Kenneth Kehl
9ec75c57c8
remove check-db-notification-fails task from schedule
2024-04-18 08:49:14 -07:00
Carlo Costino
cd00d14c1f
Update gunicorn to latest release
...
This changeset updates the gunicorn dependency to the latest release to address a recent CVE.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2024-04-17 18:02:21 -04:00
Carlo Costino
b950767ca6
Updated dependencies and ignore gunicorn audit flag
...
This changeset updates a couple of dependencies, including our Python dependency audit check, and specifically ignores a gunicorn audit flag that appeared on 4/16/2024.
As soon as there is an update available for gunicorn that addresses the issue we will remove the flag to ignore the vulnerability report and update the dependency.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2024-04-16 11:55:52 -04:00
Kenneth Kehl
0f3cdcf56a
fix tests
2024-04-12 09:23:22 -07:00
Carlo Costino
906609e4de
Update utils to 0.4.6
...
This changeset updates notifications-utils to 0.4.6 in order to address some dependency updates and incorporate a few minor changes.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2024-04-11 18:01:09 -04:00
dependabot[bot]
6f6ab1a0e2
Bump flask-migrate from 4.0.5 to 4.0.7
...
Bumps [flask-migrate](https://github.com/miguelgrinberg/flask-migrate ) from 4.0.5 to 4.0.7.
- [Release notes](https://github.com/miguelgrinberg/flask-migrate/releases )
- [Changelog](https://github.com/miguelgrinberg/Flask-Migrate/blob/main/CHANGES.md )
- [Commits](https://github.com/miguelgrinberg/flask-migrate/compare/v4.0.5...v4.0.7 )
---
updated-dependencies:
- dependency-name: flask-migrate
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-04-11 21:29:41 +00:00
Carlo Costino
f6c1c80bd4
Merge pull request #916 from GSA/notify-api-662
...
remove deprecated notification
2024-04-11 16:04:52 -04:00
Kenneth Kehl
8fba67170e
remove deprecated notification
2024-04-11 10:28:09 -07:00
dependabot[bot]
c5be822775
Bump moto from 5.0.3 to 5.0.5
...
Bumps [moto](https://github.com/getmoto/moto ) from 5.0.3 to 5.0.5.
- [Release notes](https://github.com/getmoto/moto/releases )
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md )
- [Commits](https://github.com/getmoto/moto/compare/5.0.3...5.0.5 )
---
updated-dependencies:
- dependency-name: moto
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-04-11 17:00:36 +00:00
Anastasia Gradova
39101f0789
updated lock file
2024-04-11 10:24:06 -06:00
Anastasia Gradova
0bb80c9d22
Added sqlalchemy-utils and put methods in to
...
create and delete the test_notifications_api db
before and after the tests run.
2024-04-10 19:57:53 -06:00
dependabot[bot]
8d176c8998
Bump werkzeug from 3.0.1 to 3.0.2
...
Bumps [werkzeug](https://github.com/pallets/werkzeug ) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/pallets/werkzeug/releases )
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst )
- [Commits](https://github.com/pallets/werkzeug/compare/3.0.1...3.0.2 )
---
updated-dependencies:
- dependency-name: werkzeug
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-04-08 21:57:21 +00:00
Carlo Costino
1a7d2c210c
Update utils to 0.4.5
...
This changeset updates notifications-utils to 0.4.5, which includes a few minor fixes and several dependency updates.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2024-04-08 10:02:35 -04:00
dependabot[bot]
9843b43bac
Bump lxml from 5.1.0 to 5.2.1
...
Bumps [lxml](https://github.com/lxml/lxml ) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/lxml/lxml/releases )
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt )
- [Commits](https://github.com/lxml/lxml/compare/lxml-5.1.0...lxml-5.2.1 )
---
updated-dependencies:
- dependency-name: lxml
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-04-05 19:25:44 +00:00
Kenneth Kehl
23335bb4a9
fix personalization on job/service/notification api
2024-04-05 11:38:00 -07:00
Carlo Costino
34cc85e662
Update GitHub Actions
...
This changeset updates all references to GitHub Actions to be version 4 due to a mandatory Node.js update.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2024-04-04 08:35:00 -04:00
dependabot[bot]
85dac023c7
Bump eventlet from 0.35.2 to 0.36.1
...
Bumps [eventlet](https://github.com/eventlet/eventlet ) from 0.35.2 to 0.36.1.
- [Changelog](https://github.com/eventlet/eventlet/blob/master/NEWS )
- [Commits](https://github.com/eventlet/eventlet/compare/v0.35.2...0.36.1 )
---
updated-dependencies:
- dependency-name: eventlet
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-04-03 23:04:54 +00:00
dependabot[bot]
6eaa5e124b
Bump faker from 23.3.0 to 24.4.0
...
