Fix dependencies and pipelines

Author: staticdev

.flake8

@@ -1,9 +1,8 @@
 [flake8]
-select = B,B9,C,DAR,E,F,N,RST,S,W
+select = B,B9,C,DAR,E,F,N,RST,W
 ignore = E203,E501,W503,C901,B950
 max-line-length = 80
 max-complexity = 10
 docstring-convention = google
-per-file-ignores = tests/*:S101, S105
 ; darglint
 strictness = short

.github/workflows/constraints.txt

@@ -1,5 +1,5 @@
-pip==20.3.3
-nox==2020.12.31
-nox-poetry==0.7.1
-poetry==1.1.4
-virtualenv==20.4.0
+pip==22.3
+nox==2022.8.7
+nox-poetry==1.0.1
+poetry==1.2.2
+virtualenv==20.16.6

.github/workflows/labeler.yml

@@ -4,7 +4,6 @@ on:
   push:
     branches:
       - main
-      - master
 
 jobs:
   labeler:

.github/workflows/release.yml

@@ -3,7 +3,7 @@ name: Release
 on:
   push:
     branches:
-      - master
+      - main
 
 jobs:
   release:

.github/workflows/tests.yml

@@ -12,85 +12,78 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - { python-version: 3.9, os: ubuntu-latest, session: "pre-commit" }
-          - { python-version: 3.9, os: ubuntu-latest, session: "safety" }
-          - { python-version: 3.9, os: ubuntu-latest, session: "mypy" }
-          - { python-version: 3.8, os: ubuntu-latest, session: "mypy" }
-          - { python-version: 3.7, os: ubuntu-latest, session: "mypy" }
-          - { python-version: 3.9, os: ubuntu-latest, session: "tests" }
-          - { python-version: 3.8, os: ubuntu-latest, session: "tests" }
-          - { python-version: 3.7, os: ubuntu-latest, session: "tests" }
-          - { python-version: 3.9, os: windows-latest, session: "tests" }
-          - { python-version: 3.9, os: macos-latest, session: "tests" }
-          # - { python-version: 3.9, os: ubuntu-latest, session: "typeguard" }
-          - { python-version: 3.9, os: ubuntu-latest, session: "xdoctest" }
-          - { python-version: 3.9, os: ubuntu-latest, session: "docs-build" }
+          - { python: "3.9", os: ubuntu-latest, session: "pre-commit" }
+          - { python: "3.9", os: ubuntu-latest, session: "safety" }
+          - { python: "3.9", os: ubuntu-latest, session: "mypy" }
+          - { python: "3.8", os: ubuntu-latest, session: "mypy" }
+          - { python: "3.7", os: ubuntu-latest, session: "mypy" }
+          - { python: "3.9", os: ubuntu-latest, session: "tests" }
+          - { python: "3.8", os: ubuntu-latest, session: "tests" }
+          - { python: "3.7", os: ubuntu-latest, session: "tests" }
+          - { python: "3.9", os: windows-latest, session: "tests" }
+          - { python: "3.9", os: macos-latest, session: "tests" }
+          # - { python: "3.9", os: ubuntu-latest, session: "typeguard" }
+          - { python: "3.9", os: ubuntu-latest, session: "xdoctest" }
+          - { python: "3.9", os: ubuntu-latest, session: "docs-build" }
 
     env:
       NOXSESSION: ${{ matrix.session }}
 
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v2.3.4
+        uses: actions/checkout@v3
 
-      - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v2.2.1
+      - name: Set up Python ${{ matrix.python }}
+        uses: actions/setup-python@v4
         with:
-          python-version: ${{ matrix.python-version }}
+          python-version: ${{ matrix.python }}
 
