🔒 security upgrades

* 🐛 upgrade requests

* more upgrades

---------

Co-authored-by: Justin Flannery <juftin@juftin.com>

.github/workflows/publish.yaml

@@ -29,7 +29,7 @@ jobs:
               run: |
                   hatch build
             - name: Publish package on PyPI
-              uses: pypa/gh-action-pypi-publish@v1.6.4
+              uses: pypa/gh-action-pypi-publish@v1.8.6
               with:
                   user: __token__
                   password: ${{ secrets.PYPI_TOKEN }}

pyproject.toml

@@ -23,7 +23,7 @@ dependencies = [
   "pytz~=2023.2",
   "pyyaml~=6.0",
   "ratelimit~=2.2.1",
-  "requests~=2.28.2",
+  "requests~=2.31.0",
   "rich~=13.3.2",
   "rich-click~=1.6.1",
   "tenacity~=8.2.2"
@@ -114,10 +114,19 @@ format = ["ruff --fix {args:.}", "black {args:.}"]
 lint = ["ruff {args:.}", "black --check {args:.}"]
 requirements = [
   "hatch dep show requirements --project-only --all > requirements.in",
-  "_pip_compile --output-file requirements/requirements-prod.txt{args:}",
+  "_pip_compile --output-file requirements/requirements-prod.txt",
   "_sed_requirements requirements/requirements-prod.txt",
   "hatch dep show requirements --all > requirements.in",
-  "_pip_compile --output-file requirements/requirements-dev.txt{args:}",
+  "_pip_compile --output-file requirements/requirements-dev.txt",
+  "_sed_requirements requirements/requirements-dev.txt",
+  "rm requirements.in"
+]
+requirements-upgrade = [
+  "hatch dep show requirements --project-only --all > requirements.in",
+  "_pip_compile --output-file requirements/requirements-prod.txt --upgrade",
+  "_sed_requirements requirements/requirements-prod.txt",
+  "hatch dep show requirements --all > requirements.in",
+  "_pip_compile --output-file requirements/requirements-dev.txt --upgrade",
   "_sed_requirements requirements/requirements-dev.txt",
   "rm requirements.in"
 ]