Bringing in latest from upstream repo #40

silverl · 2024-03-06T19:37:39Z

Largely, this is just pulling in the latest from the upstream repo.
There's one template where I'm keeping a local change I made which includes our TrackAbout logo at the top of every page and changes the name of the app to show my preferred string. Otherwise, everything is stock snappass.

Remove py3.7 (Remove py3.7 pinterest/snappass#234)
Bump cryptography from 39.0.2 to 41.0.1 (Bump cryptography from 39.0.2 to 41.0.1 pinterest/snappass#260)
Bump tox from 3.25.0 to 4.6.0 (Bump tox from 3.25.0 to 4.6.0 pinterest/snappass#262)
Bump fakeredis from 1.7.5 to 2.14.1 (Bump fakeredis from 1.7.5 to 2.14.1 pinterest/snappass#263)
Bump flask from 2.1.2 to 2.3.2 (Bump flask from 2.1.2 to 2.3.2 pinterest/snappass#250)
Bump pytest from 7.1.2 to 7.3.1 (Bump pytest from 7.1.2 to 7.3.1 pinterest/snappass#243)
Bump redis from 4.5.3 to 4.5.5 (Bump redis from 4.5.3 to 4.5.5 pinterest/snappass#253)
Bump coverage from 6.4.1 to 7.2.7 (Bump coverage from 6.4.1 to 7.2.7 pinterest/snappass#267)
Bump pytest-cov from 3.0.0 to 4.1.0 (Bump pytest-cov from 3.0.0 to 4.1.0 pinterest/snappass#266)
Bump actions/checkout from 3 to 4 (Bump actions/checkout from 3 to 4 pinterest/snappass#282)
[Snyk] Security upgrade cryptography from 41.0.1 to 41.0.4 ([Snyk] Security upgrade cryptography from 41.0.1 to 41.0.4 pinterest/snappass#284)
Bump tox from 4.6.0 to 4.11.3 (Bump tox from 4.6.0 to 4.11.3 pinterest/snappass#287)
Bump fakeredis from 2.14.1 to 2.20.0
Bump redis from 4.5.5 to 5.0.1
Install deps from requirements.txt (Install deps from requirements.txt pinterest/snappass#303)
Prepare 1.6.1 release (Prepare 1.6.1 release pinterest/snappass#304)
Bump version: 1.6.0 → 1.6.1 (Bump version: 1.6.0 → 1.6.1 pinterest/snappass#305)
Use urllib.parse for quoting/unquoting plus instead of deprecated werkzeug.urls (Use urllib.parse for quoting/unquoting plus instead of deprecated werkzeug.urls pinterest/snappass#300)
Bump actions/setup-python from 4 to 5 (Bump actions/setup-python from 4 to 5 pinterest/snappass#306)
Bump github/codeql-action from 2 to 3 (Bump github/codeql-action from 2 to 3 pinterest/snappass#309)
Bump werkzeug from 2.3.3 to 3.0.1 (Bump werkzeug from 2.3.3 to 3.0.1 pinterest/snappass#295)
Bump flask from 2.3.2 to 3.0.0 (Bump flask from 2.3.2 to 3.0.0 pinterest/snappass#294)
Bump pytest from 7.3.1 to 7.4.4
Bump version: 1.6.1 → 1.6.2 (Bump version: 1.6.1 → 1.6.2 pinterest/snappass#311)
Bump freezegun from 1.2.1 to 1.4.0
Bump flake8 from 6.0.0 to 7.0.0
Add health check endpoint (Add health check endpoint pinterest/snappass#329)
add i18n to Snappass
Bump fakeredis from 2.20.0 to 2.21.1
remove import of flask
Add empty translations for de and es
Bump cryptography from 41.0.4 to 42.0.3
Add German Translation
Bump pytest from 7.4.4 to 8.0.1
Bump coverage from 7.2.7 to 7.4.2
Bump tox from 4.11.3 to 4.13.0
fix missing bracket
restore extra spaces
Add Spanish and fixup NL&DE
TIL flake8 :)
Bump actions/cache from 3 to 4 (Bump actions/cache from 3 to 4 pinterest/snappass#320)
Bump jinja2 from 3.1.2 to 3.1.3 (Bump jinja2 from 3.1.2 to 3.1.3 pinterest/snappass#336)
add /api endpoint for automated flows (add /api endpoint for automated flows pinterest/snappass#316)
Bump pytest from 8.0.1 to 8.1.0

