Merge pull request #2457 from GSA/dependabot/npm_and_yarn/tar-fs-3.0.8

Bump tar-fs from 3.0.6 to 3.0.8
Merge pull request #2459 from GSA/dependabot/pip/click-8.1.8
2026-08-29 02:34:02 -04:00 · 2025-03-29 08:48:34 -04:00 · 2025-03-29 08:48:17 -04:00 · 2025-03-29 12:24:29 +00:00 · 2025-03-29 08:22:37 -04:00 · 2025-03-28 22:19:50 +00:00
4 changed files with 102 additions and 62 deletions
--- a/app/assets/sass/uswds/_uswds-theme-custom-styles.scss
+++ b/app/assets/sass/uswds/_uswds-theme-custom-styles.scss
@@ -591,11 +591,25 @@ td.table-empty-message {
        .big-number-smallest {
          font-size: units(3);
        }
+        .pill-item__label {
+          color: white;
+        }
        &:not(.pill-item--selected):hover {
          background: color('blue-warm-70v');
+
+          .pill-item__label {
+            color: white;
+          }
        }
-        &.pill-item--selected:hover {
-          color: color('blue-60v');
+        &.pill-item--selected {
+          .pill-item__label {
+            color: color('blue-60v');
+          }
+          &:hover {
+            .pill-item__label {
+              color: color('blue-60v');
+            }
+          }
        }
      }
    }
--- a/package-lock.json
+++ b/package-lock.json
@@ -3866,50 +3866,80 @@
      "dev": true
    },
    "node_modules/bare-events": {
-      "version": "2.4.2",
-      "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.4.2.tgz",
-      "integrity": "sha512-qMKFd2qG/36aA4GwvKq8MxnPgCQAmBWmSyLWsJcbn8v03wvIPQ/hG1Ms8bPzndZxMDoHpxez5VOS+gC9Yi24/Q==",
+      "version": "2.5.4",
+      "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.5.4.tgz",
+      "integrity": "sha512-+gFfDkR8pj4/TrWCGUGWmJIkBwuxPS5F+a5yWjOHQt2hHvNZd5YLzadjmDUtFmMM4y429bnKLa8bYBMHcYdnQA==",
      "dev": true,
+      "license": "Apache-2.0",
      "optional": true
    },
    "node_modules/bare-fs": {
-      "version": "2.3.4",
-      "resolved": "https://registry.npmjs.org/bare-fs/-/bare-fs-2.3.4.tgz",
-      "integrity": "sha512-7YyxitZEq0ey5loOF5gdo1fZQFF7290GziT+VbAJ+JbYTJYaPZwuEz2r/Nq23sm4fjyTgUf2uJI2gkT3xAuSYA==",
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.0.2.tgz",
+      "integrity": "sha512-S5mmkMesiduMqnz51Bfh0Et9EX0aTCJxhsI4bvzFFLs8Z1AV8RDHadfY5CyLwdoLHgXbNBEN1gQcbEtGwuvixw==",
      "dev": true,
+      "license": "Apache-2.0",
      "optional": true,
      "dependencies": {
-        "bare-events": "^2.0.0",
-        "bare-path": "^2.0.0",
-        "bare-stream": "^2.0.0"
+        "bare-events": "^2.5.4",
+        "bare-path": "^3.0.0",
+        "bare-stream": "^2.6.4"
+      },
+      "engines": {
+        "bare": ">=1.16.0"
+      },
+      "peerDependencies": {
+        "bare-buffer": "*"
+      },
+      "peerDependenciesMeta": {
+        "bare-buffer": {
+          "optional": true
+        }
      }
    },
    "node_modules/bare-os": {
-      "version": "2.4.3",
-      "resolved": "https://registry.npmjs.org/bare-os/-/bare-os-2.4.3.tgz",
-      "integrity": "sha512-FjkNiU3AwTQNQkcxFOmDcCfoN1LjjtU+ofGJh5DymZZLTqdw2i/CzV7G0h3snvh6G8jrWtdmNSgZPH4L2VOAsQ==",
+      "version": "3.6.1",
+      "resolved": "https://registry.npmjs.org/bare-os/-/bare-os-3.6.1.tgz",
+      "integrity": "sha512-uaIjxokhFidJP+bmmvKSgiMzj2sV5GPHaZVAIktcxcpCyBFFWO+YlikVAdhmUo2vYFvFhOXIAlldqV29L8126g==",
      "dev": true,
-      "optional": true
+      "license": "Apache-2.0",
+      "optional": true,
+      "engines": {
+        "bare": ">=1.14.0"
+      }
    },
    "node_modules/bare-path": {
-      "version": "2.1.3",
