This changeset disables the infrastructure drift check for our demo environment because we are no longer using the demo environment, and the infrastructure is in a known broken state. More work will follow on in the future to clean things up fully.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset puts us back to Python 3.12.9 since we are still wrestling with certificate validation errors in Python 3.13 and no easy way to test things without breaking our deployment flow currently.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset unpins the egress proxy release now that we have resolved the other issues surrounding the connectivity to S3.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset adds the same additional steps needed in our PR checks to make sure the daily checks work properly with the recent Poetry update. It also updates our PR checks to use the latest pip-audit GitHub action.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset updates the PYSEC notices to ignore to due versions that either cannot be fixed or are false positives. Specifically, this changeset removes previously ignored vulnerability reports and adds PYSEC-2023-312 to the list because it is a false positive and refers to Redis itself, not the Python Redis client (see https://github.com/pypa/advisory-database/issues/237 for details).
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset pins the egress proxy to a previous release to help troubleshoot a potential issue with the underlying Caddy server update.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset addresses a conflict we had with an update to virtualenv that is preventing our project build steps from working.
Note that this is a temporary fix of sorts until we can get poetry fully updated along with a few other dependencies.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
