Commit Graph

164 Commits

Author SHA1 Message Date
Kenneth Kehl
9ec75c57c8 remove check-db-notification-fails task from schedule 2024-04-18 08:49:14 -07:00
Carlo Costino
cd00d14c1f Update gunicorn to latest release
This changeset updates the gunicorn dependency to the latest release to address a recent CVE.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-17 18:02:21 -04:00
Carlo Costino
b950767ca6 Updated dependencies and ignore gunicorn audit flag
This changeset updates a couple of dependencies, including our Python dependency audit check, and specifically ignores a gunicorn audit flag that appeared on 4/16/2024.

As soon as there is an update available for gunicorn that addresses the issue we will remove the flag to ignore the vulnerability report and update the dependency.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-16 11:55:52 -04:00
Kenneth Kehl
0f3cdcf56a fix tests 2024-04-12 09:23:22 -07:00
Carlo Costino
906609e4de Update utils to 0.4.6
This changeset updates notifications-utils to 0.4.6 in order to address some dependency updates and incorporate a few minor changes.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-11 18:01:09 -04:00
dependabot[bot]
6f6ab1a0e2 Bump flask-migrate from 4.0.5 to 4.0.7
Bumps [flask-migrate](https://github.com/miguelgrinberg/flask-migrate) from 4.0.5 to 4.0.7.
- [Release notes](https://github.com/miguelgrinberg/flask-migrate/releases)
- [Changelog](https://github.com/miguelgrinberg/Flask-Migrate/blob/main/CHANGES.md)
- [Commits](https://github.com/miguelgrinberg/flask-migrate/compare/v4.0.5...v4.0.7)

---
updated-dependencies:
- dependency-name: flask-migrate
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-11 21:29:41 +00:00
Carlo Costino
f6c1c80bd4 Merge pull request #916 from GSA/notify-api-662
remove deprecated notification
2024-04-11 16:04:52 -04:00
Kenneth Kehl
8fba67170e remove deprecated notification 2024-04-11 10:28:09 -07:00
dependabot[bot]
c5be822775 Bump moto from 5.0.3 to 5.0.5
Bumps [moto](https://github.com/getmoto/moto) from 5.0.3 to 5.0.5.
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getmoto/moto/compare/5.0.3...5.0.5)

---
updated-dependencies:
- dependency-name: moto
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-11 17:00:36 +00:00
Anastasia Gradova
39101f0789 updated lock file 2024-04-11 10:24:06 -06:00
Anastasia Gradova
0bb80c9d22 Added sqlalchemy-utils and put methods in to
create and delete the test_notifications_api db
before and after the tests run.
2024-04-10 19:57:53 -06:00
dependabot[bot]
8d176c8998 Bump werkzeug from 3.0.1 to 3.0.2
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/3.0.1...3.0.2)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 21:57:21 +00:00
Carlo Costino
1a7d2c210c Update utils to 0.4.5
This changeset updates notifications-utils to 0.4.5, which includes a few minor fixes and several dependency updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-08 10:02:35 -04:00
dependabot[bot]
9843b43bac Bump lxml from 5.1.0 to 5.2.1
Bumps [lxml](https://github.com/lxml/lxml) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-5.1.0...lxml-5.2.1)

---
updated-dependencies:
- dependency-name: lxml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-05 19:25:44 +00:00
Kenneth Kehl
23335bb4a9 fix personalization on job/service/notification api 2024-04-05 11:38:00 -07:00
Carlo Costino
34cc85e662 Update GitHub Actions
This changeset updates all references to GitHub Actions to be version 4 due to a mandatory Node.js update.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-04 08:35:00 -04:00
dependabot[bot]
85dac023c7 Bump eventlet from 0.35.2 to 0.36.1
Bumps [eventlet](https://github.com/eventlet/eventlet) from 0.35.2 to 0.36.1.
- [Changelog](https://github.com/eventlet/eventlet/blob/master/NEWS)
- [Commits](https://github.com/eventlet/eventlet/compare/v0.35.2...0.36.1)

---
updated-dependencies:
- dependency-name: eventlet
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-03 23:04:54 +00:00
dependabot[bot]
6eaa5e124b Bump faker from 23.3.0 to 24.4.0
Bumps [faker](https://github.com/joke2k/faker) from 23.3.0 to 24.4.0.
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](https://github.com/joke2k/faker/compare/v23.3.0...v24.4.0)