-      "resolved": "https://registry.npmjs.org/bare-path/-/bare-path-2.1.3.tgz",
-      "integrity": "sha512-lh/eITfU8hrj9Ru5quUp0Io1kJWIk1bTjzo7JH1P5dWmQ2EL4hFUlfI8FonAhSlgIfhn63p84CDY/x+PisgcXA==",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/bare-path/-/bare-path-3.0.0.tgz",
+      "integrity": "sha512-tyfW2cQcB5NN8Saijrhqn0Zh7AnFNsnczRcuWODH0eYAXBsJ5gVxAUuNr7tsHSC6IZ77cA0SitzT+s47kot8Mw==",
      "dev": true,
+      "license": "Apache-2.0",
      "optional": true,
      "dependencies": {
-        "bare-os": "^2.1.0"
+        "bare-os": "^3.0.1"
      }
    },
    "node_modules/bare-stream": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.3.0.tgz",
-      "integrity": "sha512-pVRWciewGUeCyKEuRxwv06M079r+fRjAQjBEK2P6OYGrO43O+Z0LrPZZEjlc4mB6C2RpZ9AxJ1s7NLEtOHO6eA==",
+      "version": "2.6.5",
+      "resolved": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.6.5.tgz",
+      "integrity": "sha512-jSmxKJNJmHySi6hC42zlZnq00rga4jjxcgNZjY9N5WlOe/iOoGRtdwGsHzQv2RlH2KOYMwGUXhf2zXd32BA9RA==",
      "dev": true,
+      "license": "Apache-2.0",
      "optional": true,
      "dependencies": {
-        "b4a": "^1.6.6",
-        "streamx": "^2.20.0"
+        "streamx": "^2.21.0"
+      },
+      "peerDependencies": {
+        "bare-buffer": "*",
+        "bare-events": "*"
+      },
+      "peerDependenciesMeta": {
+        "bare-buffer": {
+          "optional": true
+        },
+        "bare-events": {
+          "optional": true
+        }
      }
    },
    "node_modules/base64-js": {
@@ -11156,12 +11186,6 @@
        }
      ]
    },
-    "node_modules/queue-tick": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/queue-tick/-/queue-tick-1.0.1.tgz",
-      "integrity": "sha512-kJt5qhMxoszgU/62PLP1CJytzd2NKetjSRnyuj31fDd3Rlcz3fzlFdFLD1SItunPwyqEOkca6GbV612BWfaBag==",
-      "dev": true
-    },
    "node_modules/range-parser": {
      "version": "1.2.1",
      "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
@@ -12457,13 +12481,13 @@
      "dev": true
    },
    "node_modules/streamx": {
-      "version": "2.20.0",
-      "resolved": "https://registry.npmjs.org/streamx/-/streamx-2.20.0.tgz",
-      "integrity": "sha512-ZGd1LhDeGFucr1CUCTBOS58ZhEendd0ttpGT3usTvosS4ntIwKN9LJFp+OeCSprsCPL14BXVRZlHGRY1V9PVzQ==",
+      "version": "2.22.0",
+      "resolved": "https://registry.npmjs.org/streamx/-/streamx-2.22.0.tgz",
+      "integrity": "sha512-sLh1evHOzBy/iWRiR6d1zRcLao4gGZr3C1kzNz4fopCOKJb6xD9ub8Mpi9Mr1R6id5o43S+d93fI48UC5uM9aw==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
        "fast-fifo": "^1.3.2",
-        "queue-tick": "^1.0.1",
        "text-decoder": "^1.1.0"
      },
      "optionalDependencies": {
@@ -12643,17 +12667,18 @@
      }
    },
    "node_modules/tar-fs": {
-      "version": "3.0.6",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-3.0.6.tgz",
-      "integrity": "sha512-iokBDQQkUyeXhgPYaZxmczGPhnhXZ0CmrqI+MOb/WFGS9DW5wnfrLgtjUJBvz50vQ3qfRwJ62QVoCFu8mPVu5w==",
+      "version": "3.0.8",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-3.0.8.tgz",
+      "integrity": "sha512-ZoROL70jptorGAlgAYiLoBLItEKw/fUxg9BSYK/dF/GAGYFJOJJJMvjPAKDJraCXFwadD456FCuvLWgfhMsPwg==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
        "pump": "^3.0.0",
        "tar-stream": "^3.1.5"
      },
      "optionalDependencies": {
-        "bare-fs": "^2.1.1",
-        "bare-path": "^2.1.0"
+        "bare-fs": "^4.0.1",
+        "bare-path": "^3.0.0"
      }
    },
    "node_modules/tar-fs/node_modules/pump": {
--- a/poetry.lock
+++ b/poetry.lock
@@ -492,14 +492,14 @@ files = [

