Commit Graph

64 Commits

Author SHA1 Message Date
Carlo Costino
9e609efa1c Remove webauthn hooks
This changeset removes webauthn from the Notify.gov admin app.  We are not using webauthn at all in our implementation and will be looking at an entirely different authentication system in the near future.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-08-14 16:59:38 -04:00
dependabot[bot]
e4dad627df Bump newrelic from 8.9.0 to 8.10.0
Bumps [newrelic](https://github.com/newrelic/newrelic-python-agent) from 8.9.0 to 8.10.0.
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](https://github.com/newrelic/newrelic-python-agent/compare/v8.9.0...v8.10.0)

---
updated-dependencies:
- dependency-name: newrelic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-10 23:43:29 +00:00
Carlo Costino
15745475b9 Update Playwright as a dev dependency
This changeset updates Playwright to the latest release.  It also modifies it to be correctly identified as a dev dependency with all of the other pytest packages.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-08-08 15:26:11 -04:00
dependabot[bot]
0188bf1cf2 Bump flake8 from 6.0.0 to 6.1.0
Bumps [flake8](https://github.com/pycqa/flake8) from 6.0.0 to 6.1.0.
- [Commits](https://github.com/pycqa/flake8/compare/6.0.0...6.1.0)

---
updated-dependencies:
- dependency-name: flake8
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-03 15:55:17 +00:00
Carlo Costino
6972290064 Updated Pipfile.lock with missing dev dependencies
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-08-03 09:58:57 -04:00
stvnrlly
8438c59064 include dev dependencies in update 2023-08-02 17:01:30 -04:00
stvnrlly
9dc81b101b update pipfile 2023-08-02 09:43:57 -04:00
Carlo Costino
b5664c3d20 Add support for E2E (end-to-end) tests (#625)
This changeset lays the foundation for supporting E2E (end-to-end) integration tests for US Notify.  It brings in the Playwright testing framework along with the Playwright pytest plugin to make this possible, and includes the following adjustments:

- A new test session fixture for ensuring that Playwright authenticates with the sites that are currently behind HTTP Auth (requies env-var config)
- A new end_to_end test directory specifically for E2E tests
- Updates to the Makefile that make sure E2E tests are not run as a part of the normal test routine but can be run separately
- A new command in the Makefile to run E2E tests that will run in Chromium, Firefox, and Webkit headless browsers

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-07-28 09:31:45 -04:00
dependabot[bot]
4aaf73ca7a Bump flake8-bugbear from 23.3.12 to 23.7.10
Bumps [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear) from 23.3.12 to 23.7.10.
- [Release notes](https://github.com/PyCQA/flake8-bugbear/releases)
- [Commits](https://github.com/PyCQA/flake8-bugbear/compare/23.3.12...23.7.10)

---
updated-dependencies:
- dependency-name: flake8-bugbear
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-26 23:38:55 +00:00
Kenneth Kehl
f188dea3cd fix flake8 2023-07-26 10:58:53 -07:00
dependabot[bot]
6d9b60042a Bump flake8 from 4.0.1 to 6.0.0
Bumps [flake8](https://github.com/pycqa/flake8) from 4.0.1 to 6.0.0.
- [Commits](https://github.com/pycqa/flake8/compare/4.0.1...6.0.0)

---
updated-dependencies:
- dependency-name: flake8
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-26 17:18:28 +00:00
Kenneth Kehl
3a463737c7 merge from main and resolve 2023-07-26 09:20:05 -07:00
Kenneth Kehl
559ed217e4 fix test 2023-07-26 09:09:06 -07:00
Kenneth Kehl
dc342385ce notify-admin-641 let platform admins export listing of all users (#647)
Co-authored-by: Kenneth Kehl <@kkehl@flexion.us>
Co-authored-by: stvnrlly <steven.reilly@gsa.gov>
2023-07-26 12:08:55 -04:00
dependabot[bot]
8280dadc35 Bump flake8-bugbear from 22.4.25 to 23.3.12
Bumps [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear) from 22.4.25 to 23.3.12.
- [Release notes](https://github.com/PyCQA/flake8-bugbear/releases)
- [Commits](https://github.com/PyCQA/flake8-bugbear/compare/22.4.25...23.3.12)

---
updated-dependencies:
- dependency-name: flake8-bugbear
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-26 15:01:42 +00:00
dependabot[bot]
8b6a4d9e48 Bump pytest-env from 0.6.2 to 0.8.2
Bumps [pytest-env](https://github.com/pytest-dev/pytest-env) from 0.6.2 to 0.8.2.
- [Release notes](https://github.com/pytest-dev/pytest-env/releases)
- [Commits](https://github.com/pytest-dev/pytest-env/compare/0.6.2...0.8.2)

