diff --git a/.github/actions/unit-tests/action.yaml b/.github/actions/unit-tests/action.yaml index 13b0552..e5bf2cf 100644 --- a/.github/actions/unit-tests/action.yaml +++ b/.github/actions/unit-tests/action.yaml @@ -41,6 +41,19 @@ runs: run: tox -e docs shell: bash + - name: Run pip-audit command through GHA + # Check dependencies for security vulnerabilities. + # Only run on a single python version (the one that does doc builds) + if: ${{ env.DO_DOC_BUILD == 'true' }} + uses: pypa/gh-action-pip-audit@v1.0.8 + with: + inputs: | + requirements/base.txt + requirements/dev.txt + requirements/docs.txt + requirements/test.txt + requirements/vis.txt + - name: Run unit tests # Run tox using the version of Python in `PATH` run: tox -e unit diff --git a/requirements/base.txt b/requirements/base.txt index c1086f4..8445e74 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -1,10 +1,11 @@ +setuptools==65.5.1 aiohttp[speedups]>=3.8,<4 requests>=2.31,<2.33 anndata>=0.8,<0.9 pandas>=1.3,<2.1 numpy>=1.21,<1.26 nest_asyncio~=1.5 -certifi==2023.7.22 +certifi==2024.7.4 Deprecated~=1.2 tqdm~=4.66 typing_extensions~=4.7.1 diff --git a/requirements/docs.txt b/requirements/docs.txt index df3e15a..1fc767c 100644 --- a/requirements/docs.txt +++ b/requirements/docs.txt @@ -1,4 +1,4 @@ -Pillow~=9.5 +Pillow>=10.3.0 Sphinx~=7.4 sphinx_gallery~=0.14 sphinx_rtd_theme~=2.0