darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2026-09-11 10:28:55 -04:00
Code Issues Packages Projects Releases Wiki Activity
12,634 Commits 122 Branches 63 Tags
04-03-2025
Commit Graph
364 Commits
Author SHA1 Message Date
dependabot[bot] 18fd5a1037 Bump urllib3 from 2.2.3 to 2.3.0 
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.2.3 to 2.3.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.2.3...2.3.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-03 19:05:15 +00:00
Kenneth Kehl 5bfca4bf82 upgrade mistune 2025-03-31 09:28:35 -07:00
ccostino 555b10d793 Merge pull request #1603 from GSA/dependabot/pip/newrelic-10.7.0 
Bump newrelic from 10.2.0 to 10.7.0
 2025-03-24 17:44:19 -04:00
Kenneth Kehl 90d71299d5 initial 2025-03-17 09:45:23 -07:00
dependabot[bot] 5cb293a6a3 Bump newrelic from 10.2.0 to 10.7.0 
Bumps [newrelic](https://github.com/newrelic/newrelic-python-agent) from 10.2.0 to 10.7.0.
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](https://github.com/newrelic/newrelic-python-agent/compare/v10.2.0...v10.7.0)

---
updated-dependencies:
- dependency-name: newrelic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-14 21:05:22 +00:00
dependabot[bot] 186e4133d2 Bump certifi from 2024.8.30 to 2025.1.31 
Bumps [certifi](https://github.com/certifi/python-certifi) from 2024.8.30 to 2025.1.31.
- [Commits](https://github.com/certifi/python-certifi/compare/2024.08.30...2025.01.31)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-13 16:46:57 +00:00
dependabot[bot] d40572d8e8 Bump marshmallow from 3.22.0 to 3.26.1 
Bumps [marshmallow](https://github.com/marshmallow-code/marshmallow) from 3.22.0 to 3.26.1.
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](https://github.com/marshmallow-code/marshmallow/compare/3.22.0...3.26.1)

---
updated-dependencies:
- dependency-name: marshmallow
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-11 22:00:10 +00:00
dependabot[bot] 74f100cc5d Bump numpy from 1.26.4 to 2.2.3 
Bumps [numpy](https://github.com/numpy/numpy) from 1.26.4 to 2.2.3.
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](https://github.com/numpy/numpy/compare/v1.26.4...v2.2.3)

---
updated-dependencies:
- dependency-name: numpy
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-11 14:27:38 +00:00
dependabot[bot] 23abab8304 Bump lxml from 5.2.2 to 5.3.1 
Bumps [lxml](https://github.com/lxml/lxml) from 5.2.2 to 5.3.1.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-5.2.2...lxml-5.3.1)

---
updated-dependencies:
- dependency-name: lxml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-11 14:14:23 +00:00
dependabot[bot] 5a5f880c59 Bump pyjwt from 2.8.0 to 2.10.1 
Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.8.0 to 2.10.1.
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/jpadilla/pyjwt/compare/2.8.0...2.10.1)

---
updated-dependencies:
- dependency-name: pyjwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-07 15:24:51 +00:00
dependabot[bot] e3b56015d8 Bump jinja2 from 3.1.5 to 3.1.6 
Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.5 to 3.1.6.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/3.1.5...3.1.6)

---
updated-dependencies:
- dependency-name: jinja2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-06 04:48:17 +00:00
dependabot[bot] 2d4ff9e87b Bump gunicorn from 22.0.0 to 23.0.0 
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 22.0.0 to 23.0.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/22.0.0...23.0.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-04 14:54:49 +00:00
dependabot[bot] 38367dfca2 Bump amqp from 5.2.0 to 5.3.1 
Bumps [amqp](https://github.com/celery/py-amqp) from 5.2.0 to 5.3.1.
- [Release notes](https://github.com/celery/py-amqp/releases)
- [Changelog](https://github.com/celery/py-amqp/blob/main/Changelog)
- [Commits](https://github.com/celery/py-amqp/compare/v5.2.0...v5.3.1)

---
updated-dependencies:
- dependency-name: amqp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-26 22:03:30 +00:00
dependabot[bot] 559b789d2c Bump moto from 5.0.11 to 5.1.0 
Bumps [moto](https://github.com/getmoto/moto) from 5.0.11 to 5.1.0.
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getmoto/moto/compare/5.0.11...5.1.0)

