Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump drf-spectacular from 0.20.2 to 0.21.0 #5427

Merged
merged 1 commit into from
Nov 11, 2021

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 11, 2021

Bumps drf-spectacular from 0.20.2 to 0.21.0.

Changelog

Sourced from drf-spectacular's changelog.

0.21.0 (2021-11-10)

  • add renderer & parser whitelist setting [#598](https://github.com/tfranzel/drf-spectacular/issues/598) <https://github.com/tfranzel/drf-spectacular/issues/598>_
  • catch attr exception for invalid SerializerMethodField [#592](https://github.com/tfranzel/drf-spectacular/issues/592) <https://github.com/tfranzel/drf-spectacular/issues/592>_
  • add regression test for catch-all status codes [#573](https://github.com/tfranzel/drf-spectacular/issues/573) <https://github.com/tfranzel/drf-spectacular/issues/573>_
  • bugfix OpenApiResponse without description argument [#591](https://github.com/tfranzel/drf-spectacular/issues/591) <https://github.com/tfranzel/drf-spectacular/issues/591>_
  • introduce direction literal / import consolidation [#582](https://github.com/tfranzel/drf-spectacular/issues/582) <https://github.com/tfranzel/drf-spectacular/issues/582>_
  • mitigate CORS issues for external requests in Swagger UI [#588](https://github.com/tfranzel/drf-spectacular/issues/588) <https://github.com/tfranzel/drf-spectacular/issues/588>_
  • Swagger UI authorized schema retrieval [#342](https://github.com/tfranzel/drf-spectacular/issues/342) <https://github.com/tfranzel/drf-spectacular/issues/342>_ [#458](https://github.com/tfranzel/drf-spectacular/issues/458) <https://github.com/tfranzel/drf-spectacular/issues/458>_
  • remove cyclic import warning as fixes haves mitigated the issue. [#581](https://github.com/tfranzel/drf-spectacular/issues/581) <https://github.com/tfranzel/drf-spectacular/issues/581>_
  • bugfix: anchor parameter patterns with ^$
  • bugfix isolation of derivatives for @​extend_schema_serializer/@​extend_schema_field [#585](https://github.com/tfranzel/drf-spectacular/issues/585) <https://github.com/tfranzel/drf-spectacular/issues/585>_
  • add support for djangorestframework-recursive [#586](https://github.com/tfranzel/drf-spectacular/issues/586) <https://github.com/tfranzel/drf-spectacular/issues/586>_
  • Add blueprint for drf-extra-fields Base64FileField [johnthagen]
  • Add note about extensions registering themselves [johnthagen]
  • Document alternative to drf-yasg swagger_schema_field [johnthagen]
  • allow to bypass list detection for filter discovery [#407](https://github.com/tfranzel/drf-spectacular/issues/407) <https://github.com/tfranzel/drf-spectacular/issues/407>_
  • add blueprint (closes [#448](https://github.com/tfranzel/drf-spectacular/issues/448) <https://github.com/tfranzel/drf-spectacular/issues/448>_), fix test misnomer
  • non-blank string enforcement for parameters [#282](https://github.com/tfranzel/drf-spectacular/issues/282) <https://github.com/tfranzel/drf-spectacular/issues/282>_
  • add setting ENFORCE_NON_BLANK_FIELDS to enable blank checks [#186](https://github.com/tfranzel/drf-spectacular/issues/186) <https://github.com/tfranzel/drf-spectacular/issues/186>_

Breaking changes / important additions:

