docker Hub
-        uses: docker/build-push-action@v6.6.1
+        uses: docker/build-push-action@v6.7.0
         with:
           context: components/renderer
           platforms: linux/amd64,linux/arm64
           tags: ictu/quality-time_renderer:${{ github.ref_name }}
           push: true
       - name: Push Proxy to Docker Hub
-        uses: docker/build-push-action@v6.6.1
+        uses: docker/build-push-action@v6.7.0
         with:
           context: components/proxy
           platforms: linux/amd64,linux/arm64
           tags: ictu/quality-time_proxy:${{ github.ref_name }}
           push: true
       - name: Push Collector to Docker Hub
-        uses: docker/build-push-action@v6.6.1
+        uses: docker/build-push-action@v6.7.0
         with:
           context: components
           file: components/collector/Dockerfile
           platforms: linux/amd64,linux/arm64
           tags: ictu/quality-time_collector:${{ github.ref_name }}
           push: true
       - name: Push Notifier to Docker Hub
-        uses: docker/build-push-action@v6.6.1
+        uses: docker/build-push-action@v6.7.0
         with:
           context: components
           file: components/notifier/Dockerfile
           platforms: linux/amd64,linux/arm64
           tags: ictu/quality-time_notifier:${{ github.ref_name }}
           push: true
       - name: Push API-server to Docker Hub
-        uses: docker/build-push-action@v6.6.1
+        uses: docker/build-push-action@v6.7.0
         with:
           context: components
           file: components/api_server/Dockerfile
           platforms: linux/amd64,linux/arm64
           tags: ictu/quality-time_api_server:${{ github.ref_name }}
           push: true
       - name: Push Frontend to Docker Hub
-        uses: docker/build-push-action@v6.6.1
+        uses: docker/build-push-action@v6.7.0
         with:
           context: components/frontend
           platforms: linux/amd64,linux/arm64
           tags: ictu/quality-time_frontend:${{ github.ref_name }}
           push: true
       - name: Anchore SBOM Action
-        uses: anchore/[email protected].0
+        uses: anchore/[email protected].1
       - name: Package and push Helm chart to Docker Hub
         run: |
           cd helm

diff --git a/components/api_server/pyproject.toml b/components/api_server/pyproject.toml
@@ -33,7 +33,7 @@ optional-dependencies.tools = [
     "mypy==1.11.1",
     "pip-audit==2.7.3",
     "pyproject-fmt==2.2.1",
-    "ruff==0.5.7",
+    "ruff==0.6.0",
     "vulture==2.11",
 ]
 

diff --git a/components/api_server/requirements/requirements-dev.txt b/components/api_server/requirements/requirements-dev.txt
@@ -827,9 +827,9 @@ pip==24.2 \
     # via
     #   api-server (pyproject.toml)
     #   pip-tools
-setuptools==72.1.0 \
-    --hash=sha256:5a03e1860cf56bb6ef48ce186b0e557fdba433237481a9a625176c2831be15d1 \
-    --hash=sha256:8d243eff56d095e5817f796ede6ae32941278f542e0f941867cc05ae52b162ec
+setuptools==72.2.0 \
+    --hash=sha256:80aacbf633704e9c8bfa1d99fa5dd4dc59573efcf9e4042c13d3bcef91ac2ef9 \
+    --hash=sha256:f11dd94b7bae3a156a95ec151f24e4637fb4fa19c878e4d191bfb8b2d82728c4
     # via
     #   pip-tools
     #   zope-event

diff --git a/components/api_server/requirements/requirements.txt b/components/api_server/requirements/requirements.txt
@@ -573,9 +573,9 @@ zope-interface==7.0.1 \
     # via gevent
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==72.1.0 \
-    --hash=sha256:5a03e1860cf56bb6ef48ce186b0e557fdba433237481a9a625176c2831be15d1 \
-    --hash=sha256:8d243eff56d095e5817f796ede6ae32941278f542e0f941867cc05ae52b162ec
+setuptools==72.2.0 \
+    --hash=sha256:80aacbf633704e9c8bfa1d99fa5dd4dc59573efcf9e4042c13d3bcef91ac2ef9 \
+    --hash=sha256:f11dd94b7bae3a156a95ec151f24e4637fb4fa19c878e4d191bfb8b2d82728c4
     # via
     #   zope-event
     #   zope-interface
diff --git a/components/collector/pyproject.toml b/components/collector/pyproject.toml
@@ -33,7 +33,7 @@ optional-dependencies.tools = [
     "mypy==1.11.1",
     "pip-audit==2.7.3",
     "pyproject-fmt==2.2.1",
-    "ruff==0.5.7",
+    "ruff==0.6.0",
     "vulture==2.11",
 ]
 

