chore(deps): update minor updates

Author: renovate[bot]

.github/workflows/cd.yaml

@@ -41,20 +41,20 @@ jobs:
       id-token: write
 
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
     - name: Set up QEMU
-      uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
+      uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
+      uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
     - name: Login to Github Packages
-      uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
+      uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
     - name: Build
       id: docker_build
-      uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # v6
+      uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
       with:
         load: true
     - name: Smoke test
@@ -66,7 +66,7 @@ jobs:
         exit $(docker wait $container)
     - name: Extract metadata (tags, labels) for Docker
       id: meta
-      uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
+      uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
       with:
         images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
         flavor: |
@@ -79,7 +79,7 @@ jobs:
     - name: Build and push
       if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v'))
       id: docker_push
-      uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # v6
+      uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
       with:
         push: true
         tags: ${{ steps.meta.outputs.tags }}

.github/workflows/pytest.yaml

@@ -23,7 +23,7 @@ jobs:
   mypy:
     runs-on: ubuntu-24.04
     steps:
-        - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         - name: "Set up environment"
           uses: packetcoders/action-setup-cache-python-poetry@0d0be5577b30d85f3fa2d93a4beeda149520f120 # v1.2.0
           with:
@@ -62,7 +62,7 @@ jobs:
         working-directory: "src"
 
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       with:
         path: src
     - name: "Set up environment"

Dockerfile

@@ -9,7 +9,7 @@ WORKDIR /app
 FROM base AS builder
 
 # renovate: datasource=pypi depName=poetry versioning=pep440
-ARG POETRY_VERSION=2.1.3
+ARG POETRY_VERSION=2.2.1
 
 ENV PIP_DEFAULT_TIMEOUT=100 \
     PIP_DISABLE_PIP_VERSION_CHECK=1 \

poetry.lock

@@ -8,12 +8,12 @@ readme = "README.md"
 
 [tool.poetry.dependencies]
 python = ">=3.10,<4"
-fastapi = "^0.115.0"
+fastapi = "^0.123.0"
 catsHTM = {path = "vendor/github.com/AmpelAstro/catsHTM"}
 # catsHTM secretly depends on pkg_resources via hdf5storage
 setuptools = {version = "*", python = ">=3.12"}
 extcats = "^2.5.0"
-uvicorn = {version="^0.34.0", optional=true}
+uvicorn = {version="^0.38.0", optional=true}
 gunicorn = {version="^23.0.0", optional=true}
 pydantic-settings = "^2.5.2"