IN 1240 - Replace pipenv check with pip-audit and maintenance

.pre-commit-config.yaml

@@ -1,5 +1,5 @@
 default_language_version:
-  python: python3.11 # set for project python version
+  python: python3.12 # set for project python version
 repos:
   - repo: local
     hooks:
@@ -22,8 +22,8 @@ repos:
         language: system
         pass_filenames: true
         types: ["python"]
-      - id: safety
-        name: safety
-        entry: pipenv check
+      - id: pip-audit
+        name: pip-audit
+        entry: pipenv run pip-audit
         language: system
         pass_filenames: false

.python-version

@@ -1 +1 @@
-3.11.8
+3.12

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.11-slim as build
+FROM python:3.12-slim as build
 
 # Set path for Oracle client libraries
 ENV LD_LIBRARY_PATH /opt/lib/

Makefile

@@ -49,8 +49,8 @@ mypy: # run 'mypy' linter
 ruff: # run 'ruff' linter and print a preview of errors
 	pipenv run ruff check .
 
-safety: # check for security vulnerabilities and verify Pipfile.lock is up-to-date
-	pipenv check
+safety: # Check for security vulnerabilities and verify Pipfile.lock is up-to-date
+	pipenv run pip-audit
 	pipenv verify
 
 lint-apply: black-apply ruff-apply  # apply changes with 'black' and resolve 'fixable errors' with 'ruff'

Pipfile

@@ -7,7 +7,7 @@ name = "pypi"
 click = "*"
 sentry-sdk = "*"
 oracledb = "*"
-luigi = "3.5.1"
+luigi = "*"
 pandas = "*"
 pandas-stubs = "*"
 attrs = "*"
@@ -30,9 +30,10 @@ freezegun = "*"
 sqlalchemy-stubs = "*"
 boto3 = "*"
 pytest-mock = "*"
+pip-audit = "*"
 
 [requires]
-python_version = "3.11"
+python_version = "3.12"
 
 [scripts]
 hrqb = "python -c \"from hrqb.cli import main; main()\""

hrqb/utils/luigi.py

@@ -15,7 +15,7 @@
 
 def run_task(task: luigi.Task) -> LuigiRunResult:
     """Function to run any luigi Task type via luigi runner."""
-    return luigi.build(
+    return luigi.build(  # type: ignore[no-untyped-call]
         [task],
         local_scheduler=True,
         detailed_summary=True,

pyproject.toml

@@ -10,6 +10,14 @@ disallow_untyped_calls = true
 disallow_untyped_defs = true
 exclude = ["tests/", "output/"]
 
+[[tool.mypy.overrides]]
+module = "hrqb.tasks.*"
+ignore_errors = true
+
+[[tool.mypy.overrides]]
+module = "hrqb.base.*"
+ignore_errors = true
+
 [tool.pytest.ini_options]
 log_level = "INFO"
 markers = [
@@ -18,7 +26,7 @@ markers = [
 ]
 
 [tool.ruff]
-target-version = "py311"
+target-version = "py312"
 
 # set max line length
 line-length = 90