  • Fixed two more decorator isolation issues.
  • Added Swagger UI plugin to handle reloading the schema on authentication changes ('SERVE_PUBLIC': False).
  • Added minLength where a blank value is not allowed. Apart the the dedicated setting, it is implicitly enabled by COMPONENT_SPLIT_REQUEST.
  • Several other small fixes and additional settings for corner cases. This is mainly a y-steam release due to the potential impact on the Swagger UI and minLength changes.
Commits
  • 03d315c version bump
  • e793dca add renderer & parser whitelist setting #598
  • af1cccd catch attr exception for invalid SerializerMethodField #592
  • 36b970e add regression test for catch-all status codes #573
  • 1839303 bugfix OpenApiResponse without description argument #591
  • 62877a9 Merge pull request #552 from tfranzel/swagger_non_public
  • 7fd64d3 introduce direction literal / import consolidation #582
  • 94b437a mitigate CORS issues for external requests in Swagger UI #588
  • 01ea966 Swagger UI authorized schema retrieval #342 #458
  • 56d720d Merge pull request #583 from johnthagen/patch-2
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [drf-spectacular](https://github.com/tfranzel/drf-spectacular) from 0.20.2 to 0.21.0.
- [Release notes](https://github.com/tfranzel/drf-spectacular/releases)
- [Changelog](https://github.com/tfranzel/drf-spectacular/blob/master/CHANGELOG.rst)
- [Commits](tfranzel/drf-spectacular@0.20.2...0.21.0)

---
updated-dependencies:
- dependency-name: drf-spectacular
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 11, 2021
@valentijnscholten valentijnscholten merged commit 223971b into dev Nov 11, 2021
@dependabot dependabot bot deleted the dependabot/pip/dev/drf-spectacular-0.21.0 branch November 11, 2021 14:52
Maffooch added a commit that referenced this pull request Dec 7, 2021
* Update versions in application files

* Update gh-pages.yml

* Bump google-auth from 2.3.2 to 2.3.3 (#5367)

Bumps [google-auth](https://github.com/googleapis/google-auth-library-python) from 2.3.2 to 2.3.3.
- [Release notes](https://github.com/googleapis/google-auth-library-python/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-auth-library-python@v2.3.2...v2.3.3)

---
updated-dependencies:
- dependency-name: google-auth
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump django-imagekit from 4.0.2 to 4.1.0 (#5366)

Bumps [django-imagekit](https://github.com/matthewwithanm/django-imagekit) from 4.0.2 to 4.1.0.
- [Release notes](https://github.com/matthewwithanm/django-imagekit/releases)
- [Commits](matthewwithanm/django-imagekit@4.0.2...4.1.0)

---
updated-dependencies:
- dependency-name: django-imagekit
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* APIv2: Allow import/reimport by names not only ids (#5342)

* allow import/reimport by names

* cleanup

* cleanup

* update docs

* improvements

* cleanup 2

* cleanup 2

* php inventory changes

* Update dojo/api_v2/views.py

Co-authored-by: Stefan Fleckenstein <stefan.fleckenstein@maibornwolff.de>

* Update dojo/api_v2/views.py

Co-authored-by: Stefan Fleckenstein <stefan.fleckenstein@maibornwolff.de>

* cleanup 3.0

* cleanup 3.0

* cleanup 3.0

Co-authored-by: Stefan Fleckenstein <stefan.fleckenstein@maibornwolff.de>

* Bump google-api-python-client from 2.28.0 to 2.29.0 (#5365)

Bumps [google-api-python-client](https://github.com/googleapis/google-api-python-client) from 2.28.0 to 2.29.0.
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Changelog](https://github.com/googleapis/google-api-python-client/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-api-python-client@v2.28.0...v2.29.0)

---
updated-dependencies:
- dependency-name: google-api-python-client
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump lxml from 4.6.3 to 4.6.4 (#5381)

Bumps [lxml](https://github.com/lxml/lxml) from 4.6.3 to 4.6.4.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-4.6.3...lxml-4.6.4)

---
updated-dependencies:
- dependency-name: lxml
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update gcr.io/cloudsql-docker/gce-proxy Docker tag from 1.26.0 to v1.27.0 (helm/defectdojo/values.yaml) (#5375)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

* Update upgrading.md (#5374)

* Update versions in application files

* Bump django-watson from 1.5.5 to 1.6.0 (#5389)

