Skip to content

Commit ae8eb98

Browse files
nvuillamnvuillam
authored
Updates dependencies (#740)
* Updates dependencies Upgrades project dependencies, including Black, Pydantic, and others, to their latest versions for improved security, performance, and new features. Removes the now unneeded `requirements.txt` file and its contents, This `requirements.txt` has now been deleted as all dependencies will be managed by Poetry. * Lock file * Add safety policy and project configuration files; update dependencies and license information * fix project license config * safety checks beforetests * cspell * key * [MegaLinter] Apply linters fixes :) * avoid duplicate runs --------- Co-authored-by: nvuillam <17500430+nvuillam@users.noreply.github.com>
1 parent 8ec63c6 commit ae8eb98

File tree

9 files changed

+1259
-686
lines changed

9 files changed

+1259
-686
lines changed

‎.cspell.json‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -113,6 +113,7 @@
113113
"encryptable",
114114
"esktop",
115115
"esult",
116+
"exploitability",
116117
"finlaymacklon",
117118
"forcelist",
118119
"fseventsd",

‎.github/workflows/build.yml‎

Lines changed: 13 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,12 @@
11
name: build
22

3-
on: [push, pull_request]
3+
on:
4+
push:
5+
branches:
6+
- main
7+
pull_request:
8+
branches:
9+
- main
410

511
jobs:
612
build:
@@ -33,10 +39,12 @@ jobs:
3339
run: |
3440
make check-codestyle
3541
36-
- name: Run tests
37-
run: |
38-
make test
39-
4042
- name: Run safety checks
43+
env:
44+
SAFETY_API_KEY: ${{ secrets.SAFETY_API_KEY }}
4145
run: |
4246
make check-safety
47+
48+
- name: Run tests
49+
run: |
50+
make test

‎.github/workflows/mega-linter.yml‎

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,12 @@
44
name: MegaLinter
55

66
on:
7-
# Trigger mega-linter at every push. Action will also be visible from Pull Requests to master
8-
push: # Comment this line to trigger action only on pull-requests (not recommended if you don't pay for GH Actions)
7+
push:
8+
branches:
9+
- main
910
pull_request:
10-
branches: [master, main]
11+
branches:
12+
- main
1113

1214
env: # Comment env block if you do not want to apply fixes
1315
# Apply linter fixes configuration

‎.safety-policy.yml‎

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
version: "3.0"
2+
3+
scanning-settings:
4+
max-depth: 6
5+
exclude: []
6+
include-files: []
7+
system:
8+
targets: []
9+
10+
report:
11+
dependency-vulnerabilities:
12+
enabled: true
13+
auto-ignore-in-report:
14+
python:
15+
environment-results: true
16+
unpinned-requirements: true
17+
vulnerabilities:
18+
"51457":
19+
reason: Legacy ignore migrated from Safety 2.x `-i 51457` flag
20+
expires: "2099-12-31"
21+
specifications: []
22+
cvss-severity: []
23+
24+
fail-scan-with-exit-code:
25+
dependency-vulnerabilities:
26+
enabled: true
27+
fail-on-any-of:
28+
cvss-severity:
29+
- high
30+
- medium
31+
- critical
32+
exploitability:
33+
- high
34+
- medium
35+
- critical
36+
37+
security-updates:
38+
dependency-vulnerabilities:
39+
auto-security-updates-limit:
40+
- patch
41+
42+
installation:
43+
default-action: allow
44+
audit-logging:
45+
enabled: true
46+
allow:
47+
packages: []
48+
vulnerabilities: {}
49+
deny:
50+
packages: {}
51+
vulnerabilities:
52+
warning-on-any-of:
53+
cvss-severity: []
54+
block-on-any-of:
55+
cvss-severity: []

‎.safety-project.ini‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
[project]
2+
id = github-dependents-info
3+
url = /codebases/github-dependents-info/findings
4+
name = github-dependents-info
5+

‎Makefile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ mypy:
5454
.PHONY: check-safety
5555
check-safety:
5656
poetry check
57-
poetry run safety check --full-report -i 51457
57+
poetry run safety scan --target . --policy-file .safety-policy.yml --detailed-output
5858
poetry run bandit -ll --recursive github_dependents_info tests
5959

