Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release: Merge back 2.20.0 into dev from: master-into-bugfix/2.20.0-2.21.0-dev #7768

Merged
merged 103 commits into from
Mar 6, 2023

Conversation

github-actions[bot]
Copy link
Contributor

@github-actions github-actions bot commented Mar 6, 2023

Release triggered by Maffooch

DefectDojo release bot and others added 30 commits February 6, 2023 22:34
Signed-off-by: DefectDojo <defectdojo-project@owasp.org>
…0-dev

Release: Merge back 2.19.0 into dev from: master-into-dev/2.19.0-2.20.0-dev
* Implemented Finding Group View/Edit

* flake8 fix

* More flake8 fixes

* Attempt to fix unit test failures
Bumps [boto3](https://github.com/boto/boto3) from 1.26.64 to 1.26.65.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](boto/boto3@1.26.64...1.26.65)

---
updated-dependencies:
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [redis](https://github.com/redis/redis-py) from 4.4.2 to 4.5.1.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v4.4.2...v4.5.1)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [boto3](https://github.com/boto/boto3) from 1.26.65 to 1.26.67.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](boto/boto3@1.26.65...1.26.67)

---
updated-dependencies:
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [google-api-python-client](https://github.com/googleapis/google-api-python-client) from 2.76.0 to 2.77.0.
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Changelog](https://github.com/googleapis/google-api-python-client/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-api-python-client@v2.76.0...v2.77.0)

---
updated-dependencies:
- dependency-name: google-api-python-client
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [google-auth-oauthlib](https://github.com/GoogleCloudPlatform/google-auth-library-python-oauthlib) from 0.8.0 to 1.0.0.
- [Release notes](https://github.com/GoogleCloudPlatform/google-auth-library-python-oauthlib/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-python-oauthlib/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-auth-library-python-oauthlib@v0.8.0...v1.0.0)

---
updated-dependencies:
- dependency-name: google-auth-oauthlib
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [fontawesomefree](https://github.com/FortAwesome/Font-Awesome) from 6.2.1 to 6.3.0.
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases)
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/6.x/CHANGELOG.md)
- [Commits](FortAwesome/Font-Awesome@6.2.1...6.3.0)

---
updated-dependencies:
- dependency-name: fontawesomefree
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [cryptography](https://github.com/pyca/cryptography) from 39.0.0 to 39.0.1.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@39.0.0...39.0.1)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ine (docker-compose.yml) (#7572)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* Update reimporter.py

* Apply black formatter
Bumps [vulners](https://github.com/vulnersCom/api) from 2.0.6 to 2.0.8.
- [Release notes](https://github.com/vulnersCom/api/releases)
- [Commits](https://github.com/vulnersCom/api/commits)

---
updated-dependencies:
- dependency-name: vulners
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ocker-compose.yml) (#7607)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Bumps [drf-yasg](https://github.com/axnsan12/drf-yasg) from 1.21.4 to 1.21.5.
- [Release notes](https://github.com/axnsan12/drf-yasg/releases)
- [Changelog](https://github.com/axnsan12/drf-yasg/blob/1.21.5/docs/changelog.rst)
- [Commits](axnsan12/drf-yasg@1.21.4...1.21.5)

---
updated-dependencies:
- dependency-name: drf-yasg
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [boto3](https://github.com/boto/boto3) from 1.26.67 to 1.26.68.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](boto/boto3@1.26.67...1.26.68)

---
updated-dependencies:
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ose.yml) (#7605)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Docs: Groups from Identity Providers
* minor intsights bug fix

* updated tests

* flake8 fix

---------

Co-authored-by: Chris Fort <chris.fort@lexisnexis.com>
…7606)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Bumps [asteval](https://github.com/newville/asteval) from 0.9.28 to 0.9.29.
- [Release notes](https://github.com/newville/asteval/releases)
- [Commits](newville/asteval@0.9.28...0.9.29)

---
updated-dependencies:
- dependency-name: asteval
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [boto3](https://github.com/boto/boto3) from 1.26.68 to 1.26.69.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](boto/boto3@1.26.68...1.26.69)

---
updated-dependencies:
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…0-dev

Release: Merge back 2.19.1 into dev from: master-into-dev/2.19.1-2.20.0-dev
* added codechecker parser

* codechecker - linter errors fixed

* codechecker - linter errors fixed

* codechecker - linter errors fixed

* codechecker - modified DEDUPLICATION_ALGORITHM_PER_PARSER to DEDUPE_ALGO_UNIQUE_ID_FROM_TOOL

* Update dojo/tools/codechecker/parser.py

Co-authored-by: Damien Carol <damien.carol@gmail.com>

* Update dojo/tools/codechecker/parser.py

Co-authored-by: Damien Carol <damien.carol@gmail.com>

* codechecker - add extra tests

* codechecker - add extra tests

* codechecker - fix parse_json

* codechecker - fix parse_json

* Update dojo/tools/codechecker/parser.py

Co-authored-by: Damien Carol <damien.carol@gmail.com>

* Update dojo/tools/codechecker/parser.py

Co-authored-by: Damien Carol <damien.carol@gmail.com>

* Update dojo/tools/codechecker/parser.py

Co-authored-by: Damien Carol <damien.carol@gmail.com>

* codechecker - added tag, added active value, removed some default fields, added active value tests

* codechecker - added tag, added active value, removed some default fields, added active value tests

---------

Co-authored-by: DVSutyagin <dvsutyagin@greenatom.ru>
Co-authored-by: Damien Carol <damien.carol@gmail.com>
Maffooch and others added 28 commits March 2, 2023 10:48
* Add prefetching to Endpoint, Endpoint Status, and Engagement

* Update views.py

* Add EndpointParams Serializer
Reduce the number of calls in technologies endpoint from 3 to 1 (technologies, product ID query, user ID query
* Add prefetching to engagement presets endpoint

Reduce the number of calls in engagement presets endpoint from 4 to 1 (engagement presets, product type ID query, test type ID queries, network locations ID queries)
[sc-614]

* Update views.py
* Add prefetching to product API scan config presets endpoint

Reduce the number of calls in product API scan config endpoint from 3 to 1 (product API scan config, product ID query, tool configuration ID query) 
[sc-615]

* Update views.py

* Add Tool Product settings and Tool configuration as well
* Add Risk Acceptance (read) API Endpoint

* Fix Flake8

* Update the risk acceptance schema

* Update unit tests again
…5.2-alpine (docker-compose.yml) (#7732)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Bumps [django-slack](https://github.com/lamby/django-slack) from 5.18.0 to 5.19.0.
- [Release notes](https://github.com/lamby/django-slack/releases)
- [Commits](lamby/django-slack@5.18.0...5.19.0)

---
updated-dependencies:
- dependency-name: django-slack
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [google-auth](https://github.com/googleapis/google-auth-library-python) from 2.16.1 to 2.16.2.
- [Release notes](https://github.com/googleapis/google-auth-library-python/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-auth-library-python@v2.16.1...v2.16.2)

---
updated-dependencies:
- dependency-name: google-auth
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [django-environ](https://github.com/joke2k/django-environ) from 0.9.0 to 0.10.0.
- [Release notes](https://github.com/joke2k/django-environ/releases)
- [Changelog](https://github.com/joke2k/django-environ/blob/main/CHANGELOG.rst)
- [Commits](joke2k/django-environ@v0.9.0...v0.10.0)

---
updated-dependencies:
- dependency-name: django-environ
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [boto3](https://github.com/boto/boto3) from 1.26.81 to 1.26.83.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](boto/boto3@1.26.81...1.26.83)

---
updated-dependencies:
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [cryptography](https://github.com/pyca/cryptography) from 39.0.1 to 39.0.2.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@39.0.1...39.0.2)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Fix GitHub dedupe

* added documentation github dedupe fix
* Add Questionnaire API Endpoints (read only)

* Split questionnaires into their own fixture file

* Fix flake8
…er-compose.yml) (#7744)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Bumps [boto3](https://github.com/boto/boto3) from 1.26.83 to 1.26.84.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](boto/boto3@1.26.83...1.26.84)

---
updated-dependencies:
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [drf-spectacular](https://github.com/tfranzel/drf-spectacular) from 0.25.1 to 0.26.0.
- [Release notes](https://github.com/tfranzel/drf-spectacular/releases)
- [Changelog](https://github.com/tfranzel/drf-spectacular/blob/master/CHANGELOG.rst)
- [Commits](tfranzel/drf-spectacular@0.25.1...0.26.0)

---
updated-dependencies:
- dependency-name: drf-spectacular
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Add Credential Mapping and API Endpoint

* Fix Flake8

* Correct Unit tests

* Sneak in Note Type serializer

* Sneak the serializer in another place as well
Signed-off-by: DefectDojo <defectdojo-project@owasp.org>
Release: Merge release into master from: release/2.20.0
@Maffooch Maffooch merged commit 3b224ef into bugfix Mar 6, 2023
@Maffooch Maffooch deleted the master-into-bugfix/2.20.0-2.21.0-dev branch March 6, 2023 19:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet