Address Security Issues with Dependencies (#520)

.github/workflows/codeql.yml

@@ -27,11 +27,11 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v3
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/integration_tests.yml

@@ -22,7 +22,7 @@ jobs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
     - uses: actions/checkout@v4
-    - uses: actions/setup-python@v4
+    - uses: actions/setup-python@v5
       with:
         python-version: 3.x
     - name: Prepare Inputs

.github/workflows/pypi_publish.yml

@@ -14,7 +14,7 @@ jobs:
       with:
         fetch-depth: 0
     - name: Set up Python 3.10
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: "3.10"
 

.github/workflows/run_renate.yml

@@ -42,7 +42,7 @@ jobs:
           aws-region: ${{ env.AWS_DEFAULT_REGION }}
       - uses: actions/checkout@v4
       - name: Set up Python 3.9
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: 3.9
           cache: 'pip'

.github/workflows/run_unit_tests.yml

@@ -21,7 +21,7 @@ jobs:
         run: git checkout ${{ env.BRANCH }}
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
 

.github/workflows/sagemaker_tests.yml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
-    - uses: actions/setup-python@v4
+    - uses: actions/setup-python@v5
       with:
         python-version: 3.9
         cache: 'pip'

.github/workflows/test_docs.yml

@@ -19,7 +19,7 @@ jobs:
         run: git checkout ${{ env.BRANCH }}
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: "3.9"
 

README.rst

@@ -2,7 +2,7 @@
     :target: #
     :alt: PyPI - Status
 .. image:: https://img.shields.io/github/v/release/awslabs/Renate
-    :target: https://github.com/awslabs/Renate/releases/tag/v0.4.0
+    :target: https://github.com/awslabs/Renate/releases/tag/v0.5.1
     :alt: Latest Release
 .. image:: https://img.shields.io/pypi/dm/Renate
     :target: https://pypistats.org/packages/renate

doc/requirements.txt

@@ -2,7 +2,7 @@ docutils==0.20.1
 Sphinx==7.2.6
 sphinx-copybutton==0.5.2
 sphinx-hoverxref==1.3.0
-sphinxext-opengraph==0.9.0
+sphinxext-opengraph==0.9.1
 pydata-sphinx-theme==0.14.4
 sphinx-autodoc-typehints==1.25.2
 sphinx-paramlinks==0.6.0

pyproject.toml

@@ -25,7 +25,7 @@ benchmark = [
     "wild-time-data==0.1.1",
 ]
 dev = [
-    "black==23.11.0",
+    "black==23.12.0",
     "avalanche_lib==0.3.1",
     "wild-time-data==0.1.1",
     "torch>=1.10.0, <1.12.2",

requirements.txt

@@ -1,17 +1,17 @@
 numpy>=1.17.2, <1.26.3
 torch>=1.10.0, <1.13.2
-pandas>=1.4.0, <2.1.4
-boto3>=1.26.0, <1.33.8
+pandas>=1.4.0, <2.1.5
+boto3>=1.26.0, <1.34.3
 requests>=2.31.0, <2.31.1
-sagemaker>=2.112.0, <2.199.1
+sagemaker>=2.112.0, <2.200.2
 syne-tune[aws,gpsearchers]>=0.6.0, <0.10.1
 pytorch-lightning>=1.8.0, <1.9.5
-Pillow>=9.0, <10.1.1
+Pillow>=10.2, <10.2.1
 tabulate>=0.9.0, <0.9.1
 tensorboardX>=2.5.0, <2.6.3
 torchmetrics>=0.11.0, <0.11.5
-torchvision>=0.13.0, <0.16.2
-deepspeed>=0.9.0, <0.12.5
+torchvision>=0.13.0, <0.16.3
+deepspeed>=0.9.0, <0.12.6
 datasets>=2.9.0, <2.15.1
-transformers>=4.31.0, <4.35.3
-scipy>=1.9.0, <1.11.5
+transformers>=4.36.0, <4.36.3
+scipy>=1.10.0, <1.12.1

src/renate/__init__.py

@@ -14,4 +14,4 @@
     _renate_logger.addHandler(_handler)
     _renate_logger.propagate = False
 
-__version__ = "0.5.0"
+__version__ = "0.5.1"