6060
.PHONY: lint

‎poetry.lock‎

Lines changed: 1160 additions & 660 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎pyproject.toml‎

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,8 @@ name = "github-dependents-info"
88
version = "1.6.3"
99
description = "Collect information about dependencies between a github repo and other repositories. Results available in JSON, markdown and badges."
1010
readme = "README.md"
11-
license = {file = "LICENSE"}
11+
license = "MIT"
12+
license-files = ["LICENSE"]
1213
authors = [
1314
{name = "nvuillam", email = "nicolas.vuillamy@gmail.com"},
1415
]
@@ -23,7 +24,6 @@ classifiers = [
2324
"Intended Audience :: Developers",
2425
"Operating System :: OS Independent",
2526
"Topic :: Software Development :: Libraries :: Python Modules",
26-
"License :: OSI Approved :: MIT License",
2727
"Programming Language :: Python :: 3",
2828
"Programming Language :: Python :: 3.9",
2929
]
@@ -39,12 +39,13 @@ Repository = "https://github.com/nvuillam/github-dependents-info"
3939
[tool.poetry.dependencies]
4040
python = ">=3.10,<4.0"
4141

42-
typer = {extras = ["all"], version = ">=0.4,<0.10"}
43-
rich = ">=12.6,<14.0"
42+
click = ">=8.1.7,<8.2"
43+
typer = {extras = ["all"], version = ">=0.9.4,<0.10"}
44+
rich = ">=13.9.4,<14.0"
4445
beautifulsoup4 = "4.12.3"
45-
pandas = "^2.0.0"
46-
requests = "^2.32.4"
47-
idna = ">=3.7"
46+
pandas = ">=2.3.3,<3.0"
47+
requests = "^2.32.5"
48+
idna = ">=3.11"
4849

4950
[tool.poetry.group.dev.dependencies]
5051
bandit = "^1.7.5"
@@ -64,6 +65,7 @@ coverage-badge = "^1.1.0"
6465
cryptography = ">=44.0.1"
6566
pytest-html = "^4.1.1"
6667
pytest-cov = "^4.0.0"
68+
marshmallow = ">=3.20,<4.0"
6769

6870
[tool.black]
6971
# https://github.com/psf/black

‎requirements.txt‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
1-
beautifulsoup4==4.12.3 ; python_version >= "3.9" and python_version < "4.0"
2-
click==8.1.7 ; python_version >= "3.9" and python_version < "4.0"
3-
colorama==0.4.6 ; python_version >= "3.9" and python_version < "4.0"
4-
markdown-it-py==4.0.0 ; python_version >= "3.9" and python_version < "4.0"
5-
mdurl==0.1.2 ; python_version >= "3.9" and python_version < "4.0"
6-
pygments==2.17.2 ; python_version >= "3.9" and python_version < "4.0"
7-
rich==13.7.1 ; python_version >= "3.9" and python_version < "4.0"
8-
shellingham==1.5.4 ; python_version >= "3.9" and python_version < "4.0"
9-
soupsieve==2.5 ; python_version >= "3.9" and python_version < "4.0"
10-
typer[all]==0.9.0 ; python_version >= "3.9" and python_version < "4.0"
1+
beautifulsoup4==4.12.3 ; python_version >= "3.10" and python_version < "4.0"
2+
click==8.1.7 ; python_version >= "3.10" and python_version < "4.0"
3+
colorama==0.4.6 ; python_version >= "3.10" and python_version < "4.0"
4+
markdown-it-py==4.0.0 ; python_version >= "3.10" and python_version < "4.0"
5+
mdurl==0.1.2 ; python_version >= "3.10" and python_version < "4.0"
6+
pygments==2.19.2 ; python_version >= "3.10" and python_version < "4.0"
7+
rich==13.9.4 ; python_version >= "3.10" and python_version < "4.0"
8+
shellingham==1.5.4 ; python_version >= "3.10" and python_version < "4.0"
9+
soupsieve==2.8 ; python_version >= "3.10" and python_version < "4.0"
10+
typer[all]==0.9.4 ; python_version >= "3.10" and python_version < "4.0"

0 commit comments

Comments
 (0)