Merge pull request #248 from NHSDigital/mesh-2092-dependabot-combined

MESH-2092 Combined Dependabot PRs

Author: alexhawdon

.github/workflows/pr-lint.yaml

@@ -20,7 +20,7 @@ jobs:
 
       - name: Comment on PR
         if: contains(github.event.pull_request.head.ref, 'apm-') || contains(github.event.pull_request.head.ref, 'APM-') || contains(github.event.pull_request.head.ref, 'mesh-') || contains(github.event.pull_request.head.ref, 'MESH-') || contains(github.event.pull_request.head.ref, 'mesh2cloud-') || contains(github.event.pull_request.head.ref, 'MESH2CLOUD-') || contains(github.event.pull_request.head.ref, 'spii-') || contains(github.event.pull_request.head.ref, 'SPII-') || contains(github.event.pull_request.head.ref, 'spinecore-') || contains(github.event.pull_request.head.ref, 'SPINECORE-')
-        uses: unsplash/comment-on-pr@ffe8f97ccc63ce12c3c23c6885b169db67958d3b  # v1.3.0
+        uses: unsplash/comment-on-pr@b5610c6125a7197eaec80072ea35ef53e1fc6035  # v1.3.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:

package-lock.json

@@ -26,7 +26,7 @@ package-mode = false
 [tool.poetry.group.dev.dependencies]
 ruff = "^0.15.4"
 black = "^26.0.0"
-pip-licenses = "^4.3.3"
+pip-licenses = "^5.5.5"
 jinja2 = "^3.1.6"
 
 [tool.black]