Commit Graph

48 Commits

Author SHA1 Message Date
dependabot[bot]
80da9873da Bump pip-audit from 2.6.0 to 2.6.1
Bumps [pip-audit](https://github.com/pypa/pip-audit) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/pypa/pip-audit/releases)
- [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pypa/pip-audit/compare/v2.6.0...v2.6.1)

---
updated-dependencies:
- dependency-name: pip-audit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-25 00:02:56 +00:00
dependabot[bot]
a6c75d4123 Bump pytest-xdist from 2.5.0 to 3.3.1
Bumps [pytest-xdist](https://github.com/pytest-dev/pytest-xdist) from 2.5.0 to 3.3.1.
- [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-xdist/compare/v2.5.0...v3.3.1)

---
updated-dependencies:
- dependency-name: pytest-xdist
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-21 23:41:01 +00:00
dependabot[bot]
0eb91a4294 Bump prometheus-client from 0.14.1 to 0.17.1
Bumps [prometheus-client](https://github.com/prometheus/client_python) from 0.14.1 to 0.17.1.
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](https://github.com/prometheus/client_python/compare/v0.14.1...v0.17.1)

---
updated-dependencies:
- dependency-name: prometheus-client
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-18 19:12:36 +00:00
Steven Reilly
6138ae203b Upgrade dependencies with cryptography subdependency (#626)
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
Co-authored-by: Carlo Costino <carlo.costino@gsa.gov>
2023-07-18 14:53:54 -04:00
dependabot[bot]
69c1d87869 Bump pytest from 7.1.2 to 7.4.0
Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.1.2 to 7.4.0.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/7.1.2...7.4.0)

---
updated-dependencies:
- dependency-name: pytest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-10 23:43:40 +00:00
dependabot[bot]
62cd29aee5 Bump pytz from 2022.1 to 2023.3 (#606)
Bumps [pytz](https://github.com/stub42/pytz) from 2022.1 to 2023.3.
- [Commits](https://github.com/stub42/pytz/compare/release_2022.1...release_2023.3)

---
updated-dependencies:
- dependency-name: pytz
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-10 13:49:46 -04:00
dependabot[bot]
6a698fa389 Bump python-dotenv from 0.20.0 to 1.0.0 (#585)
Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 0.20.0 to 1.0.0.
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/theskumar/python-dotenv/compare/v0.20.0...v1.0.0)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-10 11:35:41 -04:00
dependabot[bot]
5c618ae807 Bump freezegun from 1.2.1 to 1.2.2
Bumps [freezegun](https://github.com/spulec/freezegun) from 1.2.1 to 1.2.2.
- [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG)
- [Commits](https://github.com/spulec/freezegun/commits)

---
updated-dependencies:
- dependency-name: freezegun
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-08 00:01:22 +00:00
Kenneth Kehl
c5ce43ef37 merge from main 2023-07-07 11:35:58 -07:00
Kenneth Kehl
e01eda1bd1 update 2023-07-07 11:30:07 -07:00
dependabot[bot]
3eed229a13 Bump moto from 3.1.7 to 4.1.12
Bumps [moto](https://github.com/getmoto/moto) from 3.1.7 to 4.1.12.
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getmoto/moto/compare/3.1.7...4.1.12)

---
updated-dependencies:
- dependency-name: moto
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-07 00:20:46 +00:00
dependabot[bot]
bae7d7efe2 Bump notifications-python-client from 6.3.0 to 8.0.1
Bumps [notifications-python-client](https://github.com/alphagov/notifications-python-client) from 6.3.0 to 8.0.1.
- [Changelog](https://github.com/alphagov/notifications-python-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/alphagov/notifications-python-client/compare/6.3.0...8.0.1)

---
updated-dependencies:
- dependency-name: notifications-python-client
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-06 21:25:35 +00:00
Kenneth Kehl
ad45d9f333 merge from main and point to main branch of notifications-utils 2023-07-06 13:27:06 -07:00
dependabot[bot]
c12f086865 Bump govuk-bank-holidays from 0.11 to 0.13
Bumps [govuk-bank-holidays](https://github.com/ministryofjustice/govuk-bank-holidays) from 0.11 to 0.13.
- [Release notes](https://github.com/ministryofjustice/govuk-bank-holidays/releases)
- [Commits](https://github.com/ministryofjustice/govuk-bank-holidays/compare/0.11...0.13)

---
updated-dependencies:
- dependency-name: govuk-bank-holidays
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-05 00:04:02 +00:00
Kenneth Kehl
b68b97943b Merge pull request #593 from GSA/dependabot/pip/requests-mock-1.11.0
Bump requests-mock from 1.10.0 to 1.11.0
2023-07-04 08:20:36 -07:00
Kenneth Kehl
b43b3539d4 Merge pull request #577 from GSA/dependabot/pip/werkzeug-2.3.6
Bump werkzeug from 2.3.4 to 2.3.6
2023-07-04 07:29:51 -07:00
dependabot[bot]
7a03a64d06 Bump requests-mock from 1.10.0 to 1.11.0
Bumps [requests-mock](https://github.com/jamielennox/requests-mock) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/jamielennox/requests-mock/releases)
- [Commits](https://github.com/jamielennox/requests-mock/compare/1.10.0...1.11.0)

---
updated-dependencies:
- dependency-name: requests-mock
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-30 23:52:55 +00:00
dependabot[bot]
90f343a2e4 Bump pyproj from 3.3.1 to 3.6.0
Bumps [pyproj](https://github.com/pyproj4/pyproj) from 3.3.1 to 3.6.0.
- [Release notes](https://github.com/pyproj4/pyproj/releases)
- [Changelog](https://github.com/pyproj4/pyproj/blob/main/docs/history.rst)
- [Commits](https://github.com/pyproj4/pyproj/compare/3.3.1...3.6.0)

---
updated-dependencies:
- dependency-name: pyproj
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-28 18:28:20 +00:00
dependabot[bot]
19f11dbd90 Bump beautifulsoup4 from 4.11.1 to 4.12.2
Bumps [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) from 4.11.1 to 4.12.2.

