Updated dependencies and add make command

This changeset updates several dependencies to address security audit findings and also adds a py-lock make command to make managing our Python dependencies more manageable.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This commit is contained in:
Carlo Costino
2023-10-30 16:01:21 -04:00
parent f31a78cbcd
commit 88f0715b2c
3 changed files with 55 additions and 728 deletions

View File

@@ -8,21 +8,22 @@ readme = "README.md"
[tool.poetry.dependencies]
python = "^3.9"
ago = "~=0.0.95"
black = "==23.9.1"
blinker = "~=1.6"
exceptiongroup = "==1.1.3"
flask = "~=2.3"
flask-basicauth = "~=0.2"
flask-login = "~=0.6"
flask-wtf = "~=1.2"
poetry = "==1.6.1"
flask-login = "^0.6"
flask-talisman = "*"
flask-wtf = "^1.2"
govuk-bank-holidays = "==0.13"
govuk-frontend-jinja = {git = "https://github.com/alphagov/govuk-frontend-jinja.git", tag = "v0.5.8-alpha"}
gunicorn = {version = "==21.2.0", extras = ["eventlet"]}
humanize = "~=4.8"
itsdangerous = "~=2.1"
jinja2 = "~=3.1"
newrelic = "*"
notifications-python-client = "==8.0.1"
notifications-utils = {git = "https://github.com/GSA/notifications-utils.git", develop = true, branch = "main"}
pyexcel = "==0.7.0"
pyexcel-io = "==0.6.6"
pyexcel-ods3 = "==0.6.1"
@@ -33,33 +34,33 @@ pyproj = "==3.6.1"
python-dotenv = "==1.0.0"
pytz = "==2023.3.post1"
rtreelib = "==0.2.0"
werkzeug = "~=2.3"
werkzeug = "^3.0.1"
wtforms = "~=3.0"
newrelic = "*"
flask-talisman = "*"
notifications-utils = {git = "https://github.com/GSA/notifications-utils.git", develop = true, branch = "main"}
coverage = "*"
vulture = "==2.10"
radon = "==6.0.1"
[tool.poetry.group.dev.dependencies]
isort = "~5.12.0"
pytest = "~7.4.2"
pytest-env = "~1.0.1"
pytest-mock = "~3.11.1"
pytest-playwright = "~0.4.3"
pytest-xdist = "~3.3.1"
beautifulsoup4 = "==4.12.2"
freezegun = "==1.2.2"
flake8 = "~6.1.0"
flake8-bugbear = "~23.9.16"
flake8-print = "~5.0.0"
flake8-pytest-style = "~1.7.2"
moto = "~4.2"
requests-mock = "==1.11.0"
jinja2-cli = {version = "==0.8.2", extras = ["yaml"]}
pip-audit = "*"
bandit = "*"
beautifulsoup4 = "==4.12.2"
black = "^23.10.1"
coverage = "*"
freezegun = "==1.2.2"
flake8 = "^6.1.0"
flake8-bugbear = "~23.9.16"
flake8-print = "^5.0.0"
flake8-pytest-style = "^1.7.2"
isort = "^5.12.0"
jinja2-cli = {version = "==0.8.2", extras = ["yaml"]}
moto = "^4.2"
pip-audit = "*"
pytest = "^7.4.2"
pytest-env = "^1.0.1"
pytest-mock = "^3.11.1"
pytest-playwright = "^0.4.3"
pytest-xdist = "^3.3.1"
radon = "^6.0.1"
requests-mock = "^1.11.0"
vulture = "^2.10"
[build-system]
requires = ["poetry-core"]