Bumps [django-watson](https://github.com/etianen/django-watson) from 1.5.5 to 1.6.0.
- [Release notes](https://github.com/etianen/django-watson/releases)
- [Changelog](https://github.com/etianen/django-watson/blob/master/CHANGELOG.markdown)
- [Commits](etianen/django-watson@release-1.5.5...release-1.6.0)

---
updated-dependencies:
- dependency-name: django-watson
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* main: improve documentation (#5390)

* Update dependency postcss-cli from 9.0.1 to v9.0.2 (docs/package.json) (#5392)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

* Generate github pages for master + dev branches (#5398)

* pages for master and dev

* pages for master and dev

* Bump numpy from 1.21.3 to 1.21.4 (#5396)

Bumps [numpy](https://github.com/numpy/numpy) from 1.21.3 to 1.21.4.
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/HOWTO_RELEASE.rst.txt)
- [Commits](numpy/numpy@v1.21.3...v1.21.4)

---
updated-dependencies:
- dependency-name: numpy
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update Chart.yaml

* Integration test idempotency (#5397)

* Resolve failing integration test if user existed.
Added is_help_message_present for .help-block
Used non-deprecated selector

* Ensure test_user_notificaitons_change tests
  changes and not just selecting. Test is now
  idempotent instead of just working first time.

* Removing integration test with missing test file.
  Removal based on existing read-only tests within
  user_test.py and lack of test in GitHub Actions.

* Remove trailing whitespace

* Restore entrypoint-integration-tests.sh

* main(tests): remove rabbitmq from unit-tests (#5307)

* main(tests): remove rabbitmq from unit-tests service

* main(tests): remove rabbitmq from unit-tests

* fix(tests): overwrite broker values from dockerfile

* Bump pdfmake from 0.2.2 to 0.2.3 in /components (#5409)

Bumps [pdfmake](https://github.com/bpampuch/pdfmake) from 0.2.2 to 0.2.3.
- [Release notes](https://github.com/bpampuch/pdfmake/releases)
- [Changelog](https://github.com/bpampuch/pdfmake/blob/0.2.3/CHANGELOG.md)
- [Commits](bpampuch/pdfmake@0.2.2...0.2.3)

---
updated-dependencies:
- dependency-name: pdfmake
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump django-extensions from 3.1.3 to 3.1.5 (#5408)

Bumps [django-extensions](https://github.com/django-extensions/django-extensions) from 3.1.3 to 3.1.5.
- [Release notes](https://github.com/django-extensions/django-extensions/releases)
- [Changelog](https://github.com/django-extensions/django-extensions/blob/main/CHANGELOG.md)
- [Commits](django-extensions/django-extensions@3.1.3...3.1.5)

---
updated-dependencies:
- dependency-name: django-extensions
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Remove models for legacy api classes (#5387)

* Remove models for legacy api classes

* fix unit tests

* Auth V2 - Remove legacy authorization part 1: Remove legacy auth from templates (#5382)

* remove legacy auth from templates

* remove legacy unit test

* remove dependency check report (#5413)

* fix(helm chart): Update the nginx-prometheus-exporter entrypoint (#5415)

Fix #5414

The entrypoint has been changed between version 0.8.0 and 0.9.0 of the nginx-prometheus-exporter

* Bump google-api-python-client from 2.29.0 to 2.30.0 (#5418)

Bumps [google-api-python-client](https://github.com/googleapis/google-api-python-client) from 2.29.0 to 2.30.0.
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Changelog](https://github.com/googleapis/google-api-python-client/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-api-python-client@v2.29.0...v2.30.0)

---
updated-dependencies:
- dependency-name: google-api-python-client
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump pdfmake from 0.2.3 to 0.2.4 in /components (#5429)

