updated packages, added audit ci step, added prism script

Author: sangeet-joy_xero

.github/workflows/build-test-lint.yml

@@ -26,10 +26,35 @@ jobs:
                 source venv/bin/activate
                 pip install --upgrade pip
                 pip install black
+                pip install pip-audit
                 sudo pip install flake8
                 pip install -r requirements.txt -r requirements/dev.txt
               working-directory: xero-python
 
+            - name: Run audit on requirements.txt
+              run: |
+               pip-audit -r requirements.txt -o json > audit-result.json
+               if [ -s audit-result.json ]; then
+                echo "Vulnerabilities found!"
+                cat audit-result.json
+                exit 1
+               else
+                echo "No vulnerabilities found"
+               fi
+              working-directory: xero-python
+
+            - name: Run audit on dev.txt
+              run: |
+               pip-audit -r requirements/dev.txt -o json > audit-result.json
+               if [ -s audit-result.json ]; then
+                echo "Vulnerabilities found!"
+                cat audit-result.json
+                exit 1
+               else
+                echo "No vulnerabilities found"
+               fi
+              working-directory: xero-python
+
             - name: Run Flake8
               run: flake8 xero_python
               working-directory: xero-python

requirements.txt

@@ -1,4 +1,5 @@
 # make sure content of this file can be parsed by setup.load_requirements
 python-dateutil>=2.7
-urllib3
+urllib3>=2.2.3
 certifi
+setuptools>=75.1.0

tests/utils/start-prism.sh

@@ -0,0 +1,9 @@
+prism mock https://raw.githubusercontent.com/XeroAPI/Xero-OpenAPI/refs/heads/master/xero_accounting.yaml --host 127.0.0.1 --port 4010 &
+prism mock https://raw.githubusercontent.com/XeroAPI/Xero-OpenAPI/refs/heads/master/xero-app-store.yaml --host 127.0.0.1 --port 4011 &
+prism mock https://raw.githubusercontent.com/XeroAPI/Xero-OpenAPI/refs/heads/master/xero_assets.yaml --host 127.0.0.1 --port 4012 &
+prism mock https://raw.githubusercontent.com/XeroAPI/Xero-OpenAPI/refs/heads/master/xero_bankfeeds.yaml --host 127.0.0.1 --port 4013 &
+prism mock https://raw.githubusercontent.com/XeroAPI/Xero-OpenAPI/refs/heads/master/xero-finance.yaml --host 127.0.0.1 --port 4014 &
+prism mock https://raw.githubusercontent.com/XeroAPI/Xero-OpenAPI/refs/heads/master/xero-payroll-uk.yaml --host 127.0.0.1 --port 4015 &
+prism mock https://raw.githubusercontent.com/XeroAPI/Xero-OpenAPI/refs/heads/master/xero-payroll-nz.yaml --host 127.0.0.1 --port 4016 &
+prism mock https://raw.githubusercontent.com/XeroAPI/Xero-OpenAPI/refs/heads/master/xero-payroll-au.yaml --host 127.0.0.1 --port 4017 &
+prism mock https://raw.githubusercontent.com/XeroAPI/Xero-OpenAPI/refs/heads/master/xero-projects.yaml --host 127.0.0.1 --port 4018