 [[package]]
 name = "click"
-version = "8.1.7"
+version = "8.1.8"
 description = "Composable command line interface toolkit"
 optional = false
 python-versions = ">=3.7"
 groups = ["main", "dev"]
 files = [
-    {file = "click-8.1.7-py3-none-any.whl", hash = "sha256:ae74fb96c20a0277a1d615f1e4d73c8414f5a98db8b799a7931d1582f3390c28"},
-    {file = "click-8.1.7.tar.gz", hash = "sha256:ca9853ad459e787e2192211578cc907e7594e294c7ccc834310722b41b9ca6de"},
+    {file = "click-8.1.8-py3-none-any.whl", hash = "sha256:63c132bbbed01578a06712a2d1f497bb62d9c1c0d329b7903a866228027263b2"},
+    {file = "click-8.1.8.tar.gz", hash = "sha256:ed53c9d8990d83c2a27deae68e4ee337473f6330c040a31d4225c9574d16096a"},
 ]

 [package.dependencies]
@@ -860,18 +860,18 @@ pyflakes = ">=3.2.0,<3.3.0"

 [[package]]
 name = "flake8-bugbear"
-version = "24.8.19"
+version = "24.12.12"
 description = "A plugin for flake8 finding likely bugs and design problems in your program. Contains warnings that don't belong in pyflakes and pycodestyle."
 optional = false
 python-versions = ">=3.8.1"
 groups = ["dev"]
 files = [
-    {file = "flake8_bugbear-24.8.19-py3-none-any.whl", hash = "sha256:25bc3867f7338ee3b3e0916bf8b8a0b743f53a9a5175782ddc4325ed4f386b89"},
-    {file = "flake8_bugbear-24.8.19.tar.gz", hash = "sha256:9b77627eceda28c51c27af94560a72b5b2c97c016651bdce45d8f56c180d2d32"},
+    {file = "flake8_bugbear-24.12.12-py3-none-any.whl", hash = "sha256:1b6967436f65ca22a42e5373aaa6f2d87966ade9aa38d4baf2a1be550767545e"},
+    {file = "flake8_bugbear-24.12.12.tar.gz", hash = "sha256:46273cef0a6b6ff48ca2d69e472f41420a42a46e24b2a8972e4f0d6733d12a64"},
 ]

 [package.dependencies]
-attrs = ">=19.2.0"
+attrs = ">=22.2.0"
 flake8 = ">=6.0.0"

 [package.extras]
@@ -1186,14 +1186,14 @@ lxml = ["lxml ; platform_python_implementation == \"CPython\""]

 [[package]]
 name = "humanize"
-version = "4.11.0"
+version = "4.12.2"
 description = "Python humanize utilities"
 optional = false
 python-versions = ">=3.9"
 groups = ["main"]
 files = [
-    {file = "humanize-4.11.0-py3-none-any.whl", hash = "sha256:b53caaec8532bcb2fff70c8826f904c35943f8cecaca29d272d9df38092736c0"},
-    {file = "humanize-4.11.0.tar.gz", hash = "sha256:e66f36020a2d5a974c504bd2555cf770621dbdbb6d82f94a6857c0b1ea2608be"},
+    {file = "humanize-4.12.2-py3-none-any.whl", hash = "sha256:e4e44dced598b7e03487f3b1c6fd5b1146c30ea55a110e71d5d4bca3e094259e"},
+    {file = "humanize-4.12.2.tar.gz", hash = "sha256:ce0715740e9caacc982bb89098182cf8ded3552693a433311c6a4ce6f4e12a2c"},
 ]

 [package.extras]
@@ -2291,20 +2291,21 @@ lxml = "*"

