Commit Graph

17041 Commits

Author SHA1 Message Date
ccostino
69c8bbc6b7 Merge pull request #2615 from GSA/poetry
upgrade poetry to 2.1.3
5-30-2025
2025-05-30 11:50:27 -04:00
Carlo Costino
6a606a467e Update bootstrap-with-git-hooks command
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-30 11:06:45 -04:00
ccostino
3d44e76383 Update .github/workflows/checks.yml
Removing extraneous vulnerability ignore config.
2025-05-30 10:57:24 -04:00
Kenneth Kehl
038f4e294a merge from main 2025-05-29 14:46:02 -07:00
Beverly Nguyen
9aa7138902 Merge pull request #2621 from GSA/2562-search-name-and-email-within-team-settings
Improving the UX on the team members page
2025-05-29 14:01:36 -07:00
Beverly Nguyen
86cd481786 Merge pull request #2625 from GSA/ui_issue
fix ui spacing
2025-05-29 14:00:54 -07:00
Beverly Nguyen
b3e09219a8 fix test 2025-05-29 13:02:48 -07:00
Beverly Nguyen
31293557ef -Previously, the template would show nothing if a user didn't have a name set. Now it falls back to displaying the email address.
-Added padding-x-2 class to the "Change details"
2025-05-29 12:17:59 -07:00
Kenneth Kehl
3fe74bea54 add exclusion 2025-05-29 11:25:01 -07:00
Kenneth Kehl
6aa84305f6 code review feedback 2025-05-29 11:19:22 -07:00
Kenneth Kehl
06f0eaa3c7 change to padding class 2025-05-29 10:38:37 -07:00
Beverly Nguyen
5c927d009b Merge branch 'main' into 2562-search-name-and-email-within-team-settings 2025-05-29 09:51:59 -07:00
Alex Janousek
bbd19bb513 Merge pull request #2624 from GSA/dependabot/pip/phonenumbers-9.0.6
Bump phonenumbers from 9.0.5 to 9.0.6
2025-05-29 12:36:33 -04:00
Kenneth Kehl
8b2139727e add README comments about poetry upgrades 2025-05-29 08:49:38 -07:00
Kenneth Kehl
e95740b52b fix ui spacing 2025-05-29 07:14:32 -07:00
dependabot[bot]
bb90f81571 Bump phonenumbers from 9.0.5 to 9.0.6
Bumps [phonenumbers](https://github.com/daviddrysdale/python-phonenumbers) from 9.0.5 to 9.0.6.
- [Commits](https://github.com/daviddrysdale/python-phonenumbers/compare/v9.0.5...v9.0.6)

---
updated-dependencies:
- dependency-name: phonenumbers
  dependency-version: 9.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-29 09:44:21 +00:00
Alex Janousek
45ce6d8e8e Merge pull request #2623 from GSA/dependabot/pip/redis-6.2.0
Bump redis from 6.1.0 to 6.2.0
2025-05-29 05:42:18 -04:00
Beverly Nguyen
f824549e18 Merge pull request #2622 from GSA/ignore-redis-false-report
Updated pip-audit ignore-vulns
2025-05-28 17:49:19 -07:00
dependabot[bot]
dabba6b696 Bump redis from 6.1.0 to 6.2.0
Bumps [redis](https://github.com/redis/redis-py) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](https://github.com/redis/redis-py/compare/v6.1.0...v6.2.0)

---
updated-dependencies:
- dependency-name: redis
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-28 23:53:56 +00:00
Carlo Costino
ba0daeaf76 Updated pip-audit ignore-vulns
This changeset updates the PYSEC notices to ignore to due versions that either cannot be fixed or are false positives.  Specifically, this changeset removes previously ignored vulnerability reports and adds PYSEC-2023-312 to the list because it is a false positive and refers to Redis itself, not the Python Redis client (see https://github.com/pypa/advisory-database/issues/237 for details).

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-28 17:37:04 -04:00
Beverly Nguyen
9bd81fa314 Removed margin 2025-05-28 12:02:24 -07:00
Beverly Nguyen
f5690c3384 Added a "No results found" 2025-05-28 11:59:54 -07:00
Alex Janousek
e950e87ded Merge pull request #2620 from GSA/dependabot/npm_and_yarn/babel/core-7.27.3
Bump @babel/core from 7.27.1 to 7.27.3
2025-05-28 10:00:26 -04:00
Alex Janousek
32eb6c1e8f Merge pull request #2619 from GSA/dependabot/pip/pytest-mock-3.14.1
Bump pytest-mock from 3.14.0 to 3.14.1
2025-05-28 10:00:15 -04:00
Alex Janousek
39b9cc08a3 Merge pull request #2618 from GSA/dependabot/pip/moto-5.1.5
Bump moto from 5.1.4 to 5.1.5
2025-05-28 10:00:05 -04:00
dependabot[bot]
2d92038f53 Bump @babel/core from 7.27.1 to 7.27.3
Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.27.1 to 7.27.3.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.27.3/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 7.27.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 23:59:32 +00:00
dependabot[bot]
8aa074114e Bump pytest-mock from 3.14.0 to 3.14.1
Bumps [pytest-mock](https://github.com/pytest-dev/pytest-mock) from 3.14.0 to 3.14.1.
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-mock/compare/v3.14.0...v3.14.1)

