fix(deps): update all non-major dependencies

Author: renovate[bot]

.github/workflows/ci.yml

@@ -10,9 +10,9 @@ jobs:
   lint-client:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Install npm
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
       - run: |
@@ -67,9 +67,9 @@ jobs:
           - 6379:6379
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
       - name: Run tests
         run: |
           uv run --locked tox

.github/workflows/nightly_ci.yml

@@ -52,9 +52,9 @@ jobs:
           - 6379:6379
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
       - name: Run tests
         run: |
           uv run --locked tox -e test -- -m slow

.github/workflows/release.yml

@@ -11,13 +11,13 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
       - name: Install npm
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
       - name: Run Semantic Release

pyproject.toml

@@ -1,5 +1,5 @@
 [build-system]
-requires = ["hatchling==1.29.0"]
+requires = ["hatchling==1.30.1"]
 build-backend = "hatchling.build"
 
 [project]
@@ -14,68 +14,68 @@ dependencies = [
   "celery==5.6.3",
   "channels-redis==4.3.0",
   "channels[daphne]==4.3.2",
-  "django[argon2]==6.0.5",
-  "django-allauth==65.16.1",
+  "django[argon2]==6.0.6",
+  "django-allauth==65.18.0",
   "django-auth-style==0.15.0",
   "django-click==2.5.0",
   "django-cors-headers==4.9.0",
-  "django-environ==0.13.0",
+  "django-environ==0.14.0",
   "django-extensions==4.1",
   "django-filter==25.2",
-  "django-guardian==3.3.1",
+  "django-guardian==3.3.2",
   "django-large-image==0.10.3",
-  "django-oauth-toolkit==3.2.0",
-  "django-resonant-settings[allauth,celery]==0.51.0",
+  "django-oauth-toolkit==3.3.0",
+  "django-resonant-settings[allauth,celery]==0.51.1",
   "django-resonant-utils[allauth,s3_storage]==0.19.0",
   "django-stubs-ext==6.0.3",
   "djangorestframework==3.17.1",
   "drf-yasg==1.21.15",
   # Needed for GeoDjango and "large-image[gdal]"
   'gdal==3.12.3.1',
-  "geopandas==1.1.3",
-  "large-image-converter==1.34.1",
-  "large-image[gdal]==1.34.1",
+  "geopandas==1.1.4",
+  "large-image-converter==1.35.0",
+  "large-image[gdal]==1.35.0",
   "matplotlib==3.10.9", # for raster colormaps
   "networkx==3.6.1",
-  "numpy==2.4.3",
+  "numpy==2.5.1",
   "pooch[progress]==1.9.0",
   "psycopg[binary,pool]==3.3.4",
   # Needed by "large-image-converter"
   "pylibtiff==0.7.0.4.7.1",
-  "pyshp==3.0.3",
+  "pyshp==3.1.4",
   "rasterio==1.5.0",
   "rich==15.0.0",
   "webcolors==25.10.0",
   "whitenoise[brotli]==6.12.0",
   # Production-only
   "django-s3-file-field[s3]==1.1.0",
   "django-storages[s3]==1.14.6",
-  "sentry-sdk[celery,django,pure_eval]==2.59.0",
-  "uvicorn==0.46.0",
+  "sentry-sdk[celery,django,pure_eval]==2.64.0",
+  "uvicorn==0.50.2",
   "websockets==16.0",
 ]
 
 [project.optional-dependencies]
 development = [
   # Runtime dependencies, only needed with "development" settings
-  "daphne==4.2.1",
+  "daphne==4.2.2",
   "django-browser-reload==1.21.0",
   "django-debug-toolbar==6.3.0",
   "django-minio-storage==0.5.9",
   "django-resonant-utils[minio_storage]==0.19.0",
   "django-s3-file-field[minio]==1.1.0",
-  "ipython==9.13.0",
+  "ipython==9.15.0",
   "watchdog==6.0.0",
   "werkzeug==3.1.8",
 ]
 tasks = [
-  "geoai-py==0.37.2",
+  "geoai-py==0.41.0",
   "osmnx==2.1.0",
   # Needed by "uvdat-flood-sim[large-image-writer]"
   "pyvips==3.1.1.8.18.1",
   "uvdat-flood-sim[large-image-writer]==1.0.4",
   "xdg-base-dirs==6.0.2",
-  "huggingface-hub==1.14.0",
+  "huggingface-hub==1.22.0",
 ]
 
 [dependency-groups]

terraform/django.tf

@@ -8,7 +8,7 @@ data "heroku_team" "this" {
 
 module "django" {
   source  = "kitware-resonant/resonant/heroku"
-  version = "3.1.1"
+  version = "3.3.0"
 
   project_slug           = "geodatalytics"
   route53_zone_id        = aws_route53_zone.this.zone_id