MESH-2092 dependabot updates

Author: jimasp

.gitallowed

@@ -19,3 +19,4 @@ poetry.lock:.*asttokens = ">=2.1.0"
 
 src/mesh_sandbox/common/messaging.py:.*def try_parse_authorisation_token\(auth_token: str\) -> Optional\[AuthoriseHeaderParts\]:
 src/mesh_sandbox/common/messaging.py:.*auth_token = auth_token.*
+poetry.lock:.*:pytokens = ">=0.1.10"

.github/workflows/merge-develop.yml

@@ -20,7 +20,7 @@ jobs:
           fetch-depth: 0
 
       - name: setup python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version-file: "pyproject.toml"
 
@@ -123,7 +123,7 @@ jobs:
           find . -type f | xargs chmod g+w
 
       - name: setup python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version-file: "pyproject.toml"
 

.github/workflows/pull-request.yml

@@ -47,7 +47,7 @@ jobs:
           PR_BRANCH: ${{ github.head_ref }}
 
       - name: setup python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version-file: "pyproject.toml"
 
@@ -179,7 +179,7 @@ jobs:
           PR_BRANCH: ${{ github.head_ref }}
 
       - name: setup python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version-file: "pyproject.toml"
 
@@ -215,7 +215,7 @@ jobs:
         run: make mypy
 
       - name: hadolint
-        uses: hadolint/hadolint-action@d292784f8f3eacda47060b259a580467b0ba410c
+        uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5
         with:
           dockerfile: "Dockerfile"
           recursive: true
@@ -266,7 +266,7 @@ jobs:
           PR_BRANCH: ${{ github.head_ref }}
 
       - name: setup python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version-file: "pyproject.toml"
 

.github/workflows/scheduled-combine-dependabot-prs.yaml

@@ -3,14 +3,14 @@ name: Combine Dependabot PRs
 on:
   workflow_dispatch: # allows you to manually trigger the workflow
     inputs:
-        ci_required:
-          type: choice
-          description: Require a successful build before branches are included
-          options:
-            - 'YES'
-            - 'NO'
-          required: false
-          default: 'YES'
+      ci_required:
+        type: choice
+        description: Require a successful build before branches are included
+        options:
+          - "YES"
+          - "NO"
+        required: false
+        default: "YES"
 
 # The minimum permissions required to run this Action
 permissions:
@@ -25,7 +25,7 @@ jobs:
     steps:
       - name: combine-prs
         id: combine-prs
-        uses: actions/combine-prs@v5.2.0
+        uses: github/combine-prs@v5.2.0
         with:
           ci_required: ${{ inputs.ci_required == 'YES' }}
           labels: dependencies

poetry.lock

@@ -9,16 +9,19 @@ packages = [
 ]
 readme = "README.md"
 
+[tool.poetry.requires-plugins]
+poetry-plugin-export = ">=1.8"
+
 [tool.poetry.dependencies]
 # core dependencies
 
 python = ">=3.11,<3.14.0"
 types-python-dateutil = "^2.8.9"
 python-dateutil = "^2.8.2"
-cryptography = ">=44.0.1,<45"
-fastapi = ">=0.110.0,<0.118.0"
+cryptography = ">=44.0.1,<47"
+fastapi = ">=0.110.0,<0.119.0"
 gunicorn = ">=21.2,<24.0"
-uvicorn = ">=0.23.2,<0.36.0"
+uvicorn = ">=0.23.2,<0.38.0"
 mesh-client = "^4.0.1"
 typing-extensions = ">=4.10.0"
 
@@ -27,11 +30,11 @@ typing-extensions = ">=4.10.0"
 # ci / testing dependencies
 petname = "^2.6"
 pytest = ">=7.2,<9.0"
-pytest-asyncio = ">=0.16,<1.2"
+pytest-asyncio = ">=0.16,<1.3"
 Mesh-Client = "^4.0.1"
 mypy = "^1.1.1"
 coverage = ">=6.5,<8.0"
-httpx = ">=0.27.0,<0.28"
+httpx = ">=0.27.0,<0.29"
 types-requests = "^2.28.11.4"
 pyOpenSSL = ">=24,<26"
 types-pyOpenSSL = "^24.0.0.20240130"