Commit Graph

239 Commits

Author SHA1 Message Date
Carlo Costino
1933dad137 Merge pull request #2063 from GSA/API-1328_Logging_Formatter_With_Scrub
API-1328 - Using a custom formatter to scrub PII from all log records.
2024-10-30 13:45:47 -04:00
Cliff Hill
452ab7eb86 Fixing dependency error.
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-30 09:36:22 -04:00
dependabot[bot]
70c95cdeb6 Bump werkzeug from 3.0.3 to 3.0.6
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.0.3 to 3.0.6.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/3.0.3...3.0.6)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-26 00:08:52 +00:00
dependabot[bot]
35d95e4f5c Bump coverage from 7.6.0 to 7.6.4
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.6.0 to 7.6.4.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.6.0...7.6.4)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-21 23:44:06 +00:00
alexjanousekGSA
e96aec9898 Merged in main, created reference images and added delay to screenshots 2024-10-02 11:16:30 -04:00
Carlo Costino
4f193e362c Add awscli tools to the admin
This changeset adds the awscli tools as a development dependency so that we are able to manage local connectivity to AWS resources when needed.  It is also needed to help with deploying the project to the sandbox environment and/or updating the Terraform to manage the infrastructure.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-09-30 10:13:12 -04:00
Kenneth Kehl
df85f66a43 fix import 2024-09-11 10:48:26 -07:00
Kenneth Kehl
a91d6d25c8 initial test axe-core 2024-09-11 10:39:28 -07:00
Carlo Costino
6e3db9d59a Merge pull request #1914 from GSA/dependabot/npm_and_yarn/sass-embedded-1.78.0
Bump sass-embedded from 1.77.8 to 1.78.0
2024-09-09 18:13:01 -04:00
Kenneth Kehl
749e4cc708 Merge pull request #1911 from GSA/notify-api-1301
start load test work
2024-09-09 09:21:48 -07:00
alexjanousekGSA
a2d542c726 Upgraded vul package 2024-09-09 12:05:00 -04:00
Carlo Costino
e3007f273e Update cryptography Python dependency
This changeset updates the Python cryptography package to the latest release to address a pip-audit finding.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-09-04 15:18:02 -04:00
Kenneth Kehl
c36561ee4d start load test work 2024-08-30 09:50:01 -07:00
Beverly Nguyen
b20c8ec909 Merge pull request #1901 from GSA/notify-admin-1877
set timezone automatically
2024-08-27 17:35:58 -07:00
Kenneth Kehl
77d49754c6 initial 2024-08-23 11:03:32 -07:00
dependabot[bot]
8c0fd48e06 Bump phonenumbers from 8.13.40 to 8.13.43
Bumps [phonenumbers](https://github.com/daviddrysdale/python-phonenumbers) from 8.13.40 to 8.13.43.
- [Commits](https://github.com/daviddrysdale/python-phonenumbers/compare/v8.13.40...v8.13.43)

---
updated-dependencies:
- dependency-name: phonenumbers
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-22 16:18:00 +00:00
Andrew Shumway
4f9f546f23 Merge pull request #1829 from GSA/dependabot/pip/boto3-1.34.156
Bump boto3 from 1.34.150 to 1.34.156
2024-08-22 10:16:06 -06:00
Kenneth Kehl
672fed7e4b initial 2024-08-19 10:57:08 -07:00
dependabot[bot]
6b236bfa0f Bump boto3 from 1.34.150 to 1.34.156
Bumps [boto3](https://github.com/boto/boto3) from 1.34.150 to 1.34.156.
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.34.150...1.34.156)

---
updated-dependencies:
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-19 16:32:56 +00:00
Andrew Shumway
b7a0dc2225 pull main 2024-08-16 10:59:40 -06:00
Andrew Shumway
6dc9efd13d Poetry lock 2024-08-16 10:59:14 -06:00
dependabot[bot]
847057b2a8 Bump redis from 5.0.7 to 5.0.8
Bumps [redis](https://github.com/redis/redis-py) from 5.0.7 to 5.0.8.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](https://github.com/redis/redis-py/compare/v5.0.7...v5.0.8)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-13 02:29:34 +00:00
Beverly Nguyen
6d09d44a84 removed flask-socketio 2024-08-12 13:38:29 -07:00
Kenneth Kehl
191b591ac0 merge from main 2024-08-09 11:40:44 -07:00
dependabot[bot]
3bafa48577 Bump botocore from 1.34.150 to 1.34.156
Bumps [botocore](https://github.com/boto/botocore) from 1.34.150 to 1.34.156.
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.34.150...1.34.156)

