Alex Janousek
45ce6d8e8e
Merge pull request #2623 from GSA/dependabot/pip/redis-6.2.0
...
Bump redis from 6.1.0 to 6.2.0
2025-05-29 05:42:18 -04:00
Beverly Nguyen
f824549e18
Merge pull request #2622 from GSA/ignore-redis-false-report
...
Updated pip-audit ignore-vulns
2025-05-28 17:49:19 -07:00
dependabot[bot]
dabba6b696
Bump redis from 6.1.0 to 6.2.0
...
Bumps [redis](https://github.com/redis/redis-py ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/redis/redis-py/releases )
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES )
- [Commits](https://github.com/redis/redis-py/compare/v6.1.0...v6.2.0 )
---
updated-dependencies:
- dependency-name: redis
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-28 23:53:56 +00:00
Carlo Costino
ba0daeaf76
Updated pip-audit ignore-vulns
...
This changeset updates the PYSEC notices to ignore to due versions that either cannot be fixed or are false positives. Specifically, this changeset removes previously ignored vulnerability reports and adds PYSEC-2023-312 to the list because it is a false positive and refers to Redis itself, not the Python Redis client (see https://github.com/pypa/advisory-database/issues/237 for details).
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-05-28 17:37:04 -04:00
Beverly Nguyen
9bd81fa314
Removed margin
2025-05-28 12:02:24 -07:00
Beverly Nguyen
f5690c3384
Added a "No results found"
2025-05-28 11:59:54 -07:00
Alex Janousek
e950e87ded
Merge pull request #2620 from GSA/dependabot/npm_and_yarn/babel/core-7.27.3
...
Bump @babel/core from 7.27.1 to 7.27.3
2025-05-28 10:00:26 -04:00
Alex Janousek
32eb6c1e8f
Merge pull request #2619 from GSA/dependabot/pip/pytest-mock-3.14.1
...
Bump pytest-mock from 3.14.0 to 3.14.1
2025-05-28 10:00:15 -04:00
Alex Janousek
39b9cc08a3
Merge pull request #2618 from GSA/dependabot/pip/moto-5.1.5
...
Bump moto from 5.1.4 to 5.1.5
2025-05-28 10:00:05 -04:00
dependabot[bot]
2d92038f53
Bump @babel/core from 7.27.1 to 7.27.3
...
Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core ) from 7.27.1 to 7.27.3.
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.27.3/packages/babel-core )
---
updated-dependencies:
- dependency-name: "@babel/core"
dependency-version: 7.27.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 23:59:32 +00:00
dependabot[bot]
8aa074114e
Bump pytest-mock from 3.14.0 to 3.14.1
...
Bumps [pytest-mock](https://github.com/pytest-dev/pytest-mock ) from 3.14.0 to 3.14.1.
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases )
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest-mock/compare/v3.14.0...v3.14.1 )
---
updated-dependencies:
- dependency-name: pytest-mock
dependency-version: 3.14.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 23:41:12 +00:00
dependabot[bot]
e1e9ba691b
Bump moto from 5.1.4 to 5.1.5
...
Bumps [moto](https://github.com/getmoto/moto ) from 5.1.4 to 5.1.5.
- [Release notes](https://github.com/getmoto/moto/releases )
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md )
- [Commits](https://github.com/getmoto/moto/compare/5.1.4...5.1.5 )
---
updated-dependencies:
- dependency-name: moto
dependency-version: 5.1.5
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 23:40:15 +00:00
Kenneth Kehl
665d7b543b
upgrade poetry to 2.1.3
2025-05-27 12:44:28 -07:00
Kenneth Kehl
7ba4f3658e
upgrade poetry to 2.1.3
2025-05-27 12:32:54 -07:00
Kenneth Kehl
0afc93958c
upgrade poetry to 2.1.3
2025-05-27 12:25:52 -07:00
Kenneth Kehl
d27bc213d4
upgrade poetry to 2.1.3
2025-05-27 12:00:46 -07:00
Kenneth Kehl
589c01ed75
upgrade poetry to 2.1.3
2025-05-27 11:41:33 -07:00
Kenneth Kehl
29db4dcf4d
upgrade poetry to 2.1.3
2025-05-27 11:34:11 -07:00
Alex Janousek
0ad1b09763
Merge pull request #2609 from GSA/dependabot/pip/cachetools-6.0.0
...
