mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-07-20 06:53:07 -04:00
c2d9a56ff4
This is the newest version. Pyup is complaining about vulnerabilities in version 1.0.1, specifically > Werkzeug version 2.0.2 improves the security of the debugger cookies. > "SameSite" attribute is set to "Strict" instead of "None", and the > secure flag is added when on HTTPS. Previously we were using whatever version of Werkzeug that Flask specified this pins it to get rid of the vulnerability without having to upgrade everything at once. This requires a few changes to tests which were relying on importing `session` and `current_user` from Flask. Previously it seemed that importing these in the tests referred to the same object that was being used in the app. This appears to no longer be the case. This commit works around that by: - using a context manager to get the contents of the session, like we already do in most tests - asserting that the mock which logs the user in is being called with the right values, rather than looking at the state of the `current_user` object (which was probably giving false certainty anyway)
236 lines
4.7 KiB
Plaintext
236 lines
4.7 KiB
Plaintext
#
|
|
# This file is autogenerated by pip-compile with python 3.6
|
|
# To update, run:
|
|
#
|
|
# pip-compile requirements.in
|
|
#
|
|
ago==0.0.93
|
|
# via -r requirements.in
|
|
awscli==1.19.84
|
|
# via
|
|
# awscli-cwlogs
|
|
# notifications-utils
|
|
awscli-cwlogs==1.4.6
|
|
# via -r requirements.in
|
|
bleach==3.3.0
|
|
# via notifications-utils
|
|
blinker==1.4
|
|
# via
|
|
# -r requirements.in
|
|
# gds-metrics
|
|
boto3==1.17.84
|
|
# via notifications-utils
|
|
botocore==1.20.84
|
|
# via
|
|
# awscli
|
|
# boto3
|
|
# s3transfer
|
|
cachetools==4.2.2
|
|
# via notifications-utils
|
|
certifi==2021.5.30
|
|
# via requests
|
|
cffi==1.14.5
|
|
# via cryptography
|
|
chardet==4.0.0
|
|
# via requests
|
|
click==8.0.1
|
|
# via flask
|
|
colorama==0.4.3
|
|
# via awscli
|
|
cryptography==3.3.2
|
|
# via
|
|
# -r requirements.in
|
|
# fido2
|
|
dataclasses==0.8
|
|
# via werkzeug
|
|
dnspython==1.16.0
|
|
# via eventlet
|
|
docopt==0.6.2
|
|
# via notifications-python-client
|
|
docutils==0.15.2
|
|
# via awscli
|
|
et-xmlfile==1.1.0
|
|
# via openpyxl
|
|
eventlet==0.30.2 # pyup: ignore
|
|
# via -r requirements.in
|
|
fido2==0.9.1
|
|
# via -r requirements.in
|
|
flask==1.1.2
|
|
# via
|
|
# -r requirements.in
|
|
# flask-login
|
|
# flask-redis
|
|
# flask-wtf
|
|
# gds-metrics
|
|
# notifications-utils
|
|
flask-login==0.5.0
|
|
# via -r requirements.in
|
|
flask-redis==0.4.0
|
|
# via notifications-utils
|
|
flask-wtf==0.15.1
|
|
# via -r requirements.in
|
|
gds-metrics==0.2.4
|
|
# via -r requirements.in
|
|
geojson==2.5.0
|
|
# via notifications-utils
|
|
govuk-bank-holidays==0.8
|
|
# via
|
|
# -r requirements.in
|
|
# notifications-utils
|
|
govuk-frontend-jinja @ git+https://github.com/alphagov/govuk-frontend-jinja.git@v0.5.8-alpha
|
|
# via -r requirements.in
|
|
greenlet==1.1.0
|
|
# via eventlet
|
|
gunicorn==20.1.0
|
|
# via -r requirements.in
|
|
humanize==3.6.0
|