Bumps [pdfmake](https://github.com/bpampuch/pdfmake) from 0.2.3 to 0.2.4.
- [Release notes](https://github.com/bpampuch/pdfmake/releases)
- [Changelog](https://github.com/bpampuch/pdfmake/blob/0.2.4/CHANGELOG.md)
- [Commits](bpampuch/pdfmake@0.2.3...0.2.4)

---
updated-dependencies:
- dependency-name: pdfmake
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump coverage from 6.1.1 to 6.1.2 (#5428)

Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.1.1 to 6.1.2.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@6.1.1...6.1.2)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump drf-spectacular from 0.20.2 to 0.21.0 (#5427)

Bumps [drf-spectacular](https://github.com/tfranzel/drf-spectacular) from 0.20.2 to 0.21.0.
- [Release notes](https://github.com/tfranzel/drf-spectacular/releases)
- [Changelog](https://github.com/tfranzel/drf-spectacular/blob/master/CHANGELOG.rst)
- [Commits](tfranzel/drf-spectacular@0.20.2...0.21.0)

---
updated-dependencies:
- dependency-name: drf-spectacular
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix integration test users (#5425)

* Fix: sequential integration tests

* Fix: sequential integration tests

* Remove: reload

Co-authored-by: Dubravko Sever <dubravko.sever@pan-net.eu>

* Update rabbitmq Docker tag from 3.9.8 to v3.9.9 (docker-compose.yml) (#5434)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

* Bump psycopg2-binary from 2.9.1 to 2.9.2 (#5439)

Bumps [psycopg2-binary](https://github.com/psycopg/psycopg2) from 2.9.1 to 2.9.2.
- [Release notes](https://github.com/psycopg/psycopg2/releases)
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](https://github.com/psycopg/psycopg2/commits)

---
updated-dependencies:
- dependency-name: psycopg2-binary
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump sqlalchemy from 1.4.26 to 1.4.27 (#5440)

Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) from 1.4.26 to 1.4.27.
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

---
updated-dependencies:
- dependency-name: sqlalchemy
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Move more markdown files to github pages (#5403)

* Update branching-model.md

* remove branching release model from README

* Delete BRANCHING-MODEL.md

* Update README.md

* Update README.md

* Delete REST-APIs.md

* Delete RELEASE-AND-BRANCH-MODEL.md

* Delete GETTING-STARTED.md

* Delete ROADMAP.md

* Update README.md

* Update CONTRIBUTING.md

* Update README.md

* Delete MAINTAINERS.md

* Update security_issue.md

* Update README.md

* move markdown files to docs

* Update docs/content/en/contributing/documentation.md

Co-authored-by: Stefan Fleckenstein <stefan.fleckenstein@maibornwolff.de>

* Update README.md

* finetune api wrapper section

* add back AVAILABLE plugins page

* Defect Dojo -> DefectDojo

Co-authored-by: Stefan Fleckenstein <stefan.fleckenstein@maibornwolff.de>

* Integration test warning cleanup (#5445)

* Update all deprecated selenium get_element(s)_by*

* Remove trailing whitespace from user_test.py

* fix dedupe sync usage example (#5446)

* Bump nginx from 1.21.3-alpine to 1.21.4-alpine (#5452)

Bumps nginx from 1.21.3-alpine to 1.21.4-alpine.

---
updated-dependencies:
- dependency-name: nginx
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* add dojo license to package.json (#5447)

* Authz: Allow global maintainers/owner to add Product Types (#5410)

* Allow global maintainers/owners to add product types

* add permission check to templates

* add permission check to templates

* rename filter

* feat(saml): configurable login button (#5449)

* Allow to force login form (#5444)

* allow to force login form

* add docs

* feat: make semgrep reports more informative (#5391)

* Add more detailed description for semgrep report.
Add unittests for new description format

* Fix flake errors

* Fix unittest errors

* Fix unittest errors

* Update dojo/tools/semgrep/parser.py

Co-authored-by: Stefan Fleckenstein <stefan.fleckenstein@maibornwolff.de>

* Add test for new semgrep description

Co-authored-by: Stefan Fleckenstein <stefan.fleckenstein@maibornwolff.de>

* remove dojo/user/helper (#5412)

Co-authored-by: Cody Maffucci <46459665+Maffooch@users.noreply.github.com>

* add build arg for userid integration tests (#5432)

* Update mysql:5.7.36 Docker digest from 5.7.36 to v5.7.36 (docker-compose.yml) (#5464)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

* Add "Forgot password" functionality (#5302)

* Define reset password process

* fix LOGIN_EXEMPT_URLS, add button on log-in screen

* flake8

* replace "Password reset" by "Forgot password"

* add DD_SOCIAL_AUTH_FORGOT_PASSWORD_BUTTON

* change DD_SOCIAL_AUTH_FORGOT_PASSWORD_BUTTON to DD_FORGOT_PASSWORD_BUTTON

* flake8

* change "mail_notifications_from" to "email_from", change first button, override site url, use "email_from" as sending address, handle ConnectionError

* rename DD_FORGOT_PASSWORD_BUTTON to DD_FORGOT_PASSWORD, allow to fail if sending of email is not successful, add integration test, add mailhog to dev and integration tests

* typo

* add docs

* typos

* run mailhog during integration tests on github

* use SMTP for Celery - to be able to send mail notifications

* Bump google-api-python-client from 2.30.0 to 2.31.0 (#5462)

Bumps [google-api-python-client](https://github.com/googleapis/google-api-python-client) from 2.30.0 to 2.31.0.
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Changelog](https://github.com/googleapis/google-api-python-client/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-api-python-client@v2.30.0...v2.31.0)

---
updated-dependencies:
- dependency-name: google-api-python-client
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump markdown from 3.3.4 to 3.3.5 (#5460)

Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.3.4 to 3.3.5.
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Commits](Python-Markdown/markdown@3.3.4...3.3.5)

---
updated-dependencies:
- dependency-name: markdown
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* use buildkit master with bugfix (#5467)

* Bump markdown from 3.3.5 to 3.3.6 (#5470)

Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.3.5 to 3.3.6.
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Commits](Python-Markdown/markdown@3.3.5...3.3.6)

---
updated-dependencies:
- dependency-name: markdown
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump django-polymorphic from 3.0.0 to 3.1.0 (#5469)

Bumps [django-polymorphic](https://github.com/django-polymorphic/django-polymorphic) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/django-polymorphic/django-polymorphic/releases)
- [Changelog](https://github.com/django-polymorphic/django-polymorphic/blob/master/docs/changelog.rst)
- [Commits](jazzband/django-polymorphic@3.0.0...v3.1)

---
updated-dependencies:
- dependency-name: django-polymorphic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump mysqlclient from 2.0.3 to 2.1.0 (#5468)

Bumps [mysqlclient](https://github.com/PyMySQL/mysqlclient) from 2.0.3 to 2.1.0.
- [Release notes](https://github.com/PyMySQL/mysqlclient/releases)
- [Changelog](https://github.com/PyMySQL/mysqlclient/blob/main/HISTORY.rst)
- [Commits](PyMySQL/mysqlclient@v2.0.3...v2.1.0)

---
updated-dependencies:
- dependency-name: mysqlclient
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update rabbitmq:3.9.9 Docker digest from 3.9.9 to 3.9.9 (docker-compose.yml) (#5472)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

* Auth V2 - Remove legacy authorization part 3: Remove feature flag from core classes  (#5458)

* remove dojo/user/helper

* remove FEATURE_AUTHORIZATION_V2 from core classes and API

* Fix for creating multiple groups containing the same Product Type (#5457)

* fix

* revert change for message

* beautify

* Update rabbitmq Docker tag from 3.9.9 to v3.9.10 (docker-compose.yml) (#5475)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

* Fix for missing API_Scan_Configuration and exception handler (#5455)

