Commit Graph
140 Commits
Author SHA1 Message Date
Carlo Costino 2484ea08df Update gunicorn to latest release
This changeset updates the gunicorn dependency to the latest release to address a recent CVE.  It also updates the its-dangerous package.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-17 18:05:19 -04:00
Jonathan Bobel 2c4a694815 Merge branch 'main' of https://github.com/GSA/notifications-admin into 1269-content-update-for-login-gov-settings 2024-04-17 10:43:02 -04:00
Kenneth Kehl 80fb024827 merge from main 2024-04-16 13:08:06 -07:00
Jonathan Bobel b6ed2deac2 Merge branch 'main' of https://github.com/GSA/notifications-admin into 1423-Sign-in-content-changes-for-login-gov 2024-04-16 12:43:58 -04:00
Carlo Costino 0044beaeed Updated dependencies and ignore gunicorn audit flag
This changeset updates a couple of dependencies, including our Python dependency audit check, and specifically ignores a gunicorn audit flag that appeared on 4/16/2024.

As soon as there is an update available for gunicorn that addresses the issue we will remove the flag to ignore the vulnerability report and update the dependency.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-16 11:46:57 -04:00
Jonathan Bobel 6784cf9f3c 1423 - Few final updates to switch over to login.gov 2024-04-15 15:50:42 -04:00
Kenneth Kehl ae5561862d fix tests, eliminate or tweak bogus incoming or foreign number tests 2024-04-11 15:39:50 -07:00
Carlo Costino 5fd1a8c836 Update utils to 0.4.6
This changeset updates notifications-utils to 0.4.6 in order to address some dependency updates and incorporate a few minor changes.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-11 18:02:56 -04:00
Jonathan Bobel 3e3edec558 Merge branch 'main' of https://github.com/GSA/notifications-admin into 1269-content-update-for-login-gov-settings 2024-04-10 14:32:11 -04:00
Jonathan Bobel 0708f3c785 Merge branch 'main' of https://github.com/GSA/notifications-admin into 1269-content-update-for-login-gov-settings 2024-04-10 11:30:21 -04:00
Kenneth Kehl 96ec868e3e fix service stats 2024-04-10 07:45:10 -07:00
Carlo Costino d5d5a45138 Update utils to 0.4.5
This changeset updates notifications-utils to 0.4.5, which includes a few minor fixes and several dependency updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-08 11:41:39 -04:00
Jonathan Bobel f46f9661f1 1269 - Content updates for Service Settings after login.gov integration 2024-04-08 11:32:09 -04:00
Carlo Costino 616957c103 Added an explicit sync of the poetry.lock file to make bootstrap to make sure dependency updates will work
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-03 17:31:15 -04:00
Carlo Costino e411774ada Added a few more minor version bumps
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-03 17:24:26 -04:00
Carlo Costino 748dbc12fd Update several recent dependencies
This changeset updates several dependencies that Dependabot has flagged for us but cannot merge due to the E2E test bug with it.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-03 17:09:35 -04:00
samathad2023 b006e2cacf utils dependencies updates 2024-03-21 13:01:14 -07:00
samathad2023 00f81a74fd latest utils commit and sync with main 2024-03-20 14:11:16 -07:00
Carlo Costino c43ed20c9e Update Dependabot flagged dependencies
This changeset updates a handful of dependencies that Dependabot has flagged but is not able to test successfully due to a bug with the E2E configuration.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-03-14 17:31:27 -04:00
Carlo Costino 476ba798fc This changeset updates notifications_utils to 0.3.0 to account for other dependency updates.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-03-14 15:18:40 -04:00
samathad2023 c3bb44129c tests and orderedset updates for 3.12 upgrade 2024-03-08 15:00:48 -08:00
dependabot[bot] 25646c2e2f Bump notifications-python-client from 8.2.0 to 9.0.0
Bumps [notifications-python-client](https://github.com/alphagov/notifications-python-client) from 8.2.0 to 9.0.0.
- [Changelog](https://github.com/alphagov/notifications-python-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/alphagov/notifications-python-client/compare/8.2.0...9.0.0)

