Merge branch 'main' into tooling_updates

Author: bmos

.github/workflows/dependency-review.yml

@@ -25,4 +25,4 @@ jobs:
             - name: 'Checkout Repository'
               uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
             - name: 'Dependency Review'
-              uses: actions/dependency-review-action@ce3cf9537a52e8119d91fd484ab5b8a807627bf8 # v4.6.0
+              uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1

.github/workflows/python-checks.yml

@@ -32,7 +32,7 @@ jobs:
                   python-version: ${{ matrix.python-version }}
 
             - name: Install uv
-              uses: install-pinned/uv@1fd41179ee60eee2496694a1226cece304efa071  # 0.4.12
+              uses: install-pinned/uv@75877ff4b6e7f7b75e572e664476f9a202dcc9f9  # 0.4.12
 
             - name: Install dependencies
               if: matrix.resolution != 'limited-dependencies'
@@ -73,7 +73,7 @@ jobs:
                   python-version: "3.13"
 
             - name: Install uv
-              uses: install-pinned/uv@1fd41179ee60eee2496694a1226cece304efa071  # 0.4.12
+              uses: install-pinned/uv@75877ff4b6e7f7b75e572e664476f9a202dcc9f9  # 0.4.12
 
             - name: Install dependencies
               run: |
@@ -95,7 +95,7 @@ jobs:
                   python-version: "3.13"
 
             - name: Install uv
-              uses: install-pinned/uv@1fd41179ee60eee2496694a1226cece304efa071  # 0.4.12
+              uses: install-pinned/uv@75877ff4b6e7f7b75e572e664476f9a202dcc9f9  # 0.4.12
 
             - name: Install dependencies
               run: |
@@ -117,7 +117,7 @@ jobs:
                   python-version: "3.13"
 
             - name: Install uv
-              uses: install-pinned/uv@1fd41179ee60eee2496694a1226cece304efa071  # 0.4.12
+              uses: install-pinned/uv@75877ff4b6e7f7b75e572e664476f9a202dcc9f9  # 0.4.12
 
             - name: Install bandit
               run: |
@@ -152,7 +152,7 @@ jobs:
                   cache: pip
 
             - name: Install uv
-              uses: install-pinned/uv@1fd41179ee60eee2496694a1226cece304efa071  # 0.4.12
+              uses: install-pinned/uv@75877ff4b6e7f7b75e572e664476f9a202dcc9f9  # 0.4.12
 
             - name: Install module and dependencies
               run: |

.github/workflows/security_scorecard.yml

@@ -74,6 +74,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
         with:
           sarif_file: results.sarif

requirements-dev.txt

@@ -2,7 +2,7 @@
 bandit[toml]==1.8.3
 coverage==7.8.0
 pre-commit==4.2.0
-pytest-cov==6.0.0
+pytest-cov==6.1.1
 pytest-datadir==1.6.1
 pytest-mock==3.14.0
 pytest-xdist==3.6.1

requirements.txt

@@ -33,7 +33,7 @@ PyGitHub==2.6.0
 python-dateutil==2.9.0.post0
 requests==2.32.3
 requests_oauthlib==2.0.0
-setuptools==78.1.0
+setuptools==80.9.0
 simple-salesforce==1.12.6
 simplejson==3.20.1
 slackclient==1.3.1