Skip to content

Q2 Dependabot application dependency updates #172

Closed

Description

@nathankota

Benefit Hypothesis

UGRC applications have dependencies that are constantly updating to add new features, improve performance, and patch security issues. Keeping applications current with dependencies improves our security posture and allows for easier future enhancements since the amount of breaking changes is smaller and more trivial.

Acceptance Criteria

UGRC application dependencies are current and all known CVE's are patched.

Activity

  1. converted this from a draft issue on Sep 6, 2023
  2. nathankota commented on Sep 6, 2023

    @nathankota
    ContributorAuthor

    Sprint 1 Tasks

    • Investigate and implement some Dependabot groups

    • Dependabot updates

    • Sort out Google Analytics

    • make git checkout quiet with

       with:
          show-progress: false
    • Trusted publishers for PyPi

    Bump to next quarter

  3. self-assigned this
    on Sep 26, 2023
  4. steveoh commented on Oct 13, 2023

    @steveoh
    Contributor

    Sprint 1 Notes

    Scott and Steve have completed 99% of this quarters dependabot updates. Below are some tasks that we have to close out the objective and some we want to push to the next quarter.

    Remaining tasks

    • API Client build needs to be investigated
    • Parole needs code changes
    • Address point editor needs updates but we aren’t sure where to invest time
    • Jake hasn't started his python projects
    • Revisit the reactfire npm conflicts
    • Some action workflows are not completing since their required checks aren’t running

    Next quarter

    • Forklift arcpy + warehouse updates we'd like to push for next quarter
    • Push swapper to pypi and automate builds Pypi swapper#19
  5. nathankota commented on Oct 17, 2023

    @nathankota
    ContributorAuthor

    will move unchecked tasks and new ones to a Q3 feature

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions