update dependencies and sync (eclipse-velocitas#269)

MP91 · web-flow · commit 3cb649f79449 · 2025-03-11T12:01:22.000+01:00
* update dependencies and sync

* update sdk and transitive dependencies

* use correct package version

* pre-commit update

* fix licenses
diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
@@ -1,5 +1,5 @@
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
+# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
diff --git a/.devcontainer/scripts/configure-codespaces.sh b/.devcontainer/scripts/configure-codespaces.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2023-2024 Contributors to the Eclipse Foundation
+# Copyright (c) 2023-2025 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
diff --git a/.devcontainer/scripts/configure-proxies.sh b/.devcontainer/scripts/configure-proxies.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
+# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
diff --git a/.devcontainer/scripts/container-set.sh b/.devcontainer/scripts/container-set.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
+# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
diff --git a/.devcontainer/scripts/onCreateCommand.sh b/.devcontainer/scripts/onCreateCommand.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
+# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
diff --git a/.devcontainer/scripts/postStartCommand.sh b/.devcontainer/scripts/postStartCommand.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2024 Contributors to the Eclipse Foundation
+# Copyright (c) 2024-2025 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
@@ -14,7 +14,9 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-.devcontainer/scripts/upgrade-cli.sh
+if [[ -z "${VELOCITAS_OFFLINE}" ]]; then
+    .devcontainer/scripts/upgrade-cli.sh
+fi
 
 # Call user initialization hook if present
 POST_START_USER_HOOK_PATH=.devcontainer/scripts/onPostStartUserHook.sh
diff --git a/.devcontainer/scripts/setup-dependencies.sh b/.devcontainer/scripts/setup-dependencies.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
+# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
diff --git a/.devcontainer/scripts/setup-git.sh b/.devcontainer/scripts/setup-git.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
+# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
diff --git a/.devcontainer/scripts/upgrade-cli.sh b/.devcontainer/scripts/upgrade-cli.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2023-2024 Contributors to the Eclipse Foundation
+# Copyright (c) 2023-2025 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -17,7 +17,7 @@
 # See https://pre-commit.com/hooks.html for more hooks
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.5.0
+    rev: v5.0.0
     hooks:
       - id: trailing-whitespace
       - id: end-of-file-fixer
@@ -31,22 +31,22 @@ repos:
       - id: check-merge-conflict
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.1.13
+    rev: v0.9.10
     hooks:
       - id: ruff
         args: [--fix]
       - id: ruff-format
 
   - repo: https://github.com/pre-commit/mirrors-mypy
-    rev: "v1.8.0"
+    rev: "v1.15.0"
     hooks:
       - id: mypy
         args: [app]
         language: system
         pass_filenames: false
 