Co-authored-by: valentijnscholten <valentijnscholten@gmail.com>

* Add support for pushing tags to jira (#5476)

* Bump cryptography from 35.0.0 to 36.0.0 (#5482)

Bumps [cryptography](https://github.com/pyca/cryptography) from 35.0.0 to 36.0.0.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@35.0.0...36.0.0)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* new report format (#5478)

* Update rabbitmq:3.9.10 Docker digest from 3.9.10 to 3.9.10 (docker-compose.yml) (#5486)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

* optimize GHA unit test (#5488)

* Moved all plot objects into one .js file (#5456)

* Removed all plot objects from corresponding .html files and grouped them into one static .js file

* Attempt #1 to fix failing integration test

Co-authored-by: valentijnscholten <valentijnscholten@gmail.com>

* Add EmptyDir for CeleryBeat into /run (#5421)

* Add volumeMounts for celery beat

* Decrease Chart version

* use DEDUPE_ALGO_HASH_CODE for detect-secrets (#5483)

* Update dependency postcss from 8.3.11 to v8.4.0 (docs/package.json) (#5493)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

* Update labeler.yml

* add tag for each trivy vulnerability (#5479)

Signed-off-by: shubhindia <shubhindia123@gmail.com>

* Update dependency postcss from 8.4.0 to v8.4.1 (docs/package.json) (#5498)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

* Update DOCKER.md (#5505)

Fixing broken link for "Running in Production"

* Update dependency postcss from 8.4.1 to v8.4.3 (docs/package.json) (#5507)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

* go to user view after user add (#5510)

* set default group for all new users (#5501)

* Update dependency postcss from 8.4.3 to v8.4.4 (docs/package.json) (#5512)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

* Auth V2 - Remove legacy authorization part 4: final removal of FEATURE_AUTHORIZATION_V2 (#5477)

* remove FEATURE_AUTHORIZATION_V2

* flake8

Co-authored-by: valentijnscholten <valentijnscholten@gmail.com>

* fix duplicate notification urls (#5515)

* Update 0066_django_tagulous.py (#5514)

* Nessus: store only standard protocol names (#5471)

Co-authored-by: valentijnscholten <valentijnscholten@gmail.com>

* Bump coverage from 6.1.2 to 6.2 (#5520)

Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.1.2 to 6.2.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@6.1.2...6.2)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* feat(helm): allow disabling initializer job (#5504)

There is initializer.run: true in default values.yaml, but it isn't used anywhere.

I'd like to add the opportunity to disable the initializer job.
Also, it would be great to make it possible to add annotations to the initializer job.

UPD: annotations support for init job was added :)

* Bump humanize from 3.12.0 to 3.13.1 (#5530)

Bumps [humanize](https://github.com/jmoiron/humanize) from 3.12.0 to 3.13.1.
- [Release notes](https://github.com/jmoiron/humanize/releases)
- [Commits](jmoiron/humanize@3.12.0...3.13.1)

---
updated-dependencies:
- dependency-name: humanize
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Endpoint Metadata Importer for adding tags/custom fields to Endpoints (#5491)

* Endpoint Metadata Importer for adding tags and custom fields to Endpoints

* fix flake8

* Add api functionality and update docs

* fix flake8

* Add unit test suite

* fix Flake8

* fix Flake8

* Add endpoint to test method list

* Correct unit tests and remove print statements

* Add feature flag an rename private_dns to hostname

* Rename no_private_dns_endpoint_meta_import.csv to no_hostname_endpoint_meta_import.csv

* Make changes requested by Stefan

* Fix Flake8

* seperate API product_name and product_id accessors

* Fix typo

* Fix copy/paste error

* Add endpoint meta import to system settings

* Update Nessus WAS parser to catch the lack of a port in CSV Parser (#5490)

* Update Nessus WAS parser to catch the lack of a port in CSV Parser

* Remove default of '8888' and just leave blank

* Remove default port/protocol

* Fix Flake8

* Add IP address as backup to host

Co-authored-by: valentijnscholten <valentijnscholten@gmail.com>

* main(helm): remove deprecated stable repo (#5450)