diff --git a/components/collector/requirements/requirements-dev.txt b/components/collector/requirements/requirements-dev.txt
@@ -8,9 +8,9 @@ aiogqlc==5.1.0 \
     --hash=sha256:1e7f49f572f17e7079176a12b1ead0cfd081d09f693f3199640bb0c75ac2f8a1 \
     --hash=sha256:89520455022ad29f69c58ac55255ea0e94caff1499ed4bb40526ac81b7eab4ef
     # via collector (pyproject.toml)
-aiohappyeyeballs==2.3.5 \
-    --hash=sha256:4d6dea59215537dbc746e93e779caea8178c866856a721c9c660d7a5a7b8be03 \
-    --hash=sha256:6fa48b9f1317254f122a07a131a86b71ca6946ca989ce6326fff54a99a920105
+aiohappyeyeballs==2.3.7 \
+    --hash=sha256:337ce4dc0e99eb697c3c5a77d6cb3c52925824d9a67ac0dea7c55b8a2d60b222 \
+    --hash=sha256:e794cd29ba6a14078092984e43688212a19081de3a73b6796c2fdeb3706dd6ce
     # via aiohttp
 aiohttp==3.10.3 \
     --hash=sha256:05d66203a530209cbe40f102ebaac0b2214aba2a33c075d0bf825987c36f1f0b \
@@ -711,9 +711,9 @@ six==1.16.0 \
     --hash=sha256:1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926 \
     --hash=sha256:8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254
     # via python-dateutil
-soupsieve==2.5 \
-    --hash=sha256:5663d5a7b3bfaeee0bc4372e7fc48f9cff4940b3eec54a6451cc5299f1097690 \
-    --hash=sha256:eaa337ff55a1579b6549dc679565eac1e3d000563bcb1c8ab0d0fefbc0c2cdc7
+soupsieve==2.6 \
+    --hash=sha256:e2e68417777af359ec65daac1057404a3c8a5455bb8abc36f1a9866ab1a51abb \
+    --hash=sha256:e72c4ff06e4fb6e4b5a9f0f55fe6e81514581fca1515028625d0f299c602ccc9
     # via beautifulsoup4
 types-beautifulsoup4==4.12.0.20240511 \
     --hash=sha256:004f6096fdd83b19cdbf6cb10e4eae57b10205eccc365d0a69d77da836012e28 \
@@ -845,7 +845,7 @@ pip==24.2 \
     # via
     #   collector (pyproject.toml)
     #   pip-tools
-setuptools==72.1.0 \
-    --hash=sha256:5a03e1860cf56bb6ef48ce186b0e557fdba433237481a9a625176c2831be15d1 \
-    --hash=sha256:8d243eff56d095e5817f796ede6ae32941278f542e0f941867cc05ae52b162ec
+setuptools==72.2.0 \
+    --hash=sha256:80aacbf633704e9c8bfa1d99fa5dd4dc59573efcf9e4042c13d3bcef91ac2ef9 \
+    --hash=sha256:f11dd94b7bae3a156a95ec151f24e4637fb4fa19c878e4d191bfb8b2d82728c4
     # via pip-tools
diff --git a/components/collector/requirements/requirements.txt b/components/collector/requirements/requirements.txt
@@ -8,9 +8,9 @@ aiogqlc==5.1.0 \
     --hash=sha256:1e7f49f572f17e7079176a12b1ead0cfd081d09f693f3199640bb0c75ac2f8a1 \
     --hash=sha256:89520455022ad29f69c58ac55255ea0e94caff1499ed4bb40526ac81b7eab4ef
     # via collector (pyproject.toml)
-aiohappyeyeballs==2.3.5 \
-    --hash=sha256:4d6dea59215537dbc746e93e779caea8178c866856a721c9c660d7a5a7b8be03 \
-    --hash=sha256:6fa48b9f1317254f122a07a131a86b71ca6946ca989ce6326fff54a99a920105
+aiohappyeyeballs==2.3.7 \
+    --hash=sha256:337ce4dc0e99eb697c3c5a77d6cb3c52925824d9a67ac0dea7c55b8a2d60b222 \
+    --hash=sha256:e794cd29ba6a14078092984e43688212a19081de3a73b6796c2fdeb3706dd6ce
     # via aiohttp
 aiohttp==3.10.3 \
     --hash=sha256:05d66203a530209cbe40f102ebaac0b2214aba2a33c075d0bf825987c36f1f0b \
@@ -355,9 +355,9 @@ six==1.16.0 \
     --hash=sha256:1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926 \
     --hash=sha256:8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254
     # via python-dateutil
-soupsieve==2.5 \
-    --hash=sha256:5663d5a7b3bfaeee0bc4372e7fc48f9cff4940b3eec54a6451cc5299f1097690 \
-    --hash=sha256:eaa337ff55a1579b6549dc679565eac1e3d000563bcb1c8ab0d0fefbc0c2cdc7
+soupsieve==2.6 \
+    --hash=sha256:e2e68417777af359ec65daac1057404a3c8a5455bb8abc36f1a9866ab1a51abb \
+    --hash=sha256:e72c4ff06e4fb6e4b5a9f0f55fe6e81514581fca1515028625d0f299c602ccc9
     # via beautifulsoup4
 yarl==1.9.4 \
     --hash=sha256:008d3e808d03ef28542372d01057fd09168419cdc8f848efe2804f894ae03e51 \

