chore: fix vulnerabilities and deprecation warnings

requirements.in

@@ -1,10 +1,10 @@
 backoff==2.2.1
 deprecation==2.1.0
-mock==4.0.3
+mock==5.1.0
 monotonic==1.6
 packaging==24.1
-pytest==7.4.4
+pytest==8.3.3
 requests==2.32.3
-flake8==7.1.0
+flake8==7.1.1
 python-dateutil==2.9.0
 python-dotenv==1.0.1

requirements.txt

@@ -6,21 +6,21 @@
 #
 backoff==2.2.1
     # via -r requirements.in
-certifi==2024.6.2
+certifi==2024.8.30
     # via requests
 charset-normalizer==3.3.2
     # via requests
 deprecation==2.1.0
     # via -r requirements.in
-flake8==7.1.0
+flake8==7.1.1
     # via -r requirements.in
-idna==3.7
+idna==3.10
     # via requests
 iniconfig==2.0.0
     # via pytest
 mccabe==0.7.0
     # via flake8
-mock==4.0.3
+mock==5.1.0
     # via -r requirements.in
 monotonic==1.6
     # via -r requirements.in
@@ -31,11 +31,11 @@ packaging==24.1
     #   pytest
 pluggy==1.5.0
     # via pytest
-pycodestyle==2.12.0
+pycodestyle==2.12.1
     # via flake8
 pyflakes==3.2.0
     # via flake8
-pytest==7.4.4
+pytest==8.3.3
     # via -r requirements.in
 python-dateutil==2.9.0
     # via -r requirements.in
@@ -45,5 +45,5 @@ requests==2.32.3
     # via -r requirements.in
 six==1.16.0
     # via python-dateutil
-urllib3==2.2.2
+urllib3==2.2.3
     # via requests

rudderstack/analytics/client.py

@@ -1,4 +1,4 @@
-from datetime import datetime
+from datetime import datetime, timezone
 from uuid import uuid4
 import logging
 import numbers
@@ -245,7 +245,7 @@ def _enqueue(self, msg):
         """Push a new `msg` onto the queue, return `(success, msg)`"""
         timestamp = msg['timestamp']
         if timestamp is None:
-            timestamp = datetime.utcnow().replace(tzinfo=tzutc())
+            timestamp = datetime.now(timezone.utc).replace(tzinfo=tzutc())
         message_id = msg.get('messageId')
         if message_id is None:
             message_id = uuid4()

rudderstack/analytics/consumer.py

@@ -8,10 +8,9 @@
 
 from queue import Empty
 
-MAX_MSG_SIZE = 4 << 10 << 10  ## 4 mb
-
-# Our servers only accept batches less than 500KB. Here limit is set slightly
+# Our servers only accept payloads within this limit. Here limit is set slightly
 # lower to leave space for extra data that will be added later, eg. "sentAt".
+MAX_MSG_SIZE = 4 << 10 << 10  ## 4 mb
 BATCH_SIZE_LIMIT = 4 << 10 << 10 ## 4 mb
 
 

rudderstack/analytics/request.py

@@ -1,4 +1,4 @@
-from datetime import date, datetime
+from datetime import date, datetime, timezone
 from io import BytesIO
 from gzip import GzipFile
 import logging
@@ -17,7 +17,7 @@ def post(write_key, host=None, gzip=True, timeout=15, proxies=None, **kwargs):
     """Post the `kwargs` to the API"""
     log = logging.getLogger('rudderstack')
     body = kwargs
-    body["sentAt"] = datetime.utcnow().replace(tzinfo=tzutc()).isoformat()
+    body["sentAt"] = datetime.now(timezone.utc).replace(tzinfo=tzutc()).isoformat()
     url = remove_trailing_slash(host or 'https://api.rudderstack.com') + '/v1/batch'
     auth = HTTPBasicAuth(write_key, '')
     data = json.dumps(body, cls=DatetimeSerializer)

rudderstack/analytics/test/test_utils.py

@@ -1,4 +1,4 @@
-from datetime import date, datetime, timedelta
+from datetime import date, datetime, timedelta, timezone
 from decimal import Decimal
 import unittest
 
@@ -51,7 +51,7 @@ def test_clean(self):
     def test_clean_with_dates(self):
         dict_with_dates = {
             'birthdate': date(1980, 1, 1),
-            'registration': datetime.utcnow(),
+            'registration': datetime.now(timezone.utc),
         }
         self.assertEqual(dict_with_dates, utils.clean(dict_with_dates))