 [[package]]
 name = "pyexcel-io"
-version = "0.6.6"
+version = "0.6.7"
 description = "A python library to read and write structured data in csv, zipped csvformat and to/from databases"
 optional = false
 python-versions = ">=3.6"
 groups = ["main"]
 files = [
-    {file = "pyexcel-io-0.6.6.tar.gz", hash = "sha256:f6084bf1afa5fbf4c61cf7df44370fa513821af188b02e3e19b5efb66d8a969f"},
-    {file = "pyexcel_io-0.6.6-py2.py3-none-any.whl", hash = "sha256:19ff1d599a8a6c0982e4181ef86aa50e1f8d231410fa7e0e204d62e37551c1d6"},
+    {file = "pyexcel_io-0.6.7-py2.py3-none-any.whl", hash = "sha256:add9f3c1489070ab0a3226bab7d23d4b84a364f5b44f3a14e2ce785ede88fcb3"},
+    {file = "pyexcel_io-0.6.7.tar.gz", hash = "sha256:2c33d8df505e21a13bed585ac6ab7d30ec826a9f156b758394af5d22359bddb9"},
 ]

 [package.dependencies]
 lml = ">=0.0.4"

 [package.extras]
+extra = ["chardet"]
 ods = ["pyexcel-ods3 (>=0.6.0)"]
 xls = ["pyexcel-xls (>=0.6.0)"]
 xlsx = ["pyexcel-xlsx (>=0.6.0)"]
@@ -2597,14 +2598,14 @@ six = ">=1.5"

 [[package]]
 name = "python-dotenv"
-version = "1.0.1"
+version = "1.1.0"
 description = "Read key-value pairs from a .env file and set them as environment variables"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.9"
 groups = ["main"]
 files = [
-    {file = "python-dotenv-1.0.1.tar.gz", hash = "sha256:e324ee90a023d808f1959c46bcbc04446a10ced277783dc6ee09987c37ec10ca"},
-    {file = "python_dotenv-1.0.1-py3-none-any.whl", hash = "sha256:f7b63ef50f1b690dddf550d03497b66d609393b40b564ed0d674909a68ebf16a"},
+    {file = "python_dotenv-1.1.0-py3-none-any.whl", hash = "sha256:d7c01d9e2293916c18baf562d95698754b0dbbb5e74d457c45d4f6561fb9d55d"},
+    {file = "python_dotenv-1.1.0.tar.gz", hash = "sha256:41f90bc6f5f177fb41f53e87666db362025010eb28f60a01c9143bfa33a2b2d5"},
 ]