Bumps [faker](https://github.com/joke2k/faker ) from 23.3.0 to 24.4.0.
- [Release notes](https://github.com/joke2k/faker/releases )
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md )
- [Commits](https://github.com/joke2k/faker/compare/v23.3.0...v24.4.0 )
---
updated-dependencies:
- dependency-name: faker
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-03-25 21:11:45 +00:00
dependabot[bot]
a365a36eb5
Bump black from 23.12.1 to 24.3.0
...
Bumps [black](https://github.com/psf/black ) from 23.12.1 to 24.3.0.
- [Release notes](https://github.com/psf/black/releases )
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md )
- [Commits](https://github.com/psf/black/compare/23.12.1...24.3.0 )
---
updated-dependencies:
- dependency-name: black
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-03-22 16:30:00 +00:00
Cliff Hill
b546e83399
Making setuptools a regular dependency.
...
Signed-off-by: Cliff Hill <Clifford.hill@gsa.gov >
2024-03-22 12:04:49 -04:00
samathad2023
61ce2b08b8
utils dependencies updates
2024-03-21 13:02:54 -07:00
samathad2023
172497c19e
Latest utils commit updates sync with main
2024-03-20 14:09:46 -07:00
dependabot[bot]
fee88b86d2
Bump cachetools from 5.3.2 to 5.3.3
...
Bumps [cachetools](https://github.com/tkem/cachetools ) from 5.3.2 to 5.3.3.
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/tkem/cachetools/compare/v5.3.2...v5.3.3 )
---
updated-dependencies:
- dependency-name: cachetools
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-03-14 21:18:07 +00:00
Carlo Costino
3c651a3834
Merge pull request #844 from GSA/dependabot/pip/moto-5.0.3
...
Bump moto from 4.2.13 to 5.0.3
2024-03-14 17:14:06 -04:00
Carlo Costino
435f23b5f0
This changeset updates notifications_utils to 0.3.0 to account for other dependency updates. It also accounts for the removal of Celery in utils.
...
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2024-03-14 15:15:51 -04:00
dependabot[bot]
da3c3f2508
Bump moto from 4.2.13 to 5.0.3
...
Bumps [moto](https://github.com/getmoto/moto ) from 4.2.13 to 5.0.3.
- [Release notes](https://github.com/getmoto/moto/releases )
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md )
- [Commits](https://github.com/getmoto/moto/compare/4.2.13...5.0.3 )
---
updated-dependencies:
- dependency-name: moto
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-03-14 19:15:37 +00:00
Kenneth Kehl
c7ff5e44c6
duh
2024-03-14 11:27:26 -07:00
samathad2023
e0ed44763f
removed dependencies strenum
2024-03-13 14:21:25 -07:00
samathad2023
b8c5a241a3
updates needs for python version upgrade
2024-03-08 15:09:30 -08:00
Kenneth Kehl
dc9ef55ea4
merge from main
2024-03-07 08:08:24 -08:00
Kenneth Kehl
abce798f5b
remove celery from notifications-utils (notify-api-130)
2024-03-04 10:32:19 -08:00
Anastasia Gradova
c0e3a68a07
Added faker to poetry lock file
2024-03-01 12:43:35 -07:00
Anastasia Gradova
eb52cdff0d
New lock file
2024-03-01 12:34:01 -07:00
Cliff Hill
c49e1fa5f0
Updated and fixed poetry.lock.
...
Signed-off-by: Cliff Hill <Clifford.hill@gsa.gov >
2024-02-28 13:08:51 -05:00
Cliff Hill
116078524e
Switching to using StrEnum, which is in an external lib until 3.11.
...
Signed-off-by: Cliff Hill <Clifford.hill@gsa.gov >
2024-02-28 12:44:15 -05:00
dependabot[bot]
bfb619d5e9
Bump notifications-python-client from 8.2.0 to 9.0.0
...
Bumps [notifications-python-client](https://github.com/alphagov/notifications-python-client ) from 8.2.0 to 9.0.0.
- [Changelog](https://github.com/alphagov/notifications-python-client/blob/main/CHANGELOG.md )
- [Commits](https://github.com/alphagov/notifications-python-client/compare/8.2.0...9.0.0 )
---
updated-dependencies:
- dependency-name: notifications-python-client
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-02-23 17:18:46 +00:00
dependabot[bot]
9cd68a10dc
Bump flake8 from 6.1.0 to 7.0.0
...
Bumps [flake8](https://github.com/pycqa/flake8 ) from 6.1.0 to 7.0.0.
- [Commits](https://github.com/pycqa/flake8/compare/6.1.0...7.0.0 )
---
updated-dependencies:
- dependency-name: flake8
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-02-23 17:04:42 +00:00
dependabot[bot]
1cf2a81d26
Bump eventlet from 0.34.3 to 0.35.2
...
