Commit Graph

17075 Commits

Author SHA1 Message Date
Alex Janousek
45ce6d8e8e Merge pull request #2623 from GSA/dependabot/pip/redis-6.2.0
Bump redis from 6.1.0 to 6.2.0
2025-05-29 05:42:18 -04:00
Beverly Nguyen
f824549e18 Merge pull request #2622 from GSA/ignore-redis-false-report
Updated pip-audit ignore-vulns
2025-05-28 17:49:19 -07:00
dependabot[bot]
dabba6b696 Bump redis from 6.1.0 to 6.2.0
Bumps [redis](https://github.com/redis/redis-py) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](https://github.com/redis/redis-py/compare/v6.1.0...v6.2.0)

---
updated-dependencies:
- dependency-name: redis
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-28 23:53:56 +00:00
Carlo Costino
ba0daeaf76 Updated pip-audit ignore-vulns
This changeset updates the PYSEC notices to ignore to due versions that either cannot be fixed or are false positives.  Specifically, this changeset removes previously ignored vulnerability reports and adds PYSEC-2023-312 to the list because it is a false positive and refers to Redis itself, not the Python Redis client (see https://github.com/pypa/advisory-database/issues/237 for details).

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-28 17:37:04 -04:00
Beverly Nguyen
9bd81fa314 Removed margin 2025-05-28 12:02:24 -07:00
Beverly Nguyen
f5690c3384 Added a "No results found" 2025-05-28 11:59:54 -07:00
Alex Janousek
e950e87ded Merge pull request #2620 from GSA/dependabot/npm_and_yarn/babel/core-7.27.3
Bump @babel/core from 7.27.1 to 7.27.3
2025-05-28 10:00:26 -04:00
Alex Janousek
32eb6c1e8f Merge pull request #2619 from GSA/dependabot/pip/pytest-mock-3.14.1
Bump pytest-mock from 3.14.0 to 3.14.1
2025-05-28 10:00:15 -04:00
Alex Janousek
39b9cc08a3 Merge pull request #2618 from GSA/dependabot/pip/moto-5.1.5
Bump moto from 5.1.4 to 5.1.5
2025-05-28 10:00:05 -04:00
dependabot[bot]
2d92038f53 Bump @babel/core from 7.27.1 to 7.27.3
Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.27.1 to 7.27.3.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.27.3/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 7.27.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 23:59:32 +00:00
dependabot[bot]
8aa074114e Bump pytest-mock from 3.14.0 to 3.14.1
Bumps [pytest-mock](https://github.com/pytest-dev/pytest-mock) from 3.14.0 to 3.14.1.
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-mock/compare/v3.14.0...v3.14.1)

---
updated-dependencies:
- dependency-name: pytest-mock
  dependency-version: 3.14.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 23:41:12 +00:00
dependabot[bot]
e1e9ba691b Bump moto from 5.1.4 to 5.1.5
Bumps [moto](https://github.com/getmoto/moto) from 5.1.4 to 5.1.5.
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getmoto/moto/compare/5.1.4...5.1.5)

---
updated-dependencies:
- dependency-name: moto
  dependency-version: 5.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 23:40:15 +00:00
Kenneth Kehl
665d7b543b upgrade poetry to 2.1.3 2025-05-27 12:44:28 -07:00
Kenneth Kehl
7ba4f3658e upgrade poetry to 2.1.3 2025-05-27 12:32:54 -07:00
Kenneth Kehl
0afc93958c upgrade poetry to 2.1.3 2025-05-27 12:25:52 -07:00
Kenneth Kehl
d27bc213d4 upgrade poetry to 2.1.3 2025-05-27 12:00:46 -07:00
Kenneth Kehl
589c01ed75 upgrade poetry to 2.1.3 2025-05-27 11:41:33 -07:00
Kenneth Kehl
29db4dcf4d upgrade poetry to 2.1.3 2025-05-27 11:34:11 -07:00
Alex Janousek
0ad1b09763 Merge pull request #2609 from GSA/dependabot/pip/cachetools-6.0.0
Bump cachetools from 5.5.2 to 6.0.0
2025-05-27 14:06:17 -04:00
dependabot[bot]
e8e971ed87 Bump cachetools from 5.5.2 to 6.0.0
Bumps [cachetools](https://github.com/tkem/cachetools) from 5.5.2 to 6.0.0.
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/tkem/cachetools/compare/v5.5.2...v6.0.0)

---
updated-dependencies:
- dependency-name: cachetools
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 18:00:16 +00:00
Alex Janousek
30785f022c Merge pull request #2612 from GSA/dependabot/pip/freezegun-1.5.2
Bump freezegun from 1.5.1 to 1.5.2
2025-05-27 13:58:15 -04:00
dependabot[bot]
776dabc750 Bump freezegun from 1.5.1 to 1.5.2
Bumps [freezegun](https://github.com/spulec/freezegun) from 1.5.1 to 1.5.2.
- [Release notes](https://github.com/spulec/freezegun/releases)
- [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG)
- [Commits](https://github.com/spulec/freezegun/compare/1.5.1...1.5.2)

