Merge pull request #2086 from twangboy/update_deps

Update deps that contain CVEs

Author: twangboy

.github/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
 
       - name: Get specific changed files
         id: changed-files
-        uses: tj-actions/changed-files@v42
+        uses: tj-actions/changed-files@v46
         with:
           separator: ","
           files: |

.github/workflows/templates/ci.yml

@@ -22,7 +22,7 @@ jobs:
 
       - name: Get specific changed files
         id: changed-files
-        uses: tj-actions/changed-files@v42
+        uses: tj-actions/changed-files@v46
         with:
           separator: ","
           files: |

requirements/release.in

@@ -1,3 +1,5 @@
 pre-commit
 python-tools-scripts >= 0.18.6
 boto3
+requests >= 2.32.5
+urllib3 >= 2.5.0

requirements/release.txt

@@ -2,7 +2,7 @@
 # This file is autogenerated by pip-compile with Python 3.10
 # by the following command:
 #
-#    pip-compile requirements/release.in
+#    pip-compile --cert=None --client-cert=None --index-url=None --pip-args=None requirements/release.in
 #
 annotated-types==0.7.0
     # via pydantic
@@ -56,8 +56,10 @@ python-tools-scripts==0.20.5
     # via -r requirements/release.in
 pyyaml==6.0.2
     # via pre-commit
-requests==2.32.3
-    # via python-tools-scripts
+requests==2.32.5
+    # via
+    #   -r requirements/release.in
+    #   python-tools-scripts
 rich==13.9.4
     # via python-tools-scripts
 s3transfer==0.10.4
@@ -70,8 +72,9 @@ typing-extensions==4.12.2
     #   pydantic-core
     #   python-tools-scripts
     #   rich
-urllib3==2.3.0
+urllib3==2.5.0
     # via
+    #   -r requirements/release.in
     #   botocore
     #   requests
 virtualenv==20.28.1