Merge pull request #329 from OpenGeoscience/renovate/all-minor-patch

fix(deps): pin dependencies

Author: brianhelba

.github/workflows/ci.yml

@@ -14,7 +14,7 @@ jobs:
       - name: Install npm
         uses: actions/setup-node@v6
         with:
-          node-version: 24
+          node-version: 24.14.0
       - run: |
           npm ci
         working-directory: web

.github/workflows/release.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Install npm
         uses: actions/setup-node@v6
         with:
-          node-version: 24
+          node-version: 24.14.0
       - name: Run Semantic Release
         run: |
           uvx python-semantic-release version

pyproject.toml

@@ -15,44 +15,43 @@ dependencies = [
   "channels-redis==4.3.0",
   "channels[daphne]==4.3.2",
   "django[argon2]==6.0.3",
-  "django-allauth==65.14.0",
-  "django-auth-style==0.14.0",
+  "django-allauth==65.15.0",
+  "django-auth-style==0.15.0",
   "django-click==2.5.0",
   "django-cors-headers==4.9.0",
-  "django-environ==0.12.1",
+  "django-environ==0.13.0",
   "django-extensions==4.1",
   "django-filter==25.2",
-  "django-guardian==3.2.0",
+  "django-guardian==3.3.0",
   "django-large-image==0.10.2",
   "django-oauth-toolkit==3.2.0",
   "django-resonant-settings[allauth,celery]==0.48.1",
-  "django-resonant-utils[allauth,s3_storage]==0.17.0",
+  "django-resonant-utils[allauth,s3_storage]==0.19.0",
   "django-stubs-ext==5.2.9",
-  "djangorestframework==3.16.1",
-  "drf-yasg==1.21.11",
+  "djangorestframework==3.17.0",
+  "drf-yasg==1.21.15",
   # Needed for GeoDjango and "large-image[gdal]"
-  # gdal 3.10 is the newest supported by Django: https://docs.djangoproject.com/en/5.2/ref/contrib/gis/install/geolibs/
-  'gdal==3.10.3',
-  "geopandas==1.1.1",
-  "large-image-converter==1.33.3",
-  "large-image[gdal]==1.33.3",
-  "matplotlib==3.9.2", # for raster colormaps
-  "networkx==3.3",
-  "numpy==2.4.2",
-  "pooch[progress]==1.8.2",
-  "psycopg[binary,pool]==3.3.2",
+  'gdal==3.12.2.1',
+  "geopandas==1.1.3",
+  "large-image-converter==1.34.0",
+  "large-image[gdal]==1.34.0",
+  "matplotlib==3.10.8", # for raster colormaps
+  "networkx==3.6.1",
+  "numpy==2.4.3",
+  "pooch[progress]==1.9.0",
+  "psycopg[binary,pool]==3.3.3",
   # Needed by "large-image-converter"
   "pylibtiff==0.7.0.4.7.1",
   "pyshp==3.0.3",
-  "rasterio==1.3.11",
-  "rich==14.2.0",
+  "rasterio==1.5.0",
+  "rich==14.3.3",
   "webcolors==25.10.0",
-  "whitenoise[brotli]==6.11.0",
+  "whitenoise[brotli]==6.12.0",
   # Production-only
   "django-s3-file-field[s3]==1.1.0",
   "django-storages[s3]==1.14.6",
-  "sentry-sdk[celery,django,pure_eval]==2.48.0",
-  "uvicorn==0.40.0",
+  "sentry-sdk[celery,django,pure_eval]==2.55.0",
+  "uvicorn==0.42.0",
   "websockets==16.0",
 ]
 
@@ -61,19 +60,19 @@ development = [
   # Runtime dependencies, only needed with "development" settings
   "daphne==4.2.1",
   "django-browser-reload==1.21.0",
-  "django-debug-toolbar==6.1.0",
+  "django-debug-toolbar==6.2.0",
   "django-minio-storage==0.5.9",
-  "django-resonant-utils[minio_storage]==0.17.0",
+  "django-resonant-utils[minio_storage]==0.19.0",
   "django-s3-file-field[minio]==1.1.0",
-  "ipython==9.8.0",
+  "ipython==9.11.0",
   "watchdog==6.0.0",
-  "werkzeug==3.1.4",
+  "werkzeug==3.1.6",
 ]
 tasks = [
-  "geoai-py==0.5.3",
-  "osmnx==2.0.6",
+  "geoai-py==0.35.0",
+  "osmnx==2.1.0",
   # Needed by "uvdat-flood-sim[large-image-writer]"
-  "pyvips==3.1.1.8.17.3",
+  "pyvips==3.1.1.8.18.1",
   "uvdat-flood-sim[large-image-writer]==1.0.4",
   "xdg-base-dirs==6.0.2",
 ]

terraform/.terraform.lock.hcl

@@ -1,5 +1,5 @@
 terraform {
-  required_version = ">= 1.1"
+  required_version = "1.14.7"
 
   cloud {
     organization = "kitware"
@@ -18,7 +18,7 @@ terraform {
     }
     cloudflare = {
       source  = "cloudflare/cloudflare"
-      version = "~> 4.0"
+      version = "4.52.5"
     }
   }
 }