diff --git a/.github/workflows/code_checks.yml b/.github/workflows/code_checks.yml index 0a27eca0..191ee594 100644 --- a/.github/workflows/code_checks.yml +++ b/.github/workflows/code_checks.yml @@ -32,7 +32,7 @@ jobs: - uses: actions/checkout@v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 + uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 with: # Install a specific version of uv. version: "0.5.21" @@ -55,6 +55,6 @@ jobs: uses: pypa/gh-action-pip-audit@1220774d901786e6f652ae159f7b6bc8fea6d266 with: virtual-environment: .venv/ - # GHSA-4xh5-x5gv-qwph: This is a vulnerability in pip 25.2 that has no fix version yet + # CVE-2026-4539: This is a vulnerability in pygments that can't be upgraded ignore-vulns: | - GHSA-4xh5-x5gv-qwph + CVE-2026-4539 diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 1b8b321d..98dc6c2a 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -45,7 +45,7 @@ jobs: uses: actions/checkout@v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@v7.6.0 + uses: astral-sh/setup-uv@v8.0.0 with: version: "0.5.21" enable-cache: true diff --git a/.github/workflows/integration_tests.yml b/.github/workflows/integration_tests.yml index 6385f8b5..b1a0a97a 100644 --- a/.github/workflows/integration_tests.yml +++ b/.github/workflows/integration_tests.yml @@ -44,7 +44,7 @@ jobs: - uses: actions/checkout@v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 + uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 with: # Install a specific version of uv. version: "0.5.21" diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index ed4d2cf6..08f89fb2 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -19,7 +19,7 @@ jobs: - uses: actions/checkout@v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 + uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 with: # Install a specific version of uv. version: "0.5.21" diff --git a/.github/workflows/unit_tests.yml b/.github/workflows/unit_tests.yml index 8dd163ce..520420f2 100644 --- a/.github/workflows/unit_tests.yml +++ b/.github/workflows/unit_tests.yml @@ -44,7 +44,7 @@ jobs: - uses: actions/checkout@v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 + uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 with: # Install a specific version of uv. version: "0.5.21" diff --git a/uv.lock b/uv.lock index f4846d43..a2a6861c 100644 --- a/uv.lock +++ b/uv.lock @@ -2089,11 +2089,11 @@ wheels = [ [[package]] name = "pip" -version = "26.0" +version = "26.0.1" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/44/c2/65686a7783a7c27a329706207147e82f23c41221ee9ae33128fc331670a0/pip-26.0.tar.gz", hash = "sha256:3ce220a0a17915972fbf1ab451baae1521c4539e778b28127efa79b974aff0fa", size = 1812654, upload-time = "2026-01-31T01:40:54.361Z" } +sdist = { url = "https://files.pythonhosted.org/packages/48/83/0d7d4e9efe3344b8e2fe25d93be44f64b65364d3c8d7bc6dc90198d5422e/pip-26.0.1.tar.gz", hash = "sha256:c4037d8a277c89b320abe636d59f91e6d0922d08a05b60e85e53b296613346d8", size = 1812747, upload-time = "2026-02-05T02:20:18.702Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/69/00/5ac7aa77688ec4d34148b423d34dc0c9bc4febe0d872a9a1ad9860b2f6f1/pip-26.0-py3-none-any.whl", hash = "sha256:98436feffb9e31bc9339cf369fd55d3331b1580b6a6f1173bacacddcf9c34754", size = 1787564, upload-time = "2026-01-31T01:40:52.252Z" }, + { url = "https://files.pythonhosted.org/packages/de/f0/c81e05b613866b76d2d1066490adf1a3dbc4ee9d9c839961c3fc8a6997af/pip-26.0.1-py3-none-any.whl", hash = "sha256:bdb1b08f4274833d62c1aa29e20907365a2ceb950410df15fc9521bad440122b", size = 1787723, upload-time = "2026-02-05T02:20:16.416Z" }, ] [[package]] @@ -2589,7 +2589,7 @@ wheels = [ [[package]] name = "requests" -version = "2.32.5" +version = "2.33.1" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "certifi" }, @@ -2597,9 +2597,9 @@ dependencies = [ { name = "idna" }, { name = "urllib3" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/c9/74/b3ff8e6c8446842c3f5c837e9c3dfcfe2018ea6ecef224c710c85ef728f4/requests-2.32.5.tar.gz", hash = "sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf", size = 134517, upload-time = "2025-08-18T20:46:02.573Z" } +sdist = { url = "https://files.pythonhosted.org/packages/5f/a4/98b9c7c6428a668bf7e42ebb7c79d576a1c3c1e3ae2d47e674b468388871/requests-2.33.1.tar.gz", hash = "sha256:18817f8c57c6263968bc123d237e3b8b08ac046f5456bd1e307ee8f4250d3517", size = 134120, upload-time = "2026-03-30T16:09:15.531Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/1e/db/4254e3eabe8020b458f1a747140d32277ec7a271daf1d235b70dc0b4e6e3/requests-2.32.5-py3-none-any.whl", hash = "sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6", size = 64738, upload-time = "2025-08-18T20:46:00.542Z" }, + { url = "https://files.pythonhosted.org/packages/d7/8e/7540e8a2036f79a125c1d2ebadf69ed7901608859186c856fa0388ef4197/requests-2.33.1-py3-none-any.whl", hash = "sha256:4e6d1ef462f3626a1f0a0a9c42dd93c63bad33f9f1c1937509b8c5c8718ab56a", size = 64947, upload-time = "2026-03-30T16:09:13.83Z" }, ] [[package]]