chore(deps): update all minor dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
bandit (source, changelog)	==1.7.10 -> ==1.8.0						minor
github.com/cds-snc/terraform-modules	v10.1.0 -> v10.2.0					module	minor
httpx (changelog)	==0.27.2 -> ==0.28.0						minor	0.28.1

Review

• Updates have been tested and work
• If updates are AWS related, versions match the infrastructure (e.g. Lambda runtime, database, etc.)

---

Release Notes

PyCQA/bandit (bandit)

v1.8.0

Compare Source

What's Changed

• Bump docker/build-push-action from 6.7.0 to 6.9.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1178
• Rename doc file to match proper bandit ID by @​ericwb in https://github.com/PyCQA/bandit/pull/1183
• Removal of Python 3.8 support by @​ericwb in https://github.com/PyCQA/bandit/pull/1174
• Add more insecure cryptography cipher algorithms by @​ericwb in https://github.com/PyCQA/bandit/pull/1185
• Bump docker/setup-buildx-action from 3.6.1 to 3.7.1 by @​dependabot in https://github.com/PyCQA/bandit/pull/1186
• Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1187
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1162
• No need to check httpx client without timeout defined by @​ericwb in https://github.com/PyCQA/bandit/pull/1177
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1191
• Mark Python 3.13 as officially supported by @​ericwb in https://github.com/PyCQA/bandit/pull/1192
• Update project urls with added links by @​ericwb in https://github.com/PyCQA/bandit/pull/1193
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1196
• Add a JSON to seek funding from the FLOSS/fund by @​ericwb in https://github.com/PyCQA/bandit/pull/1194
• Remove Sentry as a sponsor by @​ericwb in https://github.com/PyCQA/bandit/pull/1198
• Remove more leftover OpenStack references by @​ericwb in https://github.com/PyCQA/bandit/pull/1195

Full Changelog: PyCQA/bandit@1.7.10...1.8.0

cds-snc/terraform-modules (github.com/cds-snc/terraform-modules)

v10.2.0

Compare Source

What's Changed

• chore(deps): update all patch dependencies by @​renovate in https://github.com/cds-snc/terraform-modules/pull/595
• chore(deps): update terraform aws to v5.76.0 by @​renovate in https://github.com/cds-snc/terraform-modules/pull/596
• chore(deps): lock file maintenance by @​renovate in https://github.com/cds-snc/terraform-modules/pull/597
• feat: module to create and trigger a Lambda function by @​patheard in https://github.com/cds-snc/terraform-modules/pull/598

Full Changelog: cds-snc/terraform-modules@v10.1.0...v10.2.0

encode/httpx (httpx)

v0.28.0

Compare Source

The 0.28 release includes a limited set of deprecations.

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

• The verify argument as a string argument is now deprecated and will raise warnings.
• The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

• The deprecated proxies argument has now been removed.
• The deprecated app argument has now been removed.
• JSON request bodies use a compact representation. (#​3363)
• Review URL percent escape sets, based on WHATWG spec. (#​3371, #​3373)
• Ensure certifi and httpcore are only imported if required. (#​3377)
• Treat socks5h as a valid proxy scheme. (#​3178)
• Cleanup Request() method signature in line with client.request() and httpx.request(). (#​3378)

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Montreal, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.