From 2be4bab478bd298b9f7d67fa715b6fbcb9ba5949 Mon Sep 17 00:00:00 2001
From: Douglas Lowe <10961945+douglowe@users.noreply.github.com>
Date: Sun, 26 Jul 2026 17:58:20 +0100
Subject: [PATCH 01/17] use latest image for example compose file

---
 docker-compose.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 73c9e2d..ef3f77e 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -7,7 +7,7 @@
 services:
   flask:
     platform: linux/x86_64
-    image: "ghcr.io/esciencelab/ro-crate-validation-service:0.1"
+    image: "ghcr.io/esciencelab/ro-crate-validation-service:latest"
     ports:
       - "5001:5000"
     environment:
@@ -28,7 +28,7 @@ services:
 
   celery_worker:
     platform: linux/x86_64
-    image: "ghcr.io/esciencelab/ro-crate-validation-service:0.1"
+    image: "ghcr.io/esciencelab/ro-crate-validation-service:latest"
     command: celery -A app.celery_worker.celery worker --loglevel=info -E
     environment:
       - CELERY_BROKER_URL=redis://redis:6379/0

From 5366201bf8dbf1f62fb3b4c0a0b43dbae1b957a6 Mon Sep 17 00:00:00 2001
From: Simon Li <simon.li@dareuk.org.uk>
Date: Thu, 6 Aug 2026 12:00:21 +0000
Subject: [PATCH 02/17] Update FIVE_SAFES_PROFILE_VERSION to 0.8.0

---
 .github/workflows/build-with-profiles.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build-with-profiles.yml b/.github/workflows/build-with-profiles.yml
index e56aad8..41de793 100644
--- a/.github/workflows/build-with-profiles.yml
+++ b/.github/workflows/build-with-profiles.yml
@@ -43,8 +43,8 @@ jobs:
           # Add the five-safes profile (via EXTRA_PROFILES_PATH) and warm its
           # cache, using the shared Dockerfile's build args.
           build-args: |
-            FIVE_SAFES_PROFILE_VERSION=five-safes-0.7.4-beta
-            PROFILES_ARCHIVE_URL=https://github.com/eScienceLab/rocrate-validator/archive/refs/tags/five-safes-0.7.4-beta.tar.gz
+            FIVE_SAFES_PROFILE_VERSION=five-safes-0.8.0
+            PROFILES_ARCHIVE_URL=https://github.com/eScienceLab/rocrate-validator/archive/refs/tags/five-safes-0.8.0.tar.gz
             EXTRA_PROFILES_PATH=/app/extra-profiles
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}

From 18b72eded5c2f0d77db2364b7c3491de7d4d8e8d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 14 Sep 2026 11:34:10 +0000
Subject: [PATCH 03/17] chore(deps): bump flask-marshmallow from 1.3.0 to 1.5.0

Bumps [flask-marshmallow](https://github.com/marshmallow-code/flask-marshmallow) from 1.3.0 to 1.5.0.
- [Release notes](https://github.com/marshmallow-code/flask-marshmallow/releases)
- [Changelog](https://github.com/marshmallow-code/flask-marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](https://github.com/marshmallow-code/flask-marshmallow/compare/1.3.0...1.5.0)

---
updated-dependencies:
- dependency-name: flask-marshmallow
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 28c5ac9..67b9b0a 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -65,7 +65,7 @@ flask==3.1.3
     #   ro-crate-validation-service (pyproject.toml)
 flask-httpauth==4.8.1
     # via apiflask
-flask-marshmallow==1.3.0
+flask-marshmallow==1.5.0
     # via apiflask
 html5rdf==1.2.1
     # via rdflib

From ac2fe60d74fe57c85fe355b85dfa9d18628fa060 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 14 Sep 2026 11:34:14 +0000
Subject: [PATCH 04/17] chore(deps-dev): bump build from 1.5.0 to 1.6.1

Bumps [build](https://github.com/pypa/build) from 1.5.0 to 1.6.1.
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/build/compare/1.5.0...1.6.1)

---
updated-dependencies:
- dependency-name: build
  dependency-version: 1.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements-dev.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements-dev.txt b/requirements-dev.txt
index 76b4f4d..cb40fd7 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -29,7 +29,7 @@ botocore==1.43.31
     #   boto3
     #   moto
     #   s3transfer
-build==1.5.0
+build==1.6.1
     # via pip-tools
 cattrs==26.1.0
     # via requests-cache

From fcb8a5955e2961dd78c66db3989fc2ea36dafd95 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 14 Sep 2026 11:34:20 +0000
Subject: [PATCH 05/17] chore(deps): bump redis from 8.0.1 to 8.1.0

Bumps [redis](https://github.com/redis/redis-py) from 8.0.1 to 8.1.0.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](https://github.com/redis/redis-py/compare/v8.0.1...v8.1.0)

---
updated-dependencies:
- dependency-name: redis
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml       | 2 +-
 requirements-dev.txt | 2 +-
 requirements.txt     | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 74c6205..bbb66fa 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -18,7 +18,7 @@ dependencies = [
     "requests==2.34.2",
     "Flask==3.1.3",
     "Werkzeug==3.1.8",
-    "redis==8.0.1",
+    "redis==8.1.0",
     "python-dotenv==1.2.2",
     "apiflask==3.1.0",
     "roc-validator==0.11.2",
diff --git a/requirements-dev.txt b/requirements-dev.txt
index 76b4f4d..3d910a3 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -183,7 +183,7 @@ rdflib[html]==7.6.0
     #   owlrl
     #   pyshacl
     #   roc-validator
-redis==8.0.1
+redis==8.1.0
     # via ro-crate-validation-service (pyproject.toml)
 requests==2.34.2
     # via
diff --git a/requirements.txt b/requirements.txt
index 28c5ac9..c389cd4 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -143,7 +143,7 @@ rdflib[html]==7.1.4
     #   owlrl
     #   pyshacl
     #   roc-validator
-redis==8.0.1
+redis==8.1.0
     # via ro-crate-validation-service (pyproject.toml)
 requests==2.34.2
     # via

