Commit Graph

9726 Commits

Author SHA1 Message Date
Kenneth Kehl
e037df8cbc notify-api-413 reduce cyclomatic complexity identified by radon 2023-08-16 09:29:32 -07:00
Carlo Costino
7df3943c0b Merge pull request #410 from GSA/dependabot/pip/alembic-1.11.2
Bump alembic from 1.7.7 to 1.11.2
2023-08-14 18:18:35 -04:00
dependabot[bot]
19729e0b31 Bump alembic from 1.7.7 to 1.11.2
Bumps [alembic](https://github.com/sqlalchemy/alembic) from 1.7.7 to 1.11.2.
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

---
updated-dependencies:
- dependency-name: alembic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-14 22:10:14 +00:00
Carlo Costino
cb3af17dab Merge pull request #411 from GSA/dependabot/pip/cffi-1.15.1
Bump cffi from 1.15.0 to 1.15.1
2023-08-14 17:35:27 -04:00
dependabot[bot]
c5495368fb Bump cffi from 1.15.0 to 1.15.1
Bumps [cffi](http://cffi.readthedocs.org) from 1.15.0 to 1.15.1.

---
updated-dependencies:
- dependency-name: cffi
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-14 21:26:39 +00:00
Carlo Costino
db4e0594e4 Merge pull request #409 from GSA/dependabot/pip/click-8.1.6
Bump click from 8.1.3 to 8.1.6
2023-08-14 17:17:16 -04:00
Steven Reilly
9c40bf60c2 Merge pull request #408 from GSA/switch-to-fips
Switch to using FIPS-enabled endpoints
2023-08-14 15:59:27 -04:00
Carlo Costino
ff64ea684f Removed all non-FIPS-enabled endpoints
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-08-14 15:10:37 -04:00
Steven Reilly
b731dd5abe Merge pull request #402 from GSA/notify-api-387
notify-api-387 Scan projects for unused code
2023-08-14 13:52:38 -04:00
Steven Reilly
d955ede5c3 Merge pull request #400 from GSA/notify-api-386
Scan projects for code complexity
2023-08-14 13:50:26 -04:00
dependabot[bot]
7723382df2 Bump click from 8.1.3 to 8.1.6
Bumps [click](https://github.com/pallets/click) from 8.1.3 to 8.1.6.
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/8.1.6/CHANGES.rst)
- [Commits](https://github.com/pallets/click/compare/8.1.3...8.1.6)

---
updated-dependencies:
- dependency-name: click
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-11 21:23:50 +00:00
Carlo Costino
6c14a12b0f Fix use of botocore Config object
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-08-11 16:24:46 -04:00
Carlo Costino
d4848a67b5 Switch to using FIPS-enabled endpoints
This changeset switches AWS service touchpoints to use their FIPS-enabled counterparts.  Note that S3 has some specific configuration associated with it.

This changeset also updates our allow ACLs to cover the FIPS-enabled endpoints.  We should investigate removing the non-FIPS endpoints as a part of this.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-08-11 16:24:45 -04:00
Carlo Costino
d8dcde4403 Merge pull request #405 from GSA/dependabot/pip/prometheus-client-0.17.1
Bump prometheus-client from 0.14.1 to 0.17.1
2023-08-11 16:17:55 -04:00
dependabot[bot]
4ed996bc18 Bump prometheus-client from 0.14.1 to 0.17.1
Bumps [prometheus-client](https://github.com/prometheus/client_python) from 0.14.1 to 0.17.1.
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](https://github.com/prometheus/client_python/compare/v0.14.1...v0.17.1)

---
updated-dependencies:
- dependency-name: prometheus-client
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-11 19:45:41 +00:00
Carlo Costino
e345d91b3f Merge pull request #403 from GSA/dependabot/pip/iso8601-2.0.0
Bump iso8601 from 1.0.2 to 2.0.0
2023-08-11 15:36:43 -04:00
dependabot[bot]
0afd2f66a1 Bump iso8601 from 1.0.2 to 2.0.0
Bumps [iso8601](https://github.com/micktwomey/pyiso8601) from 1.0.2 to 2.0.0.
- [Release notes](https://github.com/micktwomey/pyiso8601/releases)
- [Changelog](https://github.com/micktwomey/pyiso8601/blob/main/CHANGELOG.md)
- [Commits](https://github.com/micktwomey/pyiso8601/compare/1.0.2...2.0.0)

---
updated-dependencies:
- dependency-name: iso8601
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-11 19:20:42 +00:00
Carlo Costino
6715d5b220 Merge pull request #385 from GSA/dependabot/pip/attrs-23.1.0
Bump attrs from 21.4.0 to 23.1.0
2023-08-11 15:00:01 -04:00
Carlo Costino
bb478f8e5b Merge pull request #406 from GSA/remove-ryan-from-terraform
Remove Ryan from list of deployers for staging and demo egress spaces
2023-08-10 10:32:27 -04:00
Ryan Ahearn
3b5eae82d6 Remove Ryan from list of deployers for staging and demo egress spaces 2023-08-10 09:42:04 -04:00
dependabot[bot]
e943a29ca0 Bump attrs from 21.4.0 to 23.1.0
Bumps [attrs](https://github.com/python-attrs/attrs) from 21.4.0 to 23.1.0.
- [Release notes](https://github.com/python-attrs/attrs/releases)
- [Changelog](https://github.com/python-attrs/attrs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/python-attrs/attrs/compare/21.4.0...23.1.0)

