Commit Graph

835 Commits

Author SHA1 Message Date
dependabot[bot]
fa07e32c5b Bump botocore from 1.34.94 to 1.34.99
Bumps [botocore](https://github.com/boto/botocore) from 1.34.94 to 1.34.99.
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.34.94...1.34.99)

---
updated-dependencies:
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-07 13:55:53 +00:00
Carlo Costino
b2ac7537f0 Merge pull request #962 from GSA/dependabot/pip/moto-5.0.6
Bump moto from 5.0.5 to 5.0.6
2024-05-07 09:53:16 -04:00
dependabot[bot]
6f6b74e26e Bump pip-audit from 2.7.2 to 2.7.3
Bumps [pip-audit](https://github.com/pypa/pip-audit) from 2.7.2 to 2.7.3.
- [Release notes](https://github.com/pypa/pip-audit/releases)
- [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pypa/pip-audit/compare/v2.7.2...v2.7.3)

---
updated-dependencies:
- dependency-name: pip-audit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-06 21:54:33 +00:00
dependabot[bot]
dee50eacff Bump moto from 5.0.5 to 5.0.6
Bumps [moto](https://github.com/getmoto/moto) from 5.0.5 to 5.0.6.
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getmoto/moto/compare/5.0.5...5.0.6)

---
updated-dependencies:
- dependency-name: moto
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-06 21:52:45 +00:00
Carlo Costino
0723f54150 Updated SQLAlchemy to latest release: 2.0.30
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-06 15:52:39 -04:00
Carlo Costino
fe9cbc99a0 Merge branch 'main' into aanand-sqlalchemy-version-update 2024-05-06 15:28:29 -04:00
dependabot[bot]
017bb63f87 Bump werkzeug from 3.0.2 to 3.0.3
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-06 15:33:18 +00:00
dependabot[bot]
c221514936 Bump jinja2 from 3.1.3 to 3.1.4
Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.3 to 3.1.4.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/3.1.3...3.1.4)

---
updated-dependencies:
- dependency-name: jinja2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-06 14:33:35 +00:00
Carlo Costino
ac898b6ea3 Update marshmallow based on Dependabot
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-01 18:04:29 -04:00
Carlo Costino
a5c67da7a6 Update poetry.lock file for jsonschema
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-01 09:18:33 -04:00
Carlo Costino
ac82ae6f9f Updated utils to 0.5.1 release in prep for Flask upgrade
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-29 15:41:44 -04:00
Carlo Costino
a0d772385b Merge branch 'main' into notify-api-869 2024-04-29 15:40:05 -04:00
Aditi Anand
df2a590f1a Merge branch 'notify-api-869' into aanand-sqlalchemy-version-update 2024-04-24 16:11:03 -04:00
Kenneth Kehl
a2518b8229 fix service invites 2024-04-24 10:51:47 -07:00
samathad2023
c7eba2ba50 latest version urllib3 2024-04-23 09:38:27 -07:00
dependabot[bot]
d014dd7c57 Bump aiohttp from 3.9.3 to 3.9.4
Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.9.3 to 3.9.4.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](https://github.com/aio-libs/aiohttp/compare/v3.9.3...v3.9.4)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-18 16:13:51 +00:00
Kenneth Kehl
9ec75c57c8 remove check-db-notification-fails task from schedule 2024-04-18 08:49:14 -07:00
Carlo Costino
cd00d14c1f Update gunicorn to latest release
This changeset updates the gunicorn dependency to the latest release to address a recent CVE.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-17 18:02:21 -04:00
Carlo Costino
b950767ca6 Updated dependencies and ignore gunicorn audit flag
This changeset updates a couple of dependencies, including our Python dependency audit check, and specifically ignores a gunicorn audit flag that appeared on 4/16/2024.

As soon as there is an update available for gunicorn that addresses the issue we will remove the flag to ignore the vulnerability report and update the dependency.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-16 11:55:52 -04:00
Kenneth Kehl
0f3cdcf56a fix tests 2024-04-12 09:23:22 -07:00
Carlo Costino
906609e4de Update utils to 0.4.6
This changeset updates notifications-utils to 0.4.6 in order to address some dependency updates and incorporate a few minor changes.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-11 18:01:09 -04:00
dependabot[bot]
6f6ab1a0e2 Bump flask-migrate from 4.0.5 to 4.0.7
Bumps [flask-migrate](https://github.com/miguelgrinberg/flask-migrate) from 4.0.5 to 4.0.7.
- [Release notes](https://github.com/miguelgrinberg/flask-migrate/releases)
- [Changelog](https://github.com/miguelgrinberg/Flask-Migrate/blob/main/CHANGES.md)
- [Commits](https://github.com/miguelgrinberg/flask-migrate/compare/v4.0.5...v4.0.7)

---
updated-dependencies:
- dependency-name: flask-migrate
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-11 21:29:41 +00:00
Carlo Costino
f6c1c80bd4 Merge pull request #916 from GSA/notify-api-662
remove deprecated notification
2024-04-11 16:04:52 -04:00
Kenneth Kehl
8fba67170e remove deprecated notification 2024-04-11 10:28:09 -07:00
dependabot[bot]
c5be822775 Bump moto from 5.0.3 to 5.0.5
Bumps [moto](https://github.com/getmoto/moto) from 5.0.3 to 5.0.5.
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getmoto/moto/compare/5.0.3...5.0.5)