From 10ff6fa67bfb4769c498300ee6a193e7f89161ce Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 14 Sep 2026 16:35:11 +0000
Subject: [PATCH 06/17] chore(deps): bump attrs from 25.3.0 to 26.1.0

Bumps [attrs](https://github.com/python-attrs/attrs) from 25.3.0 to 26.1.0.
- [Release notes](https://github.com/python-attrs/attrs/releases)
- [Changelog](https://github.com/python-attrs/attrs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/python-attrs/attrs/compare/25.3.0...26.1.0)

---
updated-dependencies:
- dependency-name: attrs
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 67b9b0a..99a5e18 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -12,7 +12,7 @@ apiflask==3.1.0
     # via ro-crate-validation-service (pyproject.toml)
 apispec==6.8.2
     # via apiflask
-attrs==25.3.0
+attrs==26.1.0
     # via
     #   cattrs
     #   requests-cache

From e399003853e880b0c4747b1f25e8f0ec1f37264d Mon Sep 17 00:00:00 2001
From: Simon Li <orpheus+devel@gmail.com>
Date: Wed, 16 Sep 2026 10:22:14 +0000
Subject: [PATCH 07/17] roc-validator==0.11.4

Fixes upstream bug in UTF-8 validation
---
 pyproject.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pyproject.toml b/pyproject.toml
index 74c6205..1c8748c 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -21,7 +21,7 @@ dependencies = [
     "redis==8.0.1",
     "python-dotenv==1.2.2",
     "apiflask==3.1.0",
-    "roc-validator==0.11.2",
+    "roc-validator==0.11.4",
 ]
 
 [project.optional-dependencies]

From 4369973fb78cac480f478971c2ad696eff9514fe Mon Sep 17 00:00:00 2001
From: Simon Li <orpheus+devel@gmail.com>
Date: Wed, 16 Sep 2026 11:15:09 +0000
Subject: [PATCH 08/17] pip-compile

---
 requirements-dev.txt | 2 +-
 requirements.txt     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements-dev.txt b/requirements-dev.txt
index fb31bb2..01fa2a7 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -202,7 +202,7 @@ rich==13.9.4
     #   roc-validator
 rich-click==1.9.8
     # via roc-validator
-roc-validator==0.11.2
+roc-validator==0.11.4
     # via ro-crate-validation-service (pyproject.toml)
 ruff==0.15.17
     # via ro-crate-validation-service (pyproject.toml)
diff --git a/requirements.txt b/requirements.txt
index 3ca296d..044e3d3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -158,7 +158,7 @@ rich==13.9.4
     #   roc-validator
 rich-click==1.8.9
     # via roc-validator
-roc-validator==0.11.2
+roc-validator==0.11.4
     # via ro-crate-validation-service (pyproject.toml)
 s3transfer==0.18.0
     # via boto3

From 5a0dbcf26a222e9309b53981591548165277cc6f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 21 Sep 2026 11:34:39 +0000
Subject: [PATCH 09/17] chore(deps): bump zipp from 3.23.0 to 4.1.0

Bumps [zipp](https://github.com/jaraco/zipp) from 3.23.0 to 4.1.0.
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](https://github.com/jaraco/zipp/compare/v3.23.0...v4.1.0)

---
updated-dependencies:
- dependency-name: zipp
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 0fd4858..01f7168 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -202,5 +202,5 @@ werkzeug==3.1.8
     # via
     #   flask
     #   ro-crate-validation-service (pyproject.toml)
-zipp==3.23.0
+zipp==4.1.0
     # via importlib-metadata

From c5bc299d439990635bb111e2ae77b032eb873bce Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 21 Sep 2026 11:34:43 +0000
Subject: [PATCH 10/17] chore(deps): bump certifi from 2025.8.3 to 2026.7.22

Bumps [certifi](https://github.com/certifi/python-certifi) from 2025.8.3 to 2026.7.22.
- [Commits](https://github.com/certifi/python-certifi/compare/2025.08.03...2026.07.22)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.7.22
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements-dev.txt | 2 +-
 requirements.txt     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements-dev.txt b/requirements-dev.txt
index 9739787..c863560 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -35,7 +35,7 @@ cattrs==26.1.0
     # via requests-cache
 celery==5.6.3
     # via ro-crate-validation-service (pyproject.toml)
-certifi==2026.6.17
+certifi==2026.7.22
     # via requests
 cffi==2.1.0
     # via cryptography
diff --git a/requirements.txt b/requirements.txt
index 0fd4858..299df44 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -30,7 +30,7 @@ cattrs==25.1.1
     # via requests-cache
 celery==5.6.3
     # via ro-crate-validation-service (pyproject.toml)
-certifi==2025.8.3
+certifi==2026.7.22
     # via requests
 charset-normalizer==3.4.2
     # via requests

From 5f49fa4ab3efbdb4a3591045376a273dc210252b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 21 Sep 2026 11:34:58 +0000
Subject: [PATCH 11/17] chore(deps): bump botocore from 1.43.29 to 1.43.97

Bumps [botocore](https://github.com/boto/botocore) from 1.43.29 to 1.43.97.
- [Commits](https://github.com/boto/botocore/compare/1.43.29...1.43.97)

