04b9df0a34
Update Security disclosure process
2021-03-10 19:58:41 -08:00
e64f4028d4
Merge pull request #3465 from Netflix/hosseinsh-publish-release
...
Automate Lemur release
2021-03-10 18:03:12 -08:00
8d44ab2124
Automate Lemur release
...
Lemur's current release publishing is done manual, which comes with overheads and slows down the release cycle.
Automating this operation would allow Lemur to make more frequent releases, for instance at least once a week to pick up the latest dependency updates.
2021-03-10 16:41:24 -08:00
9e37793cb5
Merge branch 'master' into acme-preferred-chain
2021-03-10 14:01:13 -08:00
e48f4ffe77
improved documentation
2021-03-10 13:29:53 -08:00
13539814db
adding documentation
2021-03-10 13:23:21 -08:00
addaa3ab13
adding the config as an example
2021-03-10 12:43:58 -08:00
45712c582b
fixing the mock to include the alternative chain
2021-03-10 12:43:36 -08:00
4937c5dc2c
testing test_extract_cert_and_chain
2021-03-10 12:42:42 -08:00
caa44c1531
adding functionality to fetch the desired chain
2021-03-10 12:39:50 -08:00
f2205b6025
new test vectors
2021-03-09 19:51:55 -08:00
b2bfff341f
adding cert
...
bot
2021-03-09 19:50:52 -08:00
df17337075
Merge pull request #3458 from Netflix/dependabot/pip/boto3-1.17.22
2021-03-08 20:40:46 +00:00
03014ac194
Bump boto3 from 1.17.17 to 1.17.22
...
Bumps [boto3](https://github.com/boto/boto3 ) from 1.17.17 to 1.17.22.
- [Release notes](https://github.com/boto/boto3/releases )
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst )
- [Commits](https://github.com/boto/boto3/compare/1.17.17...1.17.22 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-03-08 20:02:10 +00:00
6547e028b3
Merge pull request #3457 from Netflix/dependabot/pip/botocore-1.20.22
2021-03-08 19:59:00 +00:00
d779c74e84
Bump botocore from 1.20.17 to 1.20.22
...
Bumps [botocore](https://github.com/boto/botocore ) from 1.20.17 to 1.20.22.
- [Release notes](https://github.com/boto/botocore/releases )
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst )
- [Commits](https://github.com/boto/botocore/compare/1.20.17...1.20.22 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-03-08 19:40:20 +00:00
72852af3a9
Merge pull request #3460 from Netflix/dependabot/pip/acme-1.13.0
2021-03-08 19:37:20 +00:00
b319b335a7
Bump acme from 1.12.0 to 1.13.0
...
Bumps [acme](https://github.com/letsencrypt/letsencrypt ) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/letsencrypt/letsencrypt/releases )
- [Commits](https://github.com/letsencrypt/letsencrypt/compare/v1.12.0...v1.13.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-03-08 18:30:02 +00:00
39b7e10bfe
Merge pull request #3459 from Netflix/dependabot/pip/pre-commit-2.11.0
2021-03-08 18:27:13 +00:00
31180fdca8
Bump pre-commit from 2.10.1 to 2.11.0
...
Bumps [pre-commit](https://github.com/pre-commit/pre-commit ) from 2.10.1 to 2.11.0.
- [Release notes](https://github.com/pre-commit/pre-commit/releases )
- [Changelog](https://github.com/pre-commit/pre-commit/blob/master/CHANGELOG.md )
- [Commits](https://github.com/pre-commit/pre-commit/compare/v2.10.1...v2.11.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-03-08 17:58:02 +00:00
7fb13c7939
Merge pull request #3461 from Netflix/dependabot/pip/sphinx-3.5.2
2021-03-08 17:55:48 +00:00
396cc5db40
Bump sphinx from 3.5.1 to 3.5.2
...
Bumps [sphinx](https://github.com/sphinx-doc/sphinx ) from 3.5.1 to 3.5.2.
- [Release notes](https://github.com/sphinx-doc/sphinx/releases )
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/3.x/CHANGES )
- [Commits](https://github.com/sphinx-doc/sphinx/compare/v3.5.1...v3.5.2 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-03-08 17:26:35 +00:00
0276d1a6f8
Merge pull request #3462 from Netflix/dependabot/pip/arrow-1.0.3
2021-03-08 17:24:12 +00:00
48aeb26b1a
Bump arrow from 1.0.2 to 1.0.3
...
Bumps [arrow](https://github.com/arrow-py/arrow ) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/arrow-py/arrow/releases )
- [Changelog](https://github.com/arrow-py/arrow/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/arrow-py/arrow/compare/1.0.2...1.0.3 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-03-08 13:37:03 +00:00
2e43211496
Merge pull request #3455 from hosseinsh/exclude-revoked-certs-default-autorotatet
...