---
updated-dependencies:
- dependency-name: faker
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 21:11:45 +00:00
dependabot[bot]
a365a36eb5 Bump black from 23.12.1 to 24.3.0
Bumps [black](https://github.com/psf/black) from 23.12.1 to 24.3.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/23.12.1...24.3.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-22 16:30:00 +00:00
Cliff Hill
b546e83399 Making setuptools a regular dependency.
Signed-off-by: Cliff Hill <Clifford.hill@gsa.gov>
2024-03-22 12:04:49 -04:00
samathad2023
61ce2b08b8 utils dependencies updates 2024-03-21 13:02:54 -07:00
samathad2023
172497c19e Latest utils commit updates sync with main 2024-03-20 14:09:46 -07:00
dependabot[bot]
fee88b86d2 Bump cachetools from 5.3.2 to 5.3.3
Bumps [cachetools](https://github.com/tkem/cachetools) from 5.3.2 to 5.3.3.
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/tkem/cachetools/compare/v5.3.2...v5.3.3)

---
updated-dependencies:
- dependency-name: cachetools
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-14 21:18:07 +00:00
Carlo Costino
3c651a3834 Merge pull request #844 from GSA/dependabot/pip/moto-5.0.3
Bump moto from 4.2.13 to 5.0.3
2024-03-14 17:14:06 -04:00
Carlo Costino
435f23b5f0 This changeset updates notifications_utils to 0.3.0 to account for other dependency updates. It also accounts for the removal of Celery in utils.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-03-14 15:15:51 -04:00
dependabot[bot]
da3c3f2508 Bump moto from 4.2.13 to 5.0.3
Bumps [moto](https://github.com/getmoto/moto) from 4.2.13 to 5.0.3.
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getmoto/moto/compare/4.2.13...5.0.3)

---
updated-dependencies:
- dependency-name: moto
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-14 19:15:37 +00:00
Kenneth Kehl
c7ff5e44c6 duh 2024-03-14 11:27:26 -07:00
samathad2023
e0ed44763f removed dependencies strenum 2024-03-13 14:21:25 -07:00
samathad2023
b8c5a241a3 updates needs for python version upgrade 2024-03-08 15:09:30 -08:00
Kenneth Kehl
dc9ef55ea4 merge from main 2024-03-07 08:08:24 -08:00
Kenneth Kehl
abce798f5b remove celery from notifications-utils (notify-api-130) 2024-03-04 10:32:19 -08:00
Anastasia Gradova
c0e3a68a07 Added faker to poetry lock file 2024-03-01 12:43:35 -07:00
Anastasia Gradova
eb52cdff0d New lock file 2024-03-01 12:34:01 -07:00
Cliff Hill
c49e1fa5f0 Updated and fixed poetry.lock.
Signed-off-by: Cliff Hill <Clifford.hill@gsa.gov>
2024-02-28 13:08:51 -05:00
Cliff Hill
116078524e Switching to using StrEnum, which is in an external lib until 3.11.
Signed-off-by: Cliff Hill <Clifford.hill@gsa.gov>
2024-02-28 12:44:15 -05:00
dependabot[bot]
bfb619d5e9 Bump notifications-python-client from 8.2.0 to 9.0.0
Bumps [notifications-python-client](https://github.com/alphagov/notifications-python-client) from 8.2.0 to 9.0.0.
- [Changelog](https://github.com/alphagov/notifications-python-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/alphagov/notifications-python-client/compare/8.2.0...9.0.0)

---
updated-dependencies:
- dependency-name: notifications-python-client
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 17:18:46 +00:00
dependabot[bot]
9cd68a10dc Bump flake8 from 6.1.0 to 7.0.0
Bumps [flake8](https://github.com/pycqa/flake8) from 6.1.0 to 7.0.0.
- [Commits](https://github.com/pycqa/flake8/compare/6.1.0...7.0.0)