       - name: Upgrade pip
         run: |
           pip install --constraint=.github/workflows/constraints.txt pip
           pip --version
-
       - name: Install Poetry
         run: |
-          pip install --constraint=.github/workflows/constraints.txt poetry
+          pipx install --pip-args=--constraint=.github/workflows/constraints.txt poetry
           poetry --version
-
       - name: Install Nox
         run: |
-          pip install --constraint=.github/workflows/constraints.txt nox nox-poetry
+          pipx install --pip-args=--constraint=.github/workflows/constraints.txt nox
+          pipx inject --pip-args=--constraint=.github/workflows/constraints.txt nox nox-poetry
           nox --version
-
       - name: Compute pre-commit cache key
         if: matrix.session == 'pre-commit'
         id: pre-commit-cache
         shell: python
         run: |
           import hashlib
           import sys
-
           python = "py{}.{}".format(*sys.version_info[:2])
           payload = sys.version.encode() + sys.executable.encode()
           digest = hashlib.sha256(payload).hexdigest()
           result = "${{ runner.os }}-{}-{}-pre-commit".format(python, digest[:8])
-
           print("::set-output name=result::{}".format(result))
-
       - name: Restore pre-commit cache
-        uses: actions/cache@v2.1.3
+        uses: actions/cache@v3
         if: matrix.session == 'pre-commit'
         with:
           path: ~/.cache/pre-commit
           key: ${{ steps.pre-commit-cache.outputs.result }}-${{ hashFiles('.pre-commit-config.yaml') }}
           restore-keys: |
             ${{ steps.pre-commit-cache.outputs.result }}-
-
       - name: Run Nox
         run: |
-          nox --force-color --python=${{ matrix.python-version }}
-
+          nox --force-color --python=${{ matrix.python }}
       - name: Upload coverage data
         if: always() && matrix.session == 'tests'
-        uses: "actions/upload-artifact@v2.2.2"
+        uses: "actions/upload-artifact@v3"
         with:
           name: coverage-data
           path: ".coverage.*"
 
       - name: Upload documentation
         if: matrix.session == 'docs-build'
-        uses: actions/upload-artifact@v2.2.2
+        uses: actions/upload-artifact@v3
         with:
           name: docs
           path: docs/_build
@@ -100,40 +93,36 @@ jobs:
     needs: tests
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v2.3.4
+        uses: actions/checkout@v3
 
-      - name: Set up Python 3.9
-        uses: actions/setup-python@v2.2.1
+      - name: Set up Python
+        uses: actions/setup-python@v4
         with:
-          python-version: 3.9
+          python-version: "3.9"
 
       - name: Upgrade pip
         run: |
           pip install --constraint=.github/workflows/constraints.txt pip
           pip --version
-
       - name: Install Poetry
         run: |
-          pip install --constraint=.github/workflows/constraints.txt poetry
+          pipx install --pip-args=--constraint=.github/workflows/constraints.txt poetry
           poetry --version
-
       - name: Install Nox
         run: |
-          pip install --constraint=.github/workflows/constraints.txt nox nox-poetry
+          pipx install --pip-args=--constraint=.github/workflows/constraints.txt nox
+          pipx inject --pip-args=--constraint=.github/workflows/constraints.txt nox nox-poetry
           nox --version
-
       - name: Download coverage data
-        uses: actions/download-artifact@v2.0.8
+        uses: actions/download-artifact@v3
         with:
           name: coverage-data
 
       - name: Combine coverage data and display human readable report
         run: |
           nox --force-color --session=coverage
-
       - name: Create coverage report
         run: |
           nox --force-color --session=coverage -- xml
-
       - name: Upload coverage report
-        uses: codecov/codecov-action@v1.2.1
+        uses: codecov/codecov-action@v3

.pre-commit-config.yaml

@@ -1,6 +1,13 @@
 repos:
   - repo: local
     hooks:
+      - id: bandit
+        name: bandit
+        entry: bandit
+        language: system
+        types: [python]
+        require_serial: true
+        args: ["-c", "bandit.yml"]
       - id: black
         name: black
         entry: black
@@ -33,12 +40,6 @@ repos:
         language: system
         types: [python]
         require_serial: true
-      - id: reorder-python-imports
-        name: Reorder python imports
-        entry: reorder-python-imports
-        language: system
-        types: [python]
-        args: [--application-directories=src]
       - id: trailing-whitespace
         name: Trim Trailing Whitespace
         entry: trailing-whitespace-fixer

bandit.yml

@@ -0,0 +1,2 @@
+assert_used:
+  skips: ["*/test_*.py"]