Merge branch 'main' into v0.1.0

Author: dvora-h

.github/workflows/ci.yml

@@ -14,9 +14,31 @@ on:
   schedule:
     - cron: '0 6 * * *'  # Daily 6AM UTC build
 
+env:
+  pythonversion: 3.9
+
 
 jobs:
 
+  dependency-audit:
+    name: Dependency audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: install python
+        uses: actions/[email protected]
+        with:
+          python-version: ${{env.pythonversion}}
+      - name: create local poetry install
+        run: |
+            python -m venv .venv
+            source .venv/bin/activate
+            python -m pip install poetry
+            poetry install
+      - uses: trailofbits/[email protected]
+        with:
+          virtual-environment: .venv
+
   lint:
     name: Linter
     runs-on: ubuntu-latest
@@ -25,9 +47,9 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v3
       - name: Setup Python 3.9
-        uses: actions/setup-python@v4.2.0
+        uses: actions/setup-python@v4.3.0
         with:
-          python-version: 3.9
+          python-version: ${{env.pythonversion}}
         #----------------------------------------------
         #  -----  install & configure poetry  -----
         #----------------------------------------------
@@ -42,7 +64,7 @@ jobs:
         #----------------------------------------------
       - name: Load cached venv
         id: cached-poetry-dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@v3.0.11
         with:
           path: .venv
           key: venv-${{ runner.os }}-${{ hashFiles('**/poetry.lock') }}
@@ -97,7 +119,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v3
       - name: Setup Python ${{ matrix.pyver }}
-        uses: actions/setup-python@v4.2.0
+        uses: actions/setup-python@v4.3.0
         with:
           python-version: ${{ matrix.pyver }}
         #----------------------------------------------
@@ -114,7 +136,7 @@ jobs:
         #----------------------------------------------
       - name: Load cached venv
         id: cached-poetry-dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@v3.0.11
         with:
           path: .venv
           key: venv-${{ runner.os }}-${{ hashFiles('**/poetry.lock') }}

.github/workflows/pypi-publish.yaml

@@ -27,12 +27,12 @@ jobs:
           value: "${{ steps.get_version.outputs.VERSION }}"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@v1
+        uses: actions/setup-python@v4.3.0
         with:
           python-version: 3.9
 
       - name: Cache Poetry virtualenv
-        uses: actions/cache@v1
+        uses: actions/cache@v3.0.11
         id: cache
         with:
           path: ~/.virtualenvs

.github/workflows/release-drafter.yml

@@ -4,7 +4,7 @@ on:
   push:
     # branches to consider in the event; optional, defaults to all
     branches:
-      - master
+      - main
 
 jobs:
   update_release_draft:

poetry.lock

@@ -43,7 +43,7 @@ pptree = "^3.1"
 types-redis = ">=3.5.9,<5.0.0"
 python-ulid = "^1.0.3"
 cleo = "1.0.0a5"
-typing-extensions = "^4.0.0"
+typing-extensions = "^4.4.0"
 hiredis = "^2.0.0"
 more-itertools = "^8.14.0"