---
updated-dependencies:
- dependency-name: flake8
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 17:04:42 +00:00
dependabot[bot]
1cf2a81d26 Bump eventlet from 0.34.3 to 0.35.2
Bumps [eventlet](https://github.com/eventlet/eventlet) from 0.34.3 to 0.35.2.
- [Changelog](https://github.com/eventlet/eventlet/blob/master/NEWS)
- [Commits](https://github.com/eventlet/eventlet/compare/v0.34.3...v0.35.2)

---
updated-dependencies:
- dependency-name: eventlet
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-23 16:13:35 +00:00
Carlo Costino
d1d55cca4e Update utils to 0.2.9
This changeset updates notifications-utils to 0.2.9 to account for a recent cryptography update.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-02-21 15:50:55 -05:00
Carlo Costino
7ff858563e Update utils to 0.2.8
This changeset updates notifications-utils to 0.2.8 to address a cryptography dependency update and Dependabot security alert.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-02-06 16:32:31 -05:00
dependabot[bot]
d9ca597106 Bump aiohttp from 3.9.0 to 3.9.2
Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.9.0 to 3.9.2.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](https://github.com/aio-libs/aiohttp/compare/v3.9.0...v3.9.2)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-30 00:13:57 +00:00
Carlo Costino
3157aa2ee1 Update notifications-utils to 0.2.7
This changeset updates the notifications-utils library to 0.2.7.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-01-24 14:54:15 -05:00
dependabot[bot]
aa6f8afa44 Bump beautifulsoup4 from 4.12.2 to 4.12.3
Bumps [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) from 4.12.2 to 4.12.3.

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-19 21:12:26 +00:00
dependabot[bot]
df97d42c7d Bump flake8-bugbear from 23.12.2 to 24.1.17
Bumps [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear) from 23.12.2 to 24.1.17.
- [Release notes](https://github.com/PyCQA/flake8-bugbear/releases)
- [Commits](https://github.com/PyCQA/flake8-bugbear/compare/23.12.2...24.1.17)

---
updated-dependencies:
- dependency-name: flake8-bugbear
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-18 22:47:06 +00:00
dependabot[bot]
ef6c117a58 Bump newrelic from 9.4.0 to 9.5.0
Bumps [newrelic](https://github.com/newrelic/newrelic-python-agent) from 9.4.0 to 9.5.0.
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](https://github.com/newrelic/newrelic-python-agent/compare/v9.4.0...v9.5.0)

---
updated-dependencies:
- dependency-name: newrelic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-12 22:57:12 +00:00
dependabot[bot]
8cd90fb5c4 Bump pip-audit from 2.6.3 to 2.7.0
Bumps [pip-audit](https://github.com/pypa/pip-audit) from 2.6.3 to 2.7.0.
- [Release notes](https://github.com/pypa/pip-audit/releases)
- [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pypa/pip-audit/compare/v2.6.3...v2.7.0)

---
updated-dependencies:
- dependency-name: pip-audit
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-12 21:26:37 +00:00
dependabot[bot]
79c61b3984 Bump marshmallow-sqlalchemy from 0.29.0 to 0.30.0
Bumps [marshmallow-sqlalchemy](https://github.com/marshmallow-code/marshmallow-sqlalchemy) from 0.29.0 to 0.30.0.
- [Changelog](https://github.com/marshmallow-code/marshmallow-sqlalchemy/blob/dev/CHANGELOG.rst)
- [Commits](https://github.com/marshmallow-code/marshmallow-sqlalchemy/compare/0.29.0...0.30.0)

---
updated-dependencies:
- dependency-name: marshmallow-sqlalchemy
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-12 18:33:08 +00:00
dependabot[bot]
d7971d7976 Bump eventlet from 0.34.2 to 0.34.3
Bumps [eventlet](https://github.com/eventlet/eventlet) from 0.34.2 to 0.34.3.
- [Changelog](https://github.com/eventlet/eventlet/blob/master/NEWS)
- [Commits](https://github.com/eventlet/eventlet/compare/v0.34.2...v0.34.3)

---
updated-dependencies:
- dependency-name: eventlet
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-12 17:39:34 +00:00
Carlo Costino
590d8458d7 Update notification-utils to 0.2.6
This changeset updates notification-utils to 0.2.6 for dependency updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-01-12 12:22:52 -05:00
Carlo Costino
70fe99543d Merge pull request #728 from GSA/update-jinja
Update jinja2 to latest release
2024-01-11 11:28:08 -05:00