Add security and funding

Signed-off-by: Bernát Gábor <[email protected]>

.github/FUNDING.yml

@@ -0,0 +1 @@
+tidelift: pypi/devpi-process

.github/SECURITY.md

@@ -0,0 +1,13 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 1.0.0 + | :white_check_mark: |
+| < 1.0.0 | :x:                |
+
+## Reporting a Vulnerability
+
+To report a security vulnerability, please use the [Tidelift security contact](https://tidelift.com/security). Tidelift
+will coordinate the fix and disclosure.

.pre-commit-config.yaml

@@ -22,7 +22,7 @@ repos:
     rev: "1.1.0"
     hooks:
       - id: pyproject-fmt
-        additional_dependencies: ["tox>=4.8"]
+        additional_dependencies: ["tox>=4.11.2"]
   - repo: https://github.com/pre-commit/mirrors-prettier
     rev: "v3.0.3"
     hooks:

pyproject.toml

@@ -48,7 +48,7 @@ dependencies = [
 optional-dependencies.test = [
   "covdefaults>=2.3",
   "httpx>=0.24.1",
-  "pytest>=7.4",
+  "pytest>=7.4.2",
   "pytest-cov>=4.1",
 ]
 urls.Homepage = "https://github.com/tox-dev/devpi-process#readme"

tox.ini

@@ -34,7 +34,7 @@ commands =
 description = run static analysis and style check using flake8
 skip_install = true
 deps =
-    pre-commit>=3.3.3
+    pre-commit>=3.4
 pass_env =
     HOMEPATH
     PROGRAMDATA
@@ -44,7 +44,7 @@ commands =
 [testenv:type]
 description = run type check on code base
 deps =
-    mypy==1.5
+    mypy==1.5.1
 set_env =
     {tty:MYPY_FORCE_COLOR = 1}
 commands =
@@ -55,7 +55,7 @@ commands =
 description = check that the long description is valid
 skip_install = true
 deps =
-    build[virtualenv]>=0.10
+    build[virtualenv]>=1.0.3
     twine>=4.0.2
 commands =
     python -m build --sdist --wheel -o {envtmpdir} .