From d9326571fdf084ce36e8ddd9cb87f544ad237edd Mon Sep 17 00:00:00 2001
From: Paul Schwarzenberger <paul@celidor.net>
Date: Wed, 22 Jan 2025 13:13:29 +0000
Subject: [PATCH] Update dependencies (#300)

* Update dependencies
* Pin oscrypto version to fix issue on Ubuntu 24.04 runner, as not currently being published to pypi
---
 .github/workflows/ecdsa_default.yml                  | 2 +-
 .github/workflows/rsa_public_crl.yml                 | 2 +-
 modules/terraform-aws-ca-lambda/requirements-dev.txt | 4 ++--
 requirements-dev.txt                                 | 7 +++++--
 requirements-docs.txt                                | 6 +++---
 scripts/requirements.txt                             | 2 +-
 utils/requirements.txt                               | 2 +-
 7 files changed, 14 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/ecdsa_default.yml b/.github/workflows/ecdsa_default.yml
index 73fa1254..6cd0bc1c 100644
--- a/.github/workflows/ecdsa_default.yml
+++ b/.github/workflows/ecdsa_default.yml
@@ -209,7 +209,7 @@ jobs:
         with:
           python-version: "3.12"
 
-      - name: Install dependencies
+      - name: Install Python dependencies
         run: |
           pip install -r requirements-dev.txt
 
diff --git a/.github/workflows/rsa_public_crl.yml b/.github/workflows/rsa_public_crl.yml
index 169c4b5e..ff636a8a 100644
--- a/.github/workflows/rsa_public_crl.yml
+++ b/.github/workflows/rsa_public_crl.yml
@@ -212,7 +212,7 @@ jobs:
         with:
           python-version: "3.12"
 
-      - name: Install dependencies
+      - name: Install Python dependencies
         run: |
           pip install -r requirements-dev.txt
 
diff --git a/modules/terraform-aws-ca-lambda/requirements-dev.txt b/modules/terraform-aws-ca-lambda/requirements-dev.txt
index 5ea4d2d9..bc478c41 100644
--- a/modules/terraform-aws-ca-lambda/requirements-dev.txt
+++ b/modules/terraform-aws-ca-lambda/requirements-dev.txt
@@ -1,6 +1,6 @@
-bandit == 1.8.0
+bandit == 1.8.2
 black == 24.10.0
-boto3 == 1.35.90
+boto3 == 1.36.3
 cryptography == 44.0.0
 dataclasses-json == 0.6.7
 prospector == 1.10.3
diff --git a/requirements-dev.txt b/requirements-dev.txt
index 814f9ab6..0930b730 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -1,9 +1,9 @@
 -r requirements-docs.txt
 asn1crypto == 1.5.1
 assertpy == 1.1
-bandit == 1.8.0
+bandit == 1.8.2
 black == 24.10.0
-boto3 == 1.35.90
+boto3 == 1.36.3
 certvalidator == 0.11.1
 cryptography == 44.0.0
 dataclasses-json == 0.6.7
@@ -12,3 +12,6 @@ pytest == 8.3.4
 requests == 2.32.3
 structlog == 24.4.0
 validators == 0.34.0
+
+# TODO: Used by certvalidator - remove once latest oscrypto published to pypi
+oscrypto @ git+https://github.com/wbond/oscrypto.git@d5f3437ed24257895ae1edd9e503cfb352e635a8
\ No newline at end of file
diff --git a/requirements-docs.txt b/requirements-docs.txt
index 90a1eaef..730019ef 100644
--- a/requirements-docs.txt
+++ b/requirements-docs.txt
@@ -1,4 +1,4 @@
 cairosvg == 2.7.1
-mkdocs-material == 9.5.49
-pillow == 11.0.0
-urllib3 == 2.2.3
\ No newline at end of file
+mkdocs-material == 9.5.50
+pillow == 11.1.0
+urllib3 == 2.3.0
\ No newline at end of file
diff --git a/scripts/requirements.txt b/scripts/requirements.txt
index a8a3e9a6..19348fef 100644
--- a/scripts/requirements.txt
+++ b/scripts/requirements.txt
@@ -1 +1 @@
-boto3 == 1.35.90
\ No newline at end of file
+boto3 == 1.36.3
\ No newline at end of file
diff --git a/utils/requirements.txt b/utils/requirements.txt
index 0f5b1076..77a6f540 100644
--- a/utils/requirements.txt
+++ b/utils/requirements.txt
@@ -1,5 +1,5 @@
 asn1crypto == 1.5.1
-boto3 == 1.35.90
+boto3 == 1.36.3
 certvalidator == 0.11.1
 cryptography == 44.0.0
 validators == 0.34.0