Update all dependencies

.github/workflows/build_wheels.yml

@@ -18,17 +18,17 @@ jobs:
     steps:
 
     - name: Check out
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0  # unshallow fetch for setuptools-scm
 
     - name: Install Python 3.8
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: '3.8'
 
     - name: Build wheels (Python 3.7 through 3.9)
-      uses: pypa/cibuildwheel@v2.11.1
+      uses: pypa/cibuildwheel@v2.17.0
       with:
         output-dir: dist
       env:
@@ -41,7 +41,7 @@ jobs:
         CIBW_ENVIRONMENT: "CFLAGS='-g0'"
 
     - name: Build wheels (Python 3.10 only)
-      uses: pypa/cibuildwheel@v2.11.1
+      uses: pypa/cibuildwheel@v2.17.0
       with:
         output-dir: dist
       env:
@@ -61,7 +61,7 @@ jobs:
         python -m build --sdist
 
     - name: Upload build artifacts
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: wheelstorage
         path: ./dist/*
@@ -87,7 +87,7 @@ jobs:
       shell: bash
 
     - name: Download release assets
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4
       with:
         name: wheelstorage
         path: dist
@@ -99,7 +99,7 @@ jobs:
         password: ${{ secrets.pypi_password }}
 
     - name: Create GitHub Release
-      uses: softprops/action-gh-release@v1
+      uses: softprops/action-gh-release@v2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:

.github/workflows/coverage.yml

@@ -23,12 +23,12 @@ jobs:
     steps:
 
     - name: Check out
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: true
 
     - name: Set up Python 3.8
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: '3.8'
 

.github/workflows/run_tests.yml

@@ -43,12 +43,12 @@ jobs:
     steps:
 
     - name: Check out
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: true
 
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
 

dev-requirements.txt

@@ -1,2 +1,2 @@
-pytest-cov==4.0.0
-pytest-xdist==2.5.0
+pytest-cov==5.0.0
+pytest-xdist==3.5.0

requirements.txt

@@ -1,4 +1,4 @@
 # 'lxml' is not a primary requirement of psautohint but it's listed here because we
 # want to have control over the version and guarantee that the XML output remains stable
-lxml==4.9.1
+lxml==5.2.1
 fonttools[lxml,ufo]==4.37.4

setup.py

@@ -588,8 +588,8 @@ def run(self):
       ],
       extras_require={
           "testing": [
-              "pytest-cov >=4, <5",
-              "pytest-xdist >=2.5.0, <2.6.0",
+              "pytest-cov >=5, <6",
+              "pytest-xdist >=3.5.0, <3.6.0",
           ],
       },
       cmdclass=cmdclass,