---
updated-dependencies:
- dependency-name: freezegun
  dependency-version: 1.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 17:52:22 +00:00
Alex Janousek
8be4538dbe Merge pull request #2608 from GSA/dependabot/npm_and_yarn/uswds/uswds-3.13.0
Bump @uswds/uswds from 3.12.0 to 3.13.0
2025-05-27 13:50:52 -04:00
Alex Janousek
0ea2043796 Merge pull request #2613 from GSA/dependabot/pip/pytest-xdist-3.7.0
Bump pytest-xdist from 3.6.1 to 3.7.0
2025-05-27 13:50:15 -04:00
Alex Janousek
0f0a593998 Merge pull request #2610 from GSA/dependabot/pip/coverage-7.8.2
Bump coverage from 7.8.1 to 7.8.2
2025-05-27 12:51:19 -04:00
Alex Janousek
3924029211 Merge pull request #2614 from GSA/dependabot/npm_and_yarn/rollup-4.41.1
Bump rollup from 4.41.0 to 4.41.1
2025-05-27 12:49:37 -04:00
ccostino
69cd75b7c0 Merge pull request #2607 from GSA/e2e
fix the download report end to end test
2025-05-27 11:11:13 -04:00
Kenneth Kehl
1c048e140c merge from main 2025-05-27 08:03:29 -07:00
Kenneth Kehl
abf7f1b4c7 revert poetry.lock 2025-05-27 08:01:06 -07:00
dependabot[bot]
ef6eeb6e2e Bump pytest-xdist from 3.6.1 to 3.7.0
Bumps [pytest-xdist](https://github.com/pytest-dev/pytest-xdist) from 3.6.1 to 3.7.0.
- [Release notes](https://github.com/pytest-dev/pytest-xdist/releases)
- [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-xdist/compare/v3.6.1...v3.7.0)

---
updated-dependencies:
- dependency-name: pytest-xdist
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 14:50:12 +00:00
ccostino
134dde7899 Merge pull request #2611 from GSA/dependabot/pip/cryptography-45.0.3
Bump cryptography from 45.0.2 to 45.0.3
2025-05-27 10:48:08 -04:00
dependabot[bot]
9f647e5e81 Bump rollup from 4.41.0 to 4.41.1
Bumps [rollup](https://github.com/rollup/rollup) from 4.41.0 to 4.41.1.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.41.0...v4.41.1)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.41.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 00:02:39 +00:00
dependabot[bot]
99b1ad6af3 Bump cryptography from 45.0.2 to 45.0.3
Bumps [cryptography](https://github.com/pyca/cryptography) from 45.0.2 to 45.0.3.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/45.0.2...45.0.3)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 45.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-26 23:58:36 +00:00
dependabot[bot]
044dc90f6e Bump coverage from 7.8.1 to 7.8.2
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.8.1 to 7.8.2.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.8.1...7.8.2)

---
updated-dependencies:
- dependency-name: coverage
  dependency-version: 7.8.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-23 23:56:56 +00:00
dependabot[bot]
3286e87096 Bump @uswds/uswds from 3.12.0 to 3.13.0
Bumps [@uswds/uswds](https://github.com/uswds/uswds) from 3.12.0 to 3.13.0.
- [Release notes](https://github.com/uswds/uswds/releases)
- [Commits](https://github.com/uswds/uswds/compare/v3.12.0...v3.13.0)

---
updated-dependencies:
- dependency-name: "@uswds/uswds"
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-23 23:31:27 +00:00
Kenneth Kehl
40ece121b1 e2e 2025-05-23 11:07:30 -07:00
Kenneth Kehl
94c465f78c e2e 2025-05-23 10:51:13 -07:00
Alex Janousek
067a5efdc1 Merge pull request #2605 from GSA/dependabot/npm_and_yarn/uswds/compile-1.3.1
Bump @uswds/compile from 1.2.2 to 1.3.1
2025-05-23 12:51:55 -04:00
ccostino
db885d14ec Merge pull request #2594 from GSA/sheevdave-patch-2
Update manual_qa_template.yml
2025-05-23 10:48:03 -04:00
Carlo Costino
757803312d Tweaked a couple more of the steps to be in line with the current sign in/out flow
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-23 10:39:39 -04:00
dependabot[bot]
0ec9805bcc Bump @uswds/compile from 1.2.2 to 1.3.1
Bumps [@uswds/compile](https://github.com/uswds/uswds-compile) from 1.2.2 to 1.3.1.
- [Release notes](https://github.com/uswds/uswds-compile/releases)
- [Commits](https://github.com/uswds/uswds-compile/compare/v1.2.2...v1.3.1)

---
updated-dependencies:
- dependency-name: "@uswds/compile"
  dependency-version: 1.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-22 23:06:08 +00:00
ccostino
316e8d8807 Merge pull request #2598 from GSA/update_csp
updating csp and test
05/22/2025
2025-05-22 15:20:56 -04:00
Beverly Nguyen
790fe2d6f9 update csp using variables and testing 2025-05-22 12:03:18 -07:00
Alex Janousek
c2c57e72d5 Merge pull request #2597 from GSA/dependabot/pip/coverage-7.8.1
Bump coverage from 7.8.0 to 7.8.1
2025-05-22 07:37:35 -04:00
Beverly Nguyen
444800fbda flake8 2025-05-21 17:23:30 -07:00
Beverly Nguyen
cb2ad27d1c updating csp and test 2025-05-21 17:03:35 -07:00
dependabot[bot]
1cbcc0b150 Bump coverage from 7.8.0 to 7.8.1
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.8.0 to 7.8.1.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.8.0...7.8.1)

---
updated-dependencies:
- dependency-name: coverage
  dependency-version: 7.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-21 23:19:49 +00:00
Sheev Davé
cc6d820277 Merge pull request #2596 from GSA/typo-fixes
Clean up typos
2025-05-21 14:10:26 -07:00
Carlo Costino
206247f543 Clean up typos
This changeset cleans up a variety of typos that were found and submitted in PR #2588; we cannot directly accept external contributions, but we appreciate the flagging of things like this!

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-21 17:01:01 -04:00
Sheev Davé
6cc152c07c Update manual_qa_template.yml
Deleted 2FA directions since that's directly managed by login.gov
2025-05-21 13:06:03 -07:00