Merge pull request #15 from ServerCrow/renovate/pytest-8.x

feat(deps): update dependency pytest to v8

.github/workflows/ci.yml

@@ -7,6 +7,7 @@ on:
       - master
     paths-ignore:
       - "**/.gitignore"
+      - "**/.renovate.json"
       - "**/.vscode/**"
       - "**/README.md"
       - "**/CHANGELOG.md"
@@ -14,6 +15,7 @@ on:
   workflow_dispatch:
   pull_request:
     branches:
+      - master
       - dev
 
 env:

Dockerfile

@@ -1,5 +1,8 @@
-FROM python:3.12-slim
-ARG VERSION=unkown
+FROM python:3.13-slim
+ARG VERSION=unknown
+
+# Create a non-root user
+RUN useradd appuser
 
 WORKDIR /app
 COPY . .
@@ -11,15 +14,20 @@ ENV VERSION=${VERSION}
 
 # Install dependencies
 RUN pip install --no-cache-dir --upgrade -r requirements.txt
-RUN pip install 'uvicorn[standard]'
 
 ENV ENV=DEV
 
+# Switch to non-root user
+USER appuser
+
 EXPOSE 8000
 CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
 
 # Install curl
-RUN apt-get update && apt-get install -y curl && apt-get clean
+USER root
+RUN apt-get update && apt-get install --no-install-recommends -y curl && apt-get clean
 
+# Switch back to non-root user for healthcheck
+USER appuser
 HEALTHCHECK --interval=30s --timeout=10s --retries=5 \
   CMD curl --fail http://localhost:8000/openapi.json || exit 1

requirements.txt

@@ -1,15 +1,15 @@
-certifi==2024.7.4 # Testing
+certifi==2024.12.14 # Testing
 iniconfig==2.0.0 # PyTest Testing
 packaging==23.2 # PyTest Testing
-pluggy==1.3.0 # PyTest Testing
-pytest==7.4.3 # PyTest Testing
+pluggy==1.5.0 # PyTest Testing
+pytest==8.3.4 # PyTest Testing
 
 click==8.1.7 # Uvicorn
 httptools==0.6.4 # Uvicorn
-pyyaml==6.0.1 # Uvicorn
+pyyaml==6.0.2 # Uvicorn
 uvicorn==0.27.0.post1 # Uvicorn
 uvloop==0.19.0 # Uvicorn
-watchfiles==0.21.0 # Uvicorn
+watchfiles==1.0.4 # Uvicorn
 websockets==12.0 # Uvicorn
 
 creyPY==1.3.0 # My own package