Bump several packages to address security vulnerabilities (#77)

Author: kbayliss

.github/workflows/test.yml

@@ -37,7 +37,7 @@ jobs:
           python-version: ${{ matrix.python }}
       - uses: snok/install-poetry@v1
         with:
-          version: '1.7.1'
+          version: '1.8.3'
           virtualenvs-create: true
           virtualenvs-in-project: true
       - id: poetry-cache

.pre-commit-config.yaml

@@ -24,7 +24,7 @@ repos:
     hooks:
       - id: flake8
   - repo: https://github.com/python/black
-    rev: 22.3.0
+    rev: 24.3.0
     hooks:
       - id: black
   - repo: https://github.com/pre-commit/mirrors-eslint

CHANGELOG.md

@@ -11,11 +11,19 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 -   `Deprecated` for soon-to-be removed features.
 -   `Developer` for changes to the developer experience.
 -   `Fixed` for bug fixes.
+-   `Pinned packages updated` to list pinned packages that have been updated. Do not write changelog entries for third-party dependencies.
 -   `Removed` for now removed features.
--   `Security` in case of vulnerabilities.
 
 ## Unreleased
 
+## [2.0.1](https://github.com/torchbox/tbxforms/releases/tag/v2.0.1)
+
+### Pinned packages updated
+
+-   `vite` from 2.9.17 to 2.9.18 [#77]
+-   `black` from 22.3.0 to 24.3.0 [#77]
+-   `poetry` from 1.7.1 to 1.8.3 [#77]
+
 ## [2.0.0](https://github.com/torchbox/tbxforms/releases/tag/v2.0.0)
 
 ### Added
@@ -25,9 +33,9 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 
 ### Changed
 
--   `django-crispy-forms` updated to 2.x [#61]
+-   `|safe` is no longer applied within templates [#61]
 
-### Deprecated
+### Removed
 
 -   Django support for 2.2, 3.0, and 3.1 [#61]
 -   `TBXFORMS_ALLOW_HTML_LABEL`, `TBXFORMS_ALLOW_HTML_HELP_TEXT`, and `TBXFORMS_ALLOW_HTML_BUTTON` settings (developers must now mark strings as safe to render markup) [#61] [#62]
@@ -37,9 +45,11 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 
 -   Documentation referencing an incorrect CSS import path
 
-### Security
+### Pinned packages updated
 
--   `|safe` is no longer applied within templates [#61]
+-   `django` from 2.2.x to 3.2.x [#61]
+-   `django-crispy-forms` from 1.13.x to 2.1.x [#61]
+-   `flake8` from 4.0.1 to 5.0.4 [#61]
 
 ## [1.1.0](https://github.com/torchbox/tbxforms/releases/tag/v1.1.0)
 

CONTRIBUTING.md

@@ -8,7 +8,7 @@ We welcome all support, whether on bug reports, code, design, reviews, tests, do
 
 ### Installation
 
-With Python 3.8 or up, Node 20, [pre-commit](https://pre-commit.com/), and [Poetry 1.7.1](https://python-poetry.org/docs/#installing-with-the-official-installer)
+With Python 3.8+, Node 20, and [Poetry 1.8.3](https://python-poetry.org/docs/#installing-with-the-official-installer) installed, run:
 
 ```bash
 git clone [email protected]:torchbox/tbxforms.git

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "tbxforms",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "main": "./dist/tbxforms.umd.js",
   "module": "./dist/tbxforms.es.js",
   "files": [
@@ -34,7 +34,7 @@
     "eslint": "^7.32.0",
     "prettier": "^2.3.2",
     "sass": "^1.69.7",
-    "vite": "^2.9.17"
+    "vite": "^2.9.18"
   },
   "scripts": {
     "lint:js": "eslint --report-unused-disable-directives .",