Commit Graph

191 Commits

Author SHA1 Message Date
Carlo Costino
cc6f60353f Update Python dependencies - 7/2/2024
This changeset updates several Python dependencies that Dependabot had flagged for updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-07-02 17:36:12 -04:00
Carlo Costino
b96a2dc935 Merge pull request #1686 from GSA/1460-update-the-lodash-js-library
Removed package that seems to be unused that caused a security concern
2024-07-02 16:57:28 -04:00
alexjanousekGSA
feb879be53 Removed package that seems to be unused that caused a security concern 2024-07-02 10:49:09 -06:00
Kenneth Kehl
0c097c6592 more debug 2024-07-01 10:53:21 -07:00
Carlo Costino
1f42dbdd63 Merge branch 'main' into notify-admin-1495 2024-06-28 11:01:13 -04:00
Carlo Costino
b9b2495af1 Updated several other Python dependencies
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-06-28 10:57:50 -04:00
Carlo Costino
137e2a5683 Updated the flake8 dependency and poetry.lock file
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-06-28 10:49:00 -04:00
Kenneth Kehl
f890635f24 merge from main 2024-06-20 12:57:15 -07:00
Kenneth Kehl
87c3efd312 switch to 3.12.3 2024-06-20 12:37:11 -07:00
Kenneth Kehl
5429af16d4 pin python to 3.12.2 2024-06-20 10:45:22 -07:00
Kenneth Kehl
f000fa0ff3 merge from main 2024-06-18 07:50:35 -07:00
Kenneth Kehl
b1624c25dc more updated 2024-06-18 07:49:20 -07:00
Carlo Costino
59b0325124 Adjust npm install line and update Python dependencies
The npm install line needs to be run within the context of the nvm-managed Node.js and should happen after that environment is initialized but before the build step.  This also adds a couple more Python dependency updates that Dependabot flagged as well.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-06-17 23:46:59 -04:00
Kenneth Kehl
c3ae47e7f9 merge from main 2024-06-14 12:50:15 -07:00
Carlo Costino
79df8288df Updated dependencies - 6/14/2024
This changeset updates Python dependencies that Dependabot has flagged in addition to several others that were due for updates.  It also reformats a test file via black.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-06-14 10:22:01 -04:00
Kenneth Kehl
da96edbfcd fix set and get in redis_client 2024-06-07 09:07:42 -07:00
Kenneth Kehl
adc89a8326 merge from main 2024-06-06 09:35:07 -07:00
Kenneth Kehl
82690d6e3d add debug for user issue 2024-06-06 09:34:49 -07:00
Carlo Costino
43d67a4821 Update Python dependencies - 6/5/2024
This changeset updates several Python dependencies flagged by Dependabot.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-06-05 16:55:17 -04:00
Carlo Costino
f0fcb8f21d Update Python dependencies - 6/3/24
This changeset updates several Python dependencies to stay on top of Dependabot alerts.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-06-03 11:03:29 -04:00
Carlo Costino
5fa2e77a71 Merge pull request #1570 from GSA/notify-admin-1041
use moto to mock s3
2024-05-31 16:12:06 -04:00
Kenneth Kehl
5f92f9a95d merge from main 2024-05-31 09:54:52 -07:00
Carlo Costino
8c85d99449 Update dependencies and fix E2E test
This changeset updates a couple of dependencies flagged by Dependabot and fixes an end-to-end test that needed to be updated with the one-off send filename changes.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-31 12:09:22 -04:00
Kenneth Kehl
a834166f41 merge from main 2024-05-31 08:56:11 -07:00
Carlo Costino
fc29871b57 Merge pull request #1560 from GSA/terrazoon-patch-1
Look into enabling Dependabot Code Scanning for our API and admin repos
2024-05-31 10:39:58 -04:00
Kenneth Kehl
2332744cdf merge from main 2024-05-30 08:32:19 -07:00
Carlo Costino
43b99a5905 Update admin repo dependencies
This changeset updates several Python dependencies that Dependabot flagged for updates due to end-to-end tests still failing in Dependabot PRs.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-29 19:40:02 -04:00
Carlo Costino
548b7cd3a2 Updated boto3 and botocore again
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-28 17:52:29 -04:00
Kenneth Kehl
17fec1c99e use moto to mock s3 2024-05-28 11:27:57 -07:00
Carlo Costino
1c1918ba52 Update Python dependencies
This changeset updates a few Python dependencies the week of May 28th to help keep our project up-to-date.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-28 12:11:53 -04:00
Kenneth Kehl
be4b1d558d merge from main 2024-05-24 08:59:03 -07:00
Kenneth Kehl
f939687283 merge 2024-05-24 08:58:47 -07:00
Carlo Costino
fe836f2d3d Updated several other dependencies
This includes requests to take care of a Dependabot security alert.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-24 10:22:59 -04:00
Carlo Costino
210e8b5a33 This changeset updates our pre-commit hooks to help check for things in our code before we commit anything, such as code format and structure as well as sensitive information and credentials.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-20 12:04:25 -04:00
Carlo Costino
6ce5856f3b Add missing dependencies
The merging of notifications_utils to this repo does not deploy because of missing dependencies.  This changeset adds them back in directly.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-17 18:13:09 -04:00
Kenneth Kehl
dcfc78d805 some fixes 2024-05-16 15:13:45 -07:00
Carlo Costino
9a83ba7475 Localize notification_utils to the admin
This changeset pulls in all of the notification_utils code directly into the admin and removes it as an external dependency. We are doing this to cut down on operational maintenance of the project and will begin removing parts of it no longer needed for the admin.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-16 10:37:37 -04:00
Carlo Costino
d484c3636b Update dependencies (05/14/2024)
This changeset updates several dependencies flagged by Dependabot that we cannot merge directly due to the E2E test issue.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-14 15:42:08 -04:00
Carlo Costino
37c57cb75e Merge pull request #1512 from GSA/notify-admin-1459
Refactor the remaining pieces of the sign-in process
2024-05-08 20:26:14 -04:00
Carlo Costino
39b0a4ff52 Update several dependencies from Dependabot
This changeset updates a few dependencies that Dependabot flagged for updates. We cannot merge the Dependabot PRs at the moment due to E2E test compatability issues.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-07 09:56:34 -04:00
Kenneth Kehl
0b30c9a83f merge from main 2024-05-06 12:15:57 -07:00
Kenneth Kehl
9ecbfb7e05 notify-admin-1459 2024-05-06 10:43:01 -07:00
Carlo Costino
5fe35b4497 Updating several dependencies related to Flask upgrade
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-06 13:02:02 -04:00
Carlo Costino
5dc23947e2 Updated utils to 0.5.1 release in prep for Flask upgrade
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-29 15:44:33 -04:00
Carlo Costino
4b37d81c16 Merge branch 'main' into notify-admin-flask 2024-04-29 15:43:12 -04:00
samathad2023
2bcad264b8 urllib3 update 2024-04-24 12:11:33 -07:00
Kenneth Kehl
f7fe270171 fix service invites 2024-04-24 11:20:17 -07:00
Carlo Costino
dd0070209e Update exceptiongroup and newrelic packages
This changeset updates the exceptiongroup and newrelic packages due to the Dependabot E2E test failures

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-19 14:43:51 -04:00
Kenneth Kehl
7ed7b4e1f4 fix service invites 2024-04-18 14:01:33 -07:00
Carlo Costino
2484ea08df Update gunicorn to latest release
This changeset updates the gunicorn dependency to the latest release to address a recent CVE.  It also updates the its-dangerous package.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-17 18:05:19 -04:00