diff --git a/components/frontend/Dockerfile b/components/frontend/Dockerfile
@@ -9,7 +9,7 @@ COPY public /home/frontend/public
 COPY src /home/frontend/src
 COPY healthcheck.js /home/frontend
 COPY .env /home/frontend
-RUN npm install --ignore-scripts -g [email protected].1 && \
+RUN npm install --ignore-scripts -g [email protected].2 && \
     npm install --ignore-scripts && \
     npm install --ignore-scripts -g [email protected] && \
     npm run --ignore-scripts build

diff --git a/components/notifier/pyproject.toml b/components/notifier/pyproject.toml
@@ -26,7 +26,7 @@ optional-dependencies.tools = [
     "mypy==1.11.1",
     "pip-audit==2.7.3",
     "pyproject-fmt==2.2.1",
-    "ruff==0.5.7",
+    "ruff==0.6.0",
     "vulture==2.11",
 ]
 

diff --git a/components/notifier/requirements/requirements-dev.txt b/components/notifier/requirements/requirements-dev.txt
@@ -4,9 +4,9 @@
 #
 #    ci/pip-compile.sh
 #
-aiohappyeyeballs==2.3.5 \
-    --hash=sha256:4d6dea59215537dbc746e93e779caea8178c866856a721c9c660d7a5a7b8be03 \
-    --hash=sha256:6fa48b9f1317254f122a07a131a86b71ca6946ca989ce6326fff54a99a920105
+aiohappyeyeballs==2.3.7 \
+    --hash=sha256:337ce4dc0e99eb697c3c5a77d6cb3c52925824d9a67ac0dea7c55b8a2d60b222 \
+    --hash=sha256:e794cd29ba6a14078092984e43688212a19081de3a73b6796c2fdeb3706dd6ce
     # via aiohttp
 aiohttp==3.10.3 \
     --hash=sha256:05d66203a530209cbe40f102ebaac0b2214aba2a33c075d0bf825987c36f1f0b \
@@ -859,7 +859,7 @@ pip==24.2 \
     # via
     #   notifier (pyproject.toml)
     #   pip-tools
-setuptools==72.1.0 \
-    --hash=sha256:5a03e1860cf56bb6ef48ce186b0e557fdba433237481a9a625176c2831be15d1 \
-    --hash=sha256:8d243eff56d095e5817f796ede6ae32941278f542e0f941867cc05ae52b162ec
+setuptools==72.2.0 \
+    --hash=sha256:80aacbf633704e9c8bfa1d99fa5dd4dc59573efcf9e4042c13d3bcef91ac2ef9 \
+    --hash=sha256:f11dd94b7bae3a156a95ec151f24e4637fb4fa19c878e4d191bfb8b2d82728c4
     # via pip-tools
diff --git a/components/notifier/requirements/requirements.txt b/components/notifier/requirements/requirements.txt
@@ -4,9 +4,9 @@
 #
 #    ci/pip-compile.sh
 #
-aiohappyeyeballs==2.3.5 \
-    --hash=sha256:4d6dea59215537dbc746e93e779caea8178c866856a721c9c660d7a5a7b8be03 \
-    --hash=sha256:6fa48b9f1317254f122a07a131a86b71ca6946ca989ce6326fff54a99a920105
+aiohappyeyeballs==2.3.7 \
+    --hash=sha256:337ce4dc0e99eb697c3c5a77d6cb3c52925824d9a67ac0dea7c55b8a2d60b222 \