 [package.extras]
@@ -3296,4 +3297,4 @@ files = [
 [metadata]
 lock-version = "2.1"
 python-versions = "^3.12.2"
-content-hash = "3bc9a79936a2b10ff7c39ec45beed85586c41d057be26c461a3bcc7b2ccb6a28"
+content-hash = "de927a2573d395cf3063c46e62e79b710e4bf32830c1310f9fd34b649c7b1d2f"
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -19,19 +19,19 @@ flask-login = "^0.6"
 flask-talisman = "*"
 flask-wtf = "^1.2"
 gunicorn = {version = "==23.0.0", extras = ["eventlet"]}
-humanize = "~=4.10"
+humanize = "~=4.12"
 itsdangerous = "~=2.2"
 jinja2 = "^3.1.6"
 newrelic = "*"
 notifications-python-client = "==10.0.0"
 pyexcel = "==0.7.2"
-pyexcel-io = "==0.6.6"
+pyexcel-io = "==0.6.7"
 pyexcel-ods3 = "==0.6.1"
 pyexcel-xls = "==0.7.1"
 pyexcel-xlsx = "==0.6.0"
 openpyxl = "==3.0.10"
 pyproj = "==3.7.1"
-python-dotenv = "==1.0.1"
+python-dotenv = "==1.1.0"
 pytz = "^2024.1"
 rtreelib = "==0.2.0"
 werkzeug = "^3.0.6"
@@ -60,7 +60,7 @@ shapely = "^2.0.5"
 smartypants = "^2.0.1"
 certifi = "^2025.1.31"
 charset-normalizer = "^3.4.1"
-click = "^8.1.7"
+click = "^8.1.8"
 idna = "^3.7"
 markupsafe = "^2.1.5"
 python-dateutil = "^2.9.0.post0"
@@ -79,7 +79,7 @@ coverage = "*"
 detect-secrets = "^1.5.0"
 freezegun = "^1.5.1"
 flake8 = "^7.1.2"
-flake8-bugbear = "^24.1.17"
+flake8-bugbear = "^24.12.12"
 flake8-print = "^5.0.0"
 flake8-pytest-style = "^2.1.0"
 isort = "^5.13.2"
Author	SHA1	Message	Date
Alex Janousek	bbe1e44366	Merge pull request #2457 from GSA/dependabot/npm_and_yarn/tar-fs-3.0.8 Bump tar-fs from 3.0.6 to 3.0.8	2025-03-29 08:48:34 -04:00
Alex Janousek	685deebae4	Merge pull request #2459 from GSA/dependabot/pip/click-8.1.8 Bump click from 8.1.7 to 8.1.8	2025-03-29 08:48:17 -04:00
dependabot[bot]	918016d4af	Bump click from 8.1.7 to 8.1.8 Bumps [click](https://github.com/pallets/click) from 8.1.7 to 8.1.8. - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](https://github.com/pallets/click/compare/8.1.7...8.1.8) --- updated-dependencies: - dependency-name: click dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-29 12:24:29 +00:00
Alex Janousek	f87f0a1c9e	Merge pull request #2454 from GSA/dependabot/pip/flake8-bugbear-24.12.12 Bump flake8-bugbear from 24.8.19 to 24.12.12	2025-03-29 08:22:37 -04:00
dependabot[bot]	869f76c846	Bump tar-fs from 3.0.6 to 3.0.8 Bumps [tar-fs](https://github.com/mafintosh/tar-fs) from 3.0.6 to 3.0.8. - [Commits](https://github.com/mafintosh/tar-fs/compare/v3.0.6...v3.0.8) --- updated-dependencies: - dependency-name: tar-fs dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-28 22:19:50 +00:00
dependabot[bot]	3946e7bb3a	Bump flake8-bugbear from 24.8.19 to 24.12.12 Bumps [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear) from 24.8.19 to 24.12.12. - [Release notes](https://github.com/PyCQA/flake8-bugbear/releases) - [Commits](https://github.com/PyCQA/flake8-bugbear/compare/24.8.19...24.12.12) --- updated-dependencies: - dependency-name: flake8-bugbear dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-28 19:06:58 +00:00
Alex Janousek	56ee7ec376	Merge pull request #2453 from GSA/dependabot/pip/pyexcel-io-0.6.7 Bump pyexcel-io from 0.6.6 to 0.6.7	2025-03-28 15:04:58 -04:00
dependabot[bot]	5dad9e8f0f	Bump pyexcel-io from 0.6.6 to 0.6.7 Bumps [pyexcel-io](https://github.com/pyexcel/pyexcel-io) from 0.6.6 to 0.6.7. - [Release notes](https://github.com/pyexcel/pyexcel-io/releases) - [Changelog](https://github.com/pyexcel/pyexcel-io/blob/dev/CHANGELOG.rst) - [Commits](https://github.com/pyexcel/pyexcel-io/compare/v0.6.6...v0.6.7) --- updated-dependencies: - dependency-name: pyexcel-io dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-28 18:03:48 +00:00
Alex Janousek	23c5d7aff1	Merge pull request #2455 from GSA/dependabot/pip/humanize-4.12.2 Bump humanize from 4.11.0 to 4.12.2	2025-03-28 14:01:57 -04:00
dependabot[bot]	d2dd249b61	Bump humanize from 4.11.0 to 4.12.2 Bumps [humanize](https://github.com/python-humanize/humanize) from 4.11.0 to 4.12.2. - [Release notes](https://github.com/python-humanize/humanize/releases) - [Commits](https://github.com/python-humanize/humanize/compare/4.11.0...4.12.2) --- updated-dependencies: - dependency-name: humanize dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-28 17:08:41 +00:00
Alex Janousek	3e410ba5b2	Merge pull request #2456 from GSA/dependabot/pip/python-dotenv-1.1.0 Bump python-dotenv from 1.0.1 to 1.1.0	2025-03-28 13:06:49 -04:00
ccostino	a1802a3439	Merge pull request #2451 from GSA/2450-missing-title-visibility css update pill label to show visibility	2025-03-28 09:56:00 -04:00
dependabot[bot]	8897b30b81	Bump python-dotenv from 1.0.1 to 1.1.0 Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 1.0.1 to 1.1.0. - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.0.1...v1.1.0) --- updated-dependencies: - dependency-name: python-dotenv dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-28 00:00:36 +00:00
Beverly Nguyen	b0d8eda0f4	css update pill label	2025-03-27 14:41:45 -07:00