Merge pull request #28 from evrone-erp/fix/ERP-1934/update-dependencies-to-fix-deprecated-logic-usage

[ERP-1934] Update environs and other dependencies

Author: nifadyev

.dockerignore

@@ -1,3 +1,4 @@
 .git
 .github
+*.md
 images

.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+
+updates:
+    -   package-ecosystem: "pip"
+        directory: "/"
+        schedule:
+            interval: "weekly"
+
+    -   package-ecosystem: "github-actions"
+        directory: "/"
+        schedule:
+            interval: "weekly"

.github/workflows/pr.yaml

@@ -10,9 +10,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Install python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v5
         with:
           python-version: '3.11'
       - name: Update pip
@@ -30,9 +30,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Install python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v5
         with:
           python-version: '3.11'
       - name: Update pip
@@ -43,5 +43,5 @@ jobs:
         run: python -m pip install --upgrade --no-cache-dir setuptools
       - name: Install dev dependencies
         run: python -m pip install -r requirements-dev.txt
-      - name: Analysing the dependencies with safety
-        run: make safety
+      - name: Analysing the dependencies with pip-audit
+        run: make dep-vulnerabilities

.safety-policy.yml

@@ -1,12 +1,10 @@
 FROM python:3.11-slim
 
-ENV PYTHONDONTWRITEBYTECODE 1
-ENV PYTHONUNBUFFERED 1
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
 
 RUN apt-get update \
-    && pip install --upgrade --no-cache-dir pip \
-    && pip install --upgrade --no-cache-dir wheel \
-    && pip install --upgrade --no-cache-dir setuptools
+    && pip install --upgrade --no-cache-dir pip wheel setuptools
 
 COPY . .
 

Dockerfile

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2022 Evrone-ERP
+Copyright (c) 2025 Evrone-ERP
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

LICENSE

@@ -5,9 +5,9 @@ format:
 lint:
 	black --check .
 	isort --check .
-	flake8 --inline-quotes '"'
+	flake8 --inline-quotes '"' --exclude=.venv
 	pylint $(shell git ls-files '*.py')
 	PYTHONPATH=/ mypy --namespace-packages --show-error-codes . --check-untyped-defs --ignore-missing-imports --show-traceback
 
-safety:
-	safety check --policy-file .safety-policy.yml
+dep-vulnerabilities:
+	pip-audit

Makefile

@@ -25,7 +25,6 @@
 GITHUB_TOKEN = env("INPUT_TOKEN")
 GITHUB_EVENT_PATH = env("GITHUB_EVENT_PATH")
 GITHUB_REPOSITORY = env("GITHUB_REPOSITORY")
-TASK_URL = env.bool("INPUT_TASK_URL", False)
 TASK_KEYS = env("INPUT_TASKS", "")
 TARGET_STATUS = env("INPUT_TO", "")
 YANDEX_ORG_ID = env("INPUT_YANDEX_ORG_ID")

main.py

@@ -1,11 +1,11 @@
 -r requirements.txt
 
-black==24.4.0
-isort==5.13.2
-flake8==7.0.0
+black==25.1.0
+isort==6.0.1
+flake8==7.2.0
 flake8-bandit==4.1.1
-pylint==3.0.3
-mypy==1.8.0
-safety==3.2.4
-flake8-quotes==3.3.2
-types-requests==2.31.0.20240106
+pylint==3.3.6
+mypy==1.15.0
+flake8-quotes==3.4.0
+types-requests==2.32.0.20250328
+pip-audit==2.9.0

requirements-dev.txt

@@ -1,19 +1,3 @@
-autopep8==2.0.4
-certifi>=2024.8.30
-cffi==1.16.0
-charset-normalizer==3.3.2
-Deprecated==1.2.14
-environs==10.3.0
-idna==3.7
-pip-install==1.3.5
-pycodestyle==2.11.1
-pycparser==2.21
-PyGithub==2.1.1
-PyJWT==2.8.0
-PyNaCl==1.5.0
-pyparsing==3.1.1
-python-dotenv==1.0.0
-requests==2.32.2
-toml==0.10.2
-urllib3>=2.2.2
-wrapt==1.16.0
+environs==14.1.1
+PyGithub==2.6.1
+requests==2.32.3