* Remove py3.7 * Restore cache action

Bumps [cryptography](https://github.com/pyca/cryptography) from 39.0.2 to 41.0.1. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@39.0.2...41.0.1) --- updated-dependencies: - dependency-name: cryptography dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [tox](https://github.com/tox-dev/tox) from 3.25.0 to 4.6.0. - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](tox-dev/tox@3.25.0...4.6.0) --- updated-dependencies: - dependency-name: tox dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [fakeredis](https://github.com/cunla/fakeredis-py) from 1.7.5 to 2.14.1. - [Release notes](https://github.com/cunla/fakeredis-py/releases) - [Commits](cunla/fakeredis-py@v1.7.5...v2.14.1) --- updated-dependencies: - dependency-name: fakeredis dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [flask](https://github.com/pallets/flask) from 2.1.2 to 2.3.2. - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@2.1.2...2.3.2) --- updated-dependencies: - dependency-name: flask dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.1.2 to 7.3.1. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@7.1.2...7.3.1) --- updated-dependencies: - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump redis from 4.3.3 to 4.5.5 Bumps [redis](https://github.com/redis/redis-py) from 4.3.3 to 4.5.5. - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v4.3.3...v4.5.5) --- updated-dependencies: - dependency-name: redis dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Yuru Shao <[email protected]>

Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.4.1 to 7.2.7. - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](nedbat/coveragepy@6.4.1...7.2.7) --- updated-dependencies: - dependency-name: coverage dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [pytest-cov](https://github.com/pytest-dev/pytest-cov) from 3.0.0 to 4.1.0. - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v3.0.0...v4.1.0) --- updated-dependencies: - dependency-name: pytest-cov dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#284) fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-5914629 Co-authored-by: snyk-bot <[email protected]>

Bumps [tox](https://github.com/tox-dev/tox) from 4.6.0 to 4.11.3. - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](tox-dev/tox@4.6.0...4.11.3) --- updated-dependencies: - dependency-name: tox dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [fakeredis](https://github.com/cunla/fakeredis-py) from 2.14.1 to 2.20.0. - [Release notes](https://github.com/cunla/fakeredis-py/releases) - [Commits](cunla/fakeredis-py@v2.14.1...v2.20.0) --- updated-dependencies: - dependency-name: fakeredis dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

…dis-2.20.0 Bump fakeredis from 2.14.1 to 2.20.0

Bumps [redis](https://github.com/redis/redis-py) from 4.5.5 to 5.0.1. - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v4.5.5...v5.0.1) --- updated-dependencies: - dependency-name: redis dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>

…5.0.1 Bump redis from 4.5.5 to 5.0.1

* Prepare 1.6.1 release * Update configs * Fix dev requirements

…kzeug.urls (pinterest#300) Use urllib.parse for quoting/unquoting plus werkzeug.urls.url_quote_plus and werkzeug.urls.url_unquote_plus were deprecated and are removed in 3.0.0 and newer versions.

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v4...v5) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v2...v3) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [werkzeug](https://github.com/pallets/werkzeug) from 2.3.3 to 3.0.1. - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@2.3.3...3.0.1) --- updated-dependencies: - dependency-name: werkzeug dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [flask](https://github.com/pallets/flask) from 2.3.2 to 3.0.0. - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@2.3.2...3.0.0) --- updated-dependencies: - dependency-name: flask dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.3.1 to 7.4.4. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@7.3.1...7.4.4) --- updated-dependencies: - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

…-7.4.4 Bump pytest from 7.3.1 to 7.4.4

Bumps [freezegun](https://github.com/spulec/freezegun) from 1.2.1 to 1.4.0. - [Release notes](https://github.com/spulec/freezegun/releases) - [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG) - [Commits](spulec/freezegun@1.2.1...1.4.0) --- updated-dependencies: - dependency-name: freezegun dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

…gun-1.4.0 Bump freezegun from 1.2.1 to 1.4.0

Bumps [flake8](https://github.com/pycqa/flake8) from 6.0.0 to 7.0.0. - [Commits](PyCQA/flake8@6.0.0...7.0.0) --- updated-dependencies: - dependency-name: flake8 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>

Bumps [fakeredis](https://github.com/cunla/fakeredis-py) from 2.20.0 to 2.21.1. - [Release notes](https://github.com/cunla/fakeredis-py/releases) - [Commits](cunla/fakeredis-py@v2.20.0...v2.21.1) --- updated-dependencies: - dependency-name: fakeredis dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

Bumps [cryptography](https://github.com/pyca/cryptography) from 41.0.4 to 42.0.3. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@41.0.4...42.0.3) --- updated-dependencies: - dependency-name: cryptography dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>

…dis-2.21.1 Bump fakeredis from 2.20.0 to 2.21.1

Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.4.4 to 8.0.1. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@7.4.4...8.0.1) --- updated-dependencies: - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>

…graphy-42.0.3 Bump cryptography from 41.0.4 to 42.0.3

…-8.0.1 Bump pytest from 7.4.4 to 8.0.1

Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.2.7 to 7.4.2. - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](nedbat/coveragepy@7.2.7...7.4.2) --- updated-dependencies: - dependency-name: coverage dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

…ge-7.4.2 Bump coverage from 7.2.7 to 7.4.2

Bumps [tox](https://github.com/tox-dev/tox) from 4.11.3 to 4.13.0. - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](tox-dev/tox@4.11.3...4.13.0) --- updated-dependencies: - dependency-name: tox dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