---
updated-dependencies:
- dependency-name: moto
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-24 22:47:08 +00:00
Kenneth Kehl b1712964a8 remove pytz remnants 2025-02-24 10:18:33 -08:00
dependabot[bot] 6e5585027c Bump cffi from 1.16.0 to 1.17.1 
Bumps [cffi](https://github.com/python-cffi/cffi) from 1.16.0 to 1.17.1.
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](https://github.com/python-cffi/cffi/compare/v1.16.0...v1.17.1)

---
updated-dependencies:
- dependency-name: cffi
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-13 21:07:52 +00:00
dependabot[bot] 7a509fe873 Bump geojson from 3.1.0 to 3.2.0 
Bumps [geojson](https://github.com/jazzband/geojson) from 3.1.0 to 3.2.0.
- [Changelog](https://github.com/jazzband/geojson/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/jazzband/geojson/compare/3.1.0...3.2.0)

---
updated-dependencies:
- dependency-name: geojson
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-13 15:41:47 +00:00
dependabot[bot] ea07e84341 Bump cryptography from 43.0.3 to 44.0.1 
Bumps [cryptography](https://github.com/pyca/cryptography) from 43.0.3 to 44.0.1.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/43.0.3...44.0.1)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-11 19:18:15 +00:00
dependabot[bot] 5c3b065382 Bump blinker from 1.8.2 to 1.9.0 
Bumps [blinker](https://github.com/pallets-eco/blinker) from 1.8.2 to 1.9.0.
- [Release notes](https://github.com/pallets-eco/blinker/releases)
- [Changelog](https://github.com/pallets-eco/blinker/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets-eco/blinker/compare/1.8.2...1.9.0)

---
updated-dependencies:
- dependency-name: blinker
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-10 21:13:53 +00:00
dependabot[bot] 89b620f899 Bump setuptools from 72.2.0 to 75.8.0 
Bumps [setuptools](https://github.com/pypa/setuptools) from 72.2.0 to 75.8.0.
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](https://github.com/pypa/setuptools/compare/v72.2.0...v75.8.0)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-10 20:14:44 +00:00
dependabot[bot] dda96bb3b7 Bump aiohttp from 3.10.10 to 3.10.11 
Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.10.10 to 3.10.11.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](https://github.com/aio-libs/aiohttp/compare/v3.10.10...v3.10.11)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-10 19:08:13 +00:00
Kenneth Kehl 879ed2da0a ugh specify rev 2025-01-06 13:47:11 -08:00
Andrew Shumway 90ce2b2a65 Poetry lock --no-update command 2024-12-23 11:46:14 -07:00
Andrew Shumway f4442e1ef5 Update jinja2 to 3.1.5 to address vulnerability 2024-12-23 11:37:36 -07:00
Carlo Costino a0e8828500 Merge pull request #1379 from GSA/API-1328_Logging_Formatter_With_Scrub 
API-1328 - Using a custom formatter to scrub PII from all log records.
 2024-10-30 13:43:00 -04:00
Cliff Hill 50812b5a57 Attempting to fix security vulnerability that was found. 
Signed-off-by: Cliff Hill <Clifford.hill@gsa.gov>
 2024-10-30 09:27:39 -04:00
dependabot[bot] d5cc8b239f Bump werkzeug from 3.0.3 to 3.0.6 
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.0.3 to 3.0.6.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/3.0.3...3.0.6)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-26 00:08:57 +00:00
Kenneth Kehl 1288e726b7 pip audit fail 2024-09-04 11:24:44 -07:00
Kenneth Kehl aa2c8afefe limit cache download by time 2024-08-27 10:31:58 -07:00
dependabot[bot] 92f1f93f84 Bump marshmallow from 3.21.3 to 3.22.0 
Bumps [marshmallow](https://github.com/marshmallow-code/marshmallow) from 3.21.3 to 3.22.0.
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](https://github.com/marshmallow-code/marshmallow/compare/3.21.3...3.22.0)

---
updated-dependencies:
- dependency-name: marshmallow
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-21 01:58:45 +00:00
Kenneth Kehl e144662b37 merge from main 2024-08-20 13:49:23 -07:00
Kenneth Kehl 0a47481548 Fix job.created_at time if necessary 2024-08-20 11:19:43 -07:00
dependabot[bot] d8813a1f2f Bump flake8 from 7.1.0 to 7.1.1 
Bumps [flake8](https://github.com/pycqa/flake8) from 7.1.0 to 7.1.1.
- [Commits](https://github.com/pycqa/flake8/compare/7.1.0...7.1.1)

