Commit Graph

2976 Commits

Author SHA1 Message Date
f98d53fda0 Merge pull request #3069 from Netflix/dependabot/pip/arrow-0.15.8 2020-07-27 18:05:41 +00:00
99628aface Bump arrow from 0.15.7 to 0.15.8
Bumps [arrow](https://github.com/arrow-py/arrow) from 0.15.7 to 0.15.8.
- [Release notes](https://github.com/arrow-py/arrow/releases)
- [Changelog](https://github.com/arrow-py/arrow/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/arrow-py/arrow/compare/0.15.7...0.15.8)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-27 17:58:40 +00:00
918e1699ea Merge pull request #3065 from Netflix/dependabot/pip/hvac-0.10.5 2020-07-27 17:53:21 +00:00
560894befb Bump hvac from 0.10.4 to 0.10.5
Bumps [hvac](https://github.com/hvac/hvac) from 0.10.4 to 0.10.5.
- [Release notes](https://github.com/hvac/hvac/releases)
- [Changelog](https://github.com/hvac/hvac/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/hvac/hvac/compare/v0.10.4...v0.10.5)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-27 17:45:03 +00:00
b5b50d34b2 Merge pull request #3067 from Netflix/dependabot/pip/coverage-5.2.1 2020-07-27 17:39:54 +00:00
276229db4a Bump coverage from 5.2 to 5.2.1
Bumps [coverage](https://github.com/nedbat/coveragepy) from 5.2 to 5.2.1.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/coverage-5.2...coverage-5.2.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-27 17:32:39 +00:00
6000d8bb06 Merge pull request #3064 from Netflix/dependabot/pip/botocore-1.17.28 2020-07-27 17:27:42 +00:00
0607520f93 Bump botocore from 1.17.23 to 1.17.28
Bumps [botocore](https://github.com/boto/botocore) from 1.17.23 to 1.17.28.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.17.23...1.17.28)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-27 13:40:35 +00:00
3c1d6998fb Merge branch 'master' into pinning-to-cross-signed-LE-ICA 2020-07-24 10:25:11 -07:00
456c994d25 Merge pull request #3062 from charhate/bootswatch-fix
Hardcoding bootswatch version to 3.4.1+1
2020-07-24 10:16:34 -07:00
4c3a6112b8 Merge branch 'master' into bootswatch-fix 2020-07-23 17:12:23 -07:00
f6faa856fe Hardcoding bootswatch version to 3.4.1+1
Fixing error : Potentially unhandled rejection [2] variable @path is undefined in file bower_components/bootswatch/sandstone/bootswatch.less line no. 10
2020-07-23 15:40:55 -07:00
91c0432cc2 Merge pull request #2982 from thousandeyes/fix-cryptography-intermediate-ca
Fix intermediate CA creation on cryptography plugin
2020-07-23 14:31:34 -07:00
0fd83d13ae Fix intermediate CA creation on cryptography plugin 2020-07-23 13:58:32 -07:00
4fa0374097 Merge branch 'master' into pinning-to-cross-signed-LE-ICA 2020-07-20 11:18:50 -07:00
a3ae76fac1 Merge pull request #3060 from Netflix/dependabot/pip/boto3-1.14.23 2020-07-20 17:39:43 +00:00
1da7564374 Bump boto3 from 1.14.20 to 1.14.23
Bumps [boto3](https://github.com/boto/boto3) from 1.14.20 to 1.14.23.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.14.20...1.14.23)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-20 17:33:37 +00:00
e7a0002f1b Merge pull request #3059 from Netflix/dependabot/pip/botocore-1.17.23 2020-07-20 17:31:04 +00:00
0d19986fb1 Bump botocore from 1.17.20 to 1.17.23
Bumps [botocore](https://github.com/boto/botocore) from 1.17.20 to 1.17.23.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.17.20...1.17.23)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-20 17:25:32 +00:00
c0869e0c71 Merge pull request #3061 from Netflix/dependabot/pip/flask-sqlalchemy-2.4.4 2020-07-20 17:23:11 +00:00
863bdc045b Bump flask-sqlalchemy from 2.4.3 to 2.4.4
Bumps [flask-sqlalchemy](https://github.com/pallets/flask-sqlalchemy) from 2.4.3 to 2.4.4.
- [Release notes](https://github.com/pallets/flask-sqlalchemy/releases)
- [Changelog](https://github.com/pallets/flask-sqlalchemy/blob/master/CHANGES.rst)
- [Commits](https://github.com/pallets/flask-sqlalchemy/compare/2.4.3...2.4.4)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-20 17:15:36 +00:00
8cc57a884e Merge pull request #3058 from Netflix/dependabot/pip/cloudflare-2.8.6 2020-07-20 17:13:19 +00:00
f7fce73e1e Bump cloudflare from 2.8.3 to 2.8.6
Bumps [cloudflare](https://github.com/cloudflare/python-cloudflare) from 2.8.3 to 2.8.6.
- [Release notes](https://github.com/cloudflare/python-cloudflare/releases)
- [Changelog](https://github.com/cloudflare/python-cloudflare/blob/master/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/python-cloudflare/compare/2.8.3...2.8.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-20 13:36:39 +00:00
2317967802 lack of an empty config file was resulting into this error
```
Traceback (most recent call last):
  File "/home/travis/build/Netflix/lemur/lemur/plugins/lemur_acme/tests/test_acme.py", line 159, in test_request_certificate
    self.acme.request_certificate(mock_acme, [], mock_order)
  File "/home/travis/build/Netflix/lemur/lemur/plugins/lemur_acme/plugin.py", line 211, in request_certificate
    current_app.config.get("IDENTRUST_CROSS_SIGNED_LE_ICA_EXPIRATION_DATE", "17/03/21"), '%d/%m/%y'):
TypeError: strptime() argument 1 must be str, not MagicMock
```
2020-07-15 17:04:49 -07:00
d5ae45a0d0 Let's Encrypt has been using a cross-signed intermediate CA by DST Root CA X3, which is included in any older devices' TrustStore.
https://letsencrypt.org/certificates/

Let's Encrypt is transitioning to use the intermediate CA issued by their own root (ISRG X1) starting from September 29th 2020. This is in preparation of concluding the initial bootstrapping of their CA, by having it cross-signed by an older CA.
https://letsencrypt.org/2019/04/15/transitioning-to-isrg-root.html

This PR allows Lemur to pin to the cross-signed ICA (same public/private key pair as the ICA signed by ISRG X1). This will prolong support for incompatible systems.
2020-07-14 17:35:13 -07:00
a46991646b Merge pull request #3055 from Netflix/dependabot/pip/boto3-1.14.20 2020-07-13 17:50:03 +00:00
fd2adad49e Bump boto3 from 1.14.16 to 1.14.20
Bumps [boto3](https://github.com/boto/boto3) from 1.14.16 to 1.14.20.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.14.16...1.14.20)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-13 17:36:12 +00:00
e3afaccf97 Merge pull request #3053 from Netflix/dependabot/pip/sqlalchemy-utils-0.36.8 2020-07-13 17:33:57 +00:00
05cae2ae8d Bump sqlalchemy-utils from 0.36.7 to 0.36.8
Bumps [sqlalchemy-utils](https://github.com/kvesteri/sqlalchemy-utils) from 0.36.7 to 0.36.8.
- [Release notes](https://github.com/kvesteri/sqlalchemy-utils/releases)
- [Changelog](https://github.com/kvesteri/sqlalchemy-utils/blob/master/CHANGES.rst)
- [Commits](https://github.com/kvesteri/sqlalchemy-utils/compare/0.36.7...0.36.8)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-13 17:21:30 +00:00
5bfb98e097 Merge pull request #3054 from Netflix/dependabot/pip/acme-1.6.0 2020-07-13 17:19:25 +00:00
ba9b633c45 Bump acme from 1.5.0 to 1.6.0
Bumps [acme](https://github.com/letsencrypt/letsencrypt) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/letsencrypt/letsencrypt/releases)
- [Commits](https://github.com/letsencrypt/letsencrypt/compare/v1.5.0...v1.6.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-13 17:04:17 +00:00
e73c7db16b Merge pull request #3056 from Netflix/dependabot/pip/pytest-mock-3.2.0 2020-07-13 17:02:18 +00:00
0517d01748 Bump pytest-mock from 3.1.1 to 3.2.0
Bumps [pytest-mock](https://github.com/pytest-dev/pytest-mock) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-mock/compare/v3.1.1...v3.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-13 16:44:52 +00:00
672f0e10f9 Merge pull request #3052 from Netflix/dependabot/pip/botocore-1.17.20 2020-07-13 16:43:03 +00:00
d02128a093 Bump botocore from 1.17.16 to 1.17.20
Bumps [botocore](https://github.com/boto/botocore) from 1.17.16 to 1.17.20.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.17.16...1.17.20)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-13 13:38:55 +00:00
d27a1292c5 Merge pull request #3051 from hosseinsh/reverse-package-lock-PR
reversing PR due to internal resolved addresses
2020-07-06 14:14:55 -07:00
f6fed4ddc2 reversing PR due to internal resolved addresses 2020-07-06 14:08:31 -07:00
a58e10f107 Merge pull request #3048 from Netflix/dependabot/pip/boto3-1.14.16 2020-07-06 19:05:47 +00:00
2aea0fbfba Bump boto3 from 1.14.12 to 1.14.16
Bumps [boto3](https://github.com/boto/boto3) from 1.14.12 to 1.14.16.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.14.12...1.14.16)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-06 18:58:25 +00:00
0fa9ce7a6d Merge pull request #3047 from Netflix/dependabot/pip/botocore-1.17.16 2020-07-06 18:56:00 +00:00
f863a227ac Bump botocore from 1.17.12 to 1.17.16
Bumps [botocore](https://github.com/boto/botocore) from 1.17.12 to 1.17.16.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.17.12...1.17.16)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-06 18:48:54 +00:00
31298845f5 Merge pull request #3049 from Netflix/dependabot/pip/sqlalchemy-utils-0.36.7 2020-07-06 18:46:16 +00:00
98c2e5cc31 Bump sqlalchemy-utils from 0.36.6 to 0.36.7
Bumps [sqlalchemy-utils](https://github.com/kvesteri/sqlalchemy-utils) from 0.36.6 to 0.36.7.
- [Release notes](https://github.com/kvesteri/sqlalchemy-utils/releases)
- [Changelog](https://github.com/kvesteri/sqlalchemy-utils/blob/master/CHANGES.rst)
- [Commits](https://github.com/kvesteri/sqlalchemy-utils/compare/0.36.6...0.36.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-06 18:37:07 +00:00
5e24e3fd91 Merge pull request #3045 from Netflix/dependabot/pip/sphinx-3.1.2 2020-07-06 18:34:31 +00:00
4050111291 Bump sphinx from 3.1.1 to 3.1.2
Bumps [sphinx](https://github.com/sphinx-doc/sphinx) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/sphinx-doc/sphinx/releases)
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/3.x/CHANGES)
- [Commits](https://github.com/sphinx-doc/sphinx/compare/v3.1.1...v3.1.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-06 18:25:18 +00:00
343ea09813 Merge pull request #3046 from Netflix/dependabot/pip/python-ldap-3.3.1 2020-07-06 18:23:23 +00:00
c384de7e19 Bump python-ldap from 3.3.0 to 3.3.1
Bumps [python-ldap](https://github.com/python-ldap/python-ldap) from 3.3.0 to 3.3.1.
- [Release notes](https://github.com/python-ldap/python-ldap/releases)
- [Commits](https://github.com/python-ldap/python-ldap/compare/python-ldap-3.3.0...python-ldap-3.3.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-06 18:12:45 +00:00
d8bc7d34c5 Merge pull request #3050 from Netflix/dependabot/pip/pre-commit-2.6.0 2020-07-06 18:10:41 +00:00
b329d1cdb9 Bump pre-commit from 2.5.1 to 2.6.0
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 2.5.1 to 2.6.0.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v2.5.1...v2.6.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-06 18:03:49 +00:00
0f00074500 Merge pull request #3044 from Netflix/dependabot/pip/coverage-5.2 2020-07-06 18:01:58 +00:00