Merge pull request #112 from jedie/dev

Replace "safety" by "pip-audit"

.github/workflows/tests.yml

@@ -42,9 +42,9 @@ jobs:
       run: |
         ./manage.py --help
 
-    - name: 'Safety'
+    - name: 'Run pip-audit'
       run: |
-        ./manage.py safety
+        ./manage.py pip_audit
 
     - name: 'Run tests with Python v${{ matrix.python-version }}'
       env:

README.md

@@ -222,6 +222,7 @@ Because this is a project and not really a reuse-able-app ;)
 [comment]: <> (✂✂✂ auto generated history start ✂✂✂)
 
 * [v0.18.0.dev1](https://github.com/jedie/django-for-runners/compare/v0.17.4...v0.18.0.dev1)
+  * 2024-08-02 - Replace "safety" by "pip-audit"
   * 2024-08-01 - Replace metaweather.com with open-meteo.com
   * 2024-08-01 - Update test_add_gpx()
   * 2024-08-01 - Update Leaflet to v1.9.4 and fix styles

pyproject.toml

@@ -55,7 +55,7 @@ dev = [
     "pyflakes",  # https://github.com/PyCQA/pyflakes
     "codespell",  # https://github.com/codespell-project/codespell
     "EditorConfig",  # https://github.com/editorconfig/editorconfig-core-py
-    "safety",  # https://github.com/pyupio/safety
+    "pip-audit",  # https://github.com/pypa/pip-audit
     "mypy",  # https://github.com/python/mypy
     "twine",  # https://github.com/pypa/twine
     "typeguard",  # https://github.com/agronholm/typeguard/
@@ -116,6 +116,14 @@ version = {attr = "for_runners.__version__"}
 version_module_name = "for_runners"  # Used by update_readme_history()
 
 
+[tool.cli_base.pip_audit]
+# https://github.com/jedie/cli-base-utilities/blob/main/docs/pip_audit.md
+requirements=["requirements.dev.txt"]
+strict=true
+require_hashes=true
+ignore-vuln=[]
+
+
 [tool.darker]
 src = ['.']
 revision = "origin/main..."
@@ -204,6 +212,7 @@ applied_migrations = [
     "d65b082", # 2023-12-17T12:51:22+01:00
     "a66e5ae", # 2024-01-16T19:13:13+01:00
     "f8be3e0", # 2024-07-16T19:35:26+02:00
+    "52669d0", # 2024-08-02T15:47:04+02:00
 ]
 
 [manageprojects.cookiecutter_context.cookiecutter]