---
updated-dependencies:
- dependency-name: pytest-env
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-25 23:45:50 +00:00
dependabot[bot]
80da9873da Bump pip-audit from 2.6.0 to 2.6.1
Bumps [pip-audit](https://github.com/pypa/pip-audit) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/pypa/pip-audit/releases)
- [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pypa/pip-audit/compare/v2.6.0...v2.6.1)

---
updated-dependencies:
- dependency-name: pip-audit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-25 00:02:56 +00:00
dependabot[bot]
a6c75d4123 Bump pytest-xdist from 2.5.0 to 3.3.1
Bumps [pytest-xdist](https://github.com/pytest-dev/pytest-xdist) from 2.5.0 to 3.3.1.
- [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-xdist/compare/v2.5.0...v3.3.1)

---
updated-dependencies:
- dependency-name: pytest-xdist
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-21 23:41:01 +00:00
dependabot[bot]
0eb91a4294 Bump prometheus-client from 0.14.1 to 0.17.1
Bumps [prometheus-client](https://github.com/prometheus/client_python) from 0.14.1 to 0.17.1.
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](https://github.com/prometheus/client_python/compare/v0.14.1...v0.17.1)

---
updated-dependencies:
- dependency-name: prometheus-client
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-18 19:12:36 +00:00
Steven Reilly
6138ae203b Upgrade dependencies with cryptography subdependency (#626)
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
Co-authored-by: Carlo Costino <carlo.costino@gsa.gov>
2023-07-18 14:53:54 -04:00
dependabot[bot]
69c1d87869 Bump pytest from 7.1.2 to 7.4.0
Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.1.2 to 7.4.0.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/7.1.2...7.4.0)

---
updated-dependencies:
- dependency-name: pytest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-10 23:43:40 +00:00
dependabot[bot]
62cd29aee5 Bump pytz from 2022.1 to 2023.3 (#606)
Bumps [pytz](https://github.com/stub42/pytz) from 2022.1 to 2023.3.
- [Commits](https://github.com/stub42/pytz/compare/release_2022.1...release_2023.3)

---
updated-dependencies:
- dependency-name: pytz
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-10 13:49:46 -04:00
dependabot[bot]
6a698fa389 Bump python-dotenv from 0.20.0 to 1.0.0 (#585)
Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 0.20.0 to 1.0.0.
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/theskumar/python-dotenv/compare/v0.20.0...v1.0.0)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-10 11:35:41 -04:00
dependabot[bot]
5c618ae807 Bump freezegun from 1.2.1 to 1.2.2
Bumps [freezegun](https://github.com/spulec/freezegun) from 1.2.1 to 1.2.2.
- [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG)
- [Commits](https://github.com/spulec/freezegun/commits)

---
updated-dependencies:
- dependency-name: freezegun
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-08 00:01:22 +00:00
Kenneth Kehl
c5ce43ef37 merge from main 2023-07-07 11:35:58 -07:00
Kenneth Kehl
e01eda1bd1 update 2023-07-07 11:30:07 -07:00
dependabot[bot]
3eed229a13 Bump moto from 3.1.7 to 4.1.12
Bumps [moto](https://github.com/getmoto/moto) from 3.1.7 to 4.1.12.
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getmoto/moto/compare/3.1.7...4.1.12)

---
updated-dependencies:
- dependency-name: moto
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-07 00:20:46 +00:00
dependabot[bot]
bae7d7efe2 Bump notifications-python-client from 6.3.0 to 8.0.1
Bumps [notifications-python-client](https://github.com/alphagov/notifications-python-client) from 6.3.0 to 8.0.1.
- [Changelog](https://github.com/alphagov/notifications-python-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/alphagov/notifications-python-client/compare/6.3.0...8.0.1)

---
updated-dependencies:
- dependency-name: notifications-python-client
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-06 21:25:35 +00:00
Kenneth Kehl
ad45d9f333 merge from main and point to main branch of notifications-utils 2023-07-06 13:27:06 -07:00
dependabot[bot]
c12f086865 Bump govuk-bank-holidays from 0.11 to 0.13
Bumps [govuk-bank-holidays](https://github.com/ministryofjustice/govuk-bank-holidays) from 0.11 to 0.13.
- [Release notes](https://github.com/ministryofjustice/govuk-bank-holidays/releases)
- [Commits](https://github.com/ministryofjustice/govuk-bank-holidays/compare/0.11...0.13)