---
updated-dependencies:
- dependency-name: botocore
  dependency-version: 1.43.97
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements-dev.txt | 2 +-
 requirements.txt     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements-dev.txt b/requirements-dev.txt
index 9739787..bf79144 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -24,7 +24,7 @@ boto3==1.43.29
     # via
     #   moto
     #   ro-crate-validation-service (pyproject.toml)
-botocore==1.43.31
+botocore==1.43.97
     # via
     #   boto3
     #   moto
diff --git a/requirements.txt b/requirements.txt
index 0fd4858..f627355 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -22,7 +22,7 @@ blinker==1.9.0
     # via flask
 boto3==1.43.29
     # via ro-crate-validation-service (pyproject.toml)
-botocore==1.43.29
+botocore==1.43.97
     # via
     #   boto3
     #   s3transfer

From 8cbf8d4b362c6b28d255b0e6dae67c04109b7840 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 21 Sep 2026 11:35:05 +0000
Subject: [PATCH 12/17] chore(deps): bump urllib3 from 2.7.0 to 2.8.0

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.7.0...2.8.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements-dev.txt | 2 +-
 requirements.txt     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements-dev.txt b/requirements-dev.txt
index 9739787..143c65d 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -227,7 +227,7 @@ tzlocal==5.4.3
     # via celery
 url-normalize==3.0.0
     # via requests-cache
-urllib3==2.7.0
+urllib3==2.8.0
     # via
     #   botocore
     #   requests
diff --git a/requirements.txt b/requirements.txt
index 0fd4858..bfaca02 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -182,7 +182,7 @@ tzlocal==5.3.1
     # via celery
 url-normalize==2.2.1
     # via requests-cache
-urllib3==2.7.0
+urllib3==2.8.0
     # via
     #   botocore
     #   requests

From a2ca21ea147d3a47ed1fdc8c59b201481eefca0a Mon Sep 17 00:00:00 2001
From: Douglas Lowe <10961945+douglowe@users.noreply.github.com>
Date: Mon, 21 Sep 2026 16:41:56 +0100
Subject: [PATCH 13/17] group all dependabot updates into one pr

---
 .github/dependabot.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6a7695c..d2dea4e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,3 +4,7 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    groups:
+      weekly-batch:
+        patterns:
+          - "*"

From 42785fda66616d841bbd4a350a39fc9ccc5a4381 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 21 Sep 2026 15:53:09 +0000
Subject: [PATCH 14/17] chore(deps): bump the weekly-batch group with 43
 updates

Bumps the weekly-batch group with 43 updates:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.29` | `1.43.97` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [apiflask](https://github.com/apiflask/apiflask) | `3.1.0` | `3.1.2` |
| [annotated-types](https://github.com/annotated-types/annotated-types) | `0.7.0` | `0.8.0` |
| [apispec](https://github.com/marshmallow-code/apispec) | `6.8.2` | `6.10.0` |
| [billiard](https://github.com/celery/billiard) | `4.2.4` | `4.3.0` |
| [cattrs](https://github.com/python-attrs/cattrs) | `25.1.1` | `26.2.0` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.2` | `3.5.1` |
| [click](https://github.com/pallets/click) | `8.2.1` | `8.5.0` |
| [click-repl](https://github.com/click-contrib/click-repl) | `0.3.0` | `0.4.0` |
| [enum-tools](https://github.com/domdfcoding/enum_tools) | `0.12.0` | `0.13.0` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.20` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `9.0.0` | `9.0.1` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `3.0.0` | `4.2.0` |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `4.1.2` | `4.3.1` |
| [owlrl](https://github.com/RDFLib/OWL-RL) | `7.1.4` | `7.6.2` |
| [packaging](https://github.com/pypa/packaging) | `26.2` | `26.3` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.3.8` | `4.11.10` |
| [prettytable](https://github.com/prettytable/prettytable) | `3.16.0` | `3.18.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.4` | `2.13.5` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.41.5` | `2.49.0` |
| [pygments](https://github.com/pygments/pygments) | `2.20.0` | `2.21.0` |
| [pyparsing](https://github.com/pyparsing/pyparsing) | `3.2.3` | `3.3.2` |
| [pyshacl](https://github.com/RDFLib/pySHACL) | `0.30.1` | `0.40.1` |
| [rdflib](https://github.com/RDFLib/rdflib) | `7.1.4` | `7.6.0` |
| [rich](https://github.com/Textualize/rich) | `13.9.4` | `15.0.0` |
| [rich-click](https://github.com/ewels/rich-click) | `1.8.9` | `1.9.9` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.18.0` | `0.19.2` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.14.1` | `4.16.0` |
| [typing-inspection](https://github.com/pydantic/typing-inspection) | `0.4.2` | `0.4.4` |
| [tzdata](https://github.com/python/tzdata) | `2025.2` | `2026.4` |
| [tzlocal](https://github.com/regebro/tzlocal) | `5.3.1` | `5.4.4` |
| [url-normalize](https://github.com/niksite/url-normalize) | `2.2.1` | `3.0.0` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.2.13` | `0.8.4` |
| [webargs](https://github.com/marshmallow-code/webargs) | `8.7.0` | `8.7.1` |
| [cffi](https://github.com/python-cffi/cffi) | `2.1.0` | `2.1.1` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.1` |
| [moto](https://github.com/getmoto/moto) | `5.2.2` | `5.2.3` |
| [pyproject-hooks](https://github.com/pypa/pyproject-hooks) | `1.2.0` | `1.3.3` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.1.0` | `9.1.1` |
| [responses](https://github.com/getsentry/responses) | `0.26.2` | `0.26.3` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.17` | `0.16.8` |
| [wheel](https://github.com/pypa/wheel) | `0.47.0` | `0.48.0` |


Updates `boto3` from 1.43.29 to 1.43.97
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.29...1.43.97)

Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/theskumar/python-dotenv/compare/v1.2.2...v1.2.3)

Updates `apiflask` from 3.1.0 to 3.1.2
- [Release notes](https://github.com/apiflask/apiflask/releases)
- [Changelog](https://github.com/apiflask/apiflask/blob/main/docs/changelog.md)
- [Commits](https://github.com/apiflask/apiflask/compare/3.1.0...3.1.2)

Updates `annotated-types` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/annotated-types/annotated-types/releases)
- [Commits](https://github.com/annotated-types/annotated-types/compare/v0.7.0...v0.8.0)

Updates `apispec` from 6.8.2 to 6.10.0
- [Changelog](https://github.com/marshmallow-code/apispec/blob/dev/CHANGELOG.rst)
- [Commits](https://github.com/marshmallow-code/apispec/compare/6.8.2...6.10.0)

Updates `billiard` from 4.2.4 to 4.3.0
- [Release notes](https://github.com/celery/billiard/releases)
- [Changelog](https://github.com/celery/billiard/blob/main/CHANGES.txt)
- [Commits](https://github.com/celery/billiard/compare/v4.2.4...v4.3.0)

Updates `cattrs` from 25.1.1 to 26.2.0
- [Release notes](https://github.com/python-attrs/cattrs/releases)
- [Changelog](https://github.com/python-attrs/cattrs/blob/main/HISTORY.md)
- [Commits](https://github.com/python-attrs/cattrs/compare/v25.1.1...v26.2.0)

Updates `charset-normalizer` from 3.4.2 to 3.5.1
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jawah/charset_normalizer/compare/3.4.2...3.5.1)

Updates `click` from 8.2.1 to 8.5.0
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](https://github.com/pallets/click/compare/8.2.1...8.5.0)

Updates `click-repl` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/click-contrib/click-repl/releases)
- [Changelog](https://github.com/click-contrib/click-repl/blob/master/Changelog.rst)
- [Commits](https://github.com/click-contrib/click-repl/compare/0.3.0...0.4.0)

Updates `enum-tools` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/domdfcoding/enum_tools/releases)
- [Commits](https://github.com/domdfcoding/enum_tools/compare/v0.12.0...v0.13.0)

Updates `idna` from 3.15 to 3.20
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.15...v3.20)

Updates `importlib-metadata` from 9.0.0 to 9.0.1
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](https://github.com/python/importlib_metadata/compare/v9.0.0...v9.0.1)

Updates `markdown-it-py` from 3.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](https://github.com/executablebooks/markdown-it-py/compare/v3.0.0...v4.2.0)

Updates `marshmallow` from 4.1.2 to 4.3.1
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](https://github.com/marshmallow-code/marshmallow/compare/4.1.2...4.3.1)

Updates `owlrl` from 7.1.4 to 7.6.2
- [Release notes](https://github.com/RDFLib/OWL-RL/releases)
- [Changelog](https://github.com/RDFLib/OWL-RL/blob/master/CHANGELOG.md)
- [Commits](https://github.com/RDFLib/OWL-RL/compare/7.1.4...v7.6.2)

Updates `packaging` from 26.2 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/26.2...26.3)

Updates `platformdirs` from 4.3.8 to 4.11.10
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/platformdirs/compare/4.3.8...4.11.10)

Updates `prettytable` from 3.16.0 to 3.18.0
- [Release notes](https://github.com/prettytable/prettytable/releases)
- [Changelog](https://github.com/prettytable/prettytable/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettytable/prettytable/compare/3.16.0...3.18.0)

Updates `pydantic` from 2.12.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/compare/v2.12.4...v2.13.5)

Updates `pydantic-core` from 2.41.5 to 2.49.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits)

Updates `pygments` from 2.20.0 to 2.21.0
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](https://github.com/pygments/pygments/compare/2.20.0...2.21.0)

Updates `pyparsing` from 3.2.3 to 3.3.2
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](https://github.com/pyparsing/pyparsing/compare/3.2.3...3.3.2)

Updates `pyshacl` from 0.30.1 to 0.40.1
- [Release notes](https://github.com/RDFLib/pySHACL/releases)
- [Changelog](https://github.com/RDFLib/pySHACL/blob/master/CHANGELOG.md)
- [Commits](https://github.com/RDFLib/pySHACL/compare/v0.30.1...v0.40.1)

Updates `rdflib` from 7.1.4 to 7.6.0
- [Release notes](https://github.com/RDFLib/rdflib/releases)
- [Changelog](https://github.com/RDFLib/rdflib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/RDFLib/rdflib/compare/7.1.4...7.6.0)

Updates `rich` from 13.9.4 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Textualize/rich/compare/v13.9.4...v15.0.0)

Updates `rich-click` from 1.8.9 to 1.9.9
- [Release notes](https://github.com/ewels/rich-click/releases)
- [Changelog](https://github.com/ewels/rich-click/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ewels/rich-click/compare/v1.8.9...v1.9.9)

Updates `s3transfer` from 0.18.0 to 0.19.2
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/s3transfer/compare/0.18.0...0.19.2)

Updates `typing-extensions` from 4.14.1 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/python/typing_extensions/compare/4.14.1...4.16.0)

Updates `typing-inspection` from 0.4.2 to 0.4.4
- [Release notes](https://github.com/pydantic/typing-inspection/releases)
- [Changelog](https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/typing-inspection/compare/v0.4.2...v0.4.4)

Updates `tzdata` from 2025.2 to 2026.4
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](https://github.com/python/tzdata/compare/2025.2...2026.4)

Updates `tzlocal` from 5.3.1 to 5.4.4
- [Changelog](https://github.com/regebro/tzlocal/blob/master/CHANGES.txt)
- [Commits](https://github.com/regebro/tzlocal/compare/5.3.1...5.4.4)