+    --hash=sha256:e794cd29ba6a14078092984e43688212a19081de3a73b6796c2fdeb3706dd6ce
     # via aiohttp
 aiohttp==3.10.3 \
     --hash=sha256:05d66203a530209cbe40f102ebaac0b2214aba2a33c075d0bf825987c36f1f0b \

diff --git a/components/renderer/Dockerfile b/components/renderer/Dockerfile
@@ -18,7 +18,7 @@ RUN apk add --no-cache \
 RUN update-ms-fonts \
     && fc-cache -f
 
-RUN npm install --ignore-scripts -g [email protected].1
+RUN npm install --ignore-scripts -g [email protected].2
 
 ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
 ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser

diff --git a/components/renderer/package-lock.json b/components/renderer/package-lock.json
diff --git a/components/renderer/package.json b/components/renderer/package.json
@@ -7,6 +7,6 @@
     "dependencies": {
         "@braintree/sanitize-url": "^7.1.0",
         "express": "^4.19.2",
-        "puppeteer": "^23.0.2"
+        "puppeteer": "^23.1.0"
     }
 }
diff --git a/components/shared_code/pyproject.toml b/components/shared_code/pyproject.toml
@@ -30,7 +30,7 @@ optional-dependencies.tools = [
     "pip-audit==2.7.3",
     "pydantic==2.8.2",      # Needed because pipx needs to inject Pydantic into the mpyp venv, see ci/quality.sh
     "pyproject-fmt==2.2.1",
-    "ruff==0.5.7",
+    "ruff==0.6.0",
     "vulture==2.11",
 ]
 

diff --git a/components/shared_code/requirements/requirements-dev.txt b/components/shared_code/requirements/requirements-dev.txt
@@ -462,7 +462,7 @@ pip==24.2 \
     # via
     #   pip-tools
     #   shared-code (pyproject.toml)
-setuptools==72.1.0 \
-    --hash=sha256:5a03e1860cf56bb6ef48ce186b0e557fdba433237481a9a625176c2831be15d1 \
-    --hash=sha256:8d243eff56d095e5817f796ede6ae32941278f542e0f941867cc05ae52b162ec
+setuptools==72.2.0 \
+    --hash=sha256:80aacbf633704e9c8bfa1d99fa5dd4dc59573efcf9e4042c13d3bcef91ac2ef9 \
+    --hash=sha256:f11dd94b7bae3a156a95ec151f24e4637fb4fa19c878e4d191bfb8b2d82728c4
     # via pip-tools
diff --git a/docs/pyproject.toml b/docs/pyproject.toml
@@ -29,7 +29,7 @@ optional-dependencies.tools = [
     "pip-audit==2.7.3",
     "pydantic==2.8.2",      # Needed because pipx needs to inject Pydantic into the mpyp venv, see ci/quality.sh
     "pyproject-fmt==2.2.1",
-    "ruff==0.5.7",
+    "ruff==0.6.0",
     "vale==3.0.3.0",        # Documentation grammar and style checker
     "vulture==2.11",
 ]