[Snyk] Security upgrade fiona from 1.9.6 to 1.10b2 (#388) #445

	name: Docker-based Testing Suite

	on:
	push:
	branches:
	- master
	pull_request:

	concurrency:
	# For a given workflow, if we push to the same branch, cancel all previous builds on that branch except on master.
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}

	permissions:
	contents: read

	jobs:
	build:
	name: Build and Test Docker image
	runs-on: ubuntu-latest
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
	with:
	disable-sudo: true
	egress-policy: block
	allowed-endpoints: >
	auth.docker.io:443
	conda.anaconda.org:443
	github.com:443
	production.cloudflare.docker.com:443
	pypi.org:443
	registry-1.docker.io:443
	- name: Checkout Repository
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
	- name: Build Docker image (no push)
	uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0
	with:
	context: .
	file: "Dockerfile"
	tags: localfinch:latest
	load: true
	cache-from: type=gha
	cache-to: type=gha,mode=max
	push: false
	- name: Run Docker image
	uses: addnab/docker-run-action@4f65fabd2431ebc8d299f8e5a018d79a769ae185 # v3
	with:
	image: localfinch:latest
	options: -p 5000:5000
	run: \|
	finch start -d
	sleep 2s
	finch status
	finch stop

Provide feedback