---
updated-dependencies:
- dependency-name: pytest-mock
  dependency-version: 3.14.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 23:41:12 +00:00
dependabot[bot]
e1e9ba691b Bump moto from 5.1.4 to 5.1.5
Bumps [moto](https://github.com/getmoto/moto) from 5.1.4 to 5.1.5.
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getmoto/moto/compare/5.1.4...5.1.5)

---
updated-dependencies:
- dependency-name: moto
  dependency-version: 5.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 23:40:15 +00:00
Kenneth Kehl
665d7b543b upgrade poetry to 2.1.3 2025-05-27 12:44:28 -07:00
Kenneth Kehl
7ba4f3658e upgrade poetry to 2.1.3 2025-05-27 12:32:54 -07:00
Kenneth Kehl
0afc93958c upgrade poetry to 2.1.3 2025-05-27 12:25:52 -07:00
Kenneth Kehl
d27bc213d4 upgrade poetry to 2.1.3 2025-05-27 12:00:46 -07:00
Kenneth Kehl
589c01ed75 upgrade poetry to 2.1.3 2025-05-27 11:41:33 -07:00
Kenneth Kehl
29db4dcf4d upgrade poetry to 2.1.3 2025-05-27 11:34:11 -07:00
Alex Janousek
0ad1b09763 Merge pull request #2609 from GSA/dependabot/pip/cachetools-6.0.0
Bump cachetools from 5.5.2 to 6.0.0
2025-05-27 14:06:17 -04:00
dependabot[bot]
e8e971ed87 Bump cachetools from 5.5.2 to 6.0.0
Bumps [cachetools](https://github.com/tkem/cachetools) from 5.5.2 to 6.0.0.
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/tkem/cachetools/compare/v5.5.2...v6.0.0)

---
updated-dependencies:
- dependency-name: cachetools
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 18:00:16 +00:00
Alex Janousek
30785f022c Merge pull request #2612 from GSA/dependabot/pip/freezegun-1.5.2
Bump freezegun from 1.5.1 to 1.5.2
2025-05-27 13:58:15 -04:00
dependabot[bot]
776dabc750 Bump freezegun from 1.5.1 to 1.5.2
Bumps [freezegun](https://github.com/spulec/freezegun) from 1.5.1 to 1.5.2.
- [Release notes](https://github.com/spulec/freezegun/releases)
- [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG)
- [Commits](https://github.com/spulec/freezegun/compare/1.5.1...1.5.2)

---
updated-dependencies:
- dependency-name: freezegun
  dependency-version: 1.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 17:52:22 +00:00
Alex Janousek
8be4538dbe Merge pull request #2608 from GSA/dependabot/npm_and_yarn/uswds/uswds-3.13.0
Bump @uswds/uswds from 3.12.0 to 3.13.0
2025-05-27 13:50:52 -04:00
Alex Janousek
0ea2043796 Merge pull request #2613 from GSA/dependabot/pip/pytest-xdist-3.7.0
Bump pytest-xdist from 3.6.1 to 3.7.0
2025-05-27 13:50:15 -04:00
Alex Janousek
0f0a593998 Merge pull request #2610 from GSA/dependabot/pip/coverage-7.8.2
Bump coverage from 7.8.1 to 7.8.2
2025-05-27 12:51:19 -04:00
Alex Janousek
3924029211 Merge pull request #2614 from GSA/dependabot/npm_and_yarn/rollup-4.41.1
Bump rollup from 4.41.0 to 4.41.1
2025-05-27 12:49:37 -04:00
ccostino
69cd75b7c0 Merge pull request #2607 from GSA/e2e
fix the download report end to end test
2025-05-27 11:11:13 -04:00
Kenneth Kehl
1c048e140c merge from main 2025-05-27 08:03:29 -07:00
Kenneth Kehl
abf7f1b4c7 revert poetry.lock 2025-05-27 08:01:06 -07:00
dependabot[bot]
ef6eeb6e2e Bump pytest-xdist from 3.6.1 to 3.7.0
Bumps [pytest-xdist](https://github.com/pytest-dev/pytest-xdist) from 3.6.1 to 3.7.0.
- [Release notes](https://github.com/pytest-dev/pytest-xdist/releases)
- [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-xdist/compare/v3.6.1...v3.7.0)

---
updated-dependencies:
- dependency-name: pytest-xdist
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 14:50:12 +00:00
ccostino
134dde7899 Merge pull request #2611 from GSA/dependabot/pip/cryptography-45.0.3
Bump cryptography from 45.0.2 to 45.0.3
2025-05-27 10:48:08 -04:00
dependabot[bot]
9f647e5e81 Bump rollup from 4.41.0 to 4.41.1
Bumps [rollup](https://github.com/rollup/rollup) from 4.41.0 to 4.41.1.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.41.0...v4.41.1)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.41.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-27 00:02:39 +00:00
dependabot[bot]
99b1ad6af3 Bump cryptography from 45.0.2 to 45.0.3
Bumps [cryptography](https://github.com/pyca/cryptography) from 45.0.2 to 45.0.3.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/45.0.2...45.0.3)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 45.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-26 23:58:36 +00:00
dependabot[bot]
044dc90f6e Bump coverage from 7.8.1 to 7.8.2
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.8.1 to 7.8.2.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.8.1...7.8.2)

---
updated-dependencies:
- dependency-name: coverage
  dependency-version: 7.8.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-23 23:56:56 +00:00