…13.0 Bump tox from 4.11.3 to 4.13.0

add i18n to Snappass

Bumps [actions/cache](https://github.com/actions/cache) from 3 to 4. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v3...v4) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.2 to 3.1.3. - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.2...3.1.3) --- updated-dependencies: - dependency-name: jinja2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* add /api endpoint * pass password in request body when using API * flake8 fixed; tests added * flake8 fixed test.py --------- Co-authored-by: Reinoud van Leeuwen <[email protected]>

Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.0.1 to 8.1.0. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.0.1...8.1.0) --- updated-dependencies: - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

…-8.1.0 Bump pytest from 8.0.1 to 8.1.0

…s/latest-updates

iamkilo

👍🏼

yurushao and others added 30 commits June 9, 2023 12:54

Remove py3.7 (pinterest#234)

1e1b189

* Remove py3.7 * Restore cache action

Merge pull request pinterest#292 from pinterest/dependabot/pip/fakere…

c4d6074

…dis-2.20.0 Bump fakeredis from 2.14.1 to 2.20.0

Merge pull request pinterest#289 from pinterest/dependabot/pip/redis-…

6a10fd3

…5.0.1 Bump redis from 4.5.5 to 5.0.1

Install deps from requirements.txt (pinterest#303)

99028bf

Prepare 1.6.1 release (pinterest#304)

baa921f

* Prepare 1.6.1 release * Update configs * Fix dev requirements

Bump version: 1.6.0 → 1.6.1 (pinterest#305)

8103cb4

Use urllib.parse for quoting/unquoting plus instead of deprecated wer…

ae27473

…kzeug.urls (pinterest#300) Use urllib.parse for quoting/unquoting plus werkzeug.urls.url_quote_plus and werkzeug.urls.url_unquote_plus were deprecated and are removed in 3.0.0 and newer versions.

Bump version: 1.6.1 → 1.6.2 (pinterest#311)

a8e4312

Merge pull request pinterest#314 from pinterest/dependabot/pip/pytest…

29ce62b

…-7.4.4 Bump pytest from 7.3.1 to 7.4.4

Merge pull request pinterest#312 from pinterest/dependabot/pip/freeze…

564a29d

…gun-1.4.0 Bump freezegun from 1.2.1 to 1.4.0

systeembeheerder and others added 25 commits February 14, 2024 21:38

add i18n to Snappass

6d294c6

remove import of flask, g

6d17603

Add empty translations for de and es

d178664

Add German Translation

28c396e

Merge pull request pinterest#331 from pinterest/dependabot/pip/fakere…

fcfc1b0

…dis-2.21.1 Bump fakeredis from 2.20.0 to 2.21.1

Merge pull request pinterest#332 from pinterest/dependabot/pip/crypto…

0084d85

…graphy-42.0.3 Bump cryptography from 41.0.4 to 42.0.3

Merge pull request pinterest#334 from pinterest/dependabot/pip/pytest…

f551b73

…-8.0.1 Bump pytest from 7.4.4 to 8.0.1

Merge pull request pinterest#335 from pinterest/dependabot/pip/covera…

82c345c

…ge-7.4.2 Bump coverage from 7.2.7 to 7.4.2

Merge pull request pinterest#333 from pinterest/dependabot/pip/tox-4.…

415d5ee

…13.0 Bump tox from 4.11.3 to 4.13.0

fix missing bracket

9fdddab

restore extra spaces

4fffb9c

Add Spanish and fixup NL&DE

114b5af

TIL flake8 :)

106ac26

Merge pull request pinterest#330 from systeembeheerder/i18n

2b108d3

add i18n to Snappass

add /api endpoint for automated flows (pinterest#316)

dc321ef

* add /api endpoint * pass password in request body when using API * flake8 fixed; tests added * flake8 fixed test.py --------- Co-authored-by: Reinoud van Leeuwen <[email protected]>

Merge pull request pinterest#339 from pinterest/dependabot/pip/pytest…

9c233c0

…-8.1.0 Bump pytest from 8.0.1 to 8.1.0

Merge branch 'master' of https://github.com/pinterest/snappass into l…

0caa06f

…s/latest-updates

silverl marked this pull request as ready for review March 6, 2024 20:54

silverl requested a review from iamkilo March 7, 2024 16:44

iamkilo approved these changes Mar 7, 2024

View reviewed changes

silverl merged commit 8275b69 into main Mar 7, 2024
1 check passed

silverl deleted the ls/latest-updates branch March 7, 2024 16:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bringing in latest from upstream repo #40

Bringing in latest from upstream repo #40

silverl commented Mar 6, 2024 •

edited

Loading

iamkilo left a comment

Bringing in latest from upstream repo #40

Bringing in latest from upstream repo #40

Conversation

silverl commented Mar 6, 2024 • edited Loading

iamkilo left a comment

Choose a reason for hiding this comment

silverl commented Mar 6, 2024 •

edited

Loading