Commit Graph

231 Commits

Author SHA1 Message Date
Carlo Costino
6e3db9d59a Merge pull request #1914 from GSA/dependabot/npm_and_yarn/sass-embedded-1.78.0
Bump sass-embedded from 1.77.8 to 1.78.0
2024-09-09 18:13:01 -04:00
Kenneth Kehl
749e4cc708 Merge pull request #1911 from GSA/notify-api-1301
start load test work
2024-09-09 09:21:48 -07:00
alexjanousekGSA
a2d542c726 Upgraded vul package 2024-09-09 12:05:00 -04:00
Carlo Costino
e3007f273e Update cryptography Python dependency
This changeset updates the Python cryptography package to the latest release to address a pip-audit finding.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-09-04 15:18:02 -04:00
Kenneth Kehl
c36561ee4d start load test work 2024-08-30 09:50:01 -07:00
Beverly Nguyen
b20c8ec909 Merge pull request #1901 from GSA/notify-admin-1877
set timezone automatically
2024-08-27 17:35:58 -07:00
Kenneth Kehl
77d49754c6 initial 2024-08-23 11:03:32 -07:00
dependabot[bot]
8c0fd48e06 Bump phonenumbers from 8.13.40 to 8.13.43
Bumps [phonenumbers](https://github.com/daviddrysdale/python-phonenumbers) from 8.13.40 to 8.13.43.
- [Commits](https://github.com/daviddrysdale/python-phonenumbers/compare/v8.13.40...v8.13.43)

---
updated-dependencies:
- dependency-name: phonenumbers
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-22 16:18:00 +00:00
Andrew Shumway
4f9f546f23 Merge pull request #1829 from GSA/dependabot/pip/boto3-1.34.156
Bump boto3 from 1.34.150 to 1.34.156
2024-08-22 10:16:06 -06:00
Kenneth Kehl
672fed7e4b initial 2024-08-19 10:57:08 -07:00
dependabot[bot]
6b236bfa0f Bump boto3 from 1.34.150 to 1.34.156
Bumps [boto3](https://github.com/boto/boto3) from 1.34.150 to 1.34.156.
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.34.150...1.34.156)

---
updated-dependencies:
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-19 16:32:56 +00:00
Andrew Shumway
b7a0dc2225 pull main 2024-08-16 10:59:40 -06:00
Andrew Shumway
6dc9efd13d Poetry lock 2024-08-16 10:59:14 -06:00
dependabot[bot]
847057b2a8 Bump redis from 5.0.7 to 5.0.8
Bumps [redis](https://github.com/redis/redis-py) from 5.0.7 to 5.0.8.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](https://github.com/redis/redis-py/compare/v5.0.7...v5.0.8)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-13 02:29:34 +00:00
Beverly Nguyen
6d09d44a84 removed flask-socketio 2024-08-12 13:38:29 -07:00
Kenneth Kehl
191b591ac0 merge from main 2024-08-09 11:40:44 -07:00
dependabot[bot]
3bafa48577 Bump botocore from 1.34.150 to 1.34.156
Bumps [botocore](https://github.com/boto/botocore) from 1.34.150 to 1.34.156.
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.34.150...1.34.156)

