darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2025-12-08 22:24:22 -05:00
Code Issues Packages Projects Releases Wiki Activity
Files
2414b09c0ffd8059834b49ec1c75ba78cd234570
notifications-admin/pyproject.toml

102 lines
2.1 KiB
TOML
Raw Normal View History

switch from pipenv to poetry
2023-09-01 07:56:02 -07:00
[tool.poetry]
name = "notifications-admin"
version = "0.1.0"
description = ""
authors = ["Your Name <you@example.com>"]
readme = "README.md"
Update several recent dependencies This changeset updates several dependencies that Dependabot has flagged for us but cannot merge due to the E2E test bug with it. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-03 17:09:35 -04:00
package-mode = false
switch to pipenv
2022-11-08 09:44:09 -05:00
switch from pipenv to poetry
2023-09-01 07:56:02 -07:00
[tool.poetry.dependencies]
tests and orderedset updates for 3.12 upgrade
2024-03-08 15:00:48 -08:00
python = "^3.12.2"
Update utils for improved logging
2023-04-26 11:24:01 -04:00
ago = "~=0.0.95"
Bump beautifulsoup4 from 4.12.2 to 4.12.3 Bumps [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) from 4.12.2 to 4.12.3. --- updated-dependencies: - dependency-name: beautifulsoup4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2024-01-18 03:12:22 +00:00
beautifulsoup4 = "^4.12.3"
Update several dependencies from Dependabot This changeset updates a few dependencies that Dependabot flagged for updates. We cannot merge the Dependabot PRs at the moment due to E2E test compatability issues. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-07 09:56:34 -04:00
blinker = "~=1.8"
Update exceptiongroup and newrelic packages This changeset updates the exceptiongroup and newrelic packages due to the Dependabot E2E test failures Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-19 14:43:51 -04:00
exceptiongroup = "==1.2.1"
flask upgrade
2024-04-04 18:09:22 -07:00
flask = "~=3.0"
Update utils for improved logging
2023-04-26 11:24:01 -04:00
flask-basicauth = "~=0.2"
Updated dependencies and add make command This changeset updates several dependencies to address security audit findings and also adds a py-lock make command to make managing our Python dependencies more manageable. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-10-30 16:01:21 -04:00
flask-login = "^0.6"
flask-talisman = "*"
flask-wtf = "^1.2"
Update utils to 0.4.5 This changeset updates notifications-utils to 0.4.5, which includes a few minor fixes and several dependency updates. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-08 11:41:39 -04:00
govuk-bank-holidays = "^0.14"
Update gunicorn to latest release This changeset updates the gunicorn dependency to the latest release to address a recent CVE. It also updates the its-dangerous package. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-17 18:05:19 -04:00
gunicorn = {version = "==22.0.0", extras = ["eventlet"]}
Bump humanize from 4.8.0 to 4.9.0 Bumps [humanize](https://github.com/python-humanize/humanize) from 4.8.0 to 4.9.0. - [Release notes](https://github.com/python-humanize/humanize/releases) - [Commits](https://github.com/python-humanize/humanize/compare/4.8.0...4.9.0) --- updated-dependencies: - dependency-name: humanize dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2023-11-22 14:33:13 +00:00
humanize = "~=4.9"
Update gunicorn to latest release This changeset updates the gunicorn dependency to the latest release to address a recent CVE. It also updates the its-dangerous package. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-17 18:05:19 -04:00
itsdangerous = "~=2.2"
Update utils for improved logging
2023-04-26 11:24:01 -04:00
jinja2 = "~=3.1"
Updated dependencies and add make command This changeset updates several dependencies to address security audit findings and also adds a py-lock make command to make managing our Python dependencies more manageable. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-10-30 16:01:21 -04:00
newrelic = "*"
Update Python dependencies This changeset updates a few Python dependencies the week of May 28th to help keep our project up-to-date. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-28 12:11:53 -04:00
