Merge branch 'main' of github.com:argodevops/pybehave into main

Author: chris-argo

.github/dependabot.yml

@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"

SECURITY.md

@@ -0,0 +1,21 @@
+# Security Policy
+
+## Supported Versions
+
+Use this section to tell people about which versions of your project are
+currently being supported with security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 5.1.x   | :white_check_mark: |
+| 5.0.x   | :x:                |
+| 4.0.x   | :white_check_mark: |
+| < 4.0   | :x:                |
+
+## Reporting a Vulnerability
+
+Use this section to tell people how to report a vulnerability.
+
+Tell them where to go, how often they can expect to get an update on a
+reported vulnerability, what to expect if the vulnerability is accepted or
+declined, etc.

requirements.txt

@@ -13,10 +13,10 @@ ddt==1.6.0
 elementpath==4.1.4
 Faker==19.1.0
 iniconfig==2.0.0
-Jinja2==3.1.2
+Jinja2==3.1.3
 packaging==23.1
 panda==0.3.1
-paramiko==3.3.1
+paramiko==3.4.0
 parse==1.19.1
 parse-type==0.6.2
 pdfminer==20191125
@@ -42,6 +42,6 @@ six==1.16.0
 testresources==2.0.1
 toml==0.10.2
 typing-extensions==4.7.1
-urllib3==2.0.3
+urllib3==2.0.7
 wily==1.24.2
 xmltodict==0.13.0