Commit Graph

244 Commits

Author SHA1 Message Date
Carlo Costino
dd0070209e Update exceptiongroup and newrelic packages
This changeset updates the exceptiongroup and newrelic packages due to the Dependabot E2E test failures

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-19 14:43:51 -04:00
Kenneth Kehl
7ed7b4e1f4 fix service invites 2024-04-18 14:01:33 -07:00
Carlo Costino
2484ea08df Update gunicorn to latest release
This changeset updates the gunicorn dependency to the latest release to address a recent CVE.  It also updates the its-dangerous package.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-17 18:05:19 -04:00
Jonathan Bobel
2c4a694815 Merge branch 'main' of https://github.com/GSA/notifications-admin into 1269-content-update-for-login-gov-settings 2024-04-17 10:43:02 -04:00
Kenneth Kehl
80fb024827 merge from main 2024-04-16 13:08:06 -07:00
Jonathan Bobel
b6ed2deac2 Merge branch 'main' of https://github.com/GSA/notifications-admin into 1423-Sign-in-content-changes-for-login-gov 2024-04-16 12:43:58 -04:00
Carlo Costino
0044beaeed Updated dependencies and ignore gunicorn audit flag
This changeset updates a couple of dependencies, including our Python dependency audit check, and specifically ignores a gunicorn audit flag that appeared on 4/16/2024.

As soon as there is an update available for gunicorn that addresses the issue we will remove the flag to ignore the vulnerability report and update the dependency.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-16 11:46:57 -04:00
Jonathan Bobel
6784cf9f3c 1423 - Few final updates to switch over to login.gov 2024-04-15 15:50:42 -04:00
Kenneth Kehl
ae5561862d fix tests, eliminate or tweak bogus incoming or foreign number tests 2024-04-11 15:39:50 -07:00
Carlo Costino
5fd1a8c836 Update utils to 0.4.6
This changeset updates notifications-utils to 0.4.6 in order to address some dependency updates and incorporate a few minor changes.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-11 18:02:56 -04:00
Jonathan Bobel
3e3edec558 Merge branch 'main' of https://github.com/GSA/notifications-admin into 1269-content-update-for-login-gov-settings 2024-04-10 14:32:11 -04:00
Jonathan Bobel
0708f3c785 Merge branch 'main' of https://github.com/GSA/notifications-admin into 1269-content-update-for-login-gov-settings 2024-04-10 11:30:21 -04:00
Kenneth Kehl
96ec868e3e fix service stats 2024-04-10 07:45:10 -07:00
samathad2023
2e55133f83 flask 3.0.2 to 3.0.3 2024-04-08 12:21:26 -07:00
Carlo Costino
d5d5a45138 Update utils to 0.4.5
This changeset updates notifications-utils to 0.4.5, which includes a few minor fixes and several dependency updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-08 11:41:39 -04:00
Jonathan Bobel
f46f9661f1 1269 - Content updates for Service Settings after login.gov integration 2024-04-08 11:32:09 -04:00
samathad2023
e71989022d flask upgrade 2024-04-04 18:09:22 -07:00
Carlo Costino
616957c103 Added an explicit sync of the poetry.lock file to make bootstrap to make sure dependency updates will work
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-03 17:31:15 -04:00
Carlo Costino
e411774ada Added a few more minor version bumps
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-03 17:24:26 -04:00
Carlo Costino
748dbc12fd Update several recent dependencies
This changeset updates several dependencies that Dependabot has flagged for us but cannot merge due to the E2E test bug with it.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-03 17:09:35 -04:00
samathad2023
b006e2cacf utils dependencies updates 2024-03-21 13:01:14 -07:00
samathad2023
00f81a74fd latest utils commit and sync with main 2024-03-20 14:11:16 -07:00
Carlo Costino
c43ed20c9e Update Dependabot flagged dependencies
This changeset updates a handful of dependencies that Dependabot has flagged but is not able to test successfully due to a bug with the E2E configuration.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-03-14 17:31:27 -04:00
Carlo Costino
476ba798fc This changeset updates notifications_utils to 0.3.0 to account for other dependency updates.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-03-14 15:18:40 -04:00
samathad2023
c3bb44129c tests and orderedset updates for 3.12 upgrade 2024-03-08 15:00:48 -08:00
dependabot[bot]
25646c2e2f Bump notifications-python-client from 8.2.0 to 9.0.0
Bumps [notifications-python-client](https://github.com/alphagov/notifications-python-client) from 8.2.0 to 9.0.0.
- [Changelog](https://github.com/alphagov/notifications-python-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/alphagov/notifications-python-client/compare/8.2.0...9.0.0)