---
updated-dependencies:
- dependency-name: govuk-bank-holidays
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-05 00:04:02 +00:00
Kenneth Kehl
b68b97943b Merge pull request #593 from GSA/dependabot/pip/requests-mock-1.11.0
Bump requests-mock from 1.10.0 to 1.11.0
2023-07-04 08:20:36 -07:00
Kenneth Kehl
b43b3539d4 Merge pull request #577 from GSA/dependabot/pip/werkzeug-2.3.6
Bump werkzeug from 2.3.4 to 2.3.6
2023-07-04 07:29:51 -07:00
dependabot[bot]
7a03a64d06 Bump requests-mock from 1.10.0 to 1.11.0
Bumps [requests-mock](https://github.com/jamielennox/requests-mock) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/jamielennox/requests-mock/releases)
- [Commits](https://github.com/jamielennox/requests-mock/compare/1.10.0...1.11.0)

---
updated-dependencies:
- dependency-name: requests-mock
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-30 23:52:55 +00:00
dependabot[bot]
90f343a2e4 Bump pyproj from 3.3.1 to 3.6.0
Bumps [pyproj](https://github.com/pyproj4/pyproj) from 3.3.1 to 3.6.0.
- [Release notes](https://github.com/pyproj4/pyproj/releases)
- [Changelog](https://github.com/pyproj4/pyproj/blob/main/docs/history.rst)
- [Commits](https://github.com/pyproj4/pyproj/compare/3.3.1...3.6.0)

---
updated-dependencies:
- dependency-name: pyproj
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-28 18:28:20 +00:00
dependabot[bot]
19f11dbd90 Bump beautifulsoup4 from 4.11.1 to 4.12.2
Bumps [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) from 4.11.1 to 4.12.2.

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-27 14:43:13 +00:00
dependabot[bot]
64b9cc12e7 Bump werkzeug from 2.3.4 to 2.3.6
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 2.3.4 to 2.3.6.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/2.3.4...2.3.6)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-27 14:43:08 +00:00
dependabot[bot]
46e68b2f37 Bump pytest-mock from 3.7.0 to 3.11.1
Bumps [pytest-mock](https://github.com/pytest-dev/pytest-mock) from 3.7.0 to 3.11.1.
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-mock/compare/v3.7.0...v3.11.1)

---
updated-dependencies:
- dependency-name: pytest-mock
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-27 00:14:27 +00:00
dependabot[bot]
295f301c19 Bump isort from 5.10.1 to 5.12.0
Bumps [isort](https://github.com/pycqa/isort) from 5.10.1 to 5.12.0.
- [Release notes](https://github.com/pycqa/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pycqa/isort/compare/5.10.1...5.12.0)

---
updated-dependencies:
- dependency-name: isort
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-26 17:37:05 +00:00
Kenneth Kehl
81e2f9b72b notify-512 use daily message limit from notification_utils 2023-06-19 10:10:22 -07:00
dependabot[bot]
ff350fee00 Bump cryptography from 40.0.2 to 41.0.0 (#532)
Bumps [cryptography](https://github.com/pyca/cryptography) from 40.0.2 to 41.0.0.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/40.0.2...41.0.0)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 11:59:55 -04:00
Kenneth Kehl
5a44d8ae40 merge from main 2023-05-26 07:45:53 -07:00
dependabot[bot]
6571b85556 Bump requests from 2.29.0 to 2.31.0 (#518)
Bumps [requests](https://github.com/psf/requests) from 2.29.0 to 2.31.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.29.0...v2.31.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-25 16:21:19 -04:00
Steven Reilly
3f44877c8b Bump flask & werkzeug to 2.3 (#490)
* bump werkzeug to 2.3
* remove no_cookie blueprint
2023-05-02 09:45:48 -04:00
Andrew Shumway
948ee68193 Added code coverage test to pipfile/makefile/workflow (#472)
Co-authored-by: stvnrlly <steven.reilly@gsa.gov>
2023-04-28 11:17:02 -04:00
Ryan Ahearn
4fc95a4e28 Update utils for improved logging 2023-04-26 15:31:06 -04:00
Ryan Ahearn
0120937777 Update dependencies 2023-03-29 16:55:18 -04:00
dependabot[bot]
8f754ab559 Bump redis from 4.5.1 to 4.5.3
Bumps [redis](https://github.com/redis/redis-py) from 4.5.1 to 4.5.3.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](https://github.com/redis/redis-py/compare/v4.5.1...v4.5.3)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-03-27 21:48:03 +00:00
Ryan Ahearn
e8e8c889d6 Add flask-talisman for security headers 2023-03-07 16:08:39 -05:00
dependabot[bot]
8aaa3665ed Bump markdown-it-py from 2.1.0 to 2.2.0
Bumps [markdown-it-py](https://github.com/executablebooks/markdown-it-py) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](https://github.com/executablebooks/markdown-it-py/compare/v2.1.0...v2.2.0)

---
updated-dependencies:
- dependency-name: markdown-it-py
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-23 20:08:58 +00:00
dependabot[bot]
c5405d44e1 Bump werkzeug from 2.2.2 to 2.2.3
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/2.2.2...2.2.3)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-16 07:35:35 +00:00