notifications-python-client = "==9.1.0"
switch to pipenv
2022-11-08 09:44:09 -05:00
pyexcel = "==0.7.0"
pyexcel-io = "==0.6.6"
pyexcel-ods3 = "==0.6.1"
pyexcel-xls = "==0.7.0"
pyexcel-xlsx = "==0.6.0"
Pin openpyxls to avoid bug between 3.1 and pyexcel-xlsx
2023-02-08 10:37:44 -05:00
openpyxl = "==3.0.10"
Bump pyproj from 3.6.0 to 3.6.1 Bumps [pyproj](https://github.com/pyproj4/pyproj) from 3.6.0 to 3.6.1. - [Release notes](https://github.com/pyproj4/pyproj/releases) - [Changelog](https://github.com/pyproj4/pyproj/blob/main/docs/history.rst) - [Commits](https://github.com/pyproj4/pyproj/compare/3.6.0...3.6.1) --- updated-dependencies: - dependency-name: pyproj dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2023-09-21 23:46:30 +00:00
pyproj = "==3.6.1"
Bump python-dotenv from 1.0.0 to 1.0.1 Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 1.0.0 to 1.0.1. - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.0.0...v1.0.1) --- updated-dependencies: - dependency-name: python-dotenv dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2024-01-24 18:34:27 +00:00
python-dotenv = "==1.0.1"
Update utils to 0.4.5 This changeset updates notifications-utils to 0.4.5, which includes a few minor fixes and several dependency updates. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-08 11:41:39 -04:00
pytz = "^2024.1"
switch to pipenv
2022-11-08 09:44:09 -05:00
rtreelib = "==0.2.0"
Updating several dependencies related to Flask upgrade Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-06 13:02:02 -04:00
werkzeug = "^3.0.3"
Bump wtforms from 3.0.1 to 3.1.1 Bumps [wtforms](https://github.com/wtforms/wtforms) from 3.0.1 to 3.1.1. - [Release notes](https://github.com/wtforms/wtforms/releases) - [Changelog](https://github.com/wtforms/wtforms/blob/master/CHANGES.rst) - [Commits](https://github.com/wtforms/wtforms/compare/3.0.1...3.1.1) --- updated-dependencies: - dependency-name: wtforms dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2023-11-02 16:31:49 +00:00
wtforms = "~=3.1"
Bump markdown from 3.5.1 to 3.5.2 Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.5.1 to 3.5.2. - [Release notes](https://github.com/Python-Markdown/markdown/releases) - [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md) - [Commits](https://github.com/Python-Markdown/markdown/compare/3.5.1...3.5.2) --- updated-dependencies: - dependency-name: markdown dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2024-01-11 00:06:38 +00:00
markdown = "^3.5.2"
Localize notification_utils to the admin This changeset pulls in all of the notification_utils code directly into the admin and removes it as an external dependency. We are doing this to cut down on operational maintenance of the project and will begin removing parts of it no longer needed for the admin. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-16 10:37:37 -04:00
async-timeout = "^4.0.3"
bleach = "^6.1.0"
Updated boto3 and botocore again Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-28 17:52:29 -04:00
boto3 = "^1.34.113"
Update admin repo dependencies This changeset updates several Python dependencies that Dependabot flagged for updates due to end-to-end tests still failing in Dependabot PRs. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-29 19:40:02 -04:00
botocore = "^1.34.115"
Localize notification_utils to the admin This changeset pulls in all of the notification_utils code directly into the admin and removes it as an external dependency. We are doing this to cut down on operational maintenance of the project and will begin removing parts of it no longer needed for the admin. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-16 10:37:37 -04:00
cachetools = "^5.3.3"
cffi = "^1.16.0"
cryptography = "^42.0.7"
flask-redis = "^0.4.0"
geojson = "^3.1.0"
jmespath = "^1.0.1"
mistune = "0.8.4"
numpy = "^1.26.4"
ordered-set = "^4.1.0"
This changeset updates our pre-commit hooks to help check for things in our code before we commit anything, such as code format and structure as well as sensitive information and credentials. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-20 12:04:25 -04:00
