[CAS-73] Add dependency checker to GHA unit tests (#88)

* Add dependency checker to GHA unit tests

* Bump setuptools

* Bump more libraries

.github/actions/unit-tests/action.yaml

@@ -41,6 +41,19 @@ runs:
       run: tox -e docs
       shell: bash
 
+    - name: Run pip-audit command through GHA
+      # Check dependencies for security vulnerabilities.
+      # Only run on a single python version (the one that does doc builds)
+      if: ${{ env.DO_DOC_BUILD == 'true' }}
+      uses: pypa/[email protected]
+      with:
+        inputs: |
+          requirements/base.txt
+          requirements/dev.txt
+          requirements/docs.txt
+          requirements/test.txt
+          requirements/vis.txt
+
     - name: Run unit tests
       # Run tox using the version of Python in `PATH`
       run: tox -e unit

requirements/base.txt

@@ -1,10 +1,11 @@
+setuptools==65.5.1
 aiohttp[speedups]>=3.8,<4
 requests>=2.31,<2.33
 anndata>=0.8,<0.9
 pandas>=1.3,<2.1
 numpy>=1.21,<1.26
 nest_asyncio~=1.5
-certifi==2023.7.22
+certifi==2024.7.4
 Deprecated~=1.2
 tqdm~=4.66
 typing_extensions~=4.7.1

requirements/docs.txt

@@ -1,4 +1,4 @@
-Pillow~=9.5
+Pillow>=10.3.0
 Sphinx~=7.4
 sphinx_gallery~=0.14
 sphinx_rtd_theme~=2.0