Update all non-major dependencies

.github/workflows/backend-ci.yml

@@ -57,7 +57,7 @@ jobs:
       DJANGO_DANDI_INSTANCE_IDENTIFIER: "RRID:ABC_123456"
       DJANGO_DANDI_DOI_API_PREFIX: "10.80507"
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0 # fetch history for all branches and tags
       - name: Install uv

.github/workflows/backend-production-deploy.yml

@@ -20,7 +20,7 @@ jobs:
     name: Update release branch
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0 # fetch history for all branches and tags
           token: ${{ secrets.GH_TOKEN }}  # TODO: switch to GITHUB_TOKEN
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-24.04
     needs: reset-release-branch
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0 # fetch history for all branches and tags
           ref: release

.github/workflows/backend-staging-deploy.yml

@@ -23,7 +23,7 @@ jobs:
     name: Deploy to Heroku
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0 # fetch history for all branches and tags
 

.github/workflows/cli-integration.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Check out this repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0 # fetch history for all branches and tags
 
@@ -34,7 +34,7 @@ jobs:
           docker image save -o dandiarchive-api.tgz dandiarchive/dandiarchive-api
 
       - name: Upload Docker image tarball
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: dandiarchive-api.tgz
           path: dandiarchive-api.tgz
@@ -54,7 +54,7 @@ jobs:
       DANDI_TESTS_PULL_DOCKER_COMPOSE: 0
     steps:
       - name: Download Docker image tarball
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v8.0.1
         with:
           name: dandiarchive-api.tgz
 

.github/workflows/frontend-ci.yml

@@ -13,11 +13,11 @@ jobs:
           working-directory: web
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0 # fetch history for all branches and tags
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.4.0
         with:
           node-version: 24.x
 
@@ -87,11 +87,11 @@ jobs:
       VITE_APP_OAUTH_API_ROOT: http://localhost:8000/oauth/
       VITE_APP_OAUTH_CLIENT_ID: Dk0zosgt1GAAKfN8LT4STJmLJXwMDPbYWYzfNtAl
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.3
       with:
         fetch-depth: 0 # fetch history for all branches and tags
 
-    - uses: actions/setup-node@v6
+    - uses: actions/setup-node@v6.4.0
       with:
         node-version: 24
 
@@ -133,7 +133,7 @@ jobs:
           # run the tests
           cd e2e && npx playwright test
 
-    - uses: actions/upload-artifact@v7
+    - uses: actions/upload-artifact@v7.0.1
       if: always()
       with:
         name: playwright-report

.github/workflows/release.yml

@@ -14,7 +14,7 @@ jobs:
     if: "!contains(github.event.head_commit.message, 'ci skip') && !contains(github.event.head_commit.message, 'skip ci')"
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0 # fetch history for all branches and tags
           token: ${{ secrets.GH_TOKEN }}  # TODO: switch to GITHUB_TOKEN

pyproject.toml

@@ -1,5 +1,5 @@
 [build-system]
-requires = ["hatchling==1.29.0", "hatch-vcs==0.5.0"]
+requires = ["hatchling==1.30.1", "hatch-vcs==0.5.0"]
 build-backend = "hatchling.build"
 
 [project]
@@ -10,38 +10,38 @@ license-files = ["LICENSE", "NOTICE"]
 classifiers = ["Private :: Do Not Upload"]
 dependencies = [
   # Runtime dependencies, always needed
-  "boto3==1.42.97",
+  "boto3==1.43.19",
   "celery==5.6.3",
   # Pin dandischema to exact version to make explicit which schema version is being used
   "dandischema==0.12.1", # schema version 0.7.0
-  "django[argon2]==5.2.13",
-  "django-allauth==65.16.1",
+  "django[argon2]==5.2.14",
+  "django-allauth==65.18.0",
   "django-auth-style==0.15.0",
   "django-click==2.5.0",
   "django-cors-headers==4.9.0",
   "django-environ==0.13.0",
   "django-extensions==4.1",
   "django-filter==25.2",
   "django-guardian==3.3.1",
-  "django-oauth-toolkit==3.2.0",
-  "django-resonant-settings[allauth,celery]==0.50.4",
+  "django-oauth-toolkit==3.3.0",
+  "django-resonant-settings[allauth,celery]==0.51.1",
   "django-resonant-utils[allauth,s3_storage]==0.19.0",
   "django-stubs-ext==6.0.3",
   "djangorestframework==3.17.1",
   "drf-extensions==0.8.0",
   "drf-yasg==1.21.15",
   "jsonschema==4.26.0",
-  "more_itertools==11.0.2",
-  "psycopg[binary]==3.3.3",
+  "more_itertools==11.1.0",
+  "psycopg[binary]==3.3.4",
   "pyyaml==6.0.3",
-  "requests==2.33.1",
+  "requests==2.34.2",
   "rich==15.0.0",
   "whitenoise[brotli]==6.12.0",
   "zarr-checksum==0.4.7",
   # Production-only
   "django-s3-file-field[s3]==1.1.0",
   "django-storages[s3]==1.14.6",
-  "sentry-sdk[celery,django,pure_eval]==2.58.0",
+  "sentry-sdk[celery,django,pure_eval]==2.61.1",
   "gunicorn==25.3.0",
   # Development-only, but required
   "tqdm==4.67.3",
@@ -53,12 +53,12 @@ development = [
   # Runtime dependencies, only needed with "development" settings
   "django-browser-reload==1.21.0",
   "django-debug-toolbar==6.3.0",
-  "ipython==9.13.0",
+  "ipython==9.14.0",
   "watchdog==6.0.0",
   "werkzeug==3.1.8",
 ]
 cli = [
-  "dandi[extras]==0.74.3",
+  "dandi[extras]==0.76.2",
 ]
 
 [dependency-groups]