---
updated-dependencies:
- dependency-name: notifications-python-client
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 17:18:04 +00:00
dependabot[bot] c71a7edcfe Bump flake8 from 6.1.0 to 7.0.0
Bumps [flake8](https://github.com/pycqa/flake8) from 6.1.0 to 7.0.0.
- [Commits](https://github.com/pycqa/flake8/compare/6.1.0...7.0.0)

---
updated-dependencies:
- dependency-name: flake8
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 17:01:47 +00:00
dependabot[bot] 673df7da3d Bump vulture from 2.10 to 2.11
Bumps [vulture](https://github.com/jendrikseipp/vulture) from 2.10 to 2.11.
- [Release notes](https://github.com/jendrikseipp/vulture/releases)
- [Changelog](https://github.com/jendrikseipp/vulture/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jendrikseipp/vulture/compare/v2.10...v2.11)

---
updated-dependencies:
- dependency-name: vulture
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 16:50:02 +00:00
dependabot[bot] d0c4b505b9 Bump black from 23.12.1 to 24.2.0
Bumps [black](https://github.com/psf/black) from 23.12.1 to 24.2.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/23.12.1...24.2.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 16:35:56 +00:00
dependabot[bot] b50fe24c52 Bump coverage from 7.4.0 to 7.4.2
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.4.0 to 7.4.2.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.4.0...7.4.2)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 16:14:06 +00:00
Carlo Costino 14b68c044f Update utils to 0.2.9
quote>
quote> This changeset updates notifications-utils to 0.2.9 to account for a recent cryptography update.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-02-21 15:51:05 -05:00
Carlo Costino df54b066f9 Update notifications-utils to 0.2.8
This updates utils to be 0.2.8 to address the cryptography Dependabot security alert.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-02-06 16:41:07 -05:00
Kenneth Kehl 338a6426c3 inline code for govuk_frontend_jinja 2024-02-06 13:17:09 -08:00
dependabot[bot] c79c824b24 Bump newrelic from 9.5.0 to 9.6.0
Bumps [newrelic](https://github.com/newrelic/newrelic-python-agent) from 9.5.0 to 9.6.0.
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](https://github.com/newrelic/newrelic-python-agent/compare/v9.5.0...v9.6.0)

---
updated-dependencies:
- dependency-name: newrelic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-25 23:32:58 +00:00
Carlo Costino 1709d3279b Update notifications-utils to 0.2.7
This changeset updates the notifications-utils library to 0.2.7.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-01-24 14:55:55 -05:00
dependabot[bot] ede82d76d6 Bump python-dotenv from 1.0.0 to 1.0.1
Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/theskumar/python-dotenv/compare/v1.0.0...v1.0.1)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-24 18:34:27 +00:00
dependabot[bot] 75a4e1ae6d Bump bandit from 1.7.6 to 1.7.7
Bumps [bandit](https://github.com/PyCQA/bandit) from 1.7.6 to 1.7.7.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](https://github.com/PyCQA/bandit/compare/1.7.6...1.7.7)

---
updated-dependencies:
- dependency-name: bandit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-23 23:36:48 +00:00
dependabot[bot] e5004df43b Bump beautifulsoup4 from 4.12.2 to 4.12.3
Bumps [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) from 4.12.2 to 4.12.3.

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-18 03:12:22 +00:00
dependabot[bot] e242d33b84 Bump flake8-bugbear from 23.12.2 to 24.1.17
Bumps [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear) from 23.12.2 to 24.1.17.
- [Release notes](https://github.com/PyCQA/flake8-bugbear/releases)
- [Commits](https://github.com/PyCQA/flake8-bugbear/compare/23.12.2...24.1.17)

---
updated-dependencies:
- dependency-name: flake8-bugbear
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-17 23:43:06 +00:00
dependabot[bot] 2959e9bb56 Bump newrelic from 9.4.0 to 9.5.0
Bumps [newrelic](https://github.com/newrelic/newrelic-python-agent) from 9.4.0 to 9.5.0.
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](https://github.com/newrelic/newrelic-python-agent/compare/v9.4.0...v9.5.0)

