updated poetry workflows (#100)

updated dependencies
updated workflows
made pip-audit usage consistent


Signed-off-by: Lorenz Herzberger <lorenzherzberger@gmail.com>
Signed-off-by: Jürgen Eckel <juergen@riddleandcode.com>
Co-authored-by: Jürgen Eckel <juergen@riddleandcode.com>

Author: LaurentMontBlanc

.github/workflows/CI.yml

@@ -39,11 +39,8 @@ jobs:
         with:
           python-version: 3.9
 
-      - name: Install pip-audit
-        run: pip install --upgrade pip
-
       - name: Setup poetry
-        uses: Gr1N/setup-poetry@v7
+        uses: Gr1N/setup-poetry@v8
 
       - name: Install dependencies
         run: poetry install
@@ -70,7 +67,7 @@ jobs:
           python-version: 3.9
 
       - name: Setup poetry
-        uses: Gr1N/setup-poetry@v7
+        uses: Gr1N/setup-poetry@v8
 
       - name: Run tests
         run: make test
@@ -90,7 +87,7 @@ jobs:
           python-version: 3.9
 
       - name: Setup poetry
-        uses: Gr1N/setup-poetry@v7
+        uses: Gr1N/setup-poetry@v8
 
       - name: Install dependencies
         run: poetry install --with dev

.github/workflows/audit.yml

@@ -21,11 +21,8 @@ jobs:
         with:
           python-version: 3.9
 
-      - name: Install pip-audit
-        run: pip install --upgrade pip
-
       - name: Setup poetry
-        uses: Gr1N/setup-poetry@v7
+        uses: Gr1N/setup-poetry@v8
 
       - name: Install dependencies
         run: poetry install

CHANGELOG.rst

@@ -6,6 +6,13 @@
 Changelog
 =========
 
+0.18.3 (2023-14-06)
+-------------------
+Fixed
+^^^^^
+* bumped versions of several libraries
+* fixed security dependency issues
+
 0.18.2 (2023-17-04)
 -------------------
 Fixed