Merge branch 'renovate/pypi-djangorestframework-vulnerability' of git…

…hub.com:mitodl/unified-ecommerce into renovate/pypi-djangorestframework-vulnerability

.github/workflows/ci.yml

@@ -28,7 +28,7 @@ jobs:
           - 6379:6379
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
       - name: update apt
         run: sudo apt-get update -y
@@ -43,7 +43,7 @@ jobs:
           virtualenvs-create: true
           virtualenvs-in-project: true
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5
         with:
           python-version: "3.12.1"
           cache: "poetry"
@@ -75,6 +75,6 @@ jobs:
           MITOL_UE_DB_DISABLE_SSL: "True"
 
       - name: Upload coverage to CodeCov
-        uses: codecov/codecov-action@v3.1.6
+        uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
         with:
           file: ./coverage.xml

.github/workflows/docs.yml

@@ -10,9 +10,9 @@ jobs:
     runs-on: ubuntu-latest
     name: Publish Documentation
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5
         with:
           python-version: 3.11
       - name: Install ghp-import

package.json

@@ -42,7 +42,7 @@
     "@types/react-infinite-scroller": "^1.2.3",
     "@types/styled-components": "^5.1.25",
     "@types/url-assembler": "^2.1.1",
-    "@typescript-eslint/eslint-plugin": "^6.9.1",
+    "@typescript-eslint/eslint-plugin": "^8.0.0",
     "casual-browserify": "^1.5.19-2",
     "css-mediaquery": "^0.1.2",
     "eslint": "^8.18.0",
@@ -56,10 +56,10 @@
     "eslint-plugin-testing-library": "^6.0.0",
     "exec-sh": "^0.4.0",
     "html-entities": "^2.3.3",
-    "iso-639-1": "^2.1.15",
+    "iso-639-1": "^3.0.0",
     "jest": "^29.6.4",
     "jest-environment-jsdom": "^29.5.0",
-    "jest-extended": "^3.0.1",
+    "jest-extended": "^4.0.0",
     "jest-fail-on-console": "^2.4.2",
     "jest-watch-typeahead": "^2.2.2",
     "jest-when": "^3.5.1",

pyproject.toml

@@ -57,9 +57,9 @@ redis = "^5.0.1"
 requests = "^2.31.0"
 sentry-sdk = "^1.25.1"
 social-auth-app-django = "^5.2.0"
-static3 = "^0.5.1"
+static3 = "^0.7.0"
 tldextract = "^5.1.1"
-toolz = "^0.10.0"
+toolz = "^0.12.0"
 ulid-py = "^1.1.0"
 urllib3 = "^1.25.10"
 uwsgi = "^2.0.21"