ccostino
69c8bbc6b7
Merge pull request #2615 from GSA/poetry
...
upgrade poetry to 2.1.3
5-30-2025
2025-05-30 11:50:27 -04:00
Carlo Costino
6a606a467e
Update bootstrap-with-git-hooks command
...
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-05-30 11:06:45 -04:00
ccostino
3d44e76383
Update .github/workflows/checks.yml
...
Removing extraneous vulnerability ignore config.
2025-05-30 10:57:24 -04:00
Kenneth Kehl
038f4e294a
merge from main
2025-05-29 14:46:02 -07:00
Beverly Nguyen
9aa7138902
Merge pull request #2621 from GSA/2562-search-name-and-email-within-team-settings
...
Improving the UX on the team members page
2025-05-29 14:01:36 -07:00
Beverly Nguyen
86cd481786
Merge pull request #2625 from GSA/ui_issue
...
fix ui spacing
2025-05-29 14:00:54 -07:00
Beverly Nguyen
b3e09219a8
fix test
2025-05-29 13:02:48 -07:00
Beverly Nguyen
31293557ef
-Previously, the template would show nothing if a user didn't have a name set. Now it falls back to displaying the email address.
...
-Added padding-x-2 class to the "Change details"
2025-05-29 12:17:59 -07:00
Kenneth Kehl
3fe74bea54
add exclusion
2025-05-29 11:25:01 -07:00
Kenneth Kehl
6aa84305f6
code review feedback
2025-05-29 11:19:22 -07:00
Kenneth Kehl
06f0eaa3c7
change to padding class
2025-05-29 10:38:37 -07:00
Beverly Nguyen
5c927d009b
Merge branch 'main' into 2562-search-name-and-email-within-team-settings
2025-05-29 09:51:59 -07:00
Alex Janousek
bbd19bb513
Merge pull request #2624 from GSA/dependabot/pip/phonenumbers-9.0.6
...
Bump phonenumbers from 9.0.5 to 9.0.6
2025-05-29 12:36:33 -04:00
Kenneth Kehl
8b2139727e
add README comments about poetry upgrades
2025-05-29 08:49:38 -07:00
Kenneth Kehl
e95740b52b
fix ui spacing
2025-05-29 07:14:32 -07:00
dependabot[bot]
bb90f81571
Bump phonenumbers from 9.0.5 to 9.0.6
...
Bumps [phonenumbers](https://github.com/daviddrysdale/python-phonenumbers ) from 9.0.5 to 9.0.6.
- [Commits](https://github.com/daviddrysdale/python-phonenumbers/compare/v9.0.5...v9.0.6 )
---
updated-dependencies:
- dependency-name: phonenumbers
dependency-version: 9.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-29 09:44:21 +00:00
Alex Janousek
45ce6d8e8e
Merge pull request #2623 from GSA/dependabot/pip/redis-6.2.0
...
Bump redis from 6.1.0 to 6.2.0
2025-05-29 05:42:18 -04:00
Beverly Nguyen
f824549e18
Merge pull request #2622 from GSA/ignore-redis-false-report
...
Updated pip-audit ignore-vulns
2025-05-28 17:49:19 -07:00
dependabot[bot]
dabba6b696
Bump redis from 6.1.0 to 6.2.0
...
Bumps [redis](https://github.com/redis/redis-py ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/redis/redis-py/releases )
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES )
- [Commits](https://github.com/redis/redis-py/compare/v6.1.0...v6.2.0 )
---
updated-dependencies:
- dependency-name: redis
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-28 23:53:56 +00:00
Carlo Costino
ba0daeaf76
Updated pip-audit ignore-vulns
...
This changeset updates the PYSEC notices to ignore to due versions that either cannot be fixed or are false positives. Specifically, this changeset removes previously ignored vulnerability reports and adds PYSEC-2023-312 to the list because it is a false positive and refers to Redis itself, not the Python Redis client (see https://github.com/pypa/advisory-database/issues/237 for details).
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-05-28 17:37:04 -04:00
Beverly Nguyen
9bd81fa314
Removed margin
2025-05-28 12:02:24 -07:00
Beverly Nguyen
f5690c3384
Added a "No results found"
2025-05-28 11:59:54 -07:00
Alex Janousek
e950e87ded
Merge pull request #2620 from GSA/dependabot/npm_and_yarn/babel/core-7.27.3
...
Bump @babel/core from 7.27.1 to 7.27.3
2025-05-28 10:00:26 -04:00
Alex Janousek
32eb6c1e8f
Merge pull request #2619 from GSA/dependabot/pip/pytest-mock-3.14.1
...
Bump pytest-mock from 3.14.0 to 3.14.1
2025-05-28 10:00:15 -04:00
Alex Janousek
39b9cc08a3
Merge pull request #2618 from GSA/dependabot/pip/moto-5.1.5
...
Bump moto from 5.1.4 to 5.1.5
2025-05-28 10:00:05 -04:00
dependabot[bot]
2d92038f53
Bump @babel/core from 7.27.1 to 7.27.3
...
Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core ) from 7.27.1 to 7.27.3.
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.27.3/packages/babel-core )
---
updated-dependencies:
- dependency-name: "@babel/core"
dependency-version: 7.27.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 23:59:32 +00:00
dependabot[bot]
8aa074114e
Bump pytest-mock from 3.14.0 to 3.14.1
...
Bumps [pytest-mock](https://github.com/pytest-dev/pytest-mock ) from 3.14.0 to 3.14.1.
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases )
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest-mock/compare/v3.14.0...v3.14.1 )
---
updated-dependencies:
- dependency-name: pytest-mock
dependency-version: 3.14.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 23:41:12 +00:00
dependabot[bot]
e1e9ba691b
Bump moto from 5.1.4 to 5.1.5
...
