Kenneth Kehl
814d08af2b
upgrade to python 3.13.2
2025-07-28 11:56:55 -07:00
alexjanousekGSA
30d0e0f57e
Updated dependabot yml to remove depecrated review assignment
2025-07-21 12:06:01 -04:00
Kenneth Kehl
ff3b9eb820
upgrade to python 3.12.9
2025-06-27 07:00:45 -07:00
Kenneth Kehl
4cc97e8c8c
upgrade to python 3.12.7
2025-06-26 07:47:08 -07:00
Kenneth Kehl
2f23ff9d8f
fix drift analysis
2025-06-26 07:28:25 -07:00
Kenneth Kehl
68ceda6db5
revert python upgrade again
2025-06-25 13:38:29 -07:00
Kenneth Kehl
bc28e3e2f9
upgrade python again to 3.13.2
2025-06-19 06:58:20 -07:00
Kenneth Kehl
a5399ae693
manually roll python back to 3.12.2
2025-06-09 08:59:50 -07:00
Carlo Costino
595ae759d1
Unpin egress proxy release and eventlet dependency
...
This changeset unpins the egress proxy release now that we have resolved the other issues surrounding the connectivity to S3. It also makes sure the eventlet dependency is up-to-date.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-06-04 12:12:29 -04:00
Kenneth Kehl
7dfe9c5988
merge from main
2025-05-30 13:30:51 -07:00
Kenneth Kehl
4cbcf3fe27
python upgrade
2025-05-30 10:09:40 -07:00
ccostino
3d44e76383
Update .github/workflows/checks.yml
...
Removing extraneous vulnerability ignore config.
2025-05-30 10:57:24 -04:00
Kenneth Kehl
038f4e294a
merge from main
2025-05-29 14:46:02 -07:00
Kenneth Kehl
3fe74bea54
add exclusion
2025-05-29 11:25:01 -07:00
Carlo Costino
ba0daeaf76
Updated pip-audit ignore-vulns
...
This changeset updates the PYSEC notices to ignore to due versions that either cannot be fixed or are false positives. Specifically, this changeset removes previously ignored vulnerability reports and adds PYSEC-2023-312 to the list because it is a false positive and refers to Redis itself, not the Python Redis client (see https://github.com/pypa/advisory-database/issues/237 for details).
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-05-28 17:37:04 -04:00
Kenneth Kehl
665d7b543b
upgrade poetry to 2.1.3
2025-05-27 12:44:28 -07:00
Kenneth Kehl
7ba4f3658e
upgrade poetry to 2.1.3
2025-05-27 12:32:54 -07:00
Kenneth Kehl
0afc93958c
upgrade poetry to 2.1.3
2025-05-27 12:25:52 -07:00
Kenneth Kehl
29db4dcf4d
upgrade poetry to 2.1.3
2025-05-27 11:34:11 -07:00
ccostino
db885d14ec
Merge pull request #2594 from GSA/sheevdave-patch-2
...
Update manual_qa_template.yml
2025-05-23 10:48:03 -04:00
Carlo Costino
757803312d
Tweaked a couple more of the steps to be in line with the current sign in/out flow
...
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-05-23 10:39:39 -04:00
Beverly Nguyen
790fe2d6f9
update csp using variables and testing
2025-05-22 12:03:18 -07:00
Sheev Davé
6cc152c07c
Update manual_qa_template.yml
...
Deleted 2FA directions since that's directly managed by login.gov
2025-05-21 13:06:03 -07:00
ccostino
5dcf967941
Merge pull request #2582 from GSA/2581-adding-api_public_url-to-env
...
Add API_PUBLIC_URL environment variable for public API access
2025-05-20 16:27:51 -04:00
Beverly Nguyen
1b6894139d
Fix formatting
2025-05-20 10:27:07 -07:00
Beverly Nguyen
2459ecd715
Fix formatting
2025-05-20 10:26:54 -07:00
alexjanousekGSA
802bda5169
Merge branch 'main' into update-dependabot
2025-05-20 13:11:17 -04:00
alexjanousekGSA
3b8b38d6ad
Updated review and assignee name for dependabot
2025-05-20 09:51:11 -04:00
Beverly Nguyen
bc2738a97a
Added API_PUBLIC_URL to GitHub Secrets and updated deploy workflows with new API_PUBLIC_URL
2025-05-19 17:22:28 -07:00
Carlo Costino
8b6edf93db
Pin egress proxy release
...
This changeset pins the egress proxy to a previous release to help troubleshoot a potential issue with the underlying Caddy server update.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-05-12 12:51:00 -04:00
alexjanousekGSA
35176328ca
Updating virtualenv to specific version
2025-05-05 13:09:03 -04:00
Carlo Costino
50bdf916ba
Merge branch 'main' into fix-existing-e2e-tests
2025-05-01 09:45:23 -04:00
Beverly Nguyen
6dd44fdc2d
added feature flag
2025-04-10 12:35:04 -07:00
alexjanousekGSA
35f3203e9c
Removed feature flag
2025-03-20 14:22:41 -04:00
Carlo Costino
606b124912
Fix existing end-to-end tests
...
This changeset re-enables our existing end-to-end tests and gets them working again after responding to a security incident.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-03-18 23:24:49 -04:00
Kenneth Kehl
9a8a80ab14
add comment
2025-03-18 10:19:02 -07:00
Kenneth Kehl
cb334c0dcd
ugh
2025-03-17 16:28:46 -07:00
Kenneth Kehl
47657d45ed
initial
2025-03-17 09:57:15 -07:00
Jonathan Bobel
20012885b1
Update checks.yml
2025-03-04 11:26:21 -05:00
Carlo Costino
fe6921e243
Update Terraform installation and configuration
...
This changeset accounts for having to explicitly install Terraform and updates our user configuration in several environments to account for team member changes.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-02-19 21:41:32 -05:00
Carlo Costino
eadd8dddb5
Update GitHub Action References
...
This changeset updates many of our GitHub Action references to point to the latest versions to ensure they are kept up-to-date. This helps address any improvements and security patches that have been made to them.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-02-19 16:56:09 -05:00
Kenneth Kehl
bd619af421
merge from main
2025-02-03 09:01:12 -08:00
Carlo Costino
d627ba62de
Update reference in daily check action
...
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-01-31 11:08:48 -05:00
Carlo Costino
0ba489df78
Update reference to zaproxy/action-baseline to 0.14.0
...
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-01-31 10:46:32 -05:00
Carlo Costino
4ae351b1f6
This changeset explicitly enables the FEATURE_ABOUT_PAGE_ENABLED feature flag for our dynamic scans to make sure that all pages are scanned, regardless if they are enabled on our production site or not.
...
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-01-30 16:32:12 -05:00
Carlo Costino
653f3f5644
Merge pull request #2293 from GSA/sheevdave-patch-3
...
Update issue_template.yml
2025-01-30 12:45:31 -05:00
Sheev Davé
057ed6f88c
Update .github/ISSUE_TEMPLATE/issue_template.yml
...
Co-authored-by: Carlo Costino <ccostino@users.noreply.github.com >
2025-01-30 09:34:56 -08:00
Kenneth Kehl
9630d085f4
Update .github/workflows/checks.yml
...
Co-authored-by: Carlo Costino <ccostino@users.noreply.github.com >
2025-01-29 13:21:28 -08:00
Sheev Davé
22fcc703f5
Update issue_template.yml
2025-01-27 12:53:47 -08:00
Sheev Davé
4e335561e3
Update issue_template.yml
...
added "This includes items related to accessibility." to 3 sections
2025-01-23 11:57:37 -08:00