---
updated-dependencies:
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-08 16:39:07 +00:00
Kenneth Kehl
79786df09c merge from main 2024-08-02 14:29:46 -07:00
Beverly Nguyen
da33213730 Merge branch 'main' into 1484-dashboard-visualizations 2024-08-01 15:42:44 -07:00
Kenneth Kehl
a1180747d5 remove uk bank holidays 2024-07-31 08:17:29 -07:00
Jonathan Bobel
d12d2418a5 Addressing some PR comments 2024-07-31 10:25:59 -04:00
Carlo Costino
ae02972c6d Merge pull request #1783 from GSA/notify-admin-1690
try versioning-strategy
2024-07-29 17:57:02 -04:00
Carlo Costino
d42cadd3b1 Update Python dependencies - 7/30/24
This changeset updates several Python dependencies that Dependabot has flagged for updating.  This includes a major version bump of notifications-python-client, which is mostly just formatted string updates that should not have any adverse effects for us.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-29 17:39:27 -04:00
Kenneth Kehl
d3de0bb01d try versioning-strategy 2024-07-29 12:20:22 -07:00
Jonathan Bobel
dfcd71a6d3 Updates to table wrappers across the application
Grid update to dashboard
Small style updates
2024-07-25 15:36:31 -04:00
Kenneth Kehl
f7d0b728cd merge from main 2024-07-23 07:21:20 -07:00
Carlo Costino
ea4e9d1e0b Merge pull request #1747 from GSA/update-python-deps-7-22-24
Python dependency updates - 7/22/24
2024-07-22 17:36:08 -04:00
Carlo Costino
a08cf0ca44 Python dependency updates - 7/22/24
This changeset updates a few Python dependencies that Dependabot had flagged for updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-22 16:05:04 -04:00
John Skiles Skinner
b28ac059f9 Merge branch 'main' into 1682-update-remaining-outdated-npm-dependencies 2024-07-22 12:58:05 -07:00
Kenneth Kehl
d0d56ab5c4 merge from main 2024-07-16 10:52:05 -07:00
Kenneth Kehl
3922593e55 another tweak for session management 2024-07-16 10:10:23 -07:00
Carlo Costino
361b936857 Update Python dependencies - 7/16/24
This changeset updates several Python dependencies that were being picked up by Dependabot.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-16 11:32:08 -04:00
Alex Janousek
6f9b9ff467 Merge branch 'main' into 1682-update-remaining-outdated-npm-dependencies 2024-07-15 13:05:29 -06:00
Kenneth Kehl
8489fb9e61 update flake8-pytest-style-plugin 2024-07-15 08:07:18 -07:00
Kenneth Kehl
b50e90e6ee merge from main 2024-07-12 10:09:48 -07:00
Carlo Costino
94e8df0470 Update Python dependencies - 7/12/24 - and ignore idna pip-audit flag
This changeset updates several Python dependencies that Dependabot has flagged.

It also ignores a pip-audit report of idna, which incorrectly flagged the version we are on as having been affected by PYSEC-2024-60; this was fixed in version 3.7 of idna, which we are currently using.  We will update the action again once the audit flag is corrected and/or another fix version is released (if needed).

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-12 12:02:37 -04:00
Alex Janousek
baf8d2f821 Merge branch 'main' into 1682-update-remaining-outdated-npm-dependencies 2024-07-08 12:01:49 -06:00
alexjanousekGSA
34e08d9290 Updated gulp and replaced png logo with svg 2024-07-08 10:45:05 -06:00
alexjanousekGSA
e7c49f8bbb Removed unused file path 2024-07-08 09:58:25 -06:00
Carlo Costino
c80ec7e5fa Update Python Dependencies - 7/5/2024
This changeset updates several Python dependencies that Dependabot had flagged for updating.  It includes a few others that we are getting ahead of, as well.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-05 08:36:28 -04:00
Carlo Costino
cc6f60353f Update Python dependencies - 7/2/2024
This changeset updates several Python dependencies that Dependabot had flagged for updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-02 17:36:12 -04:00
Carlo Costino
b96a2dc935 Merge pull request #1686 from GSA/1460-update-the-lodash-js-library
Removed package that seems to be unused that caused a security concern
2024-07-02 16:57:28 -04:00