Merge branch 'main' into permissive-requirements

Author: bmos

.github/workflows/python-checks.yml

@@ -32,7 +32,7 @@ jobs:
                   python-version: ${{ matrix.python-version }}
 
             - name: Install uv
-              uses: install-pinned/uv@51bb057ca8857db7531f188d414ba32b7bb16d2b  # 0.4.12
+              uses: install-pinned/uv@05389e8b8c79922b1376aee8c2d598b3219da230  # 0.4.12
 
             - name: Install dependencies
               env:
@@ -66,7 +66,7 @@ jobs:
                   python-version: "3.13"
 
             - name: Install uv
-              uses: install-pinned/uv@51bb057ca8857db7531f188d414ba32b7bb16d2b  # 0.4.12
+              uses: install-pinned/uv@05389e8b8c79922b1376aee8c2d598b3219da230  # 0.4.12
 
             - name: Install dependencies
               run: |
@@ -88,7 +88,7 @@ jobs:
                   python-version: "3.13"
 
             - name: Install uv
-              uses: install-pinned/uv@51bb057ca8857db7531f188d414ba32b7bb16d2b  # 0.4.12
+              uses: install-pinned/uv@05389e8b8c79922b1376aee8c2d598b3219da230  # 0.4.12
 
             - name: Install dependencies
               run: |
@@ -110,7 +110,7 @@ jobs:
                   python-version: "3.13"
 
             - name: Install uv
-              uses: install-pinned/uv@51bb057ca8857db7531f188d414ba32b7bb16d2b  # 0.4.12
+              uses: install-pinned/uv@05389e8b8c79922b1376aee8c2d598b3219da230  # 0.4.12
 
             - name: Install bandit
               run: |
@@ -145,7 +145,7 @@ jobs:
                   cache: pip
 
             - name: Install uv
-              uses: install-pinned/uv@51bb057ca8857db7531f188d414ba32b7bb16d2b  # 0.4.12
+              uses: install-pinned/uv@05389e8b8c79922b1376aee8c2d598b3219da230  # 0.4.12
 
             - name: Install module and dependencies
               run: |

.github/workflows/release.yml

@@ -2,20 +2,24 @@ name: Build & Publish Wheels + Source
 
 on:
   release:
-    types: [published]
+    types:
+      - published
+  workflow_dispatch:    
 
 permissions:
     contents: read
+    
 
 jobs:
-  build_wheels:
-    name: Build wheels on ${{ matrix.os }}
-    runs-on: ${{ matrix.os }}
+  build_source:
+    if: github.repository_owner == 'move-coop'
+    environment: release
+        
+    runs-on: ubuntu-latest
 
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [ubuntu-latest, windows-latest, macos-latest]
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
 
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -27,7 +31,7 @@ jobs:
             cache: "pip"
 
       - name: Install uv
-        uses: install-pinned/uv@b9511b633710c8bbe8ba48376771dba624746799  # 0.4.12
+        uses: install-pinned/uv@05389e8b8c79922b1376aee8c2d598b3219da230  # 0.4.12
 
       - name: Install dependencies
         run: |
@@ -39,46 +43,14 @@ jobs:
           python setup.py check
 
       - name: Build src dist
-        if: ${{ matrix.os == 'ubuntu-latest' }}
         run: |
-          python -m build --sdist --outdir wheels parsons
-
-      - name: Build wheels
-        run: git pull && python -m cibuildwheel parsons/ --output-dir wheels
-
-       # Save wheels as artifacts
-      - name: Upload built wheels
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
-        with:
-          name: wheels-${{ matrix.os }}
-          path: wheels
-
-  publish_wheels:
-    if: github.repository_owner == 'move-coop'
-    needs: build_wheels
-
-    runs-on: ubuntu-latest
-    environment: release
-
-    permissions:
-      # IMPORTANT: this permission is mandatory for trusted publishing
-      id-token: write
-
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
-      - name: Download wheels
-        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
-        with:
-          pattern: wheels-*
-          path: wheels
-          merge-multiple: true
+          python -m build --sdist --outdir dist
 
       # Publish
       - name: Publish
         uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
         with:
           verify-metadata: true
           skip-existing: true
-          packages-dir: wheels
+          packages-dir: dist
           verbose: true

.github/workflows/security_scorecard.yml

@@ -74,6 +74,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+        uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
         with:
           sarif_file: results.sarif

requirements-dev.txt

@@ -20,10 +20,9 @@ rich>=13
 nodeenv>=1.4  # pre-commit depends on nodeenv>=0.11.1, but nodeenv requires pipes until 1.4
 
 # Build and publish requirements
-build==1.2.2.post1
-cibuildwheel==2.23.0
 twine==6.1.0
-wheel==0.45.1
+build
+
 
 # Docs Requirements
 myst-parser==3.0.1;python_version<'3.10'

requirements.txt

@@ -2,31 +2,31 @@
 azure-storage-blob>=12.25,<13
 beautifulsoup4>=4.10,<5
 boto3>=1.34,<2
-boxsdk>=3.13,<4
-braintree>=4.31,<5
+boxsdk>=3.14,<4
+braintree>=4.37,<5
 censusgeocode>=0.5,<1
 civis>=1.16,<2;python_version<"3.10"  # later Civis versions do not support Python 3.9
 civis>=2;python_version>="3.10"
-curlify>=2.2.1,<3
+curlify>=3.0,<4
 dbt_core>=1.5,<2
 defusedxml>=0.7,<1
 facebook-business>=22.0,<23
 google-api-core>=2.24,<3
-google-api-python-client>=2.163,<3
-google-auth>=2.38,<3
-google-cloud-bigquery>=3.31,<4
+google-api-python-client>=2.174,<3
+google-auth>=2.40,<3
+google-cloud-bigquery>=3.34,<4
 google-cloud-storage-transfer>=1.16,<2
 google-cloud-storage>=3.1,<4
 grpcio>=1.68,<2
-gspread>=6.1,<7
+gspread>=6.2,<7
 httplib2>=0.22,<1
 jellyfish>=1.1.1,<2
 joblib>=1.2,<2
-mysql-connector-python>=9.2,<10
+mysql-connector-python>=9.3,<10
 newmode>=0.1.6,<2
 oauth2client>=4.1,<5
 paramiko>=3.5,<4
-petl>=1.7.10,<2;python_version<"3.11"
+petl>=1.7.10,<1.7.15;python_version<"3.11"
 petl>=1.7.15,<2;python_version>="3.11"
 psycopg2-binary>=2.9.7,<2.9.10;python_version<"3.12"
 psycopg2-binary>=2.9.10,<3;python_version>="3.12"
@@ -35,15 +35,15 @@ PyGitHub>=2.6,<3
 python-dateutil>=2.9,<3
 requests>=2.32,<3
 requests_oauthlib>=2,<3
-setuptools>=78.1, <79
+setuptools>=80.9, <79
 simple-salesforce>=1.12.4,<2
 simplejson>=3.20,<4
 slackclient>=1.3,<2
 sqlalchemy>=1.4,<3 # Prefect does not work with 1.4.33
 sshtunnel>=0.4,<1
 suds-py3>=1.4,<2
 surveygizmo>=1.2,<2
-twilio>=9.5,<10
+twilio>=9.6,<10
 urllib3>=1.26.19,<2
 validate-email>=1.3,<2
 xmltodict>=0.14,<1