* main(helm): remove deprecated stable repo

* fix: rename mysql variable for bitnami chart

* fix(helm): mysql secrets

* main(tests): update kubernetes versions

* main(tests): update kubernetes test strategy

* main(tests): update minikube

* fix(helm): mysql port and documentation

Co-authored-by: valentijnscholten <valentijnscholten@gmail.com>

* move unittests outside dojo folder (#5527)

* move unittests outside dojo folder

* change base class

* cleanup

* cleanup

* cleanup

* cleanup

* fixes

* cleanup

* refactor

* cleanup

* cleanup

* cleanup

* fixes

* fixes

* fixes

* we expect these env variables to be set (#5529)

Co-authored-by: valentijnscholten <valentijnscholten@gmail.com>

* Upgrade to Django 3.2 (#5265)

* Upgrade to Django 3.2

* try fork with tagulous fix

* try fork with tagulous fix

* fixes for typos (#5531)

* fix: checkmarx parser aggregation and deduplication with query id (#5506)

this should fix #3958
the aggregation mechanism and deduplication mechanism for checkmarx are now using the same fields
it now uses the query id of checkmarx in the hash code to avoid creating multiple issue for each checkmarx "result"
we keep the aggregation but now we can no longer find duplicates inside a single report

* Bump djangosaml2 from 1.3.4 to 1.3.5 (#5463)

Bumps [djangosaml2](https://github.com/IdentityPython/djangosaml2) from 1.3.4 to 1.3.5.
- [Release notes](https://github.com/IdentityPython/djangosaml2/releases)
- [Changelog](https://github.com/IdentityPython/djangosaml2/blob/master/CHANGES)
- [Commits](IdentityPython/djangosaml2@v1.3.4...v1.3.5)

---
updated-dependencies:
- dependency-name: djangosaml2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump redis from 3.5.3 to 4.0.2 (#5481)

Bumps [redis](https://github.com/redis/redis-py) from 3.5.3 to 4.0.2.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@3.5.3...v4.0.2)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump google-api-python-client from 2.31.0 to 2.32.0 (#5536)

Bumps [google-api-python-client](https://github.com/googleapis/google-api-python-client) from 2.31.0 to 2.32.0.
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Changelog](https://github.com/googleapis/google-api-python-client/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-api-python-client@v2.31.0...v2.32.0)

---
updated-dependencies:
- dependency-name: google-api-python-client
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* bump django to 3.2.9 (#5539)

* fix files api (#5509)

* Move unit test leftovers (#5543)

* Move unit test leftovers

* fix for FlexibleImportTestAPI

* fix for the fix

* remove duplicated `{{block.super}}` lines (#5545)

* Update express_new_jira.html

* remove duplicate block.super

* Update rabbitmq Docker tag from 3.9.10 to v3.9.11 (docker-compose.yml) (#5541)

* Update rabbitmq Docker tag from 3.9.10 to v3.9.11 (docker-compose.yml)

* Update docker-compose.yml

not sure what happened, maybe they republished with a different image/checksum

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: valentijnscholten <valentijnscholten@gmail.com>

* Auth V2 - Remove legacy authorization part 5: Removal of authorized users (#5518)

* remove authorized users

* rename db migration after rebase

* release notes

* bugfix for missed staff legacy removal

* flake8

* more flake8

* next flake8

* added removal of user migration to release notes

* rename db migration after rebase

* use GHA caching for integration tests (#5495)

* use GHA caching for integration tests

* Update integration-tests.yml

* Add organizational blocks around metrics.js files (#5544)

* Update rabbitmq:3.9.11 Docker digest from 3.9.11 to 3.9.11 (docker-compose.yml) (#5546)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

* remove findingimages leftovers (#5540)

* Add support for files in generic parser (#5508)