---
updated-dependencies:
- dependency-name: notifications-python-client
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 17:18:04 +00:00
dependabot[bot]
c71a7edcfe Bump flake8 from 6.1.0 to 7.0.0
Bumps [flake8](https://github.com/pycqa/flake8) from 6.1.0 to 7.0.0.
- [Commits](https://github.com/pycqa/flake8/compare/6.1.0...7.0.0)

---
updated-dependencies:
- dependency-name: flake8
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 17:01:47 +00:00
dependabot[bot]
673df7da3d Bump vulture from 2.10 to 2.11
Bumps [vulture](https://github.com/jendrikseipp/vulture) from 2.10 to 2.11.
- [Release notes](https://github.com/jendrikseipp/vulture/releases)
- [Changelog](https://github.com/jendrikseipp/vulture/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jendrikseipp/vulture/compare/v2.10...v2.11)

---
updated-dependencies:
- dependency-name: vulture
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 16:50:02 +00:00
dependabot[bot]
d0c4b505b9 Bump black from 23.12.1 to 24.2.0
Bumps [black](https://github.com/psf/black) from 23.12.1 to 24.2.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/23.12.1...24.2.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 16:35:56 +00:00
dependabot[bot]
b50fe24c52 Bump coverage from 7.4.0 to 7.4.2
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.4.0 to 7.4.2.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.4.0...7.4.2)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 16:14:06 +00:00
Carlo Costino
14b68c044f Update utils to 0.2.9
quote>
quote> This changeset updates notifications-utils to 0.2.9 to account for a recent cryptography update.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-02-21 15:51:05 -05:00
Carlo Costino
df54b066f9 Update notifications-utils to 0.2.8
This updates utils to be 0.2.8 to address the cryptography Dependabot security alert.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-02-06 16:41:07 -05:00
Kenneth Kehl
338a6426c3 inline code for govuk_frontend_jinja 2024-02-06 13:17:09 -08:00
dependabot[bot]
c79c824b24 Bump newrelic from 9.5.0 to 9.6.0
Bumps [newrelic](https://github.com/newrelic/newrelic-python-agent) from 9.5.0 to 9.6.0.
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](https://github.com/newrelic/newrelic-python-agent/compare/v9.5.0...v9.6.0)

---
updated-dependencies:
- dependency-name: newrelic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-25 23:32:58 +00:00
Carlo Costino
1709d3279b Update notifications-utils to 0.2.7
This changeset updates the notifications-utils library to 0.2.7.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-01-24 14:55:55 -05:00
dependabot[bot]
ede82d76d6 Bump python-dotenv from 1.0.0 to 1.0.1
Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/theskumar/python-dotenv/compare/v1.0.0...v1.0.1)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-24 18:34:27 +00:00
dependabot[bot]
75a4e1ae6d Bump bandit from 1.7.6 to 1.7.7
Bumps [bandit](https://github.com/PyCQA/bandit) from 1.7.6 to 1.7.7.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](https://github.com/PyCQA/bandit/compare/1.7.6...1.7.7)

---
updated-dependencies:
- dependency-name: bandit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-23 23:36:48 +00:00
dependabot[bot]
e5004df43b Bump beautifulsoup4 from 4.12.2 to 4.12.3
Bumps [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) from 4.12.2 to 4.12.3.