Exclude revoked certs from defaulting them to auto-rotate
2021-03-05 11:04:24 -08:00
580506f605
lint
2021-03-04 19:21:26 -08:00
fdd6140995
typo and removing unused session commit
2021-03-04 19:16:06 -08:00
c579405805
since we have created an endpoint, need to iterate on this endpoint_id here
2021-03-04 19:13:40 -08:00
8e5e8fdd03
tests
2021-03-04 19:12:57 -08:00
e530664da6
exclude revoked certs from default to auto-rotate
2021-03-04 19:11:20 -08:00
cf7de0aa59
Merge pull request #3454 from hosseinsh/gulp-buffer
...
Addressing Gulp Deprecation warning
2021-03-03 16:43:13 -08:00
d73b334958
Merge branch 'master' into gulp-buffer
2021-03-03 16:15:05 -08:00
a724aa6c26
Merge pull request #3453 from hosseinsh/moto-upgrade
...
enumerating the scope of moto package as required by 2.0.0
2021-03-03 16:04:31 -08:00
a4e12f0d75
(node:73186) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead.
2021-03-03 16:02:04 -08:00
3062d31800
Merge branch 'master' into moto-upgrade
2021-03-03 15:36:58 -08:00
b118fbbc3b
Merge pull request #3452 from hosseinsh/sts-config
...
AWS STS regional config
2021-03-03 15:36:38 -08:00
6f197b255f
enumerating the scope of moto package as required by 2.0.0
2021-03-03 15:31:20 -08:00
c3eb463c42
documentation
2021-03-03 14:50:22 -08:00
a49570e5f9
sts seems to require the region where Lemur is deployed
2021-03-03 14:24:22 -08:00
576122393b
Merge pull request #3451 from Netflix/dependabot/pip/arrow-1.0.2
2021-03-02 02:38:39 +00:00
aabc7ea319
Bump arrow from 0.17.0 to 1.0.2
...
Bumps [arrow](https://github.com/arrow-py/arrow ) from 0.17.0 to 1.0.2.
- [Release notes](https://github.com/arrow-py/arrow/releases )
- [Changelog](https://github.com/arrow-py/arrow/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/arrow-py/arrow/compare/0.17.0...1.0.2 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-03-01 22:18:28 +00:00
59149186cb
Merge pull request #3449 from Netflix/dependabot/pip/boto3-1.17.17
2021-03-01 22:15:51 +00:00
d0d888a7f1
Bump boto3 from 1.17.15 to 1.17.17
...
Bumps [boto3](https://github.com/boto/boto3 ) from 1.17.15 to 1.17.17.
- [Release notes](https://github.com/boto/boto3/releases )
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst )
- [Commits](https://github.com/boto/boto3/compare/1.17.15...1.17.17 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-03-01 21:34:19 +00:00
f8fb5754f0
Merge pull request #3448 from Netflix/dependabot/pip/pytest-flask-1.2.0
2021-03-01 21:30:58 +00:00
735e7b10f9
Bump pytest-flask from 1.1.0 to 1.2.0
...
Bumps [pytest-flask](https://github.com/pytest-dev/pytest-flask ) from 1.1.0 to 1.2.0.
- [Release notes](https://github.com/pytest-dev/pytest-flask/releases )
- [Changelog](https://github.com/pytest-dev/pytest-flask/blob/master/docs/changelog.rst )
- [Commits](https://github.com/pytest-dev/pytest-flask/compare/1.1.0...1.2.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-03-01 21:02:28 +00:00
5f0e61122d
Merge pull request #3447 from Netflix/dependabot/pip/coverage-5.5
2021-03-01 20:59:52 +00:00
1b4d511db2
Bump coverage from 5.4 to 5.5
...
Bumps [coverage](https://github.com/nedbat/coveragepy ) from 5.4 to 5.5.
- [Release notes](https://github.com/nedbat/coveragepy/releases )
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst )
- [Commits](https://github.com/nedbat/coveragepy/compare/coverage-5.4...coverage-5.5 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-03-01 19:22:35 +00:00
603d89bffe
Merge pull request #3446 from Netflix/dependabot/pip/botocore-1.20.17
2021-03-01 19:19:40 +00:00
cf7cf74bb0
Bump botocore from 1.20.15 to 1.20.17
...
Bumps [botocore](https://github.com/boto/botocore ) from 1.20.15 to 1.20.17.
- [Release notes](https://github.com/boto/botocore/releases )
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst )
- [Commits](https://github.com/boto/botocore/compare/1.20.15...1.20.17 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-03-01 18:44:01 +00:00
6676dc245b
Merge pull request #3444 from jtschladen/remove-celerybeat-schedule
...
Remove celerybeat-schedule
2021-02-24 18:28:15 -08:00
csine-nflx
Hossein Shafagh
dependabot-preview[bot]
charhate
Jasmine Schladen