Security/applying security recommendations

.github/workflows/bandit.yml

@@ -29,17 +29,15 @@ jobs:
       with:
         python-version: 3.9
 
-    - name: Install Bandit
-      shell: bash
-      run: |
-        python -m pip install --upgrade pip==24.0
-        pip install bandit[sarif]==1.7.8
-
     - name: Checkout repository
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         token: ${{ secrets.RELEASE_TOKEN }}
         persist-credentials: false
+
+    - name: Install Dependencies
+      shell: bash
+      run: pip install -r requirements.txt
 
     - name: Run Bandit - Generate SARIF report and check for HIGH severity issues
       id: high_severity_check

.github/workflows/check-build.yml

@@ -35,12 +35,7 @@ jobs:
 
       - name: Install Dependencies
         shell: bash
-        run: |
-          python -m pip install --upgrade pip==24.0
-          # Use pip to install from requirements.txt with hash checking
-          pip install -r requirements.txt
-          # Pin the build package
-          pip install build==1.1.1
+        run: pip install -r requirements.txt
 
       - name: Build
         shell: python

.github/workflows/semantic-release.yml

@@ -48,13 +48,9 @@ jobs:
           cache: 'pip'
 
       - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip==24.0           
-          pip install -r requirements.txt
-          pip install setuptools==70.0.0           
-          pip install wheel==0.43.0 
-          pip install python-semantic-release==8.7.1           
-          pip install build==1.1.1           
+        shell: bash
+        run: pip install -r requirements.txt
+
       - name: Release
         run: |
           # symbolic link to fix an error when running a build_command

requirements.txt

@@ -2,4 +2,10 @@ sphinx==7.3.7
 pydata-sphinx-theme~=0.16.0,!=0.16.1
 sphinx-copybutton==0.5.0
 sphinxcontrib-images==0.9.4
-setuptools
+setuptools==78.1.1
+
+bandit[sarif]==1.7.8
+build==1.1.1
+wheel==0.43.0
+python-semantic-release==9.21.1
+build==1.1.1