[release] Merge Develop into Master for 2.13.4

.github/dependabot.yml

@@ -6,6 +6,11 @@ updates:
     interval: daily
     time: "07:00"
     timezone: Europe/London
+  cooldown:
+    default-days: 5
+    semver-major-days: 30
+    semver-minor-days: 7
+    semver-patch-days: 3
   open-pull-requests-limit: 10
   labels:
     - "dependencies"

.github/workflows/check_release_version.yml

@@ -5,7 +5,14 @@ on:
   pull_request:
     branches:
       - master
+    types:
+      # defaults
+      - opened
+      - synchronize
+      - reopened
+      # custom
+      - ready_for_review # required for Github-created PRs
 
 jobs:
-  check-release-verion:
+  check-release-version:
     uses: sanger/.github/.github/workflows/check-release-version.yml@master

.github/workflows/create_release_pr.yml

@@ -0,0 +1,12 @@
+# Create or update merge-to-master pull requests for production releases
+# Note that by design, creating or editing a PR will not trigger a downstream `pull_request` event as this could lead to recursion
+name: Release
+
+on:
+  push:
+    branches:
+      - develop
+
+jobs:
+  pull_request:
+    uses: sanger/.github/.github/workflows/create-release-pr.yml@master

Pipfile

@@ -14,15 +14,15 @@ sqlalchemy-stubs = "*"
 types-flask = "*"
 
 [packages]
-alembic = "~=1.15"
+alembic = "~=1.17"
 autoenv = "~=1.0"
-colorlog = "~=6.8"
+colorlog = "~=6.10"
 flask = "~=3.1"
-flask-cors = "~=5.0"
+flask-cors = "~=6.0"
 flask-sqlalchemy = "~=3.1"
 gunicorn = "~=23.0"
 psycopg2 = "~=2.9"
-python-dotenv = "~=1.1"
+python-dotenv = "~=1.2"
 slackclient = "~=2.5"
 sqlalchemy = "~=2.0"
 flask-migrate = "*"