From 17265684978e4c2d8a2de551243f5234117aa3d0 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 4 Sep 2023 12:49:08 +0000
Subject: [PATCH] Update all dependencies

---
 .github/workflows/asan.yml              | 2 +-
 .github/workflows/build_wheels.yml      | 2 +-
 .github/workflows/codeql.yml            | 2 +-
 .github/workflows/run_cvg.yml           | 2 +-
 .github/workflows/testpythonpackage.yml | 2 +-
 requirements.txt                        | 4 ++--
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/asan.yml b/.github/workflows/asan.yml
index 2916129d4..1cf409986 100644
--- a/.github/workflows/asan.yml
+++ b/.github/workflows/asan.yml
@@ -17,7 +17,7 @@ jobs:
       run: |
         echo "Reason for triggering: ${{ github.event.inputs.reason }}"
 
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       with:
         submodules: true
 
diff --git a/.github/workflows/build_wheels.yml b/.github/workflows/build_wheels.yml
index 06752a06c..e6f73c966 100644
--- a/.github/workflows/build_wheels.yml
+++ b/.github/workflows/build_wheels.yml
@@ -27,7 +27,7 @@ jobs:
         echo "Reason for triggering: ${{ github.event.inputs.reason }}"
 
     - name: Check out
-      uses: actions/checkout@v3
+      uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       with:
         fetch-depth: 0  # unshallow fetch for setuptools-scm
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 1b7e829c3..abe744d2b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Install Dependencies (python)
         if: ${{ matrix.language == 'python' }}
diff --git a/.github/workflows/run_cvg.yml b/.github/workflows/run_cvg.yml
index 2ef5ad877..b360cc4dc 100644
--- a/.github/workflows/run_cvg.yml
+++ b/.github/workflows/run_cvg.yml
@@ -30,7 +30,7 @@ jobs:
       run: |
         echo "Reason for triggering: ${{ github.event.inputs.reason }}"
     - name: Check out
-      uses: actions/checkout@v3
+      uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       with:
         fetch-depth: 0  # unshallow fetch for setuptools-scm
 
diff --git a/.github/workflows/testpythonpackage.yml b/.github/workflows/testpythonpackage.yml
index 55379c7d6..051f63bf0 100644
--- a/.github/workflows/testpythonpackage.yml
+++ b/.github/workflows/testpythonpackage.yml
@@ -47,7 +47,7 @@ jobs:
         echo "Reason for triggering: ${{ github.event.inputs.reason }}"
 
     - name: Check out
-      uses: actions/checkout@v3
+      uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       with:
         fetch-depth: 0  # unshallow fetch for setuptools-scm
 
diff --git a/requirements.txt b/requirements.txt
index f4bf9c45d..ec41c535b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,9 +4,9 @@
 # NOTE: hard-pinning (==) here gets relaxed to >= in setup.py
 lxml==4.9.3
 booleanOperations==0.9.0
-defcon[lxml,pens]==0.10.2
+defcon[lxml,pens]==0.10.3
 fontMath==0.9.3
-fontTools[unicode,woff,lxml,ufo]==4.42.0
+fontTools[unicode,woff,lxml,ufo]==4.42.1
 psautohint==2.4.0
 tqdm==4.66.1
 ufonormalizer==0.6.1