Merge main into CI workflow hardening — pick up #311 CI/toolchain fixes

Author: KrishnaSuravarapu

.github/workflows/semgrep.yml

@@ -16,7 +16,7 @@ on:
 jobs:
   semgrep:
     name: Scan
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     container:
       image: returntocorp/semgrep:1.166.0
     if: (github.actor != 'dependabot[bot]')

.github/workflows/unit-tests.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: ['3.9', '3.10', '3.11']
+        python-version: ['3.12', '3.13', '3.14']
     steps:
     - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
     - name: Set up Python ${{ matrix.python-version }}
@@ -18,7 +18,7 @@ jobs:
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
-        pip install pytest
+        pip install pytest "setuptools<81"
         pip install -r requirements.txt
     - name: Ensure Config
       run: cp config.json.sample config.json
@@ -28,6 +28,11 @@ jobs:
       run: |
         pip install -r Access/access_modules/requirements.txt --no-cache-dir --ignore-installed
     - name: Lint code base
-      run: python -m pylama Access/accessrequest_helper.py scripts bootprocess
+      run: |
+        pip install "setuptools<81"
+        python -m pylama Access/accessrequest_helper.py scripts bootprocess
     - name: Test with pytest
-      run: python -m pytest -v --cov --disable-warnings
+      # pylama ships a pytest plugin with the removed pytest_collect_file(path,...)
+      # signature that pytest 9 rejects. Linting runs as its own step, so disable
+      # the redundant pytest integration here.
+      run: python -m pytest -v --cov --disable-warnings -p no:pylama

requirements.txt

@@ -12,7 +12,7 @@ certifi==2024.7.4
 cffi==2.0.0
 chardet==3.0.4
 configparser==5.0.1
-cryptography==46.0.5
+cryptography==49.0.0
 decorator==4.4.2
 defusedxml==0.7.1
 Deprecated==1.2.10
@@ -40,11 +40,11 @@ Jinja2==3.1.4
 jmespath==0.10.0
 Markdown==3.3.3
 MarkupSafe==2.1.5
-msgpack==1.0.0
+msgpack==1.2.1
 ndg-httpsclient==0.5.1
 oauth2client==4.1.3
 oauthlib==3.1.0
-packaging==21.3
+packaging==24.2
 paramiko==3.4.0
 parso==0.7.1
 pathlib2==2.3.5
@@ -57,13 +57,13 @@ ptyprocess==0.6.0
 pyasn1==0.6.3
 pyasn1-modules==0.4.2
 pycparser==2.20
-pyflakes==3.0.0
+pyflakes==3.4.0
 PyGithub==1.56
 Pygments==2.15.0
-PyJWT==2.12.0
+PyJWT==2.13.0
 PyMySQL==1.1.1
 PyNaCl==1.5.0
-pyOpenSSL==26.0.0
+pyOpenSSL==26.3.0
 pyparsing==2.4.7
 python-dateutil==2.8.1
 python-Levenshtein==0.12.0
@@ -84,17 +84,17 @@ soupsieve==2.0.1
 sqlparse==0.5.1
 traitlets==5.0.5
 uritemplate==3.0.1
-urllib3==2.6.3
+urllib3==2.7.0
 wcwidth==0.2.5
 zipp==3.19.1
 selenium==4.23.1
 pyotp==2.7.0
 attrs==21.3.0
-pytest==7.2.0
-pytest-bdd==6.1.1
-pytest-cov==4.0.0
-pytest-django==4.5.2
-pytest-mock==3.10.0
+pytest==9.1.1
+pytest-bdd==7.3.0
+pytest-cov==7.1.0
+pytest-django==4.12.0
+pytest-mock==3.15.1
 pylama==8.4.1
 semgrep==1.85.0
 mysqlclient==2.1.1
@@ -104,18 +104,18 @@ sqlalchemy==1.4.45
 redis==4.4.4
 celery==5.2.7
 django-stubs==1.14.0
-pycodestyle==2.10.0
-pylint==2.16.2
-pylint-django==2.5.3
-pylint-plugin-utils==0.7
+pycodestyle==2.14.0
+pylint==4.0.6
+pylint-django==2.8.0
+pylint-plugin-utils==0.9.0
 mccabe==0.7.0
-radon==5.1.0
-eradicate==2.1.0
-mypy==1.0.0
-mypy-extensions==1.0.0
-vulture==2.7
+radon==6.0.1
+eradicate==3.0.1
+mypy==2.3.0
+mypy-extensions==1.1.0
+vulture==2.16
 django-cid==2.3
-flake8==6.0.0
+flake8==7.3.0
 django-session-timeout==0.1.0
 django-axes==5.41.1
 jsonschema==4.17.3