⬆️🔒 Update requests and CI workflow versions (#88)

* ⬆️🔒 Upgrade requests lower bound

Signed-off-by: Evaline Ju <69598118+evaline-ju@users.noreply.github.com>

* 🐛 Update versioning comments

Signed-off-by: Evaline Ju <69598118+evaline-ju@users.noreply.github.com>

* 📌 Pin to sha for workflow use

Signed-off-by: Evaline Ju <69598118+evaline-ju@users.noreply.github.com>

* ⏪ Revert incorrect version updates

Signed-off-by: Evaline Ju <69598118+evaline-ju@users.noreply.github.com>

---------

Signed-off-by: Evaline Ju <69598118+evaline-ju@users.noreply.github.com>

Author: evaline-ju

.github/workflows/build.yaml

@@ -26,7 +26,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
 
       - name: Install uv
-        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57  # v6
+        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57  # v8
 
       - name: Build protobufs
         run: USE_HTTPS=true ./proto-build.sh

.github/workflows/scorecard.yml

@@ -56,7 +56,7 @@ jobs:
           publish_results: true
 
       - name: Upload SARIF to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13  # v4
+        uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13  # v4.35.1
         with:
           sarif_file: scorecard.sarif
 

.github/workflows/security-scans.yaml

@@ -305,16 +305,16 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13  # v3
+        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13  # v4.35.1
         with:
           languages: python
           queries: security-extended
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13  # v3
+        uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13  # v4.35.1
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13  # v3
+        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13  # v4.35.1
         with:
           category: "/language:python"
 

.github/workflows/self-assign.yml

@@ -17,6 +17,6 @@ permissions:
 
 jobs:
   self-assign:
-    uses: kagenti/.github/.github/workflows/self-assign-reusable.yml@main
+    uses: kagenti/.github/.github/workflows/self-assign-reusable.yml@679a2cd1cfde7eed742cf76e9f6608eb91cf1bdd  # main
     secrets:
       ISSUE_ASSIGN_TOKEN: ${{ secrets.ISSUE_ASSIGN_TOKEN }}

.github/workflows/stale.yaml

@@ -18,4 +18,4 @@ permissions:
 
 jobs:
   stale:
-    uses: kagenti/.github/.github/workflows/stale.yaml@main
+    uses: kagenti/.github/.github/workflows/stale.yaml@679a2cd1cfde7eed742cf76e9f6608eb91cf1bdd  # main

plugins/examples/nemocheck/pyproject.toml

@@ -46,7 +46,7 @@ authors = [
 dependencies = [
     "cpex==0.1.0.dev10",
     "mcp>=1.16.0",
-    "requests>=2.32.5",
+    "requests>=2.33.0",
 ]
 
 # URLs