---
updated-dependencies:
- dependency-name: newrelic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-12 23:14:38 +00:00
dependabot[bot] e500ec567e Bump pip-audit from 2.6.3 to 2.7.0
Bumps [pip-audit](https://github.com/pypa/pip-audit) from 2.6.3 to 2.7.0.
- [Release notes](https://github.com/pypa/pip-audit/releases)
- [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pypa/pip-audit/compare/v2.6.3...v2.7.0)

---
updated-dependencies:
- dependency-name: pip-audit
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-12 17:38:22 +00:00
Carlo Costino e5c2bd9ef2 Update notification-utils to 0.2.6
This changeset updates notification-utils to 0.2.6 for dependency updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-01-12 12:24:54 -05:00
dependabot[bot] fa0d1e20d1 Bump jinja2 from 3.1.2 to 3.1.3
Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.2 to 3.1.3.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/3.1.2...3.1.3)

---
updated-dependencies:
- dependency-name: jinja2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-11 14:21:14 +00:00
dependabot[bot] f0e667b3b5 Bump markdown from 3.5.1 to 3.5.2
Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.5.1 to 3.5.2.
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](https://github.com/Python-Markdown/markdown/compare/3.5.1...3.5.2)

---
updated-dependencies:
- dependency-name: markdown
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-11 00:06:38 +00:00
Carlo Costino 8d6e455d18 Update utils to 0.2.5
This changeset updates the notification-utils library to 0.2.5.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-01-10 13:23:19 -05:00
dependabot[bot] 12b8b1ce9c Bump gitpython from 3.1.40 to 3.1.41
Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.40 to 3.1.41.
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.40...3.1.41)

---
updated-dependencies:
- dependency-name: gitpython
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-10 17:14:29 +00:00
dependabot[bot] 4d06c9d389 Bump wtforms from 3.1.1 to 3.1.2
Bumps [wtforms](https://github.com/wtforms/wtforms) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/wtforms/wtforms/releases)
- [Changelog](https://github.com/wtforms/wtforms/blob/master/CHANGES.rst)
- [Commits](https://github.com/wtforms/wtforms/compare/3.1.1...3.1.2)

---
updated-dependencies:
- dependency-name: wtforms
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-09 23:11:19 +00:00
Anastasia Gradova 624ba5f7f7 Merge branch 'main' into 976-convert-start-pages-to-generate-markdown 2024-01-09 08:42:48 -07:00
dependabot[bot] 8b9a892e76 Bump newrelic from 9.3.0 to 9.4.0
Bumps [newrelic](https://github.com/newrelic/newrelic-python-agent) from 9.3.0 to 9.4.0.
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](https://github.com/newrelic/newrelic-python-agent/compare/v9.3.0...v9.4.0)

---
updated-dependencies:
- dependency-name: newrelic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-09 15:08:35 +00:00
dependabot[bot] 872afba186 Bump pip-audit from 2.6.2 to 2.6.3
Bumps [pip-audit](https://github.com/pypa/pip-audit) from 2.6.2 to 2.6.3.
- [Release notes](https://github.com/pypa/pip-audit/releases)
- [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pypa/pip-audit/compare/v2.6.2...v2.6.3)

---
updated-dependencies:
- dependency-name: pip-audit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-09 14:51:51 +00:00
dependabot[bot] c5c7dd5321 Bump moto from 4.2.12 to 4.2.13
Bumps [moto](https://github.com/getmoto/moto) from 4.2.12 to 4.2.13.
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getmoto/moto/compare/4.2.12...4.2.13)

---
updated-dependencies:
- dependency-name: moto
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-08 23:12:02 +00:00
Anastasia Gradova 69aaf174d7 Merge branch 'main' into 976-convert-start-pages-to-generate-markdown 2024-01-05 09:11:49 -07:00
Carlo Costino f9044589e8 Merge pull request #1056 from GSA/dependabot/pip/notifications-python-client-8.2.0
Bump notifications-python-client from 8.1.0 to 8.2.0
2024-01-03 17:27:20 -05:00
Steven Reilly 4d1261a449 Merge pull request #1055 from GSA/dependabot/pip/coverage-7.4.0
Bump coverage from 7.3.4 to 7.4.0
2024-01-02 11:17:35 -05:00