Bump cachetools from 5.5.2 to 6.0.0
2025-05-27 14:06:17 -04:00
dependabot[bot]
e8e971ed87
Bump cachetools from 5.5.2 to 6.0.0
...
Bumps [cachetools](https://github.com/tkem/cachetools ) from 5.5.2 to 6.0.0.
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/tkem/cachetools/compare/v5.5.2...v6.0.0 )
---
updated-dependencies:
- dependency-name: cachetools
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 18:00:16 +00:00
Alex Janousek
30785f022c
Merge pull request #2612 from GSA/dependabot/pip/freezegun-1.5.2
...
Bump freezegun from 1.5.1 to 1.5.2
2025-05-27 13:58:15 -04:00
dependabot[bot]
776dabc750
Bump freezegun from 1.5.1 to 1.5.2
...
Bumps [freezegun](https://github.com/spulec/freezegun ) from 1.5.1 to 1.5.2.
- [Release notes](https://github.com/spulec/freezegun/releases )
- [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG )
- [Commits](https://github.com/spulec/freezegun/compare/1.5.1...1.5.2 )
---
updated-dependencies:
- dependency-name: freezegun
dependency-version: 1.5.2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 17:52:22 +00:00
Alex Janousek
8be4538dbe
Merge pull request #2608 from GSA/dependabot/npm_and_yarn/uswds/uswds-3.13.0
...
Bump @uswds/uswds from 3.12.0 to 3.13.0
2025-05-27 13:50:52 -04:00
Alex Janousek
0ea2043796
Merge pull request #2613 from GSA/dependabot/pip/pytest-xdist-3.7.0
...
Bump pytest-xdist from 3.6.1 to 3.7.0
2025-05-27 13:50:15 -04:00
Alex Janousek
0f0a593998
Merge pull request #2610 from GSA/dependabot/pip/coverage-7.8.2
...
Bump coverage from 7.8.1 to 7.8.2
2025-05-27 12:51:19 -04:00
Alex Janousek
3924029211
Merge pull request #2614 from GSA/dependabot/npm_and_yarn/rollup-4.41.1
...
Bump rollup from 4.41.0 to 4.41.1
2025-05-27 12:49:37 -04:00
ccostino
69cd75b7c0
Merge pull request #2607 from GSA/e2e
...
fix the download report end to end test
2025-05-27 11:11:13 -04:00
Kenneth Kehl
1c048e140c
merge from main
2025-05-27 08:03:29 -07:00
Kenneth Kehl
abf7f1b4c7
revert poetry.lock
2025-05-27 08:01:06 -07:00
dependabot[bot]
ef6eeb6e2e
Bump pytest-xdist from 3.6.1 to 3.7.0
...
Bumps [pytest-xdist](https://github.com/pytest-dev/pytest-xdist ) from 3.6.1 to 3.7.0.
- [Release notes](https://github.com/pytest-dev/pytest-xdist/releases )
- [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest-xdist/compare/v3.6.1...v3.7.0 )
---
updated-dependencies:
- dependency-name: pytest-xdist
dependency-version: 3.7.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 14:50:12 +00:00
ccostino
134dde7899
Merge pull request #2611 from GSA/dependabot/pip/cryptography-45.0.3
...
Bump cryptography from 45.0.2 to 45.0.3
2025-05-27 10:48:08 -04:00
dependabot[bot]
9f647e5e81
Bump rollup from 4.41.0 to 4.41.1
...
Bumps [rollup](https://github.com/rollup/rollup ) from 4.41.0 to 4.41.1.
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v4.41.0...v4.41.1 )
---
updated-dependencies:
- dependency-name: rollup
dependency-version: 4.41.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 00:02:39 +00:00
dependabot[bot]
99b1ad6af3
Bump cryptography from 45.0.2 to 45.0.3
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 45.0.2 to 45.0.3.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/45.0.2...45.0.3 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 45.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-26 23:58:36 +00:00
dependabot[bot]
044dc90f6e
Bump coverage from 7.8.1 to 7.8.2
...