---
updated-dependencies:
- dependency-name: flake8
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-19 21:50:10 +00:00
dependabot[bot] 686367d464 Bump aiohttp from 3.9.5 to 3.10.2 
Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.9.5 to 3.10.2.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](https://github.com/aio-libs/aiohttp/compare/v3.9.5...v3.10.2)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-19 21:37:14 +00:00
Kenneth Kehl b9eec69423 add retry with backoff 2024-08-13 14:51:51 -07:00
dependabot[bot] 1234c45934 Bump botocore from 1.34.154 to 1.34.159 
Bumps [botocore](https://github.com/boto/botocore) from 1.34.154 to 1.34.159.
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.34.154...1.34.159)

---
updated-dependencies:
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-12 19:37:56 +00:00
dependabot[bot] 3c251c4016 Bump black from 24.4.2 to 24.8.0 
Bumps [black](https://github.com/psf/black) from 24.4.2 to 24.8.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/24.4.2...24.8.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-12 19:21:31 +00:00
dependabot[bot] 06e1157d85 Bump pyyaml from 6.0.1 to 6.0.2 
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.2/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/compare/6.0.1...6.0.2)

---
updated-dependencies:
- dependency-name: pyyaml
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-12 19:07:30 +00:00
Kenneth Kehl 5ffab276ce remove unneeded govuk dependencies 2024-08-12 10:22:52 -07:00
Kenneth Kehl 38b49da0d3 add MethodNotAllowed 2024-08-07 12:41:35 -07:00
dependabot[bot] cf4c7722c0 Bump phonenumbers from 8.13.40 to 8.13.42 
Bumps [phonenumbers](https://github.com/daviddrysdale/python-phonenumbers) from 8.13.40 to 8.13.42.
- [Commits](https://github.com/daviddrysdale/python-phonenumbers/compare/v8.13.40...v8.13.42)

---
updated-dependencies:
- dependency-name: phonenumbers
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-06 15:45:03 +00:00
dependabot[bot] f503746083 Bump redis from 5.0.7 to 5.0.8 
Bumps [redis](https://github.com/redis/redis-py) from 5.0.7 to 5.0.8.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](https://github.com/redis/redis-py/compare/v5.0.7...v5.0.8)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-06 15:33:48 +00:00
dependabot[bot] 0dbb5dbcc1 Bump botocore from 1.34.150 to 1.34.154 
Bumps [botocore](https://github.com/boto/botocore) from 1.34.150 to 1.34.154.
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.34.150...1.34.154)

---
updated-dependencies:
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-05 21:33:46 +00:00
Kenneth Kehl 0ab937346d change to actually downloading file 2024-08-01 08:05:12 -07:00
Carlo Costino 8a32adf332 Update Python dependencies - 7/30/24 
This changeset updates a few dependendencies referenced in our pyproject.toml file.  Dependabot has a couple of PRs open but they are not rebasing properly with updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
 2024-07-29 22:46:11 -04:00
dependabot[bot] b3fc6755b2 Bump regex from 2024.5.15 to 2024.7.24 
Bumps [regex](https://github.com/mrabarnett/mrab-regex) from 2024.5.15 to 2024.7.24.
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](https://github.com/mrabarnett/mrab-regex/compare/2024.5.15...2024.7.24)

---
updated-dependencies:
- dependency-name: regex
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-07-29 21:32:03 +00:00
dependabot[bot] 01eb6edac5 Bump notifications-python-client from 9.1.0 to 10.0.0 
Bumps [notifications-python-client](https://github.com/alphagov/notifications-python-client) from 9.1.0 to 10.0.0.
- [Changelog](https://github.com/alphagov/notifications-python-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/alphagov/notifications-python-client/compare/9.1.0...10.0.0)

---
updated-dependencies:
- dependency-name: notifications-python-client
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-07-29 18:47:37 +00:00
dependabot[bot] efdffa8359 Bump boto3 from 1.34.144 to 1.34.148 
Bumps [boto3](https://github.com/boto/boto3) from 1.34.144 to 1.34.148.
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.34.144...1.34.148)

---
updated-dependencies:
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-07-29 16:33:56 +00:00
dependabot[bot] 8b054d8396 Bump cryptography from 42.0.8 to 43.0.0 
Bumps [cryptography](https://github.com/pyca/cryptography) from 42.0.8 to 43.0.0.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/42.0.8...43.0.0)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-07-25 13:57:34 +00:00
dependabot[bot] 76aef3247d Bump botocore from 1.34.144 to 1.34.148 
Bumps [botocore](https://github.com/boto/botocore) from 1.34.144 to 1.34.148.
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.34.144...1.34.148)

---
updated-dependencies:
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-07-24 21:07:58 +00:00