Updates `url-normalize` from 2.2.1 to 3.0.0
- [Release notes](https://github.com/niksite/url-normalize/releases)
- [Changelog](https://github.com/niksite/url-normalize/blob/master/CHANGELOG.md)
- [Commits](https://github.com/niksite/url-normalize/compare/v2.2.1...v3.0.0)

Updates `wcwidth` from 0.2.13 to 0.8.4
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Changelog](https://github.com/jquast/wcwidth/blob/master/docs/history.rst)
- [Commits](https://github.com/jquast/wcwidth/compare/0.2.13...0.8.4)

Updates `webargs` from 8.7.0 to 8.7.1
- [Changelog](https://github.com/marshmallow-code/webargs/blob/dev/CHANGELOG.rst)
- [Commits](https://github.com/marshmallow-code/webargs/compare/8.7.0...8.7.1)

Updates `cffi` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](https://github.com/python-cffi/cffi/compare/v2.1.0...v2.1.1)

Updates `cryptography` from 50.0.0 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/50.0.0...50.0.1)

Updates `moto` from 5.2.2 to 5.2.3
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getmoto/moto/compare/5.2.2...5.2.3)

Updates `pyproject-hooks` from 1.2.0 to 1.3.3
- [Changelog](https://github.com/pypa/pyproject-hooks/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/pyproject-hooks/compare/v1.2.0...v1.3.3)

Updates `pytest` from 9.1.0 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/9.1.0...9.1.1)

Updates `responses` from 0.26.2 to 0.26.3
- [Release notes](https://github.com/getsentry/responses/releases)
- [Changelog](https://github.com/getsentry/responses/blob/master/CHANGES)
- [Commits](https://github.com/getsentry/responses/compare/0.26.2...0.26.3)

Updates `ruff` from 0.15.17 to 0.16.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.17...0.16.8)

Updates `wheel` from 0.47.0 to 0.48.0
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](https://github.com/pypa/wheel/compare/0.47.0...0.48.0)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.97
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: apiflask
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: annotated-types
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: apispec
  dependency-version: 6.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: billiard
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: cattrs
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: charset-normalizer
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: click
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: click-repl
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: enum-tools
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: idna
  dependency-version: '3.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: importlib-metadata
  dependency-version: 9.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: markdown-it-py
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: marshmallow
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: owlrl
  dependency-version: 7.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: packaging
  dependency-version: '26.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: platformdirs
  dependency-version: 4.11.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: prettytable
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pydantic-core
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pygments
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pyparsing
  dependency-version: 3.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pyshacl
  dependency-version: 0.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: rdflib
  dependency-version: 7.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: rich-click
  dependency-version: 1.9.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: s3transfer
  dependency-version: 0.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: typing-extensions
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: typing-inspection
  dependency-version: 0.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: tzdata
  dependency-version: '2026.4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: tzlocal
  dependency-version: 5.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: url-normalize
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: wcwidth
  dependency-version: 0.8.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: webargs
  dependency-version: 8.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: cffi
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: moto
  dependency-version: 5.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: pyproject-hooks
  dependency-version: 1.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: responses
  dependency-version: 0.26.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: ruff
  dependency-version: 0.16.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: wheel
  dependency-version: 0.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml       |  6 ++--
 requirements-dev.txt | 74 ++++++++++++++++++++++----------------------
 requirements.txt     | 70 ++++++++++++++++++++---------------------
 3 files changed, 75 insertions(+), 75 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 06cd4c0..fed3923 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -14,13 +14,13 @@ authors = [{ name = "eScience Lab, The University of Manchester" }]
 # Direct runtime dependencies:
 dependencies = [
     "celery==5.6.3",
-    "boto3==1.43.29",
+    "boto3==1.43.97",
     "requests==2.34.2",
     "Flask==3.1.3",
     "Werkzeug==3.1.8",
     "redis==8.1.0",
-    "python-dotenv==1.2.2",
-    "apiflask==3.1.0",
+    "python-dotenv==1.2.3",
+    "apiflask==3.1.2",
     "roc-validator==0.11.4",
 ]
 