---
updated-dependencies:
- dependency-name: attrs
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-09 14:36:41 +00:00
Kenneth Kehl
10c868bd45 Merge pull request #378 from GSA/dependabot/pip/pyjwt-2.8.0
Bump pyjwt from 2.7.0 to 2.8.0
2023-08-09 07:18:15 -07:00
dependabot[bot]
d3e0c9f8a4 Bump pyjwt from 2.7.0 to 2.8.0
Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0)

---
updated-dependencies:
- dependency-name: pyjwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-08 19:17:01 +00:00
Carlo Costino
08dffeb3ba Merge pull request #357 from GSA/notify-api-141
notify-api-141 add agreement to models.py
2023-08-08 14:58:41 -04:00
Kenneth Kehl
8d74a46d7c add noqa for some db methods 2023-08-08 11:57:57 -07:00
Carlo Costino
9c1562fa67 Updated Pipfile.lock
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-08-08 14:50:45 -04:00
Kenneth Kehl
abd1898150 fix code for vulture 2023-08-08 11:48:19 -07:00
Kenneth Kehl
3cf5ea8802 add change to workflow 2023-08-08 11:13:44 -07:00
Kenneth Kehl
320798e417 notify-api-387 Scan projects for unused code 2023-08-08 11:03:50 -07:00
Kenneth Kehl
1dba797593 merge from main 2023-08-08 10:10:52 -07:00
Kenneth Kehl
1c31905b4e Merge pull request #401 from GSA/dependabot/pip/freezegun-1.2.2
Bump freezegun from 1.2.1 to 1.2.2
2023-08-08 07:15:44 -07:00
dependabot[bot]
14f82edcfc Bump freezegun from 1.2.1 to 1.2.2
Bumps [freezegun](https://github.com/spulec/freezegun) from 1.2.1 to 1.2.2.
- [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG)
- [Commits](https://github.com/spulec/freezegun/commits)

---
updated-dependencies:
- dependency-name: freezegun
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-07 22:21:05 +00:00
Kenneth Kehl
8fe5ca202a change failure to be C, D or F 2023-08-07 10:59:51 -07:00
Kenneth Kehl
9222cc9942 fix Pipfile 2023-08-07 10:12:03 -07:00
Kenneth Kehl
aef5317af8 notify-api-386 scan projects for code complexity 2023-08-07 10:11:24 -07:00
Carlo Costino
96d7e4ffeb Merge pull request #398 from GSA/production
Demo and Production deploy for 8/7/2023
2023-08-07 12:35:37 -04:00
Carlo Costino
67cd6c16fd Merge branch 'main' into production 2023-08-07 11:16:45 -04:00
Kenneth Kehl
09f59c622d merge from main 2023-08-07 07:44:21 -07:00
Kenneth Kehl
e79687c4fa Merge pull request #384 from GSA/dependabot/pip/requests-mock-1.11.0
Bump requests-mock from 1.9.3 to 1.11.0
2023-08-07 07:38:38 -07:00
dependabot[bot]
03c6bc77a5 Bump requests-mock from 1.9.3 to 1.11.0
Bumps [requests-mock](https://github.com/jamielennox/requests-mock) from 1.9.3 to 1.11.0.
- [Release notes](https://github.com/jamielennox/requests-mock/releases)
- [Commits](https://github.com/jamielennox/requests-mock/compare/1.9.3...1.11.0)

---
updated-dependencies:
- dependency-name: requests-mock
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-03 14:12:57 +00:00
Carlo Costino
3fd76d0885 Merge pull request #383 from GSA/stvnrlly/update-cryptography
Resolve pip-audit findings and update awscli & boto
2023-08-03 09:54:19 -04:00
Carlo Costino
64110980cd Updated Pipfile.lock with missing dev dependencies
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-08-03 09:41:30 -04:00
stvnrlly
5531c885ea include dev dependencies in update 2023-08-02 17:02:56 -04:00
stvnrlly
9bda30394d try updating docker action version? 2023-08-02 16:07:15 -04:00
stvnrlly
f58df0b747 update deps, bumping awscli & boto 2023-08-02 15:35:12 -04:00
Steven Reilly
5d72286406 Merge pull request #379 from GSA/dependabot/pip/cryptography-41.0.3
Bump cryptography from 41.0.2 to 41.0.3
2023-08-02 10:43:08 -04:00
dependabot[bot]
8334c94996 Bump cryptography from 41.0.2 to 41.0.3
Bumps [cryptography](https://github.com/pyca/cryptography) from 41.0.2 to 41.0.3.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/41.0.2...41.0.3)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-02 02:34:20 +00:00
Kenneth Kehl
78552484f3 merge from main 2023-08-01 13:32:32 -07:00
Kenneth Kehl
34db11c799 fix issue with cython and pyyaml by updating awscli boto3 botocore 2023-08-01 13:20:37 -07:00
Carlo Costino
a551af6d97 Merge pull request #362 from GSA/notify-api-56
notify-api-56 squash migrations
2023-08-01 12:29:26 -04:00