---
updated-dependencies:
- dependency-name: moto
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-11 17:00:36 +00:00
Anastasia Gradova
39101f0789 updated lock file 2024-04-11 10:24:06 -06:00
Anastasia Gradova
0bb80c9d22 Added sqlalchemy-utils and put methods in to
create and delete the test_notifications_api db
before and after the tests run.
2024-04-10 19:57:53 -06:00
dependabot[bot]
8d176c8998 Bump werkzeug from 3.0.1 to 3.0.2
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/3.0.1...3.0.2)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 21:57:21 +00:00
samathad2023
85b12f63f9 flask from 3.0.2 to 3.0.3 2024-04-08 12:17:30 -07:00
Carlo Costino
1a7d2c210c Update utils to 0.4.5
This changeset updates notifications-utils to 0.4.5, which includes a few minor fixes and several dependency updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-08 10:02:35 -04:00
dependabot[bot]
9843b43bac Bump lxml from 5.1.0 to 5.2.1
Bumps [lxml](https://github.com/lxml/lxml) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-5.1.0...lxml-5.2.1)

---
updated-dependencies:
- dependency-name: lxml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-05 19:25:44 +00:00
Kenneth Kehl
23335bb4a9 fix personalization on job/service/notification api 2024-04-05 11:38:00 -07:00
samathad2023
6c216a88d7 flask upgrade dependencies 2024-04-04 16:18:57 -07:00
Carlo Costino
34cc85e662 Update GitHub Actions
This changeset updates all references to GitHub Actions to be version 4 due to a mandatory Node.js update.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-04 08:35:00 -04:00
dependabot[bot]
85dac023c7 Bump eventlet from 0.35.2 to 0.36.1
Bumps [eventlet](https://github.com/eventlet/eventlet) from 0.35.2 to 0.36.1.
- [Changelog](https://github.com/eventlet/eventlet/blob/master/NEWS)
- [Commits](https://github.com/eventlet/eventlet/compare/v0.35.2...0.36.1)

---
updated-dependencies:
- dependency-name: eventlet
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-03 23:04:54 +00:00
Aditi Anand
bb2819ccf8 Merge branch 'main' into aanand-sqlalchemy-version-update 2024-03-29 15:51:11 -04:00
dependabot[bot]
6eaa5e124b Bump faker from 23.3.0 to 24.4.0
Bumps [faker](https://github.com/joke2k/faker) from 23.3.0 to 24.4.0.
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](https://github.com/joke2k/faker/compare/v23.3.0...v24.4.0)

---
updated-dependencies:
- dependency-name: faker
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 21:11:45 +00:00
dependabot[bot]
a365a36eb5 Bump black from 23.12.1 to 24.3.0
Bumps [black](https://github.com/psf/black) from 23.12.1 to 24.3.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/23.12.1...24.3.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-22 16:30:00 +00:00
Cliff Hill
b546e83399 Making setuptools a regular dependency.
Signed-off-by: Cliff Hill <Clifford.hill@gsa.gov>
2024-03-22 12:04:49 -04:00
samathad2023
61ce2b08b8 utils dependencies updates 2024-03-21 13:02:54 -07:00
samathad2023
172497c19e Latest utils commit updates sync with main 2024-03-20 14:09:46 -07:00
dependabot[bot]
fee88b86d2 Bump cachetools from 5.3.2 to 5.3.3
Bumps [cachetools](https://github.com/tkem/cachetools) from 5.3.2 to 5.3.3.
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/tkem/cachetools/compare/v5.3.2...v5.3.3)

---
updated-dependencies:
- dependency-name: cachetools
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-14 21:18:07 +00:00
Carlo Costino
3c651a3834 Merge pull request #844 from GSA/dependabot/pip/moto-5.0.3
Bump moto from 4.2.13 to 5.0.3
2024-03-14 17:14:06 -04:00
Carlo Costino
435f23b5f0 This changeset updates notifications_utils to 0.3.0 to account for other dependency updates. It also accounts for the removal of Celery in utils.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-03-14 15:15:51 -04:00
dependabot[bot]
da3c3f2508 Bump moto from 4.2.13 to 5.0.3
Bumps [moto](https://github.com/getmoto/moto) from 4.2.13 to 5.0.3.
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getmoto/moto/compare/4.2.13...5.0.3)

---
updated-dependencies:
- dependency-name: moto
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-14 19:15:37 +00:00
Kenneth Kehl
c7ff5e44c6 duh 2024-03-14 11:27:26 -07:00
samathad2023
e0ed44763f removed dependencies strenum 2024-03-13 14:21:25 -07:00
Aditi Anand
5d15560538 merge with main 2024-03-13 16:56:54 -04:00
Aditi Anand
385ec3583f Initial commit for sqlalchemy2.0 migration 2024-03-13 12:42:11 -04:00
samathad2023
b8c5a241a3 updates needs for python version upgrade 2024-03-08 15:09:30 -08:00