* Add support for files in generic parser

* Update models.py

* Add documentation

* Update docs/content/en/integrations/import.md

Co-authored-by: Stefan Fleckenstein <stefan.fleckenstein@maibornwolff.de>

* Update docs/content/en/integrations/import.md

Co-authored-by: Stefan Fleckenstein <stefan.fleckenstein@maibornwolff.de>

* Update docs/content/en/integrations/import.md

Co-authored-by: Stefan Fleckenstein <stefan.fleckenstein@maibornwolff.de>

* changes after move of unit tests

Co-authored-by: Stefan Fleckenstein <stefan.fleckenstein@maibornwolff.de>

* fix staff permission to add product types (#5551)

* typo and missing parser (#5548)

* Set default_auto_field after migration to Django 3.2 (#5552)

fixes #5538

* fix checkmarx false positive import (#5484)

* Autocreate product / engagement during (re)import (#5492)

* Smart Import

* cleanup

* fix push to jira logic

* add docs

* add jira testcases

* comments

* create ci/cd engagements

* fix target start/end

* cleanup

* set owner for created models

* autocreate for reimport

* cleanup

* reimport authz tests

* cleanup

* add docs

* update unit test paths

* update unit test paths

* update unit test paths

* fix unit tests

* fix metatdata dict code

* fix tests

* fix merge artifacts

* fix merge artifacts

* Added info on upgrading godojo installs of DefectDojo to the docs (#5561)

* Add asynchronous re/imports (disabled by default) (#5553)

* Add asynchronous re/imports (disabled by default)

* Fix Flake8 Violations

* Update unit tests

* Update importer.py

* Update progress typo

* fix image migation for duplicate captions (#5549)

* api: update reimport docstring (#5560)

* Update views.py

* Update views.py

* Update views.py

* Fix alias paths in nginx config (#5557)

* Update nginx.conf

fix alias path

* Update nginx_TLS.conf

fix alias path

* Respect `scan_date` at import time for all findings imported (#5547)

* Respect `scan_date` at import time for all findings imported

* Update scan_date set logic

* Add more unit tests

* Remove first attempt at unit test

* Add documentation and set default import date to be timezone considerate

* Make scan_date optional field

* Update test_importers_importer.py

* Update api scan_date validation

* Fix required false issue

* Update docs title

* Remove default date from unit tests

* Update versions in application files

Co-authored-by: DefectDojo release bot <dojo-release-bot@users.noreply.github.com>
Co-authored-by: Cody Maffucci <46459665+Maffooch@users.noreply.github.com>
Co-authored-by: valentijnscholten <valentijnscholten@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Stefan Fleckenstein <stefan.fleckenstein@maibornwolff.de>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: alles-klar <jannik-j@t-online.de>
Co-authored-by: CharlieSears <charlie.sears@gmail.com>
Co-authored-by: bgoareguer <43874676+bgoareguer@users.noreply.github.com>
Co-authored-by: Sever <dubravko.sever@gmail.com>
Co-authored-by: Dubravko Sever <dubravko.sever@pan-net.eu>
Co-authored-by: Shubham Gopale <shubhindia123@gmail.com>
Co-authored-by: kiblik <tomas@kubla.sk>
Co-authored-by: Artem Tykhonov <artem@macpaw.com>
Co-authored-by: blakeaowens <76979297+blakeaowens@users.noreply.github.com>
Co-authored-by: rsaiprashanth <prashanth.vy607@gmail.com>
Co-authored-by: qlimenoque <49155800+qlimenoque@users.noreply.github.com>
Co-authored-by: Julien Caillon <julien.caillon@gmail.com>
Co-authored-by: Damien Carol <damien.carol@gmail.com>
Co-authored-by: ptrovatelli <34663482+ptrovatelli@users.noreply.github.com>
Co-authored-by: Matt Tesauro <mtesauro@gmail.com>
Co-authored-by: Assylbek <39023505+tutasla@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant