diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml new file mode 100644 index 0000000..44f0ccc --- /dev/null +++ b/.github/FUNDING.yml @@ -0,0 +1 @@ +tidelift: "pypi/pipdeptree" diff --git a/.github/SECURITY.md b/.github/SECURITY.md new file mode 100644 index 0000000..79d091a --- /dev/null +++ b/.github/SECURITY.md @@ -0,0 +1,13 @@ +# Security Policy + +## Supported Versions + +| Version | Supported | +| ------- | ------------------ | +| 2.3.1 + | :white_check_mark: | +| < 2.3.1 | :x: | + +## Reporting a Vulnerability + +To report a security vulnerability, please use the [Tidelift security contact](https://tidelift.com/security). Tidelift +will coordinate the fix and disclosure. diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 072759d..7f46f03 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -12,7 +12,7 @@ repos: - id: end-of-file-fixer - id: trailing-whitespace - repo: https://github.com/asottile/pyupgrade - rev: v2.37.3 + rev: v3.1.0 hooks: - id: pyupgrade args: ["--py37-plus"] @@ -21,7 +21,7 @@ repos: hooks: - id: isort - repo: https://github.com/psf/black - rev: 22.8.0 + rev: 22.10.0 hooks: - id: black args: [--safe] @@ -29,7 +29,7 @@ repos: rev: v1.12.1 hooks: - id: blacken-docs - additional_dependencies: [black==22.8] + additional_dependencies: [black==22.10] - repo: https://github.com/tox-dev/tox-ini-fmt rev: "0.5.2" hooks: @@ -40,11 +40,11 @@ repos: hooks: - id: flake8 additional_dependencies: - - flake8-bugbear==22.8.23 + - flake8-bugbear==22.9.23 - flake8-comprehensions==3.10 - flake8-pytest-style==1.6 - flake8-spellcheck==0.28 - - flake8-unused-arguments==0.0.11 + - flake8-unused-arguments==0.0.12 - flake8-noqa==1.2.9 - pep8-naming==0.13.2 - repo: https://github.com/pre-commit/mirrors-prettier diff --git a/pyproject.toml b/pyproject.toml index fd5f2d6..f8e01e1 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [build-system] build-backend = "hatchling.build" -requires = ["hatchling>=1.8.1", "hatch-vcs>=0.2"] +requires = ["hatchling>=1.11.1", "hatch-vcs>=0.2"] [project] name = "pipdeptree" @@ -18,11 +18,11 @@ urls.Tracker = "https://github.com/tox-dev/pipdeptree/issues" requires-python = ">=3.7" optional-dependencies.test = [ "covdefaults>=2.2", - "diff-cover>=6.5.1", - "pip>=22.2.2", + "diff-cover>=7.0.1", + "pip>=22.3", "pytest>=7.1.3", - "pytest-cov>=3", - "pytest-mock>=3.8.2", + "pytest-cov>=4", + "pytest-mock>=3.10", "virtualenv<21,>=20.16.5", ] optional-dependencies.graphviz = [