   - repo: https://github.com/Lucas-C/pre-commit-hooks
-    rev: v1.5.4
+    rev: v1.5.5
     hooks:
       - id: insert-license
         files: '.*\.(py|pyi|yaml|yml|sh|in)$'
diff --git a/.velocitas-lock.json b/.velocitas-lock.json
@@ -1,8 +1,8 @@
 {
     "packages": {
-        "devenv-runtimes": "v4.0.6",
+        "devenv-runtimes": "v4.1.0",
         "devenv-github-workflows": "v6.1.4",
         "devenv-github-templates": "v1.0.5",
-        "devenv-devcontainer-setup": "v2.5.2"
+        "devenv-devcontainer-setup": "v2.6.3"
     }
 }
diff --git a/.velocitas.json b/.velocitas.json
@@ -1,9 +1,9 @@
 {
     "packages": {
-        "devenv-runtimes": "v4.0.6",
+        "devenv-runtimes": "v4.1.0",
         "devenv-github-workflows": "v6.1.4",
         "devenv-github-templates": "v1.0.5",
-        "devenv-devcontainer-setup": "v2.5.2"
+        "devenv-devcontainer-setup": "v2.6.3"
     },
     "components": [
         "runtime-local",
@@ -23,5 +23,5 @@
         "githubRepoId": "eclipse-velocitas/vehicle-app-python-template",
         "generatedModelPath": "./gen/vehicle_model"
     },
-    "cliVersion": "v0.12.0"
+    "cliVersion": "v0.13.1"
 }
diff --git a/NOTICE-3RD-PARTY-CONTENT.md b/NOTICE-3RD-PARTY-CONTENT.md
@@ -3,29 +3,29 @@
 ## Python
 | Dependency | Version | License |
 |:-----------|:-------:|--------:|
-|aiohappyeyeballs|2.4.0|Other/Proprietary License<br/>Python Software Foundation License|
-|aiohttp|3.10.5|Apache 2.0|
-|aiosignal|1.3.1|Apache 2.0|
-|async-timeout|4.0.3|Apache 2.0|
-|attrs|24.2.0|MIT|
-|build|1.2.2|MIT|
+|aiohappyeyeballs|2.5.0|Python Software Foundation License|
+|aiohttp|3.10.11|Apache 2.0|
+|aiosignal|1.3.2|Apache 2.0|
+|async-timeout|5.0.1|Apache 2.0|
+|attrs|25.1.0|unknown|
+|build|1.2.2.post1|MIT|
 |cfgv|3.4.0|MIT|
-|click|8.1.7|New BSD|
+|click|8.1.8|BSD|
 |cloudevents|1.11.0|Apache 2.0|
-|coverage|7.6.1|Apache 2.0|
-|Deprecated|1.2.14|MIT|
+|coverage|7.6.12|Apache 2.0|
+|Deprecated|1.2.18|MIT|
 |deprecation|2.1.0|Apache 2.0|
-|distlib|0.3.8|Python Software Foundation License|
+|distlib|0.3.9|Python Software Foundation License|
 |exceptiongroup|1.2.2|MIT|
-|filelock|3.16.0|The Unlicense (Unlicense)|
-|frozenlist|1.4.1|Apache 2.0|
+|filelock|3.17.0|The Unlicense (Unlicense)|
+|frozenlist|1.5.0|Apache 2.0|
 |grpcio|1.64.1|Apache 2.0|
-|identify|2.6.1|MIT|
+|identify|2.6.9|MIT|
 |idna|3.10|BSD|
 |importlib-metadata|7.1.0|Apache 2.0|
 |iniconfig|2.0.0|MIT|
 |multidict|6.1.0|Apache 2.0|
-|mypy|1.11.2|MIT|
+|mypy|1.15.0|MIT|
 |mypy-extensions|1.0.0|MIT|
 |mypy-protobuf|3.6.0|Apache 2.0|
 |nodeenv|1.9.1|BSD|
@@ -35,32 +35,33 @@
 |opentelemetry-instrumentation-logging|0.46b0|Apache 2.0|
 |opentelemetry-sdk|1.25.0|Apache 2.0|
 |opentelemetry-semantic-conventions|0.46b0|Apache 2.0|
-|packaging|24.1|Apache 2.0<br/>BSD|
+|packaging|24.2|Apache 2.0<br/>BSD|
 |paho-mqtt|2.1.0|OSI Approved|
 |parameterized|0.9.0|Simplified BSD|
 |pip|23.0.1|MIT|
 |pip-tools|7.4.1|BSD|
-|platformdirs|4.3.3|MIT|
+|platformdirs|4.3.6|MIT|
 |pluggy|1.5.0|MIT|
-|pre-commit|3.8.0|MIT|
+|pre-commit|4.1.0|MIT|
+|propcache|0.3.0|Apache 2.0|
 |protobuf|5.27.2|Google License|
-|pyproject-hooks|1.1.0|MIT|
-|pytest|8.3.3|MIT|
-|pytest-asyncio|0.24.0|Apache 2.0|
-|pytest-cov|5.0.0|MIT|
+|pyproject-hooks|1.2.0|MIT|
+|pytest|8.3.5|MIT|
+|pytest-asyncio|0.25.3|Apache 2.0|
+|pytest-cov|6.0.0|MIT|
 |pytest-ordering|0.6|MIT|
 |PyYAML|6.0.2|MIT|
 |setuptools|65.5.1|MIT|
-|tomli|2.0.1|MIT|
+|tomli|2.2.1|MIT|
 |types-mock|5.1.0.20240425|Apache 2.0|
-|types-protobuf|5.27.0.20240907|Apache 2.0|
+|types-protobuf|5.29.1.20250208|Apache 2.0|
 |typing-extensions|4.12.2|Python Software Foundation License|
-|velocitas-sdk|0.15.4|Apache 2.0|
-|virtualenv|20.26.4|MIT|
-|wheel|0.44.0|MIT|
-|wrapt|1.16.0|BSD|
-|yarl|1.11.1|Apache 2.0|
-|zipp|3.20.2|MIT|
+|velocitas-sdk|0.15.5|Apache 2.0|
+|virtualenv|20.29.3|MIT|
+|wheel|0.45.1|MIT|
+|wrapt|1.17.2|BSD|
+|yarl|1.18.3|Apache 2.0|
+|zipp|3.21.0|MIT|
 ## Workflows
 | Dependency | Version | License |
 |:-----------|:-------:|--------:|
@@ -72,7 +73,7 @@
 |actions/upload-artifact|v4|MIT License|
 |aquasecurity/trivy-action|0.19.0|Apache License 2.0|
 |ASzc/change-string-case-action|v6|ISC License|
-|dawidd6/action-download-artifact|v3|MIT License|
+|dawidd6/action-download-artifact|v6|MIT License|
 |de-vri-es/setup-git-credentials|v2|BSD 2-Clause "Simplified" License|
 |devcontainers/ci|v0.3|MIT License|
 |docker/build-push-action|v5|Apache License 2.0|
diff --git a/app/Dockerfile b/app/Dockerfile
@@ -15,7 +15,7 @@
 # syntax=docker/dockerfile:1.2
 
