Updated dependencies and add py-lock make command

This changeset updates dependencies that have been flagged as out-of date and/or vulnerable.  It also adds a py-lock Makefile command for keeping the poetry.lock file in sync without introducing additional issues from transitive dependency updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This commit is contained in:
Carlo Costino
2023-10-30 15:40:22 -04:00
parent 8779160f89
commit f949786e2d
3 changed files with 18 additions and 22 deletions

View File

@@ -81,9 +81,13 @@ test: ## Run tests and create coverage report
poetry run coverage report -m --fail-under=95
poetry run coverage html -d .coverage_cache
.PHONY: py-lock
py-lock: ## Syncs dependencies and updates lock file without performing recursive internal updates
poetry lock --no-update
.PHONY: freeze-requirements
freeze-requirements: ## Pin all requirements including sub dependencies into requirements.txt
poetry lock
poetry lock --no-update
poetry requirements
.PHONY: audit