---
updated-dependencies:
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-08 16:39:07 +00:00
Kenneth Kehl
79786df09c merge from main 2024-08-02 14:29:46 -07:00
Beverly Nguyen
da33213730 Merge branch 'main' into 1484-dashboard-visualizations 2024-08-01 15:42:44 -07:00
Kenneth Kehl
a1180747d5 remove uk bank holidays 2024-07-31 08:17:29 -07:00
Jonathan Bobel
d12d2418a5 Addressing some PR comments 2024-07-31 10:25:59 -04:00
Carlo Costino
ae02972c6d Merge pull request #1783 from GSA/notify-admin-1690
try versioning-strategy
2024-07-29 17:57:02 -04:00
Carlo Costino
d42cadd3b1 Update Python dependencies - 7/30/24
This changeset updates several Python dependencies that Dependabot has flagged for updating.  This includes a major version bump of notifications-python-client, which is mostly just formatted string updates that should not have any adverse effects for us.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-29 17:39:27 -04:00
Kenneth Kehl
d3de0bb01d try versioning-strategy 2024-07-29 12:20:22 -07:00
Jonathan Bobel
dfcd71a6d3 Updates to table wrappers across the application
Grid update to dashboard
Small style updates
2024-07-25 15:36:31 -04:00
Kenneth Kehl
f7d0b728cd merge from main 2024-07-23 07:21:20 -07:00
Carlo Costino
ea4e9d1e0b Merge pull request #1747 from GSA/update-python-deps-7-22-24
Python dependency updates - 7/22/24
2024-07-22 17:36:08 -04:00
Carlo Costino
a08cf0ca44 Python dependency updates - 7/22/24
This changeset updates a few Python dependencies that Dependabot had flagged for updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-22 16:05:04 -04:00
John Skiles Skinner
b28ac059f9 Merge branch 'main' into 1682-update-remaining-outdated-npm-dependencies 2024-07-22 12:58:05 -07:00
Kenneth Kehl
d0d56ab5c4 merge from main 2024-07-16 10:52:05 -07:00
Kenneth Kehl
3922593e55 another tweak for session management 2024-07-16 10:10:23 -07:00
Carlo Costino
361b936857 Update Python dependencies - 7/16/24
This changeset updates several Python dependencies that were being picked up by Dependabot.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-16 11:32:08 -04:00
Alex Janousek
6f9b9ff467 Merge branch 'main' into 1682-update-remaining-outdated-npm-dependencies 2024-07-15 13:05:29 -06:00
Kenneth Kehl
8489fb9e61 update flake8-pytest-style-plugin 2024-07-15 08:07:18 -07:00
Kenneth Kehl
b50e90e6ee merge from main 2024-07-12 10:09:48 -07:00
Carlo Costino
94e8df0470 Update Python dependencies - 7/12/24 - and ignore idna pip-audit flag
This changeset updates several Python dependencies that Dependabot has flagged.

It also ignores a pip-audit report of idna, which incorrectly flagged the version we are on as having been affected by PYSEC-2024-60; this was fixed in version 3.7 of idna, which we are currently using.  We will update the action again once the audit flag is corrected and/or another fix version is released (if needed).

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-12 12:02:37 -04:00
Alex Janousek
baf8d2f821 Merge branch 'main' into 1682-update-remaining-outdated-npm-dependencies 2024-07-08 12:01:49 -06:00
alexjanousekGSA
34e08d9290 Updated gulp and replaced png logo with svg 2024-07-08 10:45:05 -06:00
alexjanousekGSA
e7c49f8bbb Removed unused file path 2024-07-08 09:58:25 -06:00
Carlo Costino
c80ec7e5fa Update Python Dependencies - 7/5/2024
This changeset updates several Python dependencies that Dependabot had flagged for updating.  It includes a few others that we are getting ahead of, as well.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-05 08:36:28 -04:00
Carlo Costino
cc6f60353f Update Python dependencies - 7/2/2024
This changeset updates several Python dependencies that Dependabot had flagged for updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-02 17:36:12 -04:00
Carlo Costino
b96a2dc935 Merge pull request #1686 from GSA/1460-update-the-lodash-js-library
Removed package that seems to be unused that caused a security concern
2024-07-02 16:57:28 -04:00
alexjanousekGSA
feb879be53 Removed package that seems to be unused that caused a security concern 2024-07-02 10:49:09 -06:00
Kenneth Kehl
0c097c6592 more debug 2024-07-01 10:53:21 -07:00
Carlo Costino
1f42dbdd63 Merge branch 'main' into notify-admin-1495 2024-06-28 11:01:13 -04:00
Carlo Costino
b9b2495af1 Updated several other Python dependencies
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-06-28 10:57:50 -04:00
Carlo Costino
137e2a5683 Updated the flake8 dependency and poetry.lock file
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-06-28 10:49:00 -04:00
Kenneth Kehl
f890635f24 merge from main 2024-06-20 12:57:15 -07:00
Kenneth Kehl
87c3efd312 switch to 3.12.3 2024-06-20 12:37:11 -07:00
Kenneth Kehl
5429af16d4 pin python to 3.12.2 2024-06-20 10:45:22 -07:00