Merge branch 'main' into dependabot/npm_and_yarn/next-13.5.1

.github/dependabot.yml

@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"

.github/workflows/integration_tests.yaml

@@ -43,7 +43,7 @@ jobs:
         with:
           python-version: '3.9'
       - name: Setup redis
-        uses: supercharge/redis-github-action@1.2.0
+        uses: supercharge/redis-github-action@1.8.0
         with:
           redis-version: 7.2.4
       - name: Setup MongoDB
@@ -57,7 +57,7 @@ jobs:
           poetry install --with docs,test
           coverage run -m pytest florist/tests/integration && coverage xml && coverage report -m
       - name: Upload python coverage to Codecov
-        uses: Wandalen/wretry.action@v1.4.4
+        uses: Wandalen/wretry.action@v3.4.0
         with:
           action: codecov/[email protected]
           with: |
@@ -75,7 +75,7 @@ jobs:
 #          yarn
 #          yarn integration-test
 #      - name: Upload js coverage to Codecov
-#        uses: Wandalen/wretry.action@v1.4.4
+#        uses: Wandalen/wretry.action@v3.4.0
 #        with:
 #          action: codecov/[email protected]
 #          with: |

.github/workflows/publish.yml

@@ -21,7 +21,7 @@ jobs:
       - name: Build package
         run: poetry build
       - name: Publish package
-        uses: pypa/gh-action-pypi-publish@27b31702a0e7fc50959f5ad993c78deac1bdfc29
+        uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}

.github/workflows/unit_tests.yaml

@@ -50,7 +50,7 @@ jobs:
           poetry install --with docs,test
           coverage run -m pytest florist/tests/unit && coverage xml && coverage report -m
       - name: Upload python coverage to Codecov
-        uses: Wandalen/wretry.action@v1.4.4
+        uses: Wandalen/wretry.action@v3.4.0
         with:
           action: codecov/[email protected]
           with: |
@@ -66,7 +66,7 @@ jobs:
           yarn
           yarn unit-test
       - name: Upload js coverage to Codecov
-        uses: Wandalen/wretry.action@v1.4.4
+        uses: Wandalen/wretry.action@v3.4.0
         with:
           action: codecov/[email protected]
           with: |

package.json

@@ -26,7 +26,7 @@
     "eslint": "8.41.0",
     "eslint-config-next": "13.4.4",
     "next": "13.5.1",
-    "postcss": "8.4.23",
+    "postcss": "8.4.31",
     "prettier": "^3.2.5",
     "react": "18.2.0",
     "react-dom": "18.2.0",

yarn.lock

@@ -3985,10 +3985,10 @@ [email protected]:
     picocolors "^1.0.0"
     source-map-js "^1.0.2"
 
-[email protected].23, postcss@^8.4.23:
-  version "8.4.23"
-  resolved "https://registry.npmjs.org/postcss/-/postcss-8.4.23.tgz"
-  integrity sha512-bQ3qMcpF6A/YjR55xtoTr0jGOlnPOKAIMdOWiv0EIT6HVPEaJiJB4NLljSbiHoC2RX7DN5Uvjtpbg1NPdwv1oA==
+[email protected].31, postcss@^8.4.23:
+  version "8.4.31"
+  resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.4.31.tgz#92b451050a9f914da6755af352bdc0192508656d"
+  integrity sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==
   dependencies:
     nanoid "^3.3.6"
     picocolors "^1.0.0"