 # Build stage, to create the executable
-FROM --platform=$TARGETPLATFORM ghcr.io/eclipse-velocitas/devcontainer-base-images/python:v0.3 as builder
+FROM --platform=$TARGETPLATFORM ghcr.io/eclipse-velocitas/devcontainer-base-images/python:v0.3 AS builder
 ARG TARGETARCH
 
 RUN apt-get update && apt-get install -y python3-dev
@@ -48,10 +48,10 @@ RUN pyinstaller --clean -F -s src/main.py
 
 WORKDIR /workspace/app/dist
 
-RUN staticx main run-exe
+RUN staticx --strip main run-exe
 
 # Runner stage, to copy the executable
-FROM scratch as runner
+FROM scratch AS runner
 
 COPY --from=builder ./workspace/app/dist/run-exe /app
 
diff --git a/app/requirements.in b/app/requirements.in
@@ -12,4 +12,4 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-velocitas-sdk==0.15.4
+velocitas-sdk==0.15.5
diff --git a/app/requirements.txt b/app/requirements.txt
@@ -4,23 +4,23 @@
 #
 #    pip-compile app/requirements.in
 #
-aiohappyeyeballs==2.4.0
+aiohappyeyeballs==2.5.0
     # via aiohttp
-aiohttp==3.10.5
+aiohttp==3.10.11
     # via velocitas-sdk
-aiosignal==1.3.1
+aiosignal==1.3.2
     # via aiohttp
-async-timeout==4.0.3
+async-timeout==5.0.1
     # via aiohttp
-attrs==24.2.0
+attrs==25.1.0
     # via aiohttp
 cloudevents==1.11.0
     # via velocitas-sdk
-deprecated==1.2.14
+deprecated==1.2.18
     # via opentelemetry-api
 deprecation==2.1.0
     # via cloudevents
-frozenlist==1.4.1
+frozenlist==1.5.0
     # via
     #   aiohttp
     #   aiosignal
@@ -56,25 +56,27 @@ opentelemetry-sdk==1.25.0
     #   velocitas-sdk
 opentelemetry-semantic-conventions==0.46b0
     # via opentelemetry-sdk
-packaging==24.1
+packaging==24.2
     # via deprecation
 paho-mqtt==2.1.0
     # via velocitas-sdk
+propcache==0.3.0
+    # via yarl
 protobuf==5.27.2
     # via velocitas-sdk
 typing-extensions==4.12.2
     # via
     #   multidict
     #   opentelemetry-sdk
-velocitas-sdk==0.15.4
+velocitas-sdk==0.15.5
     # via -r app/requirements.in
-wrapt==1.16.0
+wrapt==1.17.2
     # via
     #   deprecated
     #   opentelemetry-instrumentation
-yarl==1.11.1
+yarl==1.18.3
     # via aiohttp
-zipp==3.20.2
+zipp==3.21.0
     # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
diff --git a/app/tests/requirements.txt b/app/tests/requirements.txt
@@ -4,29 +4,29 @@
 #
 #    pip-compile app/tests/requirements.in
 #
-coverage[toml]==7.6.1
+coverage[toml]==7.6.12
     # via pytest-cov
 exceptiongroup==1.2.2
     # via pytest
 iniconfig==2.0.0
     # via pytest
-packaging==24.1
+packaging==24.2
     # via pytest
 pluggy==1.5.0
     # via pytest
-pytest==8.3.3
+pytest==8.3.5
     # via
     #   -r app/tests/requirements.in
     #   pytest-asyncio
     #   pytest-cov
     #   pytest-ordering
-pytest-asyncio==0.24.0
+pytest-asyncio==0.25.3
     # via -r app/tests/requirements.in
-pytest-cov==5.0.0
+pytest-cov==6.0.0
     # via -r app/tests/requirements.in
 pytest-ordering==0.6
     # via -r app/tests/requirements.in
-tomli==2.0.1
+tomli==2.2.1
     # via
     #   coverage
     #   pytest
diff --git a/requirements.txt b/requirements.txt

Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,5 @@`
`1`	`1`	`# This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json`
`2`		`-# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation`
	`2`	`+# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation`
`3`	`3`	`#`
`4`	`4`	`# This program and the accompanying materials are made available under the`
`5`	`5`	`# terms of the Apache License, Version 2.0 which is available at`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`#!/bin/bash`
`2`	`2`	`# This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json`
`3`		`-# Copyright (c) 2023-2024 Contributors to the Eclipse Foundation`
	`3`	`+# Copyright (c) 2023-2025 Contributors to the Eclipse Foundation`
`4`	`4`	`#`
`5`	`5`	`# This program and the accompanying materials are made available under the`
`6`	`6`	`# terms of the Apache License, Version 2.0 which is available at`