dependabot[bot]
6aa6feed72
Bump phonenumbers from 9.0.4 to 9.0.5
...
Bumps [phonenumbers](https://github.com/daviddrysdale/python-phonenumbers ) from 9.0.4 to 9.0.5.
- [Commits](https://github.com/daviddrysdale/python-phonenumbers/compare/v9.0.4...v9.0.5 )
---
updated-dependencies:
- dependency-name: phonenumbers
dependency-version: 9.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-12 18:21:36 +00:00
Alex Janousek
cd71432126
Merge pull request #1700 from GSA/dependabot/pip/setuptools-80.4.0
...
Bump setuptools from 80.3.1 to 80.4.0
2025-05-12 14:19:29 -04:00
ccostino
9cbf0df32b
Merge pull request #1701 from GSA/pin-egress-proxy
...
Pin egress proxy release
2025-05-12 13:08:31 -04:00
Carlo Costino
d38ada100f
Pin egress proxy release
...
This changeset pins the egress proxy to a previous release to help troubleshoot a potential issue with the underlying Caddy server update.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-05-12 12:46:38 -04:00
dependabot[bot]
798a3ff723
Bump setuptools from 80.3.1 to 80.4.0
...
Bumps [setuptools](https://github.com/pypa/setuptools ) from 80.3.1 to 80.4.0.
- [Release notes](https://github.com/pypa/setuptools/releases )
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst )
- [Commits](https://github.com/pypa/setuptools/compare/v80.3.1...v80.4.0 )
---
updated-dependencies:
- dependency-name: setuptools
dependency-version: 80.4.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-09 21:53:34 +00:00
ccostino
c515efc7da
Merge pull request #1697 from GSA/fix-s3-logging
...
Update no_proxy and S3 error handling
2025-05-08 17:38:44 -04:00
Carlo Costino
fd974e1b79
Update no_proxy and S3 error handling
...
This changeset updates the no_proxy environment variable to allow S3 through. It also updates our error handling connecting to S3.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-05-08 16:54:50 -04:00
Andrew Shumway
ca2c0afa5d
Merge pull request #1692 from GSA/dependabot/pip/setuptools-80.3.1
...
Bump setuptools from 80.1.0 to 80.3.1
05-07-2025
2025-05-06 09:34:26 -06:00
dependabot[bot]
891fbe2dee
Bump setuptools from 80.1.0 to 80.3.1
...
Bumps [setuptools](https://github.com/pypa/setuptools ) from 80.1.0 to 80.3.1.
- [Release notes](https://github.com/pypa/setuptools/releases )
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst )
- [Commits](https://github.com/pypa/setuptools/compare/v80.1.0...v80.3.1 )
---
updated-dependencies:
- dependency-name: setuptools
dependency-version: 80.3.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-06 15:27:02 +00:00
Andrew Shumway
fe049326ac
Merge pull request #1691 from GSA/dependabot/pip/lxml-5.4.0
...
Bump lxml from 5.3.1 to 5.4.0
2025-05-06 09:24:42 -06:00
dependabot[bot]
83050ccc55
Bump lxml from 5.3.1 to 5.4.0
...
Bumps [lxml](https://github.com/lxml/lxml ) from 5.3.1 to 5.4.0.
- [Release notes](https://github.com/lxml/lxml/releases )
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt )
- [Commits](https://github.com/lxml/lxml/compare/lxml-5.3.1...lxml-5.4.0 )
---
updated-dependencies:
- dependency-name: lxml
dependency-version: 5.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-06 14:45:43 +00:00
ccostino
ec81a057fe
Merge pull request #1693 from GSA/fix-virtualenv
...
Pin virtualenv to a compatible version
2025-05-06 10:43:35 -04:00
Carlo Costino
a9c23db227
Pin virtualenv to a compatible version
...
This changeset addresses a conflict we had with an update to virtualenv that is preventing our project build steps from working.