Bumps [eventlet](https://github.com/eventlet/eventlet ) from 0.34.3 to 0.35.2.
- [Changelog](https://github.com/eventlet/eventlet/blob/master/NEWS )
- [Commits](https://github.com/eventlet/eventlet/compare/v0.34.3...v0.35.2 )
---
updated-dependencies:
- dependency-name: eventlet
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-02-23 16:13:35 +00:00
Carlo Costino
d1d55cca4e
Update utils to 0.2.9
...
This changeset updates notifications-utils to 0.2.9 to account for a recent cryptography update.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2024-02-21 15:50:55 -05:00
Carlo Costino
7ff858563e
Update utils to 0.2.8
...
This changeset updates notifications-utils to 0.2.8 to address a cryptography dependency update and Dependabot security alert.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2024-02-06 16:32:31 -05:00
dependabot[bot]
d9ca597106
Bump aiohttp from 3.9.0 to 3.9.2
...
Bumps [aiohttp](https://github.com/aio-libs/aiohttp ) from 3.9.0 to 3.9.2.
- [Release notes](https://github.com/aio-libs/aiohttp/releases )
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst )
- [Commits](https://github.com/aio-libs/aiohttp/compare/v3.9.0...v3.9.2 )
---
updated-dependencies:
- dependency-name: aiohttp
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-01-30 00:13:57 +00:00
Carlo Costino
3157aa2ee1
Update notifications-utils to 0.2.7
...
This changeset updates the notifications-utils library to 0.2.7.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2024-01-24 14:54:15 -05:00
dependabot[bot]
aa6f8afa44
Bump beautifulsoup4 from 4.12.2 to 4.12.3
...
Bumps [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/ ) from 4.12.2 to 4.12.3.
---
updated-dependencies:
- dependency-name: beautifulsoup4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-01-19 21:12:26 +00:00
dependabot[bot]
df97d42c7d
Bump flake8-bugbear from 23.12.2 to 24.1.17
...
Bumps [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear ) from 23.12.2 to 24.1.17.
- [Release notes](https://github.com/PyCQA/flake8-bugbear/releases )
- [Commits](https://github.com/PyCQA/flake8-bugbear/compare/23.12.2...24.1.17 )
---
updated-dependencies:
- dependency-name: flake8-bugbear
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-01-18 22:47:06 +00:00
dependabot[bot]
ef6c117a58
Bump newrelic from 9.4.0 to 9.5.0
...
Bumps [newrelic](https://github.com/newrelic/newrelic-python-agent ) from 9.4.0 to 9.5.0.
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases )
- [Commits](https://github.com/newrelic/newrelic-python-agent/compare/v9.4.0...v9.5.0 )
---
updated-dependencies:
- dependency-name: newrelic
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-01-12 22:57:12 +00:00
dependabot[bot]
8cd90fb5c4
Bump pip-audit from 2.6.3 to 2.7.0
...
Bumps [pip-audit](https://github.com/pypa/pip-audit ) from 2.6.3 to 2.7.0.
- [Release notes](https://github.com/pypa/pip-audit/releases )
- [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md )
- [Commits](https://github.com/pypa/pip-audit/compare/v2.6.3...v2.7.0 )
---
updated-dependencies:
- dependency-name: pip-audit
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-01-12 21:26:37 +00:00
dependabot[bot]
79c61b3984
Bump marshmallow-sqlalchemy from 0.29.0 to 0.30.0
...
Bumps [marshmallow-sqlalchemy](https://github.com/marshmallow-code/marshmallow-sqlalchemy ) from 0.29.0 to 0.30.0.
- [Changelog](https://github.com/marshmallow-code/marshmallow-sqlalchemy/blob/dev/CHANGELOG.rst )
- [Commits](https://github.com/marshmallow-code/marshmallow-sqlalchemy/compare/0.29.0...0.30.0 )
---
updated-dependencies:
- dependency-name: marshmallow-sqlalchemy
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-01-12 18:33:08 +00:00
dependabot[bot]
d7971d7976
Bump eventlet from 0.34.2 to 0.34.3
...
Bumps [eventlet](https://github.com/eventlet/eventlet ) from 0.34.2 to 0.34.3.
- [Changelog](https://github.com/eventlet/eventlet/blob/master/NEWS )
- [Commits](https://github.com/eventlet/eventlet/compare/v0.34.2...v0.34.3 )
---
updated-dependencies:
- dependency-name: eventlet
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-01-12 17:39:34 +00:00
Carlo Costino
590d8458d7
Update notification-utils to 0.2.6
...
This changeset updates notification-utils to 0.2.6 for dependency updates.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2024-01-12 12:22:52 -05:00
Carlo Costino
70fe99543d
Merge pull request #728 from GSA/update-jinja
...
Update jinja2 to latest release
2024-01-11 11:28:08 -05:00