Merge pull request #301 from RockefellerArchiveCenter/development

Dependency updates

Author: p-galligan

.github/workflows/dependencies.yml

@@ -14,13 +14,13 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v5.0.0
+      - uses: actions/checkout@v6.0.0
         with:
           token: ${{ secrets.ACCESS_TOKEN }}
           ref: development
 
       - name: Set up Python
-        uses: actions/setup-python@v6.0.0
+        uses: actions/setup-python@v6.1.0
         with:
           python-version: '3.10'
           cache: pip
@@ -52,7 +52,7 @@ jobs:
 
       - name: Create Pull Request
         if: always()
-        uses: peter-evans/create-pull-request@v7.0.8
+        uses: peter-evans/create-pull-request@v7.0.9
         with:
           token: ${{ secrets.ACCESS_TOKEN }}
           branch: dependency-updates

.github/workflows/deploy.yml

@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@v6.0.0
 
       - name: Export secrets to environment variables
         uses: oNaiPs/secrets-to-env-action@v1.5
@@ -65,7 +65,7 @@ jobs:
         run: sudo deploy_scripts/make_zip_django.sh $DEPLOY_ZIP_DIR $DEPLOY_ZIP_NAME
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v5.0.0
+        uses: aws-actions/configure-aws-credentials@v5.1.1
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_KEY }}

.github/workflows/tests.yml

@@ -24,12 +24,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@v6.0.0
         with:
           submodules: true
 
       - name: Set up Python and cache pip
-        uses: actions/setup-python@v6.0.0
+        uses: actions/setup-python@v6.1.0
         with:
           python-version: '3.10'
           cache: 'pip'

.pre-commit-config.yaml

@@ -15,7 +15,7 @@ repos:
   hooks:
   - id: isort
 - repo: https://github.com/jazzband/pip-tools
-  rev: v7.5.1
+  rev: v7.5.2
   hooks:
     - id: pip-compile
       args:

requirements.txt

@@ -1,6 +1,6 @@
 archivessnake==0.10.1
     # via -r requirements.in
-asgiref==3.10.0
+asgiref==3.11.0
     # via django
 asterism==1.1.0
     # via -r requirements.in
@@ -10,16 +10,16 @@ bagit==1.9.0
     # via asterism
 boltons==25.0.0
     # via archivessnake
-boto3==1.40.64
+boto3==1.41.5
     # via
     #   -r requirements.in
     #   moto
-botocore==1.40.64
+botocore==1.41.5
     # via
     #   boto3
     #   moto
     #   s3transfer
-certifi==2025.10.5
+certifi==2025.11.12
     # via requests
 cffi==2.0.0
     # via cryptography
@@ -53,7 +53,7 @@ idna==3.11
     #   yarl
 iiif-prezi3==1.2.1
     # via -r requirements.in
-img2pdf==0.6.1
+img2pdf==0.6.3
     # via
     #   -r requirements.in
     #   ocrmypdf
@@ -71,7 +71,7 @@ markupsafe==3.0.3
     #   werkzeug
 more-itertools==10.8.0
     # via archivessnake
-moto==5.1.16
+moto==5.1.18
     # via -r requirements.in
 multidict==6.7.0
     # via yarl
@@ -82,7 +82,7 @@ packaging==25.0
     #   deprecation
     #   ocrmypdf
     #   pikepdf
-pdfminer-six==20250506
+pdfminer-six==20251107
     # via ocrmypdf
 pikepdf==8.4.1
     # via
@@ -116,7 +116,7 @@ pyyaml==6.0.3
     #   vcrpy
 rapidfuzz==3.14.3
     # via archivessnake
-reportlab==4.4.4
+reportlab==4.4.5
     # via ocrmypdf
 requests==2.32.5
     # via
@@ -127,13 +127,13 @@ requests==2.32.5
     #   responses
 responses==0.25.8
     # via moto
-s3transfer==0.14.0
+s3transfer==0.15.0
     # via boto3
 shortuuid==1.0.13
     # via -r requirements.in
 six==1.17.0
     # via python-dateutil
-sqlparse==0.5.3
+sqlparse==0.5.4
     # via django
 structlog==25.5.0
     # via archivessnake
@@ -154,9 +154,9 @@ urllib3==2.5.0
     #   vcrpy
 vcrpy==7.0.0
     # via -r requirements.in
-werkzeug==3.1.3
+werkzeug==3.1.4
     # via moto
-wrapt==2.0.0
+wrapt==2.0.1
     # via vcrpy
 xmltodict==1.0.2
     # via moto