Note that this is a temporary fix of sorts until we can get poetry fully updated along with a few other dependencies.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-05-06 10:02:42 -04:00
Alex Janousek
cd1ddd794f
Merge pull request #1686 from GSA/dependabot/pip/charset-normalizer-3.4.2
...
Bump charset-normalizer from 3.4.1 to 3.4.2
2025-05-04 16:31:29 -04:00
dependabot[bot]
a5b3ccc170
Bump charset-normalizer from 3.4.1 to 3.4.2
...
Bumps [charset-normalizer](https://github.com/jawah/charset_normalizer ) from 3.4.1 to 3.4.2.
- [Release notes](https://github.com/jawah/charset_normalizer/releases )
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jawah/charset_normalizer/compare/3.4.1...3.4.2 )
---
updated-dependencies:
- dependency-name: charset-normalizer
dependency-version: 3.4.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-04 20:24:41 +00:00
Alex Janousek
4a5f67122c
Merge pull request #1687 from GSA/dependabot/pip/python-dotenv-1.1.0
...
Bump python-dotenv from 1.0.1 to 1.1.0
2025-05-04 16:22:32 -04:00
dependabot[bot]
dcd9bec087
Bump python-dotenv from 1.0.1 to 1.1.0
...
Bumps [python-dotenv](https://github.com/theskumar/python-dotenv ) from 1.0.1 to 1.1.0.
- [Release notes](https://github.com/theskumar/python-dotenv/releases )
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md )
- [Commits](https://github.com/theskumar/python-dotenv/compare/v1.0.1...v1.1.0 )
---
updated-dependencies:
- dependency-name: python-dotenv
dependency-version: 1.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-04 20:15:34 +00:00
Alex Janousek
dde6c2f574
Merge pull request #1688 from GSA/dependabot/pip/certifi-2025.4.26
...
Bump certifi from 2025.1.31 to 2025.4.26
2025-05-04 16:13:56 -04:00
Alex Janousek
f8b29fb461
Merge pull request #1689 from GSA/dependabot/pip/cryptography-44.0.3
...
Bump cryptography from 44.0.2 to 44.0.3
2025-05-04 16:13:40 -04:00
Alex Janousek
3c608b4538
Merge pull request #1690 from GSA/dependabot/pip/newrelic-10.11.0
...
Bump newrelic from 10.9.0 to 10.11.0
2025-05-04 16:13:27 -04:00
dependabot[bot]
92b35ed6be
Bump newrelic from 10.9.0 to 10.11.0
...
Bumps [newrelic](https://github.com/newrelic/newrelic-python-agent ) from 10.9.0 to 10.11.0.
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases )
- [Commits](https://github.com/newrelic/newrelic-python-agent/compare/v10.9.0...v10.11.0 )
---
updated-dependencies:
- dependency-name: newrelic
dependency-version: 10.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-02 21:30:17 +00:00
dependabot[bot]
bfcf81d91d
Bump cryptography from 44.0.2 to 44.0.3
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 44.0.2 to 44.0.3.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/44.0.2...44.0.3 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 44.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-02 21:29:55 +00:00
dependabot[bot]
029e40766c
Bump certifi from 2025.1.31 to 2025.4.26
...
Bumps [certifi](https://github.com/certifi/python-certifi ) from 2025.1.31 to 2025.4.26.
- [Commits](https://github.com/certifi/python-certifi/compare/2025.01.31...2025.04.26 )
---
updated-dependencies:
- dependency-name: certifi
dependency-version: 2025.4.26
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-02 21:29:28 +00:00
Alex Janousek
cacaedac0c
Merge pull request #1682 from GSA/dependabot/pip/sqlalchemy-2.0.40
...
Bump sqlalchemy from 2.0.31 to 2.0.40
2025-05-02 11:23:44 -04:00
dependabot[bot]
106d938d4f
Bump sqlalchemy from 2.0.31 to 2.0.40
...
Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy ) from 2.0.31 to 2.0.40.