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-18 03:12:22 +00:00
dependabot[bot]
e242d33b84 Bump flake8-bugbear from 23.12.2 to 24.1.17
Bumps [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear) from 23.12.2 to 24.1.17.
- [Release notes](https://github.com/PyCQA/flake8-bugbear/releases)
- [Commits](https://github.com/PyCQA/flake8-bugbear/compare/23.12.2...24.1.17)

---
updated-dependencies:
- dependency-name: flake8-bugbear
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-17 23:43:06 +00:00
dependabot[bot]
2959e9bb56 Bump newrelic from 9.4.0 to 9.5.0
Bumps [newrelic](https://github.com/newrelic/newrelic-python-agent) from 9.4.0 to 9.5.0.
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](https://github.com/newrelic/newrelic-python-agent/compare/v9.4.0...v9.5.0)

---
updated-dependencies:
- dependency-name: newrelic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-12 23:14:38 +00:00
dependabot[bot]
e500ec567e Bump pip-audit from 2.6.3 to 2.7.0
Bumps [pip-audit](https://github.com/pypa/pip-audit) from 2.6.3 to 2.7.0.
- [Release notes](https://github.com/pypa/pip-audit/releases)
- [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pypa/pip-audit/compare/v2.6.3...v2.7.0)

---
updated-dependencies:
- dependency-name: pip-audit
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-12 17:38:22 +00:00
Carlo Costino
e5c2bd9ef2 Update notification-utils to 0.2.6
This changeset updates notification-utils to 0.2.6 for dependency updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-01-12 12:24:54 -05:00
dependabot[bot]
fa0d1e20d1 Bump jinja2 from 3.1.2 to 3.1.3
Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.2 to 3.1.3.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/3.1.2...3.1.3)

---
updated-dependencies:
- dependency-name: jinja2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-11 14:21:14 +00:00
dependabot[bot]
f0e667b3b5 Bump markdown from 3.5.1 to 3.5.2
Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.5.1 to 3.5.2.
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](https://github.com/Python-Markdown/markdown/compare/3.5.1...3.5.2)

---
updated-dependencies:
- dependency-name: markdown
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-11 00:06:38 +00:00
Carlo Costino
8d6e455d18 Update utils to 0.2.5
This changeset updates the notification-utils library to 0.2.5.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-01-10 13:23:19 -05:00
dependabot[bot]
12b8b1ce9c Bump gitpython from 3.1.40 to 3.1.41
Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.40 to 3.1.41.
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.40...3.1.41)

---
updated-dependencies:
- dependency-name: gitpython
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-10 17:14:29 +00:00
dependabot[bot]
4d06c9d389 Bump wtforms from 3.1.1 to 3.1.2
Bumps [wtforms](https://github.com/wtforms/wtforms) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/wtforms/wtforms/releases)
- [Changelog](https://github.com/wtforms/wtforms/blob/master/CHANGES.rst)
- [Commits](https://github.com/wtforms/wtforms/compare/3.1.1...3.1.2)

---
updated-dependencies:
- dependency-name: wtforms
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-09 23:11:19 +00:00
Anastasia Gradova
624ba5f7f7 Merge branch 'main' into 976-convert-start-pages-to-generate-markdown 2024-01-09 08:42:48 -07:00
dependabot[bot]
8b9a892e76 Bump newrelic from 9.3.0 to 9.4.0
Bumps [newrelic](https://github.com/newrelic/newrelic-python-agent) from 9.3.0 to 9.4.0.
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](https://github.com/newrelic/newrelic-python-agent/compare/v9.3.0...v9.4.0)

---
updated-dependencies:
- dependency-name: newrelic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-09 15:08:35 +00:00
dependabot[bot]
872afba186 Bump pip-audit from 2.6.2 to 2.6.3
Bumps [pip-audit](https://github.com/pypa/pip-audit) from 2.6.2 to 2.6.3.
- [Release notes](https://github.com/pypa/pip-audit/releases)
- [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pypa/pip-audit/compare/v2.6.2...v2.6.3)

---
updated-dependencies:
- dependency-name: pip-audit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-09 14:51:51 +00:00