Bumps [moto](https://github.com/getmoto/moto ) from 5.1.4 to 5.1.5.
- [Release notes](https://github.com/getmoto/moto/releases )
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md )
- [Commits](https://github.com/getmoto/moto/compare/5.1.4...5.1.5 )
---
updated-dependencies:
- dependency-name: moto
dependency-version: 5.1.5
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 23:40:15 +00:00
Kenneth Kehl
665d7b543b
upgrade poetry to 2.1.3
2025-05-27 12:44:28 -07:00
Kenneth Kehl
7ba4f3658e
upgrade poetry to 2.1.3
2025-05-27 12:32:54 -07:00
Kenneth Kehl
0afc93958c
upgrade poetry to 2.1.3
2025-05-27 12:25:52 -07:00
Kenneth Kehl
d27bc213d4
upgrade poetry to 2.1.3
2025-05-27 12:00:46 -07:00
Kenneth Kehl
589c01ed75
upgrade poetry to 2.1.3
2025-05-27 11:41:33 -07:00
Kenneth Kehl
29db4dcf4d
upgrade poetry to 2.1.3
2025-05-27 11:34:11 -07:00
Alex Janousek
0ad1b09763
Merge pull request #2609 from GSA/dependabot/pip/cachetools-6.0.0
...
Bump cachetools from 5.5.2 to 6.0.0
2025-05-27 14:06:17 -04:00
dependabot[bot]
e8e971ed87
Bump cachetools from 5.5.2 to 6.0.0
...
Bumps [cachetools](https://github.com/tkem/cachetools ) from 5.5.2 to 6.0.0.
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/tkem/cachetools/compare/v5.5.2...v6.0.0 )
---
updated-dependencies:
- dependency-name: cachetools
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 18:00:16 +00:00
Alex Janousek
30785f022c
Merge pull request #2612 from GSA/dependabot/pip/freezegun-1.5.2
...
Bump freezegun from 1.5.1 to 1.5.2
2025-05-27 13:58:15 -04:00
dependabot[bot]
776dabc750
Bump freezegun from 1.5.1 to 1.5.2
...
Bumps [freezegun](https://github.com/spulec/freezegun ) from 1.5.1 to 1.5.2.
- [Release notes](https://github.com/spulec/freezegun/releases )
- [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG )
- [Commits](https://github.com/spulec/freezegun/compare/1.5.1...1.5.2 )
---
updated-dependencies:
- dependency-name: freezegun
dependency-version: 1.5.2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 17:52:22 +00:00
Alex Janousek
8be4538dbe
Merge pull request #2608 from GSA/dependabot/npm_and_yarn/uswds/uswds-3.13.0
...
Bump @uswds/uswds from 3.12.0 to 3.13.0
2025-05-27 13:50:52 -04:00
Alex Janousek
0ea2043796
Merge pull request #2613 from GSA/dependabot/pip/pytest-xdist-3.7.0
...
Bump pytest-xdist from 3.6.1 to 3.7.0
2025-05-27 13:50:15 -04:00
Alex Janousek
0f0a593998
Merge pull request #2610 from GSA/dependabot/pip/coverage-7.8.2
...
Bump coverage from 7.8.1 to 7.8.2
2025-05-27 12:51:19 -04:00
Alex Janousek
3924029211
Merge pull request #2614 from GSA/dependabot/npm_and_yarn/rollup-4.41.1
...
Bump rollup from 4.41.0 to 4.41.1
2025-05-27 12:49:37 -04:00
ccostino
69cd75b7c0
Merge pull request #2607 from GSA/e2e
...
fix the download report end to end test
2025-05-27 11:11:13 -04:00
Kenneth Kehl
1c048e140c
merge from main
2025-05-27 08:03:29 -07:00
Kenneth Kehl
abf7f1b4c7
revert poetry.lock
2025-05-27 08:01:06 -07:00
dependabot[bot]
ef6eeb6e2e
Bump pytest-xdist from 3.6.1 to 3.7.0
...
Bumps [pytest-xdist](https://github.com/pytest-dev/pytest-xdist ) from 3.6.1 to 3.7.0.
- [Release notes](https://github.com/pytest-dev/pytest-xdist/releases )
- [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest-xdist/compare/v3.6.1...v3.7.0 )
---
updated-dependencies:
- dependency-name: pytest-xdist
dependency-version: 3.7.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 14:50:12 +00:00
ccostino
134dde7899
Merge pull request #2611 from GSA/dependabot/pip/cryptography-45.0.3
...
Bump cryptography from 45.0.2 to 45.0.3
2025-05-27 10:48:08 -04:00
dependabot[bot]
9f647e5e81
Bump rollup from 4.41.0 to 4.41.1
...
Bumps [rollup](https://github.com/rollup/rollup ) from 4.41.0 to 4.41.1.
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v4.41.0...v4.41.1 )
---
updated-dependencies:
- dependency-name: rollup
dependency-version: 4.41.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-27 00:02:39 +00:00
dependabot[bot]
99b1ad6af3
Bump cryptography from 45.0.2 to 45.0.3
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 45.0.2 to 45.0.3.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/45.0.2...45.0.3 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 45.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-26 23:58:36 +00:00
dependabot[bot]
044dc90f6e
Bump coverage from 7.8.1 to 7.8.2
...
Bumps [coverage](https://github.com/nedbat/coveragepy ) from 7.8.1 to 7.8.2.
- [Release notes](https://github.com/nedbat/coveragepy/releases )
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst )
- [Commits](https://github.com/nedbat/coveragepy/compare/7.8.1...7.8.2 )
---
updated-dependencies:
- dependency-name: coverage
dependency-version: 7.8.2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-23 23:56:56 +00:00