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases )
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst )
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits )
---
updated-dependencies:
- dependency-name: sqlalchemy
dependency-version: 2.0.40
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-02 15:16:57 +00:00
Alex Janousek
812ffd7b53
Merge pull request #1685 from GSA/dependabot/pip/isort-6.0.1
...
Bump isort from 5.13.2 to 6.0.1
2025-05-02 11:14:47 -04:00
dependabot[bot]
4bdcf2c53e
Bump isort from 5.13.2 to 6.0.1
...
Bumps [isort](https://github.com/PyCQA/isort ) from 5.13.2 to 6.0.1.
- [Release notes](https://github.com/PyCQA/isort/releases )
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md )
- [Commits](https://github.com/PyCQA/isort/compare/5.13.2...6.0.1 )
---
updated-dependencies:
- dependency-name: isort
dependency-version: 6.0.1
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-02 15:08:03 +00:00
Alex Janousek
96fb2dead9
Merge pull request #1681 from GSA/dependabot/pip/markupsafe-3.0.2
...
Bump markupsafe from 2.1.5 to 3.0.2
2025-05-02 11:06:00 -04:00
dependabot[bot]
333631aee2
Bump markupsafe from 2.1.5 to 3.0.2
...
Bumps [markupsafe](https://github.com/pallets/markupsafe ) from 2.1.5 to 3.0.2.
- [Release notes](https://github.com/pallets/markupsafe/releases )
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst )
- [Commits](https://github.com/pallets/markupsafe/compare/2.1.5...3.0.2 )
---
updated-dependencies:
- dependency-name: markupsafe
dependency-version: 3.0.2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-02 14:59:07 +00:00
Alex Janousek
be2e3252b1
Merge pull request #1683 from GSA/dependabot/pip/beautifulsoup4-4.13.4
...
Bump beautifulsoup4 from 4.12.3 to 4.13.4
2025-05-02 10:57:03 -04:00
dependabot[bot]
2d42f26839
Bump beautifulsoup4 from 4.12.3 to 4.13.4
...
Bumps [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/ ) from 4.12.3 to 4.13.4.
---
updated-dependencies:
- dependency-name: beautifulsoup4
dependency-version: 4.13.4
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-02 14:50:16 +00:00
Alex Janousek
b4a82785c3
Merge pull request #1684 from GSA/dependabot/pip/notifications-python-client-10.0.1
...
Bump notifications-python-client from 10.0.0 to 10.0.1
2025-05-02 10:48:09 -04:00
dependabot[bot]
00451bb56c
Bump notifications-python-client from 10.0.0 to 10.0.1
...
Bumps [notifications-python-client](https://github.com/alphagov/notifications-python-client ) from 10.0.0 to 10.0.1.
- [Changelog](https://github.com/alphagov/notifications-python-client/blob/main/CHANGELOG.md )
- [Commits](https://github.com/alphagov/notifications-python-client/compare/10.0.0...10.0.1 )
---
updated-dependencies:
- dependency-name: notifications-python-client
dependency-version: 10.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-01 21:53:46 +00:00
Alex Janousek
26a7f541a5
Merge pull request #1671 from GSA/dependabot/pip/faker-37.1.0
...
Bump faker from 26.3.0 to 37.1.0
2025-05-01 10:20:00 -04:00
dependabot[bot]
2bcf90584c
Bump faker from 26.3.0 to 37.1.0
...
Bumps [faker](https://github.com/joke2k/faker ) from 26.3.0 to 37.1.0.
- [Release notes](https://github.com/joke2k/faker/releases )
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md )
- [Commits](https://github.com/joke2k/faker/compare/v26.3.0...v37.1.0 )
---
updated-dependencies:
- dependency-name: faker
dependency-version: 37.1.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-01 14:13:12 +00:00
Alex Janousek
d1c105447a
Merge pull request #1679 from GSA/dependabot/pip/alembic-1.15.2
...
Bump alembic from 1.13.2 to 1.15.2
2025-05-01 10:11:05 -04:00
dependabot[bot]
cba7a712db
Bump alembic from 1.13.2 to 1.15.2
...
Bumps [alembic](https://github.com/sqlalchemy/alembic ) from 1.13.2 to 1.15.2.
- [Release notes](https://github.com/sqlalchemy/alembic/releases )
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES )
- [Commits](https://github.com/sqlalchemy/alembic/commits )
---
updated-dependencies:
- dependency-name: alembic
dependency-version: 1.15.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-01 14:03:09 +00:00
Alex Janousek
739a08e203
Merge pull request #1680 from GSA/dependabot/pip/setuptools-80.1.0
...
Bump setuptools from 75.9.1 to 80.1.0
2025-05-01 10:01:05 -04:00
dependabot[bot]
eb76f2cee8
Bump setuptools from 75.9.1 to 80.1.0
...
Bumps [setuptools](https://github.com/pypa/setuptools ) from 75.9.1 to 80.1.0.
- [Release notes](https://github.com/pypa/setuptools/releases )
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst )
- [Commits](https://github.com/pypa/setuptools/compare/v75.9.1...v80.1.0 )
---
updated-dependencies:
- dependency-name: setuptools
dependency-version: 80.1.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-30 21:15:51 +00:00
Andrew Shumway
9113062d98
Merge pull request #1674 from GSA/dependabot/pip/celery-5.5.2
...
Bump celery from 5.4.0 to 5.5.2
2025-04-30 10:51:46 -06:00
dependabot[bot]
6ef23b70a6
Bump celery from 5.4.0 to 5.5.2
...
Bumps [celery](https://github.com/celery/celery ) from 5.4.0 to 5.5.2.
- [Release notes](https://github.com/celery/celery/releases )
- [Changelog](https://github.com/celery/celery/blob/main/Changelog.rst )
- [Commits](https://github.com/celery/celery/compare/v5.4.0...v5.5.2 )
---
updated-dependencies:
- dependency-name: celery
dependency-version: 5.5.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-30 16:40:49 +00:00
Andrew Shumway
0ce6c6b263
Merge pull request #1675 from GSA/dependabot/pip/phonenumbers-9.0.4
...
Bump phonenumbers from 8.13.55 to 9.0.4
2025-04-30 10:38:29 -06:00
Cliff Hill
f1df78b4ba
Merge pull request #1677 from GSA/update-rotate-creds-runbook
...
Expand the credential/secret rotation runbook
2025-04-29 12:39:29 -04:00
Carlo Costino
debb14d216
Updated Login.gov section
...
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-04-28 17:15:08 -04:00
Carlo Costino
01b9ea451a
Expand the credential/secret rotation runbook
...
This changeset adds a bunch of new information on how to manage environment variables and credentials in our application.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-04-28 17:01:59 -04:00
Beverly Nguyen
1242c524a5
Merge pull request #1676 from GSA/add-daily-scan-runbook
...
Add runbook for reviewing daily scans
2025-04-28 11:31:03 -07:00
Carlo Costino
4c91629ee8
Add runbook for reviewing daily scans
...
This changeset adds a new runbook to our documentation that explains how to review our daily scans for new findings.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-04-28 11:36:44 -04:00
dependabot[bot]
a74e5d15a4
Bump phonenumbers from 8.13.55 to 9.0.4
...
Bumps [phonenumbers](https://github.com/daviddrysdale/python-phonenumbers ) from 8.13.55 to 9.0.4.
- [Commits](https://github.com/daviddrysdale/python-phonenumbers/compare/v8.13.55...v9.0.4 )
---
updated-dependencies:
- dependency-name: phonenumbers
dependency-version: 9.0.4
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-25 21:06:06 +00:00
ccostino
6689214317
Merge pull request #1673 from GSA/update-dns-runbook
...
Update instructions for managing DNS and domain configuration
2025-04-25 15:25:54 -04:00
Carlo Costino
6824c45909
Fix typos and clarify a couple more things
...
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-04-25 15:17:42 -04:00