From 66eb8db65d284a5a1ed99d0572b039f34067a564 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 25 Sep 2023 10:38:58 +0000 Subject: [PATCH 1/2] Bump actions/checkout from 2 to 4 Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/deploy.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 37a57b55..9ceda828 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -38,7 +38,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v2 + uses: actions/checkout@v4 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 0314d0a0..76912908 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -76,7 +76,7 @@ jobs: environment: ${{ inputs.environment || 'test' }} steps: - name: Git clone the repository - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: Get current date id: currentdatetime From 95064f618396379d1a4b1643a882d2f74bdd9051 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 17 Oct 2023 23:03:00 +0000 Subject: [PATCH 2/2] Bump urllib3 from 1.26.12 to 1.26.18 Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.12 to 1.26.18. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](https://github.com/urllib3/urllib3/compare/1.26.12...1.26.18) --- updated-dependencies: - dependency-name: urllib3 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 24 +++++++++++------------- requirements.txt | 6 +++--- 2 files changed, 14 insertions(+), 16 deletions(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 3259b65a..c3987f6f 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -33,6 +33,7 @@ beautifulsoup4==4.12.2 # via # -r requirements-dev.in # -r requirements.txt + # funding-service-design-utils black==22.10.0 # via -r requirements-dev.in blinker==1.6.2 @@ -174,7 +175,7 @@ flipper-client==1.3.2 # via # -r requirements.txt # funding-service-design-utils -funding-service-design-utils==2.0.14 +funding-service-design-utils==2.0.26 # via -r requirements.txt gitdb==4.0.9 # via gitpython @@ -182,6 +183,10 @@ gitpython==3.1.27 # via bandit govuk-frontend-jinja==2.3.0 # via -r requirements.txt +greenlet==3.0.0 + # via + # -r requirements.txt + # sqlalchemy gunicorn==20.1.0 # via # -r requirements.txt @@ -240,6 +245,7 @@ markupsafe==2.1.1 # -r requirements.txt # jinja2 # mako + # sentry-sdk # werkzeug # wtforms msal==1.18.0 @@ -336,7 +342,7 @@ pytest-flask==1.2.0 # via -r requirements-dev.in pytest-html==3.1.1 # via pytest-selenium -pytest-metadata==2.0.1 +pytest-metadata==3.0.0 # via pytest-html pytest-mock==3.10.0 # via -r requirements-dev.in @@ -400,10 +406,6 @@ ruamel-yaml==0.17.21 # via # -r requirements.txt # prance -ruamel-yaml-clib==0.2.7 - # via - # -r requirements.txt - # ruamel-yaml s3transfer==0.6.1 # via # -r requirements.txt @@ -416,7 +418,7 @@ semver==2.13.0 # via # -r requirements.txt # prance -sentry-sdk[flask]==1.9.9 +sentry-sdk[flask]==1.31.0 # via # -r requirements.txt # funding-service-design-utils @@ -466,18 +468,14 @@ toml==0.10.2 # dparse # pre-commit tomli==2.0.1 - # via - # black - # build - # pyproject-hooks - # pytest + # via pytest trio==0.21.0 # via # selenium # trio-websocket trio-websocket==0.9.2 # via selenium -urllib3[secure,socks]==1.26.12 +urllib3[secure,socks]==1.26.18 # via # -r requirements.txt # botocore diff --git a/requirements.txt b/requirements.txt index 31763aa2..527f1b48 100644 --- a/requirements.txt +++ b/requirements.txt @@ -107,6 +107,8 @@ funding-service-design-utils==2.0.26 # via -r requirements.in govuk-frontend-jinja==2.3.0 # via -r requirements.in +greenlet==3.0.0 + # via sqlalchemy gunicorn==20.1.0 # via funding-service-design-utils idna==3.3 @@ -212,8 +214,6 @@ rich==12.4.4 # via funding-service-design-utils ruamel-yaml==0.17.21 # via prance -ruamel-yaml-clib==0.2.7 - # via ruamel-yaml s3transfer==0.6.1 # via boto3 semver==2.13.0 @@ -242,7 +242,7 @@ swagger-ui-bundle==0.0.9 # via -r requirements.in thrift==0.16.0 # via flipper-client -urllib3==1.26.12 +urllib3==1.26.18 # via # botocore # requests