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-27 14:43:13 +00:00
dependabot[bot]
64b9cc12e7 Bump werkzeug from 2.3.4 to 2.3.6
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 2.3.4 to 2.3.6.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/2.3.4...2.3.6)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-27 14:43:08 +00:00
dependabot[bot]
46e68b2f37 Bump pytest-mock from 3.7.0 to 3.11.1
Bumps [pytest-mock](https://github.com/pytest-dev/pytest-mock) from 3.7.0 to 3.11.1.
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-mock/compare/v3.7.0...v3.11.1)

---
updated-dependencies:
- dependency-name: pytest-mock
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-27 00:14:27 +00:00
dependabot[bot]
295f301c19 Bump isort from 5.10.1 to 5.12.0
Bumps [isort](https://github.com/pycqa/isort) from 5.10.1 to 5.12.0.
- [Release notes](https://github.com/pycqa/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pycqa/isort/compare/5.10.1...5.12.0)

---
updated-dependencies:
- dependency-name: isort
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-26 17:37:05 +00:00
Kenneth Kehl
81e2f9b72b notify-512 use daily message limit from notification_utils 2023-06-19 10:10:22 -07:00
dependabot[bot]
ff350fee00 Bump cryptography from 40.0.2 to 41.0.0 (#532)
Bumps [cryptography](https://github.com/pyca/cryptography) from 40.0.2 to 41.0.0.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/40.0.2...41.0.0)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 11:59:55 -04:00
Kenneth Kehl
5a44d8ae40 merge from main 2023-05-26 07:45:53 -07:00
dependabot[bot]
6571b85556 Bump requests from 2.29.0 to 2.31.0 (#518)
Bumps [requests](https://github.com/psf/requests) from 2.29.0 to 2.31.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.29.0...v2.31.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-25 16:21:19 -04:00
Steven Reilly
3f44877c8b Bump flask & werkzeug to 2.3 (#490)
* bump werkzeug to 2.3
* remove no_cookie blueprint
2023-05-02 09:45:48 -04:00
Andrew Shumway
948ee68193 Added code coverage test to pipfile/makefile/workflow (#472)
Co-authored-by: stvnrlly <steven.reilly@gsa.gov>
2023-04-28 11:17:02 -04:00
Ryan Ahearn
4fc95a4e28 Update utils for improved logging 2023-04-26 15:31:06 -04:00
Ryan Ahearn
0120937777 Update dependencies 2023-03-29 16:55:18 -04:00
dependabot[bot]
8f754ab559 Bump redis from 4.5.1 to 4.5.3
Bumps [redis](https://github.com/redis/redis-py) from 4.5.1 to 4.5.3.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](https://github.com/redis/redis-py/compare/v4.5.1...v4.5.3)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-03-27 21:48:03 +00:00
Ryan Ahearn
e8e8c889d6 Add flask-talisman for security headers 2023-03-07 16:08:39 -05:00
dependabot[bot]
8aaa3665ed Bump markdown-it-py from 2.1.0 to 2.2.0
Bumps [markdown-it-py](https://github.com/executablebooks/markdown-it-py) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](https://github.com/executablebooks/markdown-it-py/compare/v2.1.0...v2.2.0)

---
updated-dependencies:
- dependency-name: markdown-it-py
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-23 20:08:58 +00:00
dependabot[bot]
c5405d44e1 Bump werkzeug from 2.2.2 to 2.2.3
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/2.2.2...2.2.3)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-16 07:35:35 +00:00
Ryan Ahearn
3ae078a976 Run pipenv update 2023-02-14 12:20:01 -05:00
Ryan Ahearn
a08ddd83bb Pin openpyxls to avoid bug between 3.1 and pyexcel-xlsx 2023-02-08 10:37:44 -05:00
dependabot[bot]
25e748ba9a Bump cryptography from 39.0.0 to 39.0.1
Bumps [cryptography](https://github.com/pyca/cryptography) from 39.0.0 to 39.0.1.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/39.0.0...39.0.1)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-08 05:29:22 +00:00
Ryan Ahearn
26092b577e Use main notifications-utils branch again 2023-01-26 10:36:15 -05:00
Ryan Ahearn
23f6f3c726 Report data to newrelic 2023-01-23 10:00:03 -05:00
Ryan Ahearn
7d08e9e0d4 Upgrade flask and install newrelic package 2023-01-19 17:29:21 -05:00
Ryan Ahearn
142b5f5e43 Update excel-based upload files 2023-01-06 11:47:57 -05:00
Ryan Ahearn
2ad21a6f4f Replace UK phone numbers in tests with US numbers 2023-01-06 11:19:56 -05:00
Ryan Ahearn
80d8c214d3 Update notifications-utils repo address 2022-12-13 11:59:52 -05:00
Ryan Ahearn
fbfbc5f4a7 Update development salt to match API side 2022-12-13 11:15:00 -05:00
stvnrlly
78777a71fb update notifications-utils pin 2022-12-09 12:48:08 -05:00
Ryan Ahearn
f3402f06f6 Use only stdout logging in cloud.gov 2022-11-30 17:28:26 -05:00
stvnrlly
46723b6c11 initial timezone pass, which breaks many tests 2022-11-22 12:00:29 -05:00
stvnrlly
e44fe2eb11 switch to pipenv 2022-11-08 09:44:09 -05:00