Bump dependencies (#716)

* Bump dependencies

Also resolves a few ruff-related deprecations

* Test Dependabot

* Bump GitHub Actions

Node 16 -> Node 20

.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    target-branch: "develop"
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    target-branch: "develop"

.github/workflows/build.yml

@@ -33,7 +33,7 @@ jobs:
           echo "::set-output name=current_version_tag::${CURRENT_VERSION_TAG}"
       - name: Auto-generate future version
         id: autogenerate-version
-        uses: paulhatch/semantic-version@v5.3.0
+        uses: paulhatch/semantic-version@v5.4.0
         with:
           tag_prefix: "v"
           major_pattern: "(major)"
@@ -46,7 +46,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: 3.10.6
           cache: pip
@@ -61,7 +61,8 @@ jobs:
       - name: Build
         run: VERSION=${{ needs.get-version.outputs.version_tag }} make build
       - name: Upload artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: dist
           path: dist
+          overwrite: true

.github/workflows/deploy.yml

@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: build
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
           name: dist
           path: dist

.github/workflows/test.yml

@@ -40,7 +40,7 @@ jobs:
     outputs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - id: set-matrix
       name: Set up test matrix
       run: |
@@ -59,13 +59,13 @@ jobs:
       TEST_MEMORY: 1G
       TEST_PROCESSES: 1
     steps:
-    - uses: actions/checkout@v3
-    - uses: actions/download-artifact@v3
+    - uses: actions/checkout@v4
+    - uses: actions/download-artifact@v4
       with:
         name: dist
         path: dist
     - name: Set up Python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: 3.10.6
         cache: pip

.github/workflows/veracodescan.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: build
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
           name: dist
           path: dist

Makefile

@@ -5,8 +5,8 @@ TEST_FILES ?= tests/integration/test_*.py
 VERSION ?= $(shell git tag --list --sort=-version:refname "v*" | head -n 1)
 COMMIT ?= $(shell git rev-parse --short HEAD)
 
-PIP_TOOLS_VERSION ?= 7.3.0
-PIP_VERSION ?= 23.3.1
+PIP_TOOLS_VERSION ?= 7.4.0
+PIP_VERSION ?= 24.0
 PYTHON_PLATFORM ?= manylinux2014_x86_64
 PYTHON_VERSION ?= 310
 
@@ -104,5 +104,5 @@ format:
 
 .PHONY: lint
 lint:
-	ruff check buildpack lib/m2ee/* tests/*/ --show-source
+	ruff check buildpack lib/m2ee/* tests/*/ --output-format=full
 	pylint --disable=W,R,C buildpack lib/m2ee/* tests/*/

pyproject.toml

@@ -10,7 +10,7 @@ exclude = [
     "tests/unit/test_databroker.py"
 ]
 
-[tool.ruff.mccabe]
+[tool.ruff.lint.mccabe]
 # Unlike Flake8, default to a complexity level of 10.
 max-complexity = 10
 

requirements-dev.in

@@ -1,11 +1,11 @@
 click==8.1.7
 idna==3.6
-pytest==7.4.3
-pytest-timer==0.0.11
+pytest==8.0.1
+pytest-timer==1.0.0
 pytest-timeout==2.2.0
-pylint==3.0.2
-pyopenssl==23.3.0
+pylint==3.0.3
+pyopenssl==24.0.0
 randomname==0.2.1
 requests-mock==1.11.0
-ruff==0.1.6
+ruff==0.2.2
 parameterized==0.9.0

requirements.in

@@ -1,11 +1,11 @@
 backoff==2.2.1
-certifi==2023.11.17
-cryptography==41.0.7
-distro==1.8.0
+certifi==2024.2.2
+cryptography==42.0.4
+distro==1.9.0
 httplib2==0.22.0
-jinja2==3.1.2
+jinja2==3.1.3
 omegaconf==2.3.0
 psycopg2-binary==2.9.9
 pyyaml==6.0.1
 requests==2.31.0
-urllib3==2.1.0
+urllib3==2.2.1

requirements.txt

@@ -8,23 +8,23 @@ antlr4-python3-runtime==4.9.3
     # via omegaconf
 backoff==2.2.1
     # via -r requirements.in
-certifi==2023.11.17
+certifi==2024.2.2
     # via
     #   -r requirements.in
     #   requests
 cffi==1.14.4
     # via cryptography
 charset-normalizer==2.0.3
     # via requests
-cryptography==41.0.7
+cryptography==42.0.4
     # via -r requirements.in
-distro==1.8.0
+distro==1.9.0
     # via -r requirements.in
 httplib2==0.22.0
     # via -r requirements.in
 idna==2.8
     # via requests
-jinja2==3.1.2
+jinja2==3.1.3
     # via -r requirements.in
 markupsafe==2.0.1
     # via jinja2
@@ -42,7 +42,7 @@ pyyaml==6.0.1
     #   omegaconf
 requests==2.31.0
     # via -r requirements.in
-urllib3==2.1.0
+urllib3==2.2.1
     # via
     #   -r requirements.in
     #   requests