diff --git a/requirements-dev.txt b/requirements-dev.txt
index 8c5c47b..72d7224 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -6,9 +6,9 @@
 #
 amqp==5.3.1
     # via kombu
-annotated-types==0.7.0
+annotated-types==0.8.0
     # via pydantic
-apiflask==3.1.0
+apiflask==3.1.2
     # via ro-crate-validation-service (pyproject.toml)
 apispec==6.10.0
     # via apiflask
@@ -16,11 +16,11 @@ attrs==26.1.0
     # via
     #   cattrs
     #   requests-cache
-billiard==4.2.4
+billiard==4.3.0
     # via celery
 blinker==1.9.0
     # via flask
-boto3==1.43.29
+boto3==1.43.97
     # via
     #   moto
     #   ro-crate-validation-service (pyproject.toml)
@@ -31,17 +31,17 @@ botocore==1.43.97
     #   s3transfer
 build==1.6.1
     # via pip-tools
-cattrs==26.1.0
+cattrs==26.2.0
     # via requests-cache
 celery==5.6.3
     # via ro-crate-validation-service (pyproject.toml)
 certifi==2026.7.22
     # via requests
-cffi==2.1.0
+cffi==2.1.1
     # via cryptography
-charset-normalizer==3.4.7
+charset-normalizer==3.5.1
     # via requests
-click==8.4.1
+click==8.5.0
     # via
     #   celery
     #   click-didyoumean
@@ -55,17 +55,17 @@ click-didyoumean==0.3.1
     # via celery
 click-plugins==1.1.1.2
     # via celery
-click-repl==0.3.0
+click-repl==0.4.0
     # via celery
 colorlog==6.12.0
     # via roc-validator
-cryptography==50.0.0
+cryptography==50.0.1
     # via moto
 dnspython==2.8.0
     # via email-validator
 email-validator==2.3.0
     # via pydantic
-enum-tools==0.12.0
+enum-tools==0.13.0
     # via roc-validator
 flask==3.1.3
     # via
@@ -79,12 +79,12 @@ flask-marshmallow==1.5.0
     # via apiflask
 html5rdf==1.2.1
     # via rdflib
-idna==3.15
+idna==3.20
     # via
     #   email-validator
     #   requests
     #   url-normalize
-importlib-metadata==9.0.0
+importlib-metadata==9.0.1
     # via pyshacl
 iniconfig==2.3.0
     # via pytest
@@ -107,18 +107,18 @@ markupsafe==3.0.3
     #   flask
     #   jinja2
     #   werkzeug
-marshmallow==4.3.0
+marshmallow==4.3.1
     # via
     #   apiflask
     #   flask-marshmallow
     #   webargs
 mdurl==0.1.2
     # via markdown-it-py
-moto[s3]==5.2.2
+moto[s3]==5.2.3
     # via ro-crate-validation-service (pyproject.toml)
-owlrl==7.1.4
+owlrl==7.6.2
     # via pyshacl
-packaging==26.2
+packaging==26.3
     # via
     #   apispec
     #   build
@@ -131,11 +131,11 @@ pfzy==0.3.4
     # via inquirerpy
 pip-tools==7.6.1
     # via ro-crate-validation-service (pyproject.toml)
-platformdirs==4.10.0
+platformdirs==4.11.10
     # via requests-cache
 pluggy==1.6.0
     # via pytest
-prettytable==3.17.0
+prettytable==3.18.0
     # via pyshacl
 prompt-toolkit==3.0.53
     # via
@@ -145,24 +145,24 @@ py-partiql-parser==0.6.3
     # via moto
 pycparser==3.0
     # via cffi
-pydantic[email]==2.13.4
+pydantic[email]==2.13.5
     # via apiflask
-pydantic-core==2.46.4
+pydantic-core==2.49.0
     # via pydantic
-pygments==2.20.0
+pygments==2.21.0
     # via
     #   enum-tools
     #   pytest
     #   rich
 pyparsing==3.3.2
     # via rdflib
-pyproject-hooks==1.2.0
+pyproject-hooks==1.3.3
     # via
     #   build
     #   pip-tools
-pyshacl==0.31.0
+pyshacl==0.40.1
     # via roc-validator
-pytest==9.1.0
+pytest==9.1.1
     # via
     #   pytest-mock
     #   ro-crate-validation-service (pyproject.toml)
@@ -172,7 +172,7 @@ python-dateutil==2.9.0.post0
     # via
     #   botocore
     #   celery
-python-dotenv==1.2.2
+python-dotenv==1.2.3
     # via ro-crate-validation-service (pyproject.toml)
 pyyaml==6.0.3
     # via
@@ -194,36 +194,36 @@ requests==2.34.2
     #   roc-validator
 requests-cache==1.3.3
     # via roc-validator
-responses==0.26.2
+responses==0.26.3
     # via moto
-rich==13.9.4
+rich==15.0.0
     # via
     #   rich-click
     #   roc-validator
-rich-click==1.9.8
+rich-click==1.9.9
     # via roc-validator
 roc-validator==0.11.4
     # via ro-crate-validation-service (pyproject.toml)
-ruff==0.15.17
+ruff==0.16.8
     # via ro-crate-validation-service (pyproject.toml)
-s3transfer==0.18.0
+s3transfer==0.19.2
     # via boto3
 six==1.17.0
     # via python-dateutil
 toml==0.10.2
     # via roc-validator
-typing-extensions==4.15.0
+typing-extensions==4.16.0
     # via
     #   cattrs
     #   enum-tools
     #   pydantic
     #   pydantic-core
     #   typing-inspection
-typing-inspection==0.4.2
+typing-inspection==0.4.4
     # via pydantic
-tzdata==2026.2
+tzdata==2026.4
     # via kombu
-tzlocal==5.4.3
+tzlocal==5.4.4
     # via celery
 url-normalize==3.0.0
     # via requests-cache
@@ -238,7 +238,7 @@ vine==5.1.0
     #   amqp
     #   celery
     #   kombu
-wcwidth==0.8.1
+wcwidth==0.8.4
     # via
     #   prettytable
     #   prompt-toolkit
@@ -249,7 +249,7 @@ werkzeug==3.1.8
     #   flask
     #   moto
     #   ro-crate-validation-service (pyproject.toml)
-wheel==0.47.0
+wheel==0.48.0
     # via pip-tools
 xmltodict==1.0.4
     # via moto
diff --git a/requirements.txt b/requirements.txt
index aa5aa19..1632b82 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,35 +6,35 @@
 #
 amqp==5.3.1
     # via kombu
-annotated-types==0.7.0
+annotated-types==0.8.0
     # via pydantic
-apiflask==3.1.0
+apiflask==3.1.2
     # via ro-crate-validation-service (pyproject.toml)
-apispec==6.8.2
+apispec==6.10.0
     # via apiflask
 attrs==26.1.0
     # via
     #   cattrs
     #   requests-cache
-billiard==4.2.4
+billiard==4.3.0
     # via celery
 blinker==1.9.0
     # via flask
-boto3==1.43.29
+boto3==1.43.97
     # via ro-crate-validation-service (pyproject.toml)
 botocore==1.43.97
     # via
     #   boto3
     #   s3transfer
-cattrs==25.1.1
+cattrs==26.2.0
     # via requests-cache
 celery==5.6.3
     # via ro-crate-validation-service (pyproject.toml)
 certifi==2026.7.22
     # via requests
-charset-normalizer==3.4.2
+charset-normalizer==3.5.1
     # via requests
-click==8.2.1
+click==8.5.0
     # via
     #   celery
     #   click-didyoumean
@@ -47,7 +47,7 @@ click-didyoumean==0.3.1
     # via celery
 click-plugins==1.1.1.2
     # via celery
-click-repl==0.3.0
+click-repl==0.4.0
     # via celery
 colorlog==6.12.0
     # via roc-validator
@@ -55,7 +55,7 @@ dnspython==2.8.0
     # via email-validator
 email-validator==2.3.0
     # via pydantic
-enum-tools==0.12.0
+enum-tools==0.13.0
     # via roc-validator
 flask==3.1.3
     # via
@@ -69,12 +69,12 @@ flask-marshmallow==1.5.0
     # via apiflask
 html5rdf==1.2.1
     # via rdflib
-idna==3.15
+idna==3.20
     # via
     #   email-validator
     #   requests
     #   url-normalize
-importlib-metadata==9.0.0
+importlib-metadata==9.0.1
     # via pyshacl
 inquirerpy==0.3.4
     # via roc-validator
@@ -88,23 +88,23 @@ jmespath==1.1.0
     #   botocore
 kombu==5.6.2
     # via celery
-markdown-it-py==3.0.0
+markdown-it-py==4.2.0
     # via rich
 markupsafe==3.0.3
     # via
     #   flask
     #   jinja2
     #   werkzeug
-marshmallow==4.1.2
+marshmallow==4.3.1
     # via
     #   apiflask
     #   flask-marshmallow
     #   webargs
 mdurl==0.1.2
     # via markdown-it-py
-owlrl==7.1.4
+owlrl==7.6.2
     # via pyshacl
-packaging==26.2
+packaging==26.3
     # via
     #   apispec
     #   kombu
@@ -112,33 +112,33 @@ packaging==26.2
     #   webargs
 pfzy==0.3.4
     # via inquirerpy
-platformdirs==4.3.8
+platformdirs==4.11.10
     # via requests-cache
-prettytable==3.16.0
+prettytable==3.18.0
     # via pyshacl
 prompt-toolkit==3.0.53
     # via
     #   click-repl
     #   inquirerpy
-pydantic[email]==2.12.4
+pydantic[email]==2.13.5
     # via apiflask
-pydantic-core==2.41.5
+pydantic-core==2.49.0
     # via pydantic
-pygments==2.20.0
+pygments==2.21.0
     # via
     #   enum-tools
     #   rich
-pyparsing==3.2.3
+pyparsing==3.3.2
     # via rdflib
-pyshacl==0.30.1
+pyshacl==0.40.1
     # via roc-validator
 python-dateutil==2.9.0.post0
     # via
     #   botocore
     #   celery
-python-dotenv==1.2.2
+python-dotenv==1.2.3
     # via ro-crate-validation-service (pyproject.toml)
-rdflib[html]==7.1.4
+rdflib[html]==7.6.0
     # via
     #   owlrl
     #   pyshacl
@@ -152,21 +152,21 @@ requests==2.34.2
     #   roc-validator
 requests-cache==1.3.3
     # via roc-validator
-rich==13.9.4
+rich==15.0.0
     # via
     #   rich-click
     #   roc-validator
-rich-click==1.8.9
+rich-click==1.9.9
     # via roc-validator
 roc-validator==0.11.4
     # via ro-crate-validation-service (pyproject.toml)
-s3transfer==0.18.0
+s3transfer==0.19.2
     # via boto3
 six==1.17.0
     # via python-dateutil
 toml==0.10.2
     # via roc-validator
-typing-extensions==4.14.1
+typing-extensions==4.16.0
     # via
     #   cattrs
     #   enum-tools
@@ -174,13 +174,13 @@ typing-extensions==4.14.1
     #   pydantic-core
     #   rich-click
     #   typing-inspection
-typing-inspection==0.4.2
+typing-inspection==0.4.4
     # via pydantic
-tzdata==2025.2
+tzdata==2026.4
     # via kombu
-tzlocal==5.3.1
+tzlocal==5.4.4
     # via celery
-url-normalize==2.2.1
+url-normalize==3.0.0
     # via requests-cache
 urllib3==2.8.0
     # via
@@ -192,11 +192,11 @@ vine==5.1.0
     #   amqp
     #   celery
     #   kombu
-wcwidth==0.2.13
+wcwidth==0.8.4
     # via
     #   prettytable
     #   prompt-toolkit
-webargs==8.7.0
+webargs==8.7.1
     # via apiflask
 werkzeug==3.1.8
     # via