|
# via -r requirements.in
|
|
idna==2.10
|
|
# via requests
|
|
importlib-metadata==4.6.1
|
|
# via click
|
|
itsdangerous==1.1.0
|
|
# via
|
|
# -r requirements.in
|
|
# flask
|
|
# flask-wtf
|
|
# notifications-utils
|
|
jinja2==2.11.3
|
|
# via
|
|
# flask
|
|
# govuk-frontend-jinja
|
|
# notifications-utils
|
|
jmespath==0.10.0
|
|
# via
|
|
# boto3
|
|
# botocore
|
|
lml==0.1.0
|
|
# via
|
|
# pyexcel
|
|
# pyexcel-io
|
|
lxml==4.6.3
|
|
# via
|
|
# pyexcel-ezodf
|
|
# pyexcel-ods3
|
|
markupsafe==2.0.1
|
|
# via
|
|
# jinja2
|
|
# wtforms
|
|
mistune==0.8.4
|
|
# via notifications-utils
|
|
notifications-python-client==6.2.1
|
|
# via -r requirements.in
|
|
notifications-utils @ git+https://github.com/alphagov/notifications-utils.git@46.1.0
|
|
# via -r requirements.in
|
|
openpyxl==3.0.7
|
|
# via pyexcel-xlsx
|
|
orderedset==2.0.3
|
|
# via notifications-utils
|
|
packaging==20.9
|
|
# via bleach
|
|
phonenumbers==8.12.24
|
|
# via notifications-utils
|
|
prometheus-client==0.10.1
|
|
# via
|
|
# -r requirements.in
|
|
# gds-metrics
|
|
pyasn1==0.4.8
|
|
# via rsa
|
|
pycparser==2.20
|
|
# via cffi
|
|
pyexcel==0.6.6
|
|
# via -r requirements.in
|
|
pyexcel-ezodf==0.3.4
|
|
# via pyexcel-ods3
|
|
pyexcel-io==0.6.4
|
|
# via
|
|
# -r requirements.in
|
|
# pyexcel
|
|
# pyexcel-ods3
|
|
# pyexcel-xls
|
|
# pyexcel-xlsx
|
|
pyexcel-ods3==0.6.0
|
|
# via -r requirements.in
|
|
pyexcel-xls==0.6.2
|
|
# via -r requirements.in
|
|
pyexcel-xlsx==0.6.0
|
|
# via -r requirements.in
|
|
pyjwt==2.1.0
|
|
# via notifications-python-client
|
|
pyparsing==2.4.7
|
|
# via packaging
|
|
pypdf2==1.26.0
|
|
# via notifications-utils
|
|
python-dateutil==2.8.1
|
|
# via
|
|
# awscli-cwlogs
|
|
# botocore
|
|
python-json-logger==2.0.1
|
|
# via notifications-utils
|
|
pytz==2021.1
|
|
# via
|
|
# -r requirements.in
|
|
# notifications-utils
|
|
pyyaml==5.4.1
|
|
# via
|
|
# awscli
|
|
# notifications-utils
|
|
redis==3.5.3
|
|
# via flask-redis
|
|
requests==2.25.1
|
|
# via
|
|
# awscli-cwlogs
|
|
# govuk-bank-holidays
|
|
# notifications-python-client
|
|
# notifications-utils
|
|
rsa==4.7.2
|
|
# via awscli
|
|
rtreelib==0.2.0
|
|
# via -r requirements.in
|
|
s3transfer==0.4.2
|
|
# via
|
|
# awscli
|
|
# boto3
|
|
shapely==1.7.1
|
|
# via
|
|
# -r requirements.in
|
|
# notifications-utils
|
|
six==1.16.0
|
|
# via
|
|
# awscli-cwlogs
|
|
# bleach
|
|
# cryptography
|
|
# eventlet
|
|
# fido2
|
|
# govuk-bank-holidays
|
|
# python-dateutil
|
|
smartypants==2.0.1
|
|
# via notifications-utils
|
|
statsd==3.3.0
|
|
# via notifications-utils
|
|
texttable==1.6.3
|
|
# via pyexcel
|
|
typing-extensions==3.10.0.0
|
|
# via importlib-metadata
|
|
urllib3==1.26.5
|
|
# via
|
|
# botocore
|
|
# requests
|
|
webencodings==0.5.1
|
|
# via bleach
|
|
werkzeug==2.0.2
|
|
# via
|
|
# -r requirements.in
|
|
# flask
|
|
wtforms==2.3.3
|
|
# via flask-wtf
|
|
xlrd==1.2.0
|
|
# via pyexcel-xls
|
|
xlwt==1.3.0
|
|
# via pyexcel-xls
|
|
zipp==3.5.0
|
|
# via importlib-metadata
|
|
|
|
# The following packages are considered to be unsafe in a requirements file:
|
|
# setuptools
|