phonenumbers = "^8.13.37"
Localize notification_utils to the admin This changeset pulls in all of the notification_utils code directly into the admin and removes it as an external dependency. We are doing this to cut down on operational maintenance of the project and will begin removing parts of it no longer needed for the admin. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-16 10:37:37 -04:00
pycparser = "^2.22"
python-json-logger = "^2.0.7"
redis = "^5.0.4"
regex = "^2024.5.15"
s3transfer = "^0.10.1"
shapely = "^2.0.4"
smartypants = "^2.0.1"
Add missing dependencies The merging of notifications_utils to this repo does not deploy because of missing dependencies. This changeset adds them back in directly. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-17 18:13:09 -04:00
certifi = "^2024.2.2"
charset-normalizer = "^3.3.2"
click = "^8.1.7"
idna = "^3.7"
markupsafe = "^2.1.5"
python-dateutil = "^2.9.0.post0"
pyyaml = "^6.0.1"
Update admin repo dependencies This changeset updates several Python dependencies that Dependabot flagged for updates due to end-to-end tests still failing in Dependabot PRs. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-29 19:40:02 -04:00
requests = "^2.32.3"
Add missing dependencies The merging of notifications_utils to this repo does not deploy because of missing dependencies. This changeset adds them back in directly. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-17 18:13:09 -04:00
six = "^1.16.0"
urllib3 = "^2.2.1"
webencodings = "^0.5.1"
Updated dependencies and add make command This changeset updates several dependencies to address security audit findings and also adds a py-lock make command to make managing our Python dependencies more manageable. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-10-30 16:01:21 -04:00
switch to pipenv
2022-11-08 09:44:09 -05:00
switch from pipenv to poetry
2023-09-01 07:56:02 -07:00
[tool.poetry.group.dev.dependencies]
Updated dependencies and add make command This changeset updates several dependencies to address security audit findings and also adds a py-lock make command to make managing our Python dependencies more manageable. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-10-30 16:01:21 -04:00
bandit = "*"
Bump black from 23.12.1 to 24.2.0 Bumps [black](https://github.com/psf/black) from 23.12.1 to 24.2.0. - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](https://github.com/psf/black/compare/23.12.1...24.2.0) --- updated-dependencies: - dependency-name: black dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 16:35:56 +00:00
black = "^24.2.0"
Updated dependencies and add make command This changeset updates several dependencies to address security audit findings and also adds a py-lock make command to make managing our Python dependencies more manageable. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-10-30 16:01:21 -04:00
coverage = "*"
Update dependencies (05/14/2024) This changeset updates several dependencies flagged by Dependabot that we cannot merge directly due to the E2E test issue. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-14 15:42:08 -04:00
freezegun = "^1.5.1"
Bump flake8 from 6.1.0 to 7.0.0 Bumps [flake8](https://github.com/pycqa/flake8) from 6.1.0 to 7.0.0. - [Commits](https://github.com/pycqa/flake8/compare/6.1.0...7.0.0) --- updated-dependencies: - dependency-name: flake8 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 17:01:47 +00:00
flake8 = "^7.0.0"
Bump flake8-bugbear from 23.12.2 to 24.1.17 Bumps [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear) from 23.12.2 to 24.1.17. - [Release notes](https://github.com/PyCQA/flake8-bugbear/releases) - [Commits](https://github.com/PyCQA/flake8-bugbear/compare/23.12.2...24.1.17) --- updated-dependencies: - dependency-name: flake8-bugbear dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2024-01-17 23:43:06 +00:00
flake8-bugbear = "^24.1.17"
Updated dependencies and add make command This changeset updates several dependencies to address security audit findings and also adds a py-lock make command to make managing our Python dependencies more manageable. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-10-30 16:01:21 -04:00
flake8-print = "^5.0.0"
flake8-pytest-style = "^1.7.2"
Bump isort from 5.12.0 to 5.13.2 Bumps [isort](https://github.com/pycqa/isort) from 5.12.0 to 5.13.2. - [Release notes](https://github.com/pycqa/isort/releases) - [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md) - [Commits](https://github.com/pycqa/isort/compare/5.12.0...5.13.2) --- updated-dependencies: - dependency-name: isort dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2023-12-13 22:37:58 +00:00
isort = "^5.13.2"
switch to pipenv
2022-11-08 09:44:09 -05:00
jinja2-cli = {version = "==0.8.2", extras = ["yaml"]}
use moto to mock s3
2024-05-28 11:27:57 -07:00
moto="*"
switch to pipenv
2022-11-08 09:44:09 -05:00
pip-audit = "*"
Update dependencies (05/14/2024) This changeset updates several dependencies flagged by Dependabot that we cannot merge directly due to the E2E test issue. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-14 15:42:08 -04:00
pre-commit = "^3.7.1"
Updated several other dependencies This includes requests to take care of a Dependabot security alert. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-24 10:22:59 -04:00
pytest = "^8.2.1"
Bump pytest-env from 1.1.1 to 1.1.3 Bumps [pytest-env](https://github.com/pytest-dev/pytest-env) from 1.1.1 to 1.1.3. - [Release notes](https://github.com/pytest-dev/pytest-env/releases) - [Commits](https://github.com/pytest-dev/pytest-env/compare/1.1.1...1.1.3) --- updated-dependencies: - dependency-name: pytest-env dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2023-11-29 14:46:06 +00:00
pytest-env = "^1.1.3"
Update several recent dependencies This changeset updates several dependencies that Dependabot has flagged for us but cannot merge due to the E2E test bug with it. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-03 17:09:35 -04:00
pytest-mock = "^3.14.0"
Update several dependencies from Dependabot This changeset updates a few dependencies that Dependabot flagged for updates. We cannot merge the Dependabot PRs at the moment due to E2E test compatability issues. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-07 09:56:34 -04:00
pytest-playwright = "^0.5.0"
Bump pytest-xdist from 3.4.0 to 3.5.0 Bumps [pytest-xdist](https://github.com/pytest-dev/pytest-xdist) from 3.4.0 to 3.5.0. - [Release notes](https://github.com/pytest-dev/pytest-xdist/releases) - [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst) - [Commits](https://github.com/pytest-dev/pytest-xdist/compare/v3.4.0...v3.5.0) --- updated-dependencies: - dependency-name: pytest-xdist dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2023-11-22 14:15:17 +00:00
pytest-xdist = "^3.5.0"
Updated dependencies and add make command This changeset updates several dependencies to address security audit findings and also adds a py-lock make command to make managing our Python dependencies more manageable. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-10-30 16:01:21 -04:00
radon = "^6.0.1"
requests-mock = "^1.11.0"
Bump vulture from 2.10 to 2.11 Bumps [vulture](https://github.com/jendrikseipp/vulture) from 2.10 to 2.11. - [Release notes](https://github.com/jendrikseipp/vulture/releases) - [Changelog](https://github.com/jendrikseipp/vulture/blob/main/CHANGELOG.md) - [Commits](https://github.com/jendrikseipp/vulture/compare/v2.10...v2.11) --- updated-dependencies: - dependency-name: vulture dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 16:50:02 +00:00
vulture = "^2.11"
This changeset updates our pre-commit hooks to help check for things in our code before we commit anything, such as code format and structure as well as sensitive information and credentials. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-20 12:04:25 -04:00
detect-secrets = "^1.5.0"
notify-admin-338 login.gov integration
2023-11-02 14:10:22 -07:00
switch to pipenv
2022-11-08 09:44:09 -05:00
switch from pipenv to poetry
2023-09-01 07:56:02 -07:00
[build-system]
requires = ["poetry-core"]
Updated poetry.lock file Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-11-22 10:47:31 -05:00
build-backend = "poetry.core.masonry.api"
Reference in New Issue Copy Permalink