From 039575864b0fc64f1d2bb4a83a360b3583dc9e20 Mon Sep 17 00:00:00 2001
From: Douglas Lowe <10961945+douglowe@users.noreply.github.com>
Date: Tue, 22 Sep 2026 14:08:30 +0100
Subject: [PATCH 15/17] update GH workflows to match reqs

---
 .github/workflows/lint.yml        | 2 +-
 .github/workflows/test_docker.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 768dd8f..e0d505f 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -21,7 +21,7 @@ jobs:
         run: |
           python -m pip install --upgrade pip
           # Keep in sync with requirements-dev.txt
-          pip install ruff==0.15.17
+          pip install ruff==0.16.8
 
       - name: Lint
         run: ruff check .
diff --git a/.github/workflows/test_docker.yml b/.github/workflows/test_docker.yml
index 2bd6bc9..d63f8b1 100644
--- a/.github/workflows/test_docker.yml
+++ b/.github/workflows/test_docker.yml
@@ -21,7 +21,7 @@ jobs:
         run: |
           python -m pip install --upgrade pip
           # Keep in sync with requirements-dev.txt
-          pip install pytest==9.1.0 requests==2.34.2 boto3==1.43.29
+          pip install pytest==9.1.1 requests==2.34.2 boto3==1.43.97
 
       - name: Run integration tests (brings up the compose stack)
         run: |

From bd0111cbd9af6108df2b09425ebb51656accabae Mon Sep 17 00:00:00 2001
From: Douglas Lowe <10961945+douglowe@users.noreply.github.com>
Date: Tue, 22 Sep 2026 14:19:46 +0100
Subject: [PATCH 16/17] pip-compile update of requirements

Changes:
pydantic-core == 2.46.5 not 2.49.0 (to support pydantic package)
rich == 13.9.4 not 15.0.0
enum-tools == 0.12.0 not 0.13.0
async-timeout == 5.0.1 new for redis
---
 requirements-dev.txt | 11 +++++++----
 requirements.txt     | 12 +++++++-----
 2 files changed, 14 insertions(+), 9 deletions(-)

diff --git a/requirements-dev.txt b/requirements-dev.txt
index 72d7224..8fd0987 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -2,7 +2,7 @@
 # This file is autogenerated by pip-compile with Python 3.11
 # by the following command:
 #
-#    pip-compile --extra=dev --output-file=requirements-dev.txt pyproject.toml
+#    pip-compile --extra=dev --no-index --output-file=requirements-dev.txt
 #
 amqp==5.3.1
     # via kombu
@@ -12,6 +12,8 @@ apiflask==3.1.2
     # via ro-crate-validation-service (pyproject.toml)
 apispec==6.10.0
     # via apiflask
+async-timeout==5.0.1
+    # via redis
 attrs==26.1.0
     # via
     #   cattrs
@@ -65,7 +67,7 @@ dnspython==2.8.0
     # via email-validator
 email-validator==2.3.0
     # via pydantic
-enum-tools==0.13.0
+enum-tools==0.12.0
     # via roc-validator
 flask==3.1.3
     # via
@@ -147,7 +149,7 @@ pycparser==3.0
     # via cffi
 pydantic[email]==2.13.5
     # via apiflask
-pydantic-core==2.49.0
+pydantic-core==2.46.5
     # via pydantic
 pygments==2.21.0
     # via
@@ -196,7 +198,7 @@ requests-cache==1.3.3
     # via roc-validator
 responses==0.26.3
     # via moto
-rich==15.0.0
+rich==13.9.4
     # via
     #   rich-click
     #   roc-validator
@@ -215,6 +217,7 @@ toml==0.10.2
 typing-extensions==4.16.0
     # via
     #   cattrs
+    #   click-repl
     #   enum-tools
     #   pydantic
     #   pydantic-core
diff --git a/requirements.txt b/requirements.txt
index 1632b82..cab1a1c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,7 +2,7 @@
 # This file is autogenerated by pip-compile with Python 3.11
 # by the following command:
 #
-#    pip-compile --output-file=requirements.txt pyproject.toml
+#    pip-compile --no-index --output-file=requirements.txt
 #
 amqp==5.3.1
     # via kombu
@@ -12,6 +12,8 @@ apiflask==3.1.2
     # via ro-crate-validation-service (pyproject.toml)
 apispec==6.10.0
     # via apiflask
+async-timeout==5.0.1
+    # via redis
 attrs==26.1.0
     # via
     #   cattrs
@@ -55,7 +57,7 @@ dnspython==2.8.0
     # via email-validator
 email-validator==2.3.0
     # via pydantic
-enum-tools==0.13.0
+enum-tools==0.12.0
     # via roc-validator
 flask==3.1.3
     # via
@@ -122,7 +124,7 @@ prompt-toolkit==3.0.53
     #   inquirerpy
 pydantic[email]==2.13.5
     # via apiflask
-pydantic-core==2.49.0
+pydantic-core==2.46.5
     # via pydantic
 pygments==2.21.0
     # via
@@ -152,7 +154,7 @@ requests==2.34.2
     #   roc-validator
 requests-cache==1.3.3
     # via roc-validator
-rich==15.0.0
+rich==13.9.4
     # via
     #   rich-click
     #   roc-validator
@@ -169,10 +171,10 @@ toml==0.10.2
 typing-extensions==4.16.0
     # via
     #   cattrs
+    #   click-repl
     #   enum-tools
     #   pydantic
     #   pydantic-core
-    #   rich-click
     #   typing-inspection
 typing-inspection==0.4.4
     # via pydantic

From 54758c6db6b1b41bd58a579448f675cee5da4f68 Mon Sep 17 00:00:00 2001
From: Douglas Lowe <10961945+douglowe@users.noreply.github.com>
Date: Tue, 22 Sep 2026 14:28:41 +0100
Subject: [PATCH 17/17] remove async-timeout as provided in python 3.11+ now

---
 requirements-dev.txt | 2 --
 requirements.txt     | 2 --
 2 files changed, 4 deletions(-)

diff --git a/requirements-dev.txt b/requirements-dev.txt
index 8fd0987..d984ee4 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -12,8 +12,6 @@ apiflask==3.1.2
     # via ro-crate-validation-service (pyproject.toml)
 apispec==6.10.0
     # via apiflask
-async-timeout==5.0.1
-    # via redis
 attrs==26.1.0
     # via
     #   cattrs
diff --git a/requirements.txt b/requirements.txt
index cab1a1c..397703e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -12,8 +12,6 @@ apiflask==3.1.2
     # via ro-crate-validation-service (pyproject.toml)
 apispec==6.10.0
     # via apiflask
-async-timeout==5.0.1
-    # via redis
 attrs==26.1.0
     # via
     #   cattrs