Bumps [coverage](https://github.com/nedbat/coveragepy ) from 7.8.1 to 7.8.2.
- [Release notes](https://github.com/nedbat/coveragepy/releases )
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst )
- [Commits](https://github.com/nedbat/coveragepy/compare/7.8.1...7.8.2 )
---
updated-dependencies:
- dependency-name: coverage
dependency-version: 7.8.2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-23 23:56:56 +00:00
dependabot[bot]
3286e87096
Bump @uswds/uswds from 3.12.0 to 3.13.0
...
Bumps [@uswds/uswds](https://github.com/uswds/uswds ) from 3.12.0 to 3.13.0.
- [Release notes](https://github.com/uswds/uswds/releases )
- [Commits](https://github.com/uswds/uswds/compare/v3.12.0...v3.13.0 )
---
updated-dependencies:
- dependency-name: "@uswds/uswds"
dependency-version: 3.13.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-23 23:31:27 +00:00
Kenneth Kehl
40ece121b1
e2e
2025-05-23 11:07:30 -07:00
Kenneth Kehl
94c465f78c
e2e
2025-05-23 10:51:13 -07:00
Alex Janousek
067a5efdc1
Merge pull request #2605 from GSA/dependabot/npm_and_yarn/uswds/compile-1.3.1
...
Bump @uswds/compile from 1.2.2 to 1.3.1
2025-05-23 12:51:55 -04:00
ccostino
db885d14ec
Merge pull request #2594 from GSA/sheevdave-patch-2
...
Update manual_qa_template.yml
2025-05-23 10:48:03 -04:00
Carlo Costino
757803312d
Tweaked a couple more of the steps to be in line with the current sign in/out flow
...
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-05-23 10:39:39 -04:00
dependabot[bot]
0ec9805bcc
Bump @uswds/compile from 1.2.2 to 1.3.1
...
Bumps [@uswds/compile](https://github.com/uswds/uswds-compile ) from 1.2.2 to 1.3.1.
- [Release notes](https://github.com/uswds/uswds-compile/releases )
- [Commits](https://github.com/uswds/uswds-compile/compare/v1.2.2...v1.3.1 )
---
updated-dependencies:
- dependency-name: "@uswds/compile"
dependency-version: 1.3.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-22 23:06:08 +00:00
ccostino
316e8d8807
Merge pull request #2598 from GSA/update_csp
...
updating csp and test
05/22/2025
2025-05-22 15:20:56 -04:00
Beverly Nguyen
790fe2d6f9
update csp using variables and testing
2025-05-22 12:03:18 -07:00
Alex Janousek
c2c57e72d5
Merge pull request #2597 from GSA/dependabot/pip/coverage-7.8.1
...
Bump coverage from 7.8.0 to 7.8.1
2025-05-22 07:37:35 -04:00
Beverly Nguyen
444800fbda
flake8
2025-05-21 17:23:30 -07:00
Beverly Nguyen
cb2ad27d1c
updating csp and test
2025-05-21 17:03:35 -07:00
dependabot[bot]
1cbcc0b150
Bump coverage from 7.8.0 to 7.8.1
...
Bumps [coverage](https://github.com/nedbat/coveragepy ) from 7.8.0 to 7.8.1.
- [Release notes](https://github.com/nedbat/coveragepy/releases )
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst )
- [Commits](https://github.com/nedbat/coveragepy/compare/7.8.0...7.8.1 )
---
updated-dependencies:
- dependency-name: coverage
dependency-version: 7.8.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-21 23:19:49 +00:00
Sheev Davé
cc6d820277
Merge pull request #2596 from GSA/typo-fixes
...
Clean up typos
2025-05-21 14:10:26 -07:00
Carlo Costino
206247f543
Clean up typos
...
This changeset cleans up a variety of typos that were found and submitted in PR #2588 ; we cannot directly accept external contributions, but we appreciate the flagging of things like this!
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-05-21 17:01:01 -04:00
Sheev Davé
6cc152c07c
Update manual_qa_template.yml
...
Deleted 2FA directions since that's directly managed by login.gov
2025-05-21 13:06:03 -07:00