Coder Social home page Coder Social logo

wordpress / openverse-api Goto Github PK

View Code? Open in Web Editor NEW
74.0 14.0 55.0 33.88 MB

The Openverse API allows programmatic access to search for CC-licensed and public domain digital media.

Home Page: https://api.openverse.engineering/v1

License: MIT License

Dockerfile 0.83% Python 97.28% HTML 0.09% Shell 1.71% JavaScript 0.08%
search-engine openverse creative-commons public-apis django django-rest-framework docker architecture falcon hacktoberfest

openverse-api's Introduction

openverse-api's People

Contributors

aetherunbound avatar aldenstpage avatar ariessa avatar ayanchoudhary avatar brenoferreira avatar dantraztrev avatar dependabot[bot] avatar dhirensr avatar dhruvkb avatar himanshu007-creator avatar kgodey avatar krysal avatar muhammadfaizanhaidar avatar nimishbongale avatar obulat avatar openverse-bot avatar outloudvi avatar pa-w avatar paulofilip3 avatar raghuvar-arora-au2 avatar ramadanomar avatar ritesh-pandey avatar sahil-r avatar sarayourfriend avatar stacimc avatar tanuj22 avatar tushar912 avatar vsomnath avatar yash-pratapwar avatar zackkrida avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

openverse-api's Issues

Bump py from 1.9.0 to 1.10.0 in /analytics (original #726)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Tue Apr 20 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps py from 1.9.0 to 1.10.0.

Changelog

Sourced from py's changelog.

1.10.0 (2020-12-12)

  • Fix a regular expression DoS vulnerability in the py.path.svnwc SVN blame functionality (CVE-2020-29651)
  • Update vendored apipkg: 1.4 => 1.5
  • Update vendored iniconfig: 1.0.0 => 1.1.1
Commits
  • e5ff378 Update CHANGELOG for 1.10.0
  • 94cf44f Update vendored libs
  • 5e8ded5 testing: comment out an assert which fails on Python 3.9 for now
  • afdffcc Rename HOWTORELEASE.rst to RELEASING.rst
  • 2de53a6 Merge pull request #266 from nicoddemus/gh-actions
  • fa1b32e Merge pull request #264 from hugovk/patch-2
  • 887d6b8 Skip test_samefile_symlink on pypy3 on Windows
  • e94e670 Fix test_comments() in test_source
  • fef9a32 Adapt test
  • 4a694b0 Add GitHub Actions badge to README
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.
-------- ### Original Comments:

TimidRobot commented on Tue Apr 20 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Tue Apr 20 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump gevent from 20.9.0 to 20.12.1 in /cccatalog-api (original #671)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Dec 28 2020
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps gevent from 20.9.0 to 20.12.1.

Commits
  • 514beb4 Preparing release 20.12.1
  • 13684f0 Merge pull request #1734 from gevent/issue1733
  • 4551a97 Try to fix mac wheel uploads.
  • a4a5536 Use Python objects instead of C long for Semaphore._multithreaded
  • 0bf8cbc Merge pull request #1732 from gevent/issue1324
  • c00c681 Make Greenlets context managers to handle their lifetime.
  • 34aa35c Add Python 3.9 to the local mac build script
  • 87b5a91 Merge pull request #1731 from timgates42/bugfix_typo_employed
  • 308e7d9 docs: fix simple typo, empoyed -> employed
  • 94d7a9b Back to development: 20.12.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Wed Jan 06 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Wed Jan 06 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Implement endpoint for processing bug reports from end users (original #264)

This issue has been migrated from the CC Search API repository

Author: aldenstpage
Date: Wed Apr 10 2019
Labels: โœจ goal: improvement,๐Ÿท status: label work required,๐Ÿ™… status: discontinued

Example request

Bugs should be forwarded to GitHub issues with a triage tag.


Original Comments:

Sando1 commented on Wed Oct 16 2019:

Hi @aldenstpage! I would like to work on this.
source

DantrazTrev commented on Tue Mar 03 2020:

Hi @aldenstpage is this still open for work
?

source

krysal commented on Wed Apr 08 2020:

Hi @aldenstpage @annatuma ๐Ÿ‘‹ Is this task different from this other? If so I can work on this.
source

SaurabhAgarwala commented on Fri Apr 24 2020:

@aldenstpage I would like to work on this issue. Please assign it to me.
source

krysal commented on Fri Apr 24 2020:

@SaurabhAgarwala CC Staff is no longer assigning people to issues, you can start right away if you want, I wanted to work on this but was wondering is the endpoint is indeed still needed.
source

SaurabhAgarwala commented on Sat Apr 25 2020:

@krysal I think we are free to submit a PR without being assigned only for those issues marked help wanted. For others, I believe we need permission.
Yeah, even I was wondering if this endpoint is still needed and hence asked for permission.
If this endpoint is still needed, since you asked before, so you can work on it alone or if you want we can work collaboratively as well.
source

Bump boto3 from 1.15.11 to 1.16.59 in /cccatalog-api (original #685)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Jan 25 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps boto3 from 1.15.11 to 1.16.59.

Changelog

Sourced from boto3's changelog.

1.16.59

  • api-change:greengrassv2: [botocore] Update greengrassv2 client to latest version
  • api-change:redshift: [botocore] Update redshift client to latest version
  • api-change:lexv2-runtime: [botocore] Update lexv2-runtime client to latest version
  • api-change:rds: [botocore] Update rds client to latest version
  • api-change:lexv2-models: [botocore] Update lexv2-models client to latest version
  • api-change:ssm: [botocore] Update ssm client to latest version
  • api-change:ec2: [botocore] Update ec2 client to latest version

1.16.58

  • api-change:securityhub: [botocore] Update securityhub client to latest version
  • api-change:kafka: [botocore] Update kafka client to latest version
  • api-change:resourcegroupstaggingapi: [botocore] Update resourcegroupstaggingapi client to latest version

1.16.57

  • api-change:acm-pca: [botocore] Update acm-pca client to latest version
  • api-change:chime: [botocore] Update chime client to latest version
  • api-change:ecs: [botocore] Update ecs client to latest version

1.16.56

  • api-change:sns: [botocore] Update sns client to latest version

1.16.55

  • api-change:pinpoint: [botocore] Update pinpoint client to latest version
  • api-change:cognito-identity: [botocore] Update cognito-identity client to latest version
  • api-change:s3control: [botocore] Update s3control client to latest version
  • api-change:sagemaker: [botocore] Update sagemaker client to latest version

1.16.54

  • api-change:frauddetector: [botocore] Update frauddetector client to latest version
  • api-change:personalize: [botocore] Update personalize client to latest version

... (truncated)

Commits
  • 76c102d Merge branch 'release-1.16.59'
  • 78367ee Bumping version to 1.16.59
  • 3eba0d5 Add changelog entries from botocore
  • ede7ca5 Merge branch 'release-1.16.58'
  • d1c7207 Merge branch 'release-1.16.58' into develop
  • 29c5fa1 Bumping version to 1.16.58
  • 722ce42 Add changelog entries from botocore
  • fc84cac Merge branch 'release-1.16.57'
  • d146012 Merge branch 'release-1.16.57' into develop
  • 0a21cd5 Bumping version to 1.16.57
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Tue Jan 26 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Tue Jan 26 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump django-storages from 1.10.1 to 1.11.1 in /cccatalog-api (original #672)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Dec 28 2020
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps django-storages from 1.10.1 to 1.11.1.

Changelog

Sourced from django-storages's changelog.

1.11.1 (2020-12-23)


S3

  • Revert fix for ValueError: I/O operation on closed file when calling collectstatic and introduce S3StaticStorage and S3ManifestStaticStorage for use as STATICFILES_STORAGE targets ([#968](https://github.com/jschneier/django-storages/issues/968)_)

.. _#968: jschneier/django-storages#968

1.11 (2020-12-16)


General

  • Test against Python 3.9 ([#964](https://github.com/jschneier/django-storages/issues/964)_)

S3

  • Fix ValueError: I/O operation on closed file when calling collectstatic ([#382](https://github.com/jschneier/django-storages/issues/382), [#955](https://github.com/jschneier/django-storages/issues/955))
  • Calculate S3Boto3StorageFile.buffer_size (via setting AWS_S3_FILE_BUFFER_SIZE) at run-time rather than import-time. ([#930](https://github.com/jschneier/django-storages/issues/930)_)
  • Fix writing bytearray content ([#958](https://github.com/jschneier/django-storages/issues/958), [#965](https://github.com/jschneier/django-storages/issues/965))

Google Cloud

  • Add setting GS_QUERYSTRING_AUTH to avoid signing URLs. This is useful for buckets with a policy of Uniform public read ([#952](https://github.com/jschneier/django-storages/issues/952)_)

Azure

  • Add AZURE_OBJECT_PARAMETERS and overridable AzureStorage.get_object_parameters to customize ContentSettings parameters for all keys and per-key respectively. ([#898](https://github.com/jschneier/django-storages/issues/898)_)

.. _#382: jschneier/django-storages#382 .. _#955: jschneier/django-storages#955 .. _#930: jschneier/django-storages#930 .. _#952: jschneier/django-storages#952 .. _#898: jschneier/django-storages#898 .. _#964: jschneier/django-storages#964 .. _#958: jschneier/django-storages#958 .. _#965: jschneier/django-storages#965

Commits
  • 770332b Release version 1.11.1
  • 8ddc179 Docs: Specify the allowed parameters for AZURE_OBJECT_PARAMETERS (#969)
  • ae50e6b Fix collectstatic manifest file handling & revert #955 (#968)
  • 96b5a88 Release version 1.11
  • 70c6ed7 [s3] Fix writing bytearray content (#965)
  • 01cd42f Test against Python 3.9 (#964)
  • 3fbad31 [azure] Add overrideable method to customize parameters on a per-key basis (#...
  • 7771782 S3: Workaround boto bug to fix collectstatic issue (#955)
  • 9134b10 Fix spelling (#957)
  • b743396 Calculate settings for S3Boto3StorageFile when instantiated, not imported (#930)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Wed Jan 06 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Wed Jan 06 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump boto3 from 1.15.11 to 1.17.7 in /cccatalog-api (original #696)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Feb 15 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps boto3 from 1.15.11 to 1.17.7.

Changelog

Sourced from boto3's changelog.

1.17.7

  • api-change:personalize-events: [botocore] Update personalize-events client to latest version
  • api-change:eks: [botocore] Update eks client to latest version
  • api-change:iam: [botocore] Update iam client to latest version
  • api-change:codepipeline: [botocore] Update codepipeline client to latest version
  • api-change:detective: [botocore] Update detective client to latest version
  • api-change:macie2: [botocore] Update macie2 client to latest version
  • api-change:wafv2: [botocore] Update wafv2 client to latest version
  • api-change:elbv2: [botocore] Update elbv2 client to latest version
  • api-change:appsync: [botocore] Update appsync client to latest version
  • api-change:rds: [botocore] Update rds client to latest version

1.17.6

  • api-change:databrew: [botocore] Update databrew client to latest version
  • api-change:rds: [botocore] Update rds client to latest version

1.17.5

  • api-change:quicksight: [botocore] Update quicksight client to latest version
  • api-change:mediaconvert: [botocore] Update mediaconvert client to latest version
  • api-change:qldb-session: [botocore] Update qldb-session client to latest version
  • api-change:sagemaker: [botocore] Update sagemaker client to latest version
  • api-change:gamelift: [botocore] Update gamelift client to latest version

1.17.4

  • api-change:dataexchange: [botocore] Update dataexchange client to latest version
  • api-change:cloudtrail: [botocore] Update cloudtrail client to latest version
  • api-change:elbv2: [botocore] Update elbv2 client to latest version
  • api-change:ivs: [botocore] Update ivs client to latest version
  • api-change:macie2: [botocore] Update macie2 client to latest version
  • api-change:globalaccelerator: [botocore] Update globalaccelerator client to latest version
  • api-change:iotsitewise: [botocore] Update iotsitewise client to latest version
  • api-change:elasticache: [botocore] Update elasticache client to latest version

1.17.3

  • api-change:macie: [botocore] Update macie client to latest version
  • api-change:elbv2: [botocore] Update elbv2 client to latest version

... (truncated)

Commits
  • 84d8424 Merge branch 'release-1.17.7'
  • 11f76b3 Bumping version to 1.17.7
  • 266fd2f Add changelog entries from botocore
  • 6254ffb Merge branch 'release-1.17.6' into develop
  • fe1ce9c Merge branch 'release-1.17.6'
  • b9d90bc Bumping version to 1.17.6
  • 5dfc739 Add changelog entries from botocore
  • 3d61494 Merge branch 'release-1.17.5' into develop
  • d753f9f Merge branch 'release-1.17.5'
  • f56bd46 Bumping version to 1.17.5
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Fri Feb 19 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Fri Feb 19 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Cache top N searches (N=1,000,000?) in Redis (original #152)

This issue has been migrated from the CC Search Frontend repository

Author: aldenstpage
Date: Wed Nov 28 2018
Labels: performance,โœจ goal: improvement,๐Ÿท status: label work required,๐Ÿ”’ staff only,๐Ÿ•น aspect: interface,๐Ÿ™… status: discontinued

Original Comments:

aldenstpage commented on Wed Nov 28 2018:

Assigned "low priority" because performance is adequate at current levels of traffic
source

muarachmann commented on Mon Feb 24 2020:

Hi @aldenstpage I would love to take on this.
source

aldenstpage commented on Fri Feb 28 2020:

Hi @muarachmann, I suggest taking a look at a different issue. We don't have an immediate need for this performance improvement, and there are some nuances to this that may make it difficult for an external contributor to address.
source

muarachmann commented on Thu Mar 05 2020:

Hi @aldenstpage thanks for your reply, can you reference me to which issue i could easily pickup then :)
source

Bump ipython from 7.18.1 to 7.20.0 in /cccatalog-api (original #693)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Feb 08 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps ipython from 7.18.1 to 7.20.0.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Sat Feb 20 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Sat Feb 20 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump gevent from 20.9.0 to 21.1.0 in /cccatalog-api (original #683)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Jan 18 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps gevent from 20.9.0 to 21.1.0.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

Issue author dependabot[bot] commented on Mon Jan 18 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump django from 2.2.13 to 3.1.5 in /cccatalog-api (original #677)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Jan 11 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps django from 2.2.13 to 3.1.5.

Commits
  • f244d86 [3.1.x] Bumped version for 3.1.5 release.
  • 3bfe6da Added release date for 3.1.5.
  • f4db2d1 [3.1.x] Refs #28741 -- Doc'd SESSION_COOKIE_DOMAIN requirement with CSRF_USE_...
  • a7e2f6c [3.1.x] Fixed typo in docs/ref/templates/builtins.txt.
  • 558c100 [3.1.x] Updated CVE URL.
  • 5fdc81d [3.1.x] Fixed #32304 -- Fixed prefixing STATIC_URL and MEDIA_URL by SCRIPT_NA...
  • 6b4b7da [3.1.x] Fixed #32299 -- Prevented mutating handlers when processing middlewar...
  • 3029e22 [3.1.x] Corrected related fields checks messages in docs.
  • 6165e23 [3.1.x] Refs #30367 -- Changed remaining "pip install" to "python -m pip inst...
  • e5273bc [3.1.x] Removed forms-MAX_NUM_FORMS POST data in docs
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

Issue author dependabot[bot] commented on Mon Jan 11 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump djangorestframework from 3.11.1 to 3.12.4 in /cccatalog-api (original #712)

This issue has been migrated from the CC Search API repository

Author: dependabot[bot]
Date: Mon Mar 29 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps djangorestframework from 3.11.1 to 3.12.4.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Original Comments:

TimidRobot commented on Mon Mar 29 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Mon Mar 29 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump hvac from 0.10.5 to 0.10.6 in /cccatalog-api (original #668)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Dec 21 2020
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps hvac from 0.10.5 to 0.10.6.

Release notes

Sourced from hvac's releases.

v0.10.6

๐Ÿš€ Features

  • Enable response wrapping of PKI secrets. GH-649
  • Add auth_methods module to support AppRole. GH-637
  • Fix oidc login and add working example. GH-638
  • Add rabbitmq vhost_topics parameter. GH-626

๐Ÿ› Bug Fixes

  • Template "auth method not implemented" error message. GH-651
  • Fix health.py read_health_status GET method. GH-653
  • Fix transit constants for "generate_data_key". GH-632
  • Fix PUT method in secrets engine kv_v1 to use PUT instead of POST. GH-629
  • Remove Erroneous json() Calls In rabbitmq Class. GH-624

๐Ÿ“š Documentation

  • Fix oidc login and add working example. GH-638

๐Ÿงฐ Miscellaneous

  • Update health.py to match new Vault API query parameters. GH-635
  • Remove Consul Secrets Engine create_or_update_role Policy Type Validation. GH-636

Thanks to @Angeall, @JJCella, @briantist, @derBroBro, @discogestalt, @dogfish182, @el-deano, @ghTravis, @godara01, @jeffwecan, @leongyh, @phickey, @tienthanh2509, @tmcolby and @trixpan for their lovely contributions.

Changelog

Sourced from hvac's changelog.

0.10.6 (December 14th, 2020)

๐Ÿš€ Features

  • Enable response wrapping of PKI secrets. GH-649
  • Fix OIDC login and add working example. GH-638
  • Add rabbitmq vhost_topics parameter. GH-626
  • Expand auth_methods module to support AppRole. GH-637

๐Ÿ› Bug Fixes

  • Template "auth method not implemented" error message. GH-651
  • Fix health.py read_health_status GET method. GH-653
  • Fix transit constants for "generate_data_key". GH-632
  • Fix PUT method in secrets engine kv_v1 to use PUT instead of POST. GH-629
  • Remove Erroneous json() Calls In rabbitmq Class. GH-624

๐Ÿงฐ Miscellaneous

  • Update health.py to match new Vault API query parameters. GH-635
  • Remove Consul Secrets Engine create_or_update_role Policy Type Validation. GH-636

Thanks to @Angeall, @JJCella, @briantist, @derBroBro, @discogestalt, @dogfish182, @el-deano, @ghTravis, @godara01, @jeffwecan, @leongyh, @phickey, @tienthanh2509 and @tmcolby for their lovely contributions.

Commits
  • 797bff6 Merge pull request #654 from hvac/develop
  • 9f29cad Merge branch 'master' into develop
  • 295955d Revert "Ensure cryptography dev requirement is >= 3.2"
  • ab0561a Revert "Avoid conflicting requirements"
  • 67d14dc Avoid conflicting requirements
  • f916623 Ensure cryptography dev requirement is >= 3.2
  • 2902e9b Changelog updates for v0.10.6
  • 8592b8a Bump version: 0.10.5 โ†’ 0.10.6
  • 1bf0f88 Merge pull request #647 from tienthanh2509/patch-1
  • a7cbc59 Merge pull request #649 from tmcolby/feature/pki-response-wrapping
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Wed Jan 06 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Wed Jan 06 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

ccREL XMP Python library (original #248)

This issue has been migrated from the CC Search API repository

Author: aldenstpage
Date: Tue Mar 19 2019
Labels: โœจ goal: improvement,๐Ÿท status: label work required,๐Ÿ™… status: discontinued

A number of years ago, CC worked with W3C to create the Creative Commons Rights Expression Language (ccREL), which allows developers to embed metadata about licensing inside of webpages and files. To embed the metadata in files such as photographs or PDFs, the recommended approach is to use XMP (Extensible Metadata Platform), an XML based metadata language. This format is aging (although Adobe will soon be porting it to JSON-LD, which will make it much nicer to work with), and the tooling is difficult to use/sprasely documented. For these reasons and others, there is not that much ccREL data out in the wild. A Python library for embedding XMP into files may help lower the barrier for entry and increase the proliferation of licensing metadata.

CC Catalog API embeds this metadata through the /watermark endpoint. Once some non-trivial logic ends up in the ccrel.py controller, we should start thinking about splitting this into a separate dependency.

/v1/thumbs should time out eventually (original #602)

This issue has been migrated from the CC Search Frontend repository

Author: aldenstpage
Date: Wed Aug 26 2020
Labels: ๐Ÿ’ป aspect: code,๐Ÿ™… status: discontinued,๐Ÿ›  goal: fix,๐ŸŸจ priority: medium

Description

If we are having a hard time loading a 3rd party image through our proxy, we should give up thumbnailing it. The frontend will fall back to the full sized image.

If we can't answer thumbnail requests quickly enough, our servers' workers become swamped with thumbnailing requests.


Original Comments:

Issue author tushar912 commented on Mon Sep 21 2020:

@aldenstpage I would like to work on this. Can u explain this issue a bit.
source

aldenstpage commented on Wed Sep 23 2020:

Hi @tushar912, I'd be happy to answer any specific questions you have about the ticket
source

manav1403 commented on Sun Oct 11 2020:

@aldenstpage Is it correct that for this issue we have to set a timeout on request when full size is false and if the request exceeds timeout then send the response of the full-sized image
and what should be the value of the timeout?
source

Create API endpoints for audio

The goal is to create endpoints for audio, similar to the image endpoints at v1/images/.

Branched from WordPress/openverse-frontend#61.

Publicly document search algorithm (original #308)

This issue has been migrated from the CC Search Frontend repository

Author: kgodey
Date: Wed Jun 12 2019
Labels: search algorithm,โœจ goal: improvement,๐Ÿท status: label work required,๐Ÿ™… status: discontinued

Also consider documenting the plan for improving the algorithm for feedback.

Potentially related to cc-archive/cccatalog-frontend#376


Original Comments:

gabbyprecious commented on Wed May 20 2020:

Would love to work on this. can you explain more on it
source

Research for Audio APIs (original #635)

This issue has been migrated from the CC Search API repository

Author: zackkrida
Date: Mon Oct 05 2020
Labels: help wanted,๐Ÿท status: label work required,๐Ÿ’ฌ talk: discussion,๐Ÿ’ป aspect: code,๐Ÿ“„ aspect: text,๐Ÿ™… status: discontinued,๐ŸŸง priority: high

[placeholder; ticket work required]


Original Comments:

rajdesai24 commented on Fri Nov 20 2020:

@zackkrida can I help in some way?

source

zackkrida commented on Fri Nov 20 2020:

@rajdesai24 We're not ready to move forward with this yetโ€”we will update you hear though if anything changes. Thanks for inquiring!
source

rajdesai24 commented on Fri Nov 20 2020:

no problem please let me know where to contribute @zackkrida , I wanted to help in some way with the python back end , would appreciate your guidance

source

Bump deepdiff from 5.0.2 to 5.2.1 in /cccatalog-api (original #680)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Jan 11 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps deepdiff from 5.0.2 to 5.2.1.

Release notes

Sourced from deepdiff's releases.

5.2.1

  • v5-2-0: Removed Murmur3 as the preferred hashing method. Using SHA256 by default now. Added commandline for deepdiff. Added group_by. Added math_epsilon. Improved ignoring of NoneType.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

Issue author dependabot[bot] commented on Mon Jan 11 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump hvac from 0.10.5 to 0.10.8 in /cccatalog-api (original #695)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Feb 15 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps hvac from 0.10.5 to 0.10.8.

Release notes

Sourced from hvac's releases.

v0.10.8

๐Ÿš€ Features

  • K8s Auth: Allow wildcards for service account and namespace. GH-669
  • Add token_type support to create_kubernetes_role. GH-664

Thanks to @blag, @devlounge, @jeffwecan and @jonZlotnik for their lovely contributions.

v0.10.7

๐Ÿš€ Features

  • Support database secrets static roles. GH-662

๐Ÿ“š Documentation

  • (Slightly) Expanded + Updated Approle Auth method Docs. GH-667

๐Ÿงฐ Miscellaneous

  • Replace Travis CI w/ GitHub actions. GH-666

Thanks to @jeffwecan, @krish7919 and Krish for their lovely contributions.

v0.10.6

๐Ÿš€ Features

  • Enable response wrapping of PKI secrets. GH-649
  • Add auth_methods module to support AppRole. GH-637
  • Fix oidc login and add working example. GH-638
  • Add rabbitmq vhost_topics parameter. GH-626

๐Ÿ› Bug Fixes

  • Template "auth method not implemented" error message. GH-651
  • Fix health.py read_health_status GET method. GH-653
  • Fix transit constants for "generate_data_key". GH-632
  • Fix PUT method in secrets engine kv_v1 to use PUT instead of POST. GH-629
  • Remove Erroneous json() Calls In rabbitmq Class. GH-624

๐Ÿ“š Documentation

  • Fix oidc login and add working example. GH-638

๐Ÿงฐ Miscellaneous

  • Update health.py to match new Vault API query parameters. GH-635

... (truncated)

Changelog

Sourced from hvac's changelog.

0.10.8 (February 8th, 2021)

๐Ÿš€ Features

  • K8s Auth: Allow wildcards for service account and namespace. GH-669
  • Add token_type support to create_kubernetes_role. GH-664

0.10.7 (February 1st, 2021)

๐Ÿš€ Features

  • Support database secrets static roles. GH-662

๐Ÿงฐ Miscellaneous

  • Replace Travis CI w/ GitHub actions. GH-666

Thanks to @jeffwecan, @krish7919 and Krish for their lovely contributions.

0.10.6 (December 14th, 2020)

๐Ÿš€ Features

  • Enable response wrapping of PKI secrets. GH-649
  • Fix OIDC login and add working example. GH-638
  • Add rabbitmq vhost_topics parameter. GH-626
  • Expand auth_methods module to support AppRole. GH-637

๐Ÿ› Bug Fixes

  • Template "auth method not implemented" error message. GH-651
  • Fix health.py read_health_status GET method. GH-653
  • Fix transit constants for "generate_data_key". GH-632
  • Fix PUT method in secrets engine kv_v1 to use PUT instead of POST. GH-629
  • Remove Erroneous json() Calls In rabbitmq Class. GH-624

๐Ÿงฐ Miscellaneous

  • Update health.py to match new Vault API query parameters. GH-635
  • Remove Consul Secrets Engine create_or_update_role Policy Type Validation. GH-636

Thanks to @Angeall, @JJCella, @briantist, @derBroBro, @discogestalt, @dogfish182, @el-deano, @ghTravis, @godara01, @jeffwecan, @leongyh, @phickey, @tienthanh2509 and @tmcolby for their lovely contributions.

Commits
  • e2fe2f0 Merge pull request #671 from hvac/develop
  • 57298c8 Changelog updates for v0.10.8
  • 3491873 Bump version: 0.10.7 โ†’ 0.10.8
  • 86ce64e Merge pull request #670 from blag/patch-1
  • 6f05e03 Merge pull request #669 from jonZlotnik/allow-svc-acct-and-namespace-to-be-splat
  • 4bf882a Merge pull request #664 from devlounge/patch-1
  • 78f8766 Reformat docstring
  • b47994c testing that both bounds as wildcard are permitted
  • a934ded allow wildcards for service account and namespace
  • c78e058 move token_type before mount_point kwarg
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Fri Feb 19 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Fri Feb 19 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump ipython from 7.18.1 to 7.22.0 in /cccatalog-api (original #710)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Mar 29 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps ipython from 7.18.1 to 7.22.0.

Commits
  • 8648ed8 release 7.22.0
  • a50f945 Merge pull request #12875 from Carreau/auto-backport-of-pr-12874-on-7.x
  • d46f6b0 Backport PR #12874: fixup release note and testing
  • 89905c0 Merge pull request #12873 from meeseeksmachine/auto-backport-of-pr-12712-on-7.x
  • f232d30 Merge pull request #12872 from meeseeksmachine/auto-backport-of-pr-12836-on-7.x
  • be67713 Backport PR #12712: dpaste.com API correction
  • d6ce061 Backport PR #12836: NEP29 : Bump numpy testing requirements to 1.16+
  • 7a294ea Merge pull request #12869 from meeseeksmachine/auto-backport-of-pr-12868-on-7.x
  • 7c5148b Backport PR #12868: Misc CI warning and error.
  • 4c964ff Merge pull request #12866 from meeseeksmachine/auto-backport-of-pr-12862-on-7.x
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Mon Mar 29 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Mon Mar 29 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump pyjwt from 1.7.1 to 2.0.0 in /cccatalog-api (original #678)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Jan 11 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps pyjwt from 1.7.1 to 2.0.0.

Release notes

Sourced from pyjwt's releases.

v2.0.0

Highlights

Introduce better experience for JWKs

Introduce PyJWK, PyJWKSet, and PyJWKClient.

import jwt
from jwt import PyJWKClient
token = "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Ik5FRTFRVVJCT1RNNE16STVSa0ZETlRZeE9UVTFNRGcyT0Rnd1EwVXpNVGsxUWpZeVJrUkZRdyJ9.eyJpc3MiOiJodHRwczovL2Rldi04N2V2eDlydS5hdXRoMC5jb20vIiwic3ViIjoiYVc0Q2NhNzl4UmVMV1V6MGFFMkg2a0QwTzNjWEJWdENAY2xpZW50cyIsImF1ZCI6Imh0dHBzOi8vZXhwZW5zZXMtYXBpIiwiaWF0IjoxNTcyMDA2OTU0LCJleHAiOjE1NzIwMDY5NjQsImF6cCI6ImFXNENjYTc5eFJlTFdVejBhRTJINmtEME8zY1hCVnRDIiwiZ3R5IjoiY2xpZW50LWNyZWRlbnRpYWxzIn0.PUxE7xn52aTCohGiWoSdMBZGiYAHwE5FYie0Y1qUT68IHSTXwXVd6hn02HTah6epvHHVKA2FqcFZ4GGv5VTHEvYpeggiiZMgbxFrmTEY0csL6VNkX1eaJGcuehwQCRBKRLL3zKmA5IKGy5GeUnIbpPHLHDxr-GXvgFzsdsyWlVQvPX2xjeaQ217r2PtxDeqjlf66UYl6oY6AqNS8DH3iryCvIfCcybRZkc_hdy-6ZMoKT6Piijvk_aXdm7-QQqKJFHLuEqrVSOuBqqiNfVrG27QzAPuPOxvfXTVLXL2jek5meH6n-VWgrBdoMFH93QEszEDowDAEhQPHVs0xj7SIzA"
kid = "NEE1QURBOTM4MzI5RkFDNTYxOTU1MDg2ODgwQ0UzMTk1QjYyRkRFQw"
url = "https://dev-87evx9ru.auth0.com/.well-known/jwks.json"
jwks_client = PyJWKClient(url)
signing_key = jwks_client.get_signing_key_from_jwt(token)
data = jwt.decode(
token,
signing_key.key,
algorithms=["RS256"],
audience="https://expenses-api",
options={"verify_exp": False},
)
print(data)

Support for JWKs containing ECDSA keys

Drop support for Python 2

Require cryptography >= 3

Drop support for PyCrypto and ECDSA

We've kept this around for a long time, mostly for environments that didn't allow installing cryptography.

Drop CLI

Dropped the included cli entry point.

Improve typings

We no longer need to use mypy Python 2 compatibility mode (comments)

Add support for Ed25519 / EdDSA

Changes

... (truncated)

Changelog

Sourced from pyjwt's changelog.

v2.0.0 <https://github.com/jpadilla/pyjwt/compare/1.7.1...2.0.0>__

Changed


Drop support for Python 2 and Python 3.0-3.5
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Python 3.5 is EOL so we decide to drop its support. Version 1.7.1 is the last one supporting Python 3.0-3.5.

Require cryptography >= 3 ^^^^^^^^^^^^^^^^^^^^^^^^^

Drop support for PyCrypto and ECDSA ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

We've kept this around for a long time, mostly for environments that didn't allow installing cryptography.

Drop CLI ^^^^^^^^

Dropped the included cli entry point.

Improve typings ^^^^^^^^^^^^^^^

We no longer need to use mypy Python 2 compatibility mode (comments)

jwt.encode(...) return type ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Tokens are returned as string instead of a byte string

Dropped deprecated errors ^^^^^^^^^^^^^^^^^^^^^^^^^

Removed ExpiredSignature, InvalidAudience, and InvalidIssuer. Use ExpiredSignatureError, InvalidAudienceError, and InvalidIssuerError instead.

Dropped deprecated verify_expiration param in jwt.decode(...) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Use jwt.decode(encoded, key, algorithms=[&quot;HS256&quot;], options={&quot;verify_exp&quot;: False}) instead.

</tr></table>

... (truncated)

Commits
  • 4823647 Update requirement on cryptography (#575)
  • 4770745 Release 2.0.0 (#576)
  • 587997e Complete type hinting of jwks_client.py (#578)
  • 09d24fc Combine repetitive encode/decode tests using parametrize (#577)
  • 06523a0 Combine identical test functions using pytest.mark.parametrize() (#574)
  • f490a60 Simplify tox configuration (#573)
  • 14fc3e9 [pre-commit.ci] pre-commit autoupdate (#572)
  • 9a20ab3 Use generator expressions (#569)
  • 5ddab7c Drop lint environment from GitHub actions in favor of pre-commit.ci (#571)
  • 811ae79 Simplify black configuration to be closer to upstream defaults (#568)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

Issue author dependabot[bot] commented on Mon Jan 11 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump jinja2 from 2.11.2 to 2.11.3 in /cccatalog-api (original #707)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Sat Mar 20 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps jinja2 from 2.11.2 to 2.11.3.

Release notes

Sourced from jinja2's releases.

2.11.3

This contains a fix for a speed issue with the urlize filter. urlize is likely to be called on untrusted user input. For certain inputs some of the regular expressions used to parse the text could take a very long time due to backtracking. As part of the fix, the email matching became slightly stricter. The various speedups apply to urlize in general, not just the specific input cases.

Changelog

Sourced from jinja2's changelog.

Version 2.11.3

Released 2021-01-31

  • Improve the speed of the urlize filter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD. :pr:1343
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.
-------- ### Original Comments:

TimidRobot commented on Mon Mar 22 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Mon Mar 22 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Document dependency management with pipenv

We are using Docker to run the api. When it is installed inside Docker, sometimes I see 'Pipfile.lock is out of date, updating it' message in the logs.

What happens to the updated lock file? I guess it is not saved in the project because it only exists in Docker. How can we update the Pipfile.lock file in the repository?

Bump pyjwt from 1.7.1 to 2.0.1 in /cccatalog-api (original #684)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Jan 18 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps pyjwt from 1.7.1 to 2.0.1.

Release notes

Sourced from pyjwt's releases.

2.0.1

Changelog

Changed

  • Rename CHANGELOG.md to CHANGELOG.rst and include in docs #597

Fixed

  • Fix from_jwk() for all algorithms #598

v2.0.0

Highlights

Introduce better experience for JWKs

Introduce PyJWK, PyJWKSet, and PyJWKClient.

import jwt
from jwt import PyJWKClient
token = "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Ik5FRTFRVVJCT1RNNE16STVSa0ZETlRZeE9UVTFNRGcyT0Rnd1EwVXpNVGsxUWpZeVJrUkZRdyJ9.eyJpc3MiOiJodHRwczovL2Rldi04N2V2eDlydS5hdXRoMC5jb20vIiwic3ViIjoiYVc0Q2NhNzl4UmVMV1V6MGFFMkg2a0QwTzNjWEJWdENAY2xpZW50cyIsImF1ZCI6Imh0dHBzOi8vZXhwZW5zZXMtYXBpIiwiaWF0IjoxNTcyMDA2OTU0LCJleHAiOjE1NzIwMDY5NjQsImF6cCI6ImFXNENjYTc5eFJlTFdVejBhRTJINmtEME8zY1hCVnRDIiwiZ3R5IjoiY2xpZW50LWNyZWRlbnRpYWxzIn0.PUxE7xn52aTCohGiWoSdMBZGiYAHwE5FYie0Y1qUT68IHSTXwXVd6hn02HTah6epvHHVKA2FqcFZ4GGv5VTHEvYpeggiiZMgbxFrmTEY0csL6VNkX1eaJGcuehwQCRBKRLL3zKmA5IKGy5GeUnIbpPHLHDxr-GXvgFzsdsyWlVQvPX2xjeaQ217r2PtxDeqjlf66UYl6oY6AqNS8DH3iryCvIfCcybRZkc_hdy-6ZMoKT6Piijvk_aXdm7-QQqKJFHLuEqrVSOuBqqiNfVrG27QzAPuPOxvfXTVLXL2jek5meH6n-VWgrBdoMFH93QEszEDowDAEhQPHVs0xj7SIzA"
kid = "NEE1QURBOTM4MzI5RkFDNTYxOTU1MDg2ODgwQ0UzMTk1QjYyRkRFQw"
url = "https://dev-87evx9ru.auth0.com/.well-known/jwks.json"
jwks_client = PyJWKClient(url)
signing_key = jwks_client.get_signing_key_from_jwt(token)
data = jwt.decode(
token,
signing_key.key,
algorithms=["RS256"],
audience="https://expenses-api",
options={"verify_exp": False},
)
print(data)

Support for JWKs containing ECDSA keys

Drop support for Python 2

Require cryptography >= 3

Drop support for PyCrypto and ECDSA

We've kept this around for a long time, mostly for environments that didn't allow installing cryptography.

Drop CLI

... (truncated)

Changelog

Sourced from pyjwt's changelog.

v2.0.1 <https://github.com/jpadilla/pyjwt/compare/2.0.0...2.0.1>__

Changed


- Rename CHANGELOG.md to CHANGELOG.rst and include in docs `[#597](https://github.com/jpadilla/pyjwt/issues/597) <https://github.com/jpadilla/pyjwt/pull/597>`__

Fixed


- Fix `from_jwk()` for all algorithms `[#598](https://github.com/jpadilla/pyjwt/issues/598) &lt;https://github.com/jpadilla/pyjwt/pull/598&gt;`__

Added

v2.0.0 &lt;https://github.com/jpadilla/pyjwt/compare/1.7.1...2.0.0&gt;__

Changed

Drop support for Python 2 and Python 3.0-3.5 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Python 3.5 is EOL so we decide to drop its support. Version 1.7.1 is the last one supporting Python 3.0-3.5.

Require cryptography >= 3 ^^^^^^^^^^^^^^^^^^^^^^^^^

Drop support for PyCrypto and ECDSA ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

We've kept this around for a long time, mostly for environments that didn't allow installing cryptography.

Drop CLI ^^^^^^^^

Dropped the included cli entry point.

Improve typings ^^^^^^^^^^^^^^^

We no longer need to use mypy Python 2 compatibility mode (comments)

jwt.encode(...) return type ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

Issue author dependabot[bot] commented on Mon Jan 18 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Integrations tests fail

Trying to run integration tests, I get several errors:

  1. On Mac, I get an error when I run pipenv install because there is no compatible wheel of Pillow package. It tries to build it, but fails because there are no required dependencies for compilation (zlib).

  2. When running shell inside Docker, I first get an error that importlib_metadata module is not found. After I install it using pipenv install importlib_metadata, I get an error that no compatible version of django was found, because drf-yasg requires version >= 2.2.16, and we have it fixed in Pipfile to 2.2.13. So, I installed drf-yasg version 1.17 instead of 1.20.

Then I am able to run the tests, but get several failures:

Testing LOCAL environment
E....F...ss...F.s....F.FsFF.

============================================================================ ERRORS ============================================================================
________________________________________________________ ERROR at setup of test_auth_email_verification ________________________________________________________

self = <django.db.backends.postgresql.base.DatabaseWrapper object at 0xffffbb1d5f50>

    def ensure_connection(self):
        """Guarantee that a connection to the database is established."""
        if self.connection is None:
            with self.wrap_database_errors:
>               self.connect()

/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/db/backends/base/base.py:217:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <django.db.backends.postgresql.base.DatabaseWrapper object at 0xffffbb1d5f50>

    def connect(self):
        """Connect to the database. Assume that the connection is closed."""
        # Check for invalid configurations.
        self.check_settings()
        # In case the previous connection was closed while in an atomic block
        self.in_atomic_block = False
        self.savepoint_ids = []
        self.needs_rollback = False
        # Reset parameters defining when to close the connection
        max_age = self.settings_dict['CONN_MAX_AGE']
        self.close_at = None if max_age is None else time.time() + max_age
        self.closed_in_transaction = False
        self.errors_occurred = False
        # Establish the connection
        conn_params = self.get_connection_params()
>       self.connection = self.get_new_connection(conn_params)

/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/db/backends/base/base.py:195:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <django.db.backends.postgresql.base.DatabaseWrapper object at 0xffffbb1d5f50>
conn_params = {'database': 'openledger', 'host': 'localhost', 'password': 'deploy', 'user': 'deploy'}

    def get_new_connection(self, conn_params):
>       connection = Database.connect(**conn_params)

/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/db/backends/postgresql/base.py:178:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

dsn = 'user=deploy password=deploy host=localhost dbname=openledger', connection_factory = None, cursor_factory = None
kwargs = {'database': 'openledger', 'host': 'localhost', 'password': 'deploy', 'user': 'deploy'}, kwasync = {}

    def connect(dsn=None, connection_factory=None, cursor_factory=None, **kwargs):
        """
        Create a new database connection.

        The connection parameters can be specified as a string:

            conn = psycopg2.connect("dbname=test user=postgres password=secret")

        or using a set of keyword arguments:

            conn = psycopg2.connect(database="test", user="postgres", password="secret")

        Or as a mix of both. The basic connection parameters are:

        - *dbname*: the database name
        - *database*: the database name (only as keyword argument)
        - *user*: user name used to authenticate
        - *password*: password used to authenticate
        - *host*: database host address (defaults to UNIX socket if not provided)
        - *port*: connection port number (defaults to 5432 if not provided)

        Using the *connection_factory* parameter a different class or connections
        factory can be specified. It should be a callable object taking a dsn
        argument.

        Using the *cursor_factory* parameter, a new default cursor factory will be
        used by cursor().

        Using *async*=True an asynchronous connection will be created. *async_* is
        a valid alias (for Python versions where ``async`` is a keyword).

        Any other keyword parameter will be passed to the underlying client
        library: the list of supported parameters depends on the library version.

        """
        kwasync = {}
        if 'async' in kwargs:
            kwasync['async'] = kwargs.pop('async')
        if 'async_' in kwargs:
            kwasync['async_'] = kwargs.pop('async_')

        if dsn is None and not kwargs:
            raise TypeError('missing dsn and no parameters')

        dsn = _ext.make_dsn(dsn, **kwargs)
>       conn = _connect(dsn, connection_factory=connection_factory, **kwasync)
E       psycopg2.OperationalError: could not connect to server: Connection refused
E       	Is the server running on host "localhost" (127.0.0.1) and accepting
E       	TCP/IP connections on port 5432?
E       could not connect to server: Cannot assign requested address
E       	Is the server running on host "localhost" (::1) and accepting
E       	TCP/IP connections on port 5432?

/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/psycopg2/__init__.py:127: OperationalError

The above exception was the direct cause of the following exception:

request = <SubRequest '_django_db_marker' for <Function test_auth_email_verification>>

    @pytest.fixture(autouse=True)
    def _django_db_marker(request):
        """Implement the django_db marker, internal to pytest-django.

        This will dynamically request the ``db``, ``transactional_db`` or
        ``django_db_reset_sequences`` fixtures as required by the django_db marker.
        """
        marker = request.node.get_closest_marker("django_db")
        if marker:
            transaction, reset_sequences = validate_django_db(marker)
            if reset_sequences:
                request.getfixturevalue("django_db_reset_sequences")
            elif transaction:
                request.getfixturevalue("transactional_db")
            else:
>               request.getfixturevalue("db")

/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/pytest_django/plugin.py:439:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/pytest_django/fixtures.py:227: in db
    _django_db_fixture_helper(request, django_db_blocker, transactional=False)
/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/pytest_django/fixtures.py:158: in _django_db_fixture_helper
    test_case._pre_setup()
/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/test/testcases.py:938: in _pre_setup
    self._fixture_setup()
/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/test/testcases.py:1169: in _fixture_setup
    self.atomics = self._enter_atomics()
/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/test/testcases.py:1107: in _enter_atomics
    atomics[db_name].__enter__()
/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/db/transaction.py:175: in __enter__
    if not connection.get_autocommit():
/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/db/backends/base/base.py:379: in get_autocommit
    self.ensure_connection()
/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/db/backends/base/base.py:217: in ensure_connection
    self.connect()
/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/db/utils.py:89: in __exit__
    raise dj_exc_value.with_traceback(traceback) from exc_value
/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/db/backends/base/base.py:217: in ensure_connection
    self.connect()
/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/db/backends/base/base.py:195: in connect
    self.connection = self.get_new_connection(conn_params)
/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/django/db/backends/postgresql/base.py:178: in get_new_connection
    connection = Database.connect(**conn_params)
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

dsn = 'user=deploy password=deploy host=localhost dbname=openledger', connection_factory = None, cursor_factory = None
kwargs = {'database': 'openledger', 'host': 'localhost', 'password': 'deploy', 'user': 'deploy'}, kwasync = {}

    def connect(dsn=None, connection_factory=None, cursor_factory=None, **kwargs):
        """
        Create a new database connection.

        The connection parameters can be specified as a string:

            conn = psycopg2.connect("dbname=test user=postgres password=secret")

        or using a set of keyword arguments:

            conn = psycopg2.connect(database="test", user="postgres", password="secret")

        Or as a mix of both. The basic connection parameters are:

        - *dbname*: the database name
        - *database*: the database name (only as keyword argument)
        - *user*: user name used to authenticate
        - *password*: password used to authenticate
        - *host*: database host address (defaults to UNIX socket if not provided)
        - *port*: connection port number (defaults to 5432 if not provided)

        Using the *connection_factory* parameter a different class or connections
        factory can be specified. It should be a callable object taking a dsn
        argument.

        Using the *cursor_factory* parameter, a new default cursor factory will be
        used by cursor().

        Using *async*=True an asynchronous connection will be created. *async_* is
        a valid alias (for Python versions where ``async`` is a keyword).

        Any other keyword parameter will be passed to the underlying client
        library: the list of supported parameters depends on the library version.

        """
        kwasync = {}
        if 'async' in kwargs:
            kwasync['async'] = kwargs.pop('async')
        if 'async_' in kwargs:
            kwasync['async_'] = kwargs.pop('async_')

        if dsn is None and not kwargs:
            raise TypeError('missing dsn and no parameters')

        dsn = _ext.make_dsn(dsn, **kwargs)
>       conn = _connect(dsn, connection_factory=connection_factory, **kwasync)
E       django.db.utils.OperationalError: could not connect to server: Connection refused
E       	Is the server running on host "localhost" (127.0.0.1) and accepting
E       	TCP/IP connections on port 5432?
E       could not connect to server: Cannot assign requested address
E       	Is the server running on host "localhost" (::1) and accepting
E       	TCP/IP connections on port 5432?

/root/.local/share/virtualenvs/cccatalog-api-ouCQYms7/lib/python3.7/site-packages/psycopg2/__init__.py:127: OperationalError
=========================================================================== FAILURES ===========================================================================
______________________________________________________________________ test_image_detail _______________________________________________________________________

search_fixture = {'page_count': 0, 'page_size': 1, 'result_count': 1, 'results': [{'creator': 'Liam', 'creator_url': 'https://example.com/', 'detail_url': 'http://localhost:8000/v1/images/3', 'fields_matched': ['tags.name'], ...}]}

    def test_image_detail(search_fixture):
        test_id = search_fixture['results'][0]['id']
        response = requests.get(API_URL + '/v1/images/{}'.format(test_id), verify=False)
>       assert response.status_code == 200
E       assert 404 == 200
E        +  where 404 = <Response [404]>.status_code

test/v1_integration_test.py:88: AssertionError
_______________________________________________________________ test_creator_quotation_grouping ________________________________________________________________

    def test_creator_quotation_grouping():
        """
        Users should be able to group terms together with quotation marks to narrow
        down their searches more effectively.
        """
        no_quotes = json.loads(
            requests.get(
                API_URL + '/v1/images?creator=claude%20monet',
                verify=False
            ).text
        )
        quotes = json.loads(
            requests.get(
                API_URL + '/v1/images?creator="claude%20monet"',
                verify=False
            ).text
        )
        # Did quotation marks actually narrow down the search?
>       assert len(no_quotes['results']) > len(quotes['results'])
E       assert 0 > 0
E        +  where 0 = len([])
E        +  and   0 = len([])

test/v1_integration_test.py:221: AssertionError
______________________________________________________________ test_page_size_removing_dead_links ______________________________________________________________

search_without_dead_links = <function search_without_dead_links.<locals>._search_without_dead_links at 0xffffbab14cb0>

    def test_page_size_removing_dead_links(search_without_dead_links):
        """
        We have about 500 dead links in the sample data and should have around
        8 dead links in the first 100 results on a query composed of a single
        wildcard operator.

        Test whether the number of results returned is equal to the requested
        page_size of 100.
        """
        data = search_without_dead_links(q='*', page_size=100)
>       assert len(data['results']) == 100
E       AssertionError: assert 4 == 100
E        +  where 4 = len([{'creator': 'Alice Foo', 'creator_url': 'https://example.com/', 'detail_url': 'http://localhost:8000/v1/images/2', 'f.../example.com/', 'detail_url': 'http://localhost:8000/v1/images/1', 'foreign_landing_url': 'https://example.com/', ...}])

test/v1_integration_test.py:457: AssertionError
__________________________________________________________ test_page_consistency_removing_dead_links ___________________________________________________________

search_without_dead_links = <function search_without_dead_links.<locals>._search_without_dead_links at 0xffffbb957b00>

    def test_page_consistency_removing_dead_links(search_without_dead_links):
        """
        Test the results returned in consecutive pages are never repeated when
        filtering out dead links.
        """
        total_pages = 30
        page_size = 5

        page_results = []
        for page in range(1, total_pages + 1):
            page_data = search_without_dead_links(
                q='*',
                page_size=page_size,
                page=page
            )
            page_results += page_data['results']

        def no_duplicates(l):
            s = set()
            for x in l:
                if x in s:
                    return False
                s.add(x)
            return True

        ids = list(map(lambda x: x['id'], page_results))
        # No results should be repeated so we should have no duplicate ids
>       assert no_duplicates(ids)
E       AssertionError: assert False
E        +  where False = <function test_page_consistency_removing_dead_links.<locals>.no_duplicates at 0xffffb8bc9200>(['2', '2', '3', '1'])

test/v1_integration_test.py:508: AssertionError
________________________________________________________________ test_oembed_endpoint_for_json _________________________________________________________________

    def test_oembed_endpoint_for_json():
        response = requests.get(
            API_URL + '/v1/oembed?url=https%3A//search.creativecommons.org/photos/dac5f6b0-e07a-44a0-a444-7f43d71f9beb'
        )
>       assert response.status_code == 200
E       assert 500 == 200
E        +  where 500 = <Response [500]>.status_code

test/v1_integration_test.py:542: AssertionError
_________________________________________________________________ test_oembed_endpoint_for_xml _________________________________________________________________

    def test_oembed_endpoint_for_xml():
        response = requests.get(
            API_URL + '/v1/oembed?url=https%3A//search.creativecommons.org/photos/dac5f6b0-e07a-44a0-a444-7f43d71f9beb&format=xml'
        )
>       assert response.status_code == 200
E       assert 500 == 200
E        +  where 500 = <Response [500]>.status_code

test/v1_integration_test.py:554: AssertionError
=================================================================== short test summary info ====================================================================
FAILED test/v1_integration_test.py::test_image_detail - assert 404 == 200
FAILED test/v1_integration_test.py::test_creator_quotation_grouping - assert 0 > 0
FAILED test/v1_integration_test.py::test_page_size_removing_dead_links - AssertionError: assert 4 == 100
FAILED test/v1_integration_test.py::test_page_consistency_removing_dead_links - AssertionError: assert False
FAILED test/v1_integration_test.py::test_oembed_endpoint_for_json - assert 500 == 200
FAILED test/v1_integration_test.py::test_oembed_endpoint_for_xml - assert 500 == 200
ERROR test/v1_integration_test.py::test_auth_email_verification - django.db.utils.OperationalError: could not connect to server: Connection refused

Sorry for including so much.

Bump django-oauth-toolkit from 1.1.2 to 1.4.1 in /cccatalog-api (original #706)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Mar 15 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps django-oauth-toolkit from 1.1.2 to 1.4.1.

Release notes

Sourced from django-oauth-toolkit's releases.

Release 1.4.1

No release notes provided.

Releae 1.4.0

No release notes provided.

Release 1.3.3

No release notes provided.

Release 1.3.2

See release 1.3.1; no changes.

Release 1.3.1

Added

  • #725: HTTP Basic Auth support for introspection (Fix issue #709)

Fixed

  • #812: Reverts #643 pass wrong request object to authenticate function.
  • Fix concurrency issue with refresh token requests (#810)
  • #817: Reverts #734 tutorial documentation error.

Release 1.3.0

From the CHANGELOG:

[1.3.0] 2020-03-02

Added

  • Add support for Python 3.7 & 3.8
  • Add support for Django>=2.1,<3.1
  • Add requirement for oauthlib>=3.0.1
  • Add support for Proof Key for Code Exchange (PKCE, RFC 7636).
  • Add support for custom token generators (e.g. to create JWT tokens).
  • Add new OAUTH2_PROVIDER settings:
    • ACCESS_TOKEN_GENERATOR to override the default access token generator.
    • REFRESH_TOKEN_GENERATOR to override the default refresh token generator.
    • EXTRA_SERVER_KWARGS options dictionary for oauthlib's Server class.
    • PKCE_REQUIRED to require PKCE.
  • Add createapplication management command to create an application.
  • Add id in toolkit admin console applications list.
  • Add nonstandard Google support for [urn:ietf:wg:oauth:2.0:oob] redirect_uri for Google OAuth2 "manual copy/paste". N.B. this feature appears to be deprecated and replaced with methods described in RFC 8252: OAuth2 for Native Apps and may be deprecated and/or removed from a future release of Django-oauth-toolkit.

Changed

  • Change this change log to use Keep a Changelog format.
  • Backwards-incompatible squashed migrations: If you are currently on a release < 1.2.0, you will need to first install 1.2.0 then manage.py migrate before

... (truncated)

Changelog

Sourced from django-oauth-toolkit's changelog.

[1.4.1]

Changed

  • #925 OAuth2TokenMiddleware converted to new style middleware, and no longer extends MiddlewareMixin.

Removed

  • #936 Remove support for Python 3.5

[1.4.0] 2021-02-08

Added

  • #917 Documentation improvement for Access Token expiration.
  • #916 (for DOT contributors) Added tox -e livedocs which launches a local web server on locahost:8000 to display Sphinx documentation with live updates as you edit.
  • #891 (for DOT contributors) Added details on how best to contribute to this project.
  • #884 Added support for Python 3.9
  • #898 Added the ability to customize classes for django admin
  • #690 Added pt-PT translations to HTML templates. This enables adding additional translations.

Fixed

  • #906 Made token revocation not apply a limit to the select_for_update statement (impacts Oracle 12c database).
  • #903 Disable redirect_uri field length limit for AbstractGrant

[1.3.3] 2020-10-16

Added

  • added select_related in intospect view for better query performance
  • #831 Authorization token creation now can receive an expire date
  • #831 Added a method to override Grant creation
  • #825 Bump oauthlib to 3.1.0 to introduce PKCE
  • Support for Django 3.1

Fixed

  • #847: Fix inappropriate message when response from authentication server is not OK.

Changed

  • few smaller improvements to remove older django version compatibility #830, #861, #862, #863

[1.3.2] 2020-03-24

Fixed

  • Fixes: 1.3.1 inadvertently uploaded to pypi with an extra migration (0003...) from a dev branch.

[1.3.1] 2020-03-23

Added

  • #725: HTTP Basic Auth support for introspection (Fix issue #709)

Fixed

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Original Comments:

TimidRobot commented on Mon Mar 15 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Mon Mar 15 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump deepdiff from 5.0.2 to 5.2.2 in /cccatalog-api (original #681)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Jan 18 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps deepdiff from 5.0.2 to 5.2.2.

Release notes

Sourced from deepdiff's releases.

5.2.2

Fixed Delta serialization when None type is present.

5.2.1

  • v5-2-0: Removed Murmur3 as the preferred hashing method. Using SHA256 by default now. Added commandline for deepdiff. Added group_by. Added math_epsilon. Improved ignoring of NoneType.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

Issue author dependabot[bot] commented on Mon Jan 18 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

/healthcheck endpoint should check for Elasticsearch availability (original #487)

This issue has been migrated from the CC Search API repository

Author: aldenstpage
Date: Wed May 06 2020
Labels: โœจ goal: improvement,๐Ÿท status: label work required,๐Ÿ™… status: discontinued

During deployments, our load balancer repeatedly polls the /healthcheck endpoint to check that the server is reachable. If this check succeeds, the newly deployed instance starts receiving production traffic. Right now, if Elasticsearch is not responsive, /healthcheck will still return 200 OK.

The healthcheck endpoint should check the health of the image index in Elasticsearch using the cluster health API. If it is unavailable, return error 500. Log an informative message explaining why the healthcheck failed.

Because the healthcheck endpoint may be called many times, and Elasticsearch calls are not free, we should cache the response of Elasticsearch for up to 10 seconds per call.

Original Comments:

madewithkode commented on Fri May 08 2020:

Hi Alden, this looks interesting, I'd love to work on it.

source

madewithkode commented on Fri May 08 2020:

Hi Alden in order to check the health of the image index in the /healthcheck view, I'm trying to use the urllib's urlopen() method to make a request to Elasticsearch's cluster API this way:

cluster_response = urlopen('http://0.0.0.0:8000/_cluster/health/image')

However, I keep getting a 404. Is there something I'm doing wrong?
source

madewithkode commented on Fri May 08 2020:

Hi Alden in order to check the health of the image index in the /healthcheck view, I'm trying to use the urllib's urlopen() method to make a request to Elasticsearch's cluster API this way:

cluster_response = urlopen('http://0.0.0.0:8000/_cluster/health/image')

However, I keep getting a 404. Is there something I'm doing wrong?

Figured this, didn't know elastic search was running on a seperate host/port :)
source

aldenstpage commented on Fri May 08 2020:

That's great!

It would be best to use the equivalent elasticsearch-py or elasticsearch-dsl query instead of making direct calls to the REST API (you can get an instance of the connection to Elasticsearch from search_controller.py). Here's an example for getting the cluster health; there ought to also be a way to narrow the query to the image index.
source

madewithkode commented on Sat May 09 2020:

Alright...would look at the suggestion.

On Fri, May 8, 2020, 21:06 Alden S Page [email protected] wrote:

It would be best to use the equivalent elasticsearch-py query instead of
making direct calls to the REST API. Here's
https://discuss.elastic.co/t/how-to-get-cluster-health-using-python-api/25431
an example for getting the cluster health; there ought to also be a way to
narrow the query to the image index.

โ€”
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
cc-archive/cccatalog-api#487 (comment),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AGFLMYA5WLAQPO5GYZNX5BTRQRQ5RANCNFSM4M2V5EKA
.

source

madewithkode commented on Sat May 09 2020:

Hi Alden, I'm here again :)
I'd love to ask, what status specifically signifies the availability of the image index.
red, yellow or green ? or should i leave out this detail in the query since I'm using an already established connection instance from search_controller.py which waits for a yellow status by default.
source

madewithkode commented on Sat May 09 2020:

Update:

I've successfully managed to query the health of the entire cluster, using the Elasticsearch connection instance gotten from search_controller.py. However when i try to limit the health check to just the image index, the request never resolves and continues to run forever with no response. And when i try to specify a timeout for the request, i get an "Illegal argument exception" even though timeout is a valid kwarg referenced in the API docs.

It'd be nice to point out that as at the time of writing, I'm yet to successfully run ./load_sample_data.sh so i don't know if this could be linked to the above problem.

source

madewithkode commented on Mon May 11 2020:

Hi Alden, Progress Report :)

Successfully got the load_sample_data.sh to run, and so far every other thing is working fine.
I've also set up the 10s response caching on the /healthcheck view using redis and also the error logging.

However, I figured out the reason for the unresponsiveness when querying the elastic search image index was that it was non-existent and that the whole cluster index was empty too.

Do I need to do a manual population or something?

source

aldenstpage commented on Mon May 11 2020:

Hi again Onyenanu โ€“ if the index doesn't exist, the healthcheck should fail. This could happen in situations where we are switching Elasticsearch clusters in production and forgot to index data into the new one (or something went wrong while we were loading data into the new cluster).

In my experience, the ES Python libs can behave in unexpected ways that you sometimes have to work around. Since it seems like querying specifically for the image index health hangs when the index doesn't exist, perhaps you could query for healthchecks of every index in the cluster, and fail the healthcheck if image is not among them and green?

It sounds like it's coming along nicely!
source

madewithkode commented on Tue May 12 2020:

Hi again Onyenanu โ€“ if the index doesn't exist, the healthcheck should fail. This could happen in situations where we are switching Elasticsearch clusters in production and forgot to index data into the new one (or something went wrong while we were loading data into the new cluster).

In my experience, the ES Python libs can behave in unexpected ways that you sometimes have to work around. Since it seems like querying specifically for the image index health hangs when the index doesn't exist, perhaps you could query for healthchecks of every index in the cluster, and fail the healthcheck if image is not among them and green?

It sounds like it's coming along nicely!

Hey Alden...Many thanks again for coming through with better insights. Suggestion sounds nice, would proceed with it.

And yes, the whole stuff is getting more interesting, learnt a handful in the few days :)
source

Bump ipython from 7.18.1 to 7.21.0 in /cccatalog-api (original #700)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Mar 01 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps ipython from 7.18.1 to 7.21.0.

Commits
  • 0dcb1de release 7.21.0
  • 48f4019 Merge pull request #12835 from meeseeksmachine/auto-backport-of-pr-12834-on-7.x
  • fbb8fe8 Backport PR #12834: Update whats new for dev and 7.21
  • bd4d0a4 Merge pull request #12833 from meeseeksmachine/auto-backport-of-pr-12826-on-7.x
  • 97d6baa Merge pull request #12832 from meeseeksmachine/auto-backport-of-pr-12824-on-7.x
  • 59f3712 Backport PR #12826: IPDB: "context" command
  • 26c1b1e Backport PR #12824: misc fix doc
  • 3c039d4 Merge pull request #12825 from meeseeksmachine/auto-backport-of-pr-12809-on-7.x
  • 3d73b3e Backport PR #12809: Allow passing a custom CachingCompiler to the interactive...
  • 9c40b71 Merge pull request #12810 from meeseeksmachine/auto-backport-of-pr-12807-on-7.x
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Wed Mar 03 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Wed Mar 03 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump boto3 from 1.15.11 to 1.16.47 in /cccatalog-api (original #674)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Jan 04 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps boto3 from 1.15.11 to 1.16.47.

Changelog

Sourced from boto3's changelog.

1.16.47

  • api-change:servicecatalog: [botocore] Update servicecatalog client to latest version

1.16.46

  • api-change:macie2: [botocore] Update macie2 client to latest version
  • api-change:elasticache: [botocore] Update elasticache client to latest version

1.16.45

  • api-change:acm-pca: [botocore] Update acm-pca client to latest version
  • api-change:apigatewayv2: [botocore] Update apigatewayv2 client to latest version

1.16.44

  • api-change:cloudfront: [botocore] Update cloudfront client to latest version

1.16.43

  • api-change:compute-optimizer: [botocore] Update compute-optimizer client to latest version
  • api-change:resource-groups: [botocore] Update resource-groups client to latest version
  • api-change:dms: [botocore] Update dms client to latest version

1.16.42

  • api-change:ssm: [botocore] Update ssm client to latest version
  • api-change:iotwireless: [botocore] Update iotwireless client to latest version
  • api-change:rds: [botocore] Update rds client to latest version
  • api-change:glue: [botocore] Update glue client to latest version
  • api-change:ce: [botocore] Update ce client to latest version
  • api-change:connect: [botocore] Update connect client to latest version
  • api-change:elasticache: [botocore] Update elasticache client to latest version

1.16.41

  • api-change:config: [botocore] Update config client to latest version

... (truncated)

Commits
  • 16c93c7 Merge branch 'release-1.16.47'
  • 9d104ef Bumping version to 1.16.47
  • c47f881 Add changelog entries from botocore
  • b5e53f0 Merge branch 'release-1.16.46'
  • ae62a83 Merge branch 'release-1.16.46' into develop
  • a8bc7db Bumping version to 1.16.46
  • 18951d9 Add changelog entries from botocore
  • ce9eefd Merge branch 'release-1.16.45'
  • 6e079c8 Merge branch 'release-1.16.45' into develop
  • 5404256 Bumping version to 1.16.45
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Wed Jan 06 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Wed Jan 06 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump boto3 from 1.15.11 to 1.16.51 in /cccatalog-api (original #676)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Jan 11 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps boto3 from 1.15.11 to 1.16.51.

Changelog

Sourced from boto3's changelog.

1.16.51

  • api-change:devops-guru: [botocore] Update devops-guru client to latest version
  • api-change:codepipeline: [botocore] Update codepipeline client to latest version
  • api-change:mediaconvert: [botocore] Update mediaconvert client to latest version

1.16.50

  • api-change:autoscaling: [botocore] Update autoscaling client to latest version
  • api-change:transfer: [botocore] Update transfer client to latest version
  • api-change:autoscaling-plans: [botocore] Update autoscaling-plans client to latest version

1.16.49

  • api-change:ce: [botocore] Update ce client to latest version
  • api-change:application-autoscaling: [botocore] Update application-autoscaling client to latest version

1.16.48

  • api-change:healthlake: [botocore] Update healthlake client to latest version
  • api-change:cloudsearch: [botocore] Update cloudsearch client to latest version

1.16.47

  • api-change:servicecatalog: [botocore] Update servicecatalog client to latest version

1.16.46

  • api-change:macie2: [botocore] Update macie2 client to latest version
  • api-change:elasticache: [botocore] Update elasticache client to latest version

1.16.45

  • api-change:acm-pca: [botocore] Update acm-pca client to latest version
  • api-change:apigatewayv2: [botocore] Update apigatewayv2 client to latest version

... (truncated)

Commits
  • ab342be Merge branch 'release-1.16.51'
  • d5a2a7c Bumping version to 1.16.51
  • c0a003a Add changelog entries from botocore
  • bad632c Merge branch 'release-1.16.50'
  • 27c2535 Merge branch 'release-1.16.50' into develop
  • 50735ed Bumping version to 1.16.50
  • fbe7f20 Add changelog entries from botocore
  • 6acfca8 Merge branch 'release-1.16.49'
  • 2eef988 Merge branch 'release-1.16.49' into develop
  • ada8715 Bumping version to 1.16.49
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

Issue author dependabot[bot] commented on Mon Jan 11 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump boto3 from 1.15.11 to 1.16.43 in /cccatalog-api (original #673)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Dec 28 2020
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps boto3 from 1.15.11 to 1.16.43.

Changelog

Sourced from boto3's changelog.

1.16.43

  • api-change:compute-optimizer: [botocore] Update compute-optimizer client to latest version
  • api-change:resource-groups: [botocore] Update resource-groups client to latest version
  • api-change:dms: [botocore] Update dms client to latest version

1.16.42

  • api-change:ssm: [botocore] Update ssm client to latest version
  • api-change:iotwireless: [botocore] Update iotwireless client to latest version
  • api-change:rds: [botocore] Update rds client to latest version
  • api-change:glue: [botocore] Update glue client to latest version
  • api-change:ce: [botocore] Update ce client to latest version
  • api-change:connect: [botocore] Update connect client to latest version
  • api-change:elasticache: [botocore] Update elasticache client to latest version

1.16.41

  • api-change:config: [botocore] Update config client to latest version
  • api-change:ec2: [botocore] Update ec2 client to latest version
  • api-change:glue: [botocore] Update glue client to latest version
  • api-change:batch: [botocore] Update batch client to latest version
  • api-change:managedblockchain: [botocore] Update managedblockchain client to latest version
  • api-change:service-quotas: [botocore] Update service-quotas client to latest version
  • api-change:s3: [botocore] Update s3 client to latest version
  • api-change:connectparticipant: [botocore] Update connectparticipant client to latest version
  • api-change:securityhub: [botocore] Update securityhub client to latest version
  • api-change:qldb-session: [botocore] Update qldb-session client to latest version
  • api-change:outposts: [botocore] Update outposts client to latest version
  • api-change:servicecatalog-appregistry: [botocore] Update servicecatalog-appregistry client to latest version
  • api-change:dms: [botocore] Update dms client to latest version
  • api-change:apigateway: [botocore] Update apigateway client to latest version

1.16.40

  • api-change:rds: [botocore] Update rds client to latest version
  • bugfix:SSO: [botocore] Fixed timestamp format for SSO credential expirations
  • api-change:personalize-runtime: [botocore] Update personalize-runtime client to latest version
  • api-change:ec2: [botocore] Update ec2 client to latest version

1.16.39

... (truncated)

Commits
  • a795c45 Merge branch 'release-1.16.43'
  • 9378f01 Bumping version to 1.16.43
  • bdcb835 Add changelog entries from botocore
  • 05b5c67 Merge branch 'release-1.16.42'
  • fed71d9 Merge branch 'release-1.16.42' into develop
  • 0fbf174 Bumping version to 1.16.42
  • 9c2b92c Add changelog entries from botocore
  • cd8c004 Merge branch 'release-1.16.41'
  • 20f415a Merge branch 'release-1.16.41' into develop
  • 52b8caa Bumping version to 1.16.41
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

Issue author dependabot[bot] commented on Mon Jan 04 2021:

Superseded by #674.
source

Send crawled images to be processed by AWS Rekognition (original #584)

This issue has been migrated from the CC Search Frontend repository

Author: kgodey
Date: Fri Aug 07 2020
Labels: ๐Ÿท status: label work required,๐Ÿ”’ staff only,๐Ÿ™… status: discontinued

We have a feed of image metadata coming in from our crawler. We want to feed the 77MM images we've deemed worth crawling to Rekognition.

Use a Kafka topic to direct EC2 worker instance(s) to feed images to Rekognition. We should store the full response from Rekognition, including any bounding boxes, in a topic named rekognition_results.

We can't start feeding images to Rekognition until we have opted out of Amazon's AI services.

  • Opted out of AI services

Original Comments:

aldenstpage commented on Wed Aug 19 2020:

I've opted us out of AI services for all regions using the organization policy console.
source

aldenstpage commented on Mon Aug 31 2020:

We're having conversations with AWS about architecture and cost minimization, so I'm marking this as blocked for the time being.
source

aldenstpage commented on Tue Sep 22 2020:

This is blocked while we wait for a deal with AWS to be finalized
source

Issues with results when page count gets high (original #565)

This issue has been migrated from the CC Search Frontend repository

Author: kgodey
Date: Sat Jul 25 2020
Labels: ๐Ÿท status: label work required,๐Ÿ™… status: discontinued,๐Ÿ›  goal: fix

Email from an API consumer:

I found that we get some error messages from the CC Search API where the page parameter is high, e.g. +170. For page=169 we still get the results, but for bigger numbers it returns an Internal system error 500 (or 502) even though the page_count is not exceeded.

The example I was going with had the following parameters:

  • text: "trees"
  • source: "wikimedia,thorvaldsensmuseum,thingiverse,svgsilh,statensmuseum,spacex,smithsonian,sketchfab,sciencemuseum,rijksmuseum,rawpixel,phylopic,nypl,nasa,museumsvictoria,met,mccordmuseum,iha,geographorguk,floraon,flickr,europeana,eol,digitaltmuseum,deviantart,clevelandmuseum,brooklynmuseum,bio_diversity,behance,animaldiversity,WoRMS,CAPL,500px"
  • page: 170

When page=169 I get the following metadata:

result_count: 10000
page_count: 250

Another example is:

  • text: "machine%20learning"
  • source: "wikimedia,thorvaldsensmuseum,thingiverse,svgsilh,statensmuseum,spacex,smithsonian,sketchfab,sciencemuseum,rijksmuseum,rawpixel,phylopic,nypl,nasa,museumsvictoria,met,mccordmuseum,iha,geographorguk,floraon,flickr,europeana,eol,digitaltmuseum,deviantart,clevelandmuseum,brooklynmuseum,bio_diversity,behance,animaldiversity,WoRMS,CAPL,500px"
  • page: 201

When page=200 I get the following metadata:

result_count: 10000
page_count: 250

Original Comments:

Issue author dhirensr commented on Mon Jul 27 2020:

I tried to reproduce the same error for the first query = trees ,same sources , page 170 was failing sometimes with 502 bad gateway and sometime's it worked with Postman, and also sometimes it's failing with smaller page numbers like page =100 ,150 etc
I guess this error is being caused due to server getting overloaded and isn't a bug in the code.
source

aldenstpage commented on Thu Aug 06 2020:

It looks like the cause of this is inefficient link rot validation. If you jump straight to page 170 before any other similar requests have been made and cached, the result is that the server walks through every image in the prior pages and sends a HEAD request. That means 3400 HEAD requests for q=trees&page=170! This times out and you get a gateway error. The good news is that most people start on page 0 and work their way up to it; if you take that approach, the page works since the cache is warmed up.

It is absolutely necessary to validate all of the prior images exist in order to prevent inconsistent result pagination.

I would classify this as a minor bug, as the overwhelming majority of users do not paginate deeply or make cold jumps to the end of the search results. To fix it would requires overhauling image validation to be more efficient, which is feasible but will take some time due to the complexity in this area.

Here are our options:

Preferred

  • Explicitly don't let users paginate so deeply. Nobody is going to care if we only expose the first 20 pages of results. Easy and cheap.
    • BONUS: Reduce technical debt in the image validation area. I recommend scrapping this bitmask validation cache and instead making Elasticsearch aware of link rot at the last moment; that way we can leave the complexity of ensuring result consistency to Elasticsearch. This will be harder than you think it will be because it is a performance sensitive problem.

Less preferred

  • Buy bigger EC2 instances with more network bandwidth and cores for making concurrent validation requests. This is probably limited by number of maximum concurrent requests that each server allows. Easy, expensive, uncertain.
  • Use a cluster of dedicated servers for performing link validation. Hard, expensive.
    source

kgodey commented on Thu Aug 06 2020:

Nobody is going to care if we only expose the first 20 pages of results. Easy and cheap.

This was a bug that X5gon ran into, they are using our API to power their image search for OER. So someone cares. :)
source

aldenstpage commented on Thu Aug 06 2020:

Yes, one exception! But we should have an alternative option for people who are looking to bulk scrape our whole catalog, such as a data dump or a bulk load endpoint. The search endpoint is optimized for finding the best results for your search query, not bulk downloads. I would also expect that the deeper you go, the worse the results are.

You'll find that other search products often limit the result set as well.
source

Bump boto3 from 1.15.11 to 1.17.27 in /cccatalog-api (original #705)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Mar 15 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps boto3 from 1.15.11 to 1.17.27.

Changelog

Sourced from boto3's changelog.

1.17.27

  • api-change:mediatailor: [botocore] MediaTailor channel assembly is a new manifest-only service that allows you to assemble linear streams using your existing VOD content.
  • api-change:workspaces: [botocore] Adds API support for WorkSpaces bundle management operations.
  • api-change:cur: [botocore] - Added optional billingViewArn field for OSG.

1.17.26

  • api-change:comprehend: [botocore] Update comprehend client to latest version
  • api-change:wafv2: [botocore] Update wafv2 client to latest version
  • api-change:medialive: [botocore] Update medialive client to latest version
  • api-change:network-firewall: [botocore] Update network-firewall client to latest version

1.17.25

  • api-change:accessanalyzer: [botocore] Update accessanalyzer client to latest version
  • api-change:ssm: [botocore] Update ssm client to latest version
  • api-change:s3: [botocore] Update s3 client to latest version
  • api-change:backup: [botocore] Update backup client to latest version

1.17.24

  • api-change:rds: [botocore] Update rds client to latest version
  • api-change:codeguruprofiler: [botocore] Update codeguruprofiler client to latest version
  • api-change:autoscaling: [botocore] Update autoscaling client to latest version
  • api-change:iotwireless: [botocore] Update iotwireless client to latest version
  • api-change:efs: [botocore] Update efs client to latest version

1.17.23

  • api-change:lambda: [botocore] Update lambda client to latest version
  • api-change:emr: [botocore] Update emr client to latest version
  • api-change:kinesis-video-archived-media: [botocore] Update kinesis-video-archived-media client to latest version
  • api-change:s3: [botocore] Update s3 client to latest version
  • api-change:s3control: [botocore] Update s3control client to latest version
  • api-change:autoscaling: [botocore] Update autoscaling client to latest version

1.17.22

... (truncated)

Commits
  • 7820130 Merge branch 'release-1.17.27'
  • eb47afd Bumping version to 1.17.27
  • dbd6318 Add changelog entries from botocore
  • dc79af8 Merge branch 'release-1.17.26'
  • 39794eb Merge branch 'release-1.17.26' into develop
  • ab5260b Bumping version to 1.17.26
  • f5054ec Add changelog entries from botocore
  • e9b47b5 Merge branch 'release-1.17.25'
  • f6dd186 Merge branch 'release-1.17.25' into develop
  • 39f32e6 Bumping version to 1.17.25
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Mon Mar 15 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Mon Mar 15 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump boto3 from 1.15.11 to 1.17.22 in /cccatalog-api (original #703)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Mar 08 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps boto3 from 1.15.11 to 1.17.22.

Changelog

Sourced from boto3's changelog.

1.17.22

  • api-change:license-manager: [botocore] Update license-manager client to latest version
  • api-change:network-firewall: [botocore] Update network-firewall client to latest version
  • api-change:ec2: [botocore] Update ec2 client to latest version
  • api-change:athena: [botocore] Update athena client to latest version
  • api-change:medialive: [botocore] Update medialive client to latest version
  • api-change:shield: [botocore] Update shield client to latest version
  • api-change:codepipeline: [botocore] Update codepipeline client to latest version
  • api-change:appflow: [botocore] Update appflow client to latest version

1.17.21

  • api-change:servicediscovery: [botocore] Update servicediscovery client to latest version
  • api-change:events: [botocore] Update events client to latest version
  • api-change:sagemaker: [botocore] Update sagemaker client to latest version
  • api-change:mwaa: [botocore] Update mwaa client to latest version

1.17.20

  • api-change:forecast: [botocore] Update forecast client to latest version
  • api-change:secretsmanager: [botocore] Update secretsmanager client to latest version
  • api-change:macie2: [botocore] Update macie2 client to latest version
  • api-change:codebuild: [botocore] Update codebuild client to latest version
  • api-change:es: [botocore] Update es client to latest version
  • api-change:acm: [botocore] Update acm client to latest version
  • api-change:wellarchitected: [botocore] Update wellarchitected client to latest version

1.17.19

  • api-change:iotwireless: [botocore] Update iotwireless client to latest version
  • api-change:directconnect: [botocore] Update directconnect client to latest version
  • bugfix:S3: [botocore] Fix an issue with XML newline normalization that could result in the DeleteObjects operation incorrectly deleting the wrong keys.
  • api-change:managedblockchain: [botocore] Update managedblockchain client to latest version
  • api-change:events: [botocore] Update events client to latest version
  • api-change:compute-optimizer: [botocore] Update compute-optimizer client to latest version
  • api-change:datasync: [botocore] Update datasync client to latest version

1.17.18

  • enhancement:DynamoDB: Add a __bytes__ method to the Binary DynamoDB type.

... (truncated)

Commits
  • e51ec96 Merge branch 'release-1.17.22'
  • 5bb0d73 Bumping version to 1.17.22
  • 8b26820 Add changelog entries from botocore
  • d5bf561 Merge pull request #2782 from joguSD/setupcfg-fix
  • 3992e43 Update deprecated setup.cfg configuration
  • 06a6596 Merge branch 'release-1.17.21'
  • d806f79 Merge branch 'release-1.17.21' into develop
  • 0571aa0 Bumping version to 1.17.21
  • 78123cf Add changelog entries from botocore
  • ba35445 Merge branch 'release-1.17.20'
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Mon Mar 08 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Mon Mar 08 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump boto3 from 1.15.11 to 1.17.39 in /cccatalog-api (original #711)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Mar 29 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps boto3 from 1.15.11 to 1.17.39.

Changelog

Sourced from boto3's changelog.

1.17.39

  • api-change:iotwireless: [botocore] Support tag-on-create for WirelessDevice.
  • api-change:customer-profiles: [botocore] This release adds an optional parameter named FlowDefinition in PutIntegrationRequest.
  • api-change:events: [botocore] Add support for SageMaker Model Builder Pipelines Targets to EventBridge
  • api-change:transcribe: [botocore] Amazon Transcribe now supports tagging words that match your vocabulary filter for batch transcription.

1.17.38

  • api-change:lookoutmetrics: [botocore] Allowing uppercase alphabets for RDS and Redshift database names.

1.17.37

  • api-change:sqs: [botocore] Documentation updates for Amazon SQS
  • api-change:rekognition: [botocore] This release introduces AWS tagging support for Amazon Rekognition collections, stream processors, and Custom Label models.
  • api-change:sagemaker: [botocore] This feature allows customer to specify the environment variables in their CreateTrainingJob requests.
  • api-change:medialive: [botocore] EML now supports handling HDR10 and HLG 2020 color space from a Link input.
  • api-change:lookoutmetrics: [botocore] Amazon Lookout for Metrics is now generally available. You can use Lookout for Metrics to monitor your data for anomalies. For more information, see the Amazon Lookout for Metrics Developer Guide.
  • api-change:alexaforbusiness: [botocore] Added support for enabling and disabling data retention in the CreateProfile and UpdateProfile APIs and retrieving the state of data retention for a profile in the GetProfile API.

1.17.36

  • api-change:ssm: [botocore] This release allows SSM Explorer customers to enable OpsData sources across their organization when creating a resource data sync.
  • api-change:route53: [botocore] Documentation updates for route53
  • bugfix:S3: [botocore] Fix an issue with XML newline normalization in PutBucketLifecycleConfiguration requests.
  • api-change:s3: [botocore] Documentation updates for Amazon S3
  • api-change:s3control: [botocore] Documentation updates for s3-control
  • api-change:ec2: [botocore] maximumEfaInterfaces added to DescribeInstanceTypes API
  • api-change:greengrass: [botocore] Updated the parameters to make name required for CreateGroup API.

1.17.35

  • api-change:ce: [botocore] You can now create cost categories with inherited value rules and specify default values for any uncategorized costs.
  • api-change:fis: [botocore] Updated maximum allowed size of action parameter from 64 to 1024
  • api-change:redshift: [botocore] Removed APIs to control AQUA on clusters.
  • api-change:iam: [botocore] Documentation updates for IAM operations and descriptions.
  • api-change:gamelift: [botocore] GameLift adds support for using event notifications to monitor game session placements. Specify an SNS topic or use CloudWatch Events to track activity for a game session queue.

1.17.34

... (truncated)

Commits
  • 8774b91 Merge branch 'release-1.17.39'
  • 7fafee9 Bumping version to 1.17.39
  • 92a2f9f Add changelog entries from botocore
  • 3edfd0d Merge branch 'release-1.17.38'
  • 1941bb3 Merge branch 'release-1.17.38' into develop
  • 68b8585 Bumping version to 1.17.38
  • fb2bf3b Add changelog entries from botocore
  • 989ebbb Merge branch 'release-1.17.37'
  • 95c414e Merge branch 'release-1.17.37' into develop
  • 8cf6d7b Bumping version to 1.17.37
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Mon Mar 29 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Mon Mar 29 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump pygments from 2.7.1 to 2.7.4 in /cccatalog-api (original #714)

This issue has been migrated from the CC Search API repository

Author: dependabot[bot]
Date: Mon Mar 29 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps pygments from 2.7.1 to 2.7.4.

Release notes

Sourced from pygments's releases.

2.7.4

  • Updated lexers:

    • Apache configurations: Improve handling of malformed tags (#1656)

    • CSS: Add support for variables (#1633, #1666)

    • Crystal (#1650, #1670)

    • Coq (#1648)

    • Fortran: Add missing keywords (#1635, #1665)

    • Ini (#1624)

    • JavaScript and variants (#1647 -- missing regex flags, #1651)

    • Markdown (#1623, #1617)

    • Shell

      • Lex trailing whitespace as part of the prompt (#1645)
      • Add missing in keyword (#1652)
    • SQL - Fix keywords (#1668)

    • Typescript: Fix incorrect punctuation handling (#1510, #1511)

  • Fix infinite loop in SML lexer (#1625)

  • Fix backtracking string regexes in JavaScript/TypeScript, Modula2 and many other lexers (#1637)

  • Limit recursion with nesting Ruby heredocs (#1638)

  • Fix a few inefficient regexes for guessing lexers

  • Fix the raw token lexer handling of Unicode (#1616)

  • Revert a private API change in the HTML formatter (#1655) -- please note that private APIs remain subject to change!

  • Fix several exponential/cubic-complexity regexes found by Ben Caller/Doyensec (#1675)

  • Fix incorrect MATLAB example (#1582)

Thanks to Google's OSS-Fuzz project for finding many of these bugs.

2.7.3

... (truncated)

Changelog

Sourced from pygments's changelog.

Version 2.7.4

(released January 12, 2021)

  • Updated lexers:

    • Apache configurations: Improve handling of malformed tags (#1656)

    • CSS: Add support for variables (#1633, #1666)

    • Crystal (#1650, #1670)

    • Coq (#1648)

    • Fortran: Add missing keywords (#1635, #1665)

    • Ini (#1624)

    • JavaScript and variants (#1647 -- missing regex flags, #1651)

    • Markdown (#1623, #1617)

    • Shell

      • Lex trailing whitespace as part of the prompt (#1645)
      • Add missing in keyword (#1652)
    • SQL - Fix keywords (#1668)

    • Typescript: Fix incorrect punctuation handling (#1510, #1511)

  • Fix infinite loop in SML lexer (#1625)

  • Fix backtracking string regexes in JavaScript/TypeScript, Modula2 and many other lexers (#1637)

  • Limit recursion with nesting Ruby heredocs (#1638)

  • Fix a few inefficient regexes for guessing lexers

  • Fix the raw token lexer handling of Unicode (#1616)

  • Revert a private API change in the HTML formatter (#1655) -- please note that private APIs remain subject to change!

  • Fix several exponential/cubic-complexity regexes found by Ben Caller/Doyensec (#1675)

  • Fix incorrect MATLAB example (#1582)

Thanks to Google's OSS-Fuzz project for finding many of these bugs.

Version 2.7.3

(released December 6, 2020)

... (truncated)

Commits
  • 4d555d0 Bump version to 2.7.4.
  • fc3b05d Update CHANGES.
  • ad21935 Revert "Added dracula theme style (#1636)"
  • e411506 Prepare for 2.7.4 release.
  • 275e34d doc: remove Perl 6 ref
  • 2e7e8c4 Fix several exponential/cubic complexity regexes found by Ben Caller/Doyensec
  • eb39c43 xquery: fix pop from empty stack
  • 2738778 fix coding style in test_analyzer_lexer
  • 02e0f09 Added 'ERROR STOP' to fortran.py keywords. (#1665)
  • c83fe48 support added for css variables (#1633)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Original Comments:

TimidRobot commented on Wed Mar 31 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Wed Mar 31 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump pycodestyle from 2.6.0 to 2.7.0 in /cccatalog-api (original #704)

This issue has been migrated from the CC Search API repository

Author: dependabot[bot]
Date: Mon Mar 15 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps pycodestyle from 2.6.0 to 2.7.0.

Changelog

Sourced from pycodestyle's changelog.

2.7.0 (2021-03-14)

Changes:

  • Fix physical checks (such as W191) at end of file. PR #961.
  • Add --indent-size option (defaulting to 4). PR #970.
  • W605: fix escaped crlf false positive on windows. PR #976.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Original Comments:

TimidRobot commented on Mon Mar 15 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Mon Mar 15 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump hvac from 0.10.5 to 0.10.9 in /cccatalog-api (original #717)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Apr 05 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps hvac from 0.10.5 to 0.10.9.

Release notes

Sourced from hvac's releases.

v0.10.9

๐Ÿ› Bug Fixes

  • Send AppRole generate_secret_id Method Metadata Parameter as String. GH-680

๐Ÿ“š Documentation

  • Fix lambda authentication example in aws auth documentation. GH-675
  • Docs(secret_engines/pki): Remove 'self' from examples. GH-676

Thanks to @โ€‹JPoser, @โ€‹fhemberger, @โ€‹jeffwecan, @โ€‹lperdereau and jposer for their lovely contributions.

v0.10.8

๐Ÿš€ Features

  • K8s Auth: Allow wildcards for service account and namespace. GH-669
  • Add token_type support to create_kubernetes_role. GH-664

Thanks to @โ€‹blag, @โ€‹devlounge, @โ€‹jeffwecan and @โ€‹jonZlotnik for their lovely contributions.

v0.10.7

๐Ÿš€ Features

  • Support database secrets static roles. GH-662

๐Ÿ“š Documentation

  • (Slightly) Expanded + Updated Approle Auth method Docs. GH-667

๐Ÿงฐ Miscellaneous

  • Replace Travis CI w/ GitHub actions. GH-666

Thanks to @โ€‹jeffwecan, @โ€‹krish7919 and Krish for their lovely contributions.

v0.10.6

๐Ÿš€ Features

  • Enable response wrapping of PKI secrets. GH-649
  • Add auth_methods module to support AppRole. GH-637
  • Fix oidc login and add working example. GH-638
  • Add rabbitmq vhost_topics parameter. GH-626

๐Ÿ› Bug Fixes

... (truncated)

Changelog

Sourced from hvac's changelog.

0.10.9 (April 2nd, 2021)

๐Ÿ› Bug Fixes

  • Send AppRole generate_secret_id Method Metadata Parameter as String GH-689

๐Ÿ“š Documentation

  • Fix lambda authentication example in aws auth documentation. GH-675
  • Docs(secret_engines/pki): Remove 'self' from examples. GH-676

Thanks to @โ€‹JPoser, @โ€‹fhemberger, @โ€‹jeffwecan, @โ€‹lperdereau and jposer for their lovely contributions.

0.10.8 (February 8th, 2021)

๐Ÿš€ Features

  • K8s Auth: Allow wildcards for service account and namespace. GH-669
  • Add token_type support to create_kubernetes_role. GH-664

0.10.7 (February 1st, 2021)

๐Ÿš€ Features

  • Support database secrets static roles. GH-662

๐Ÿงฐ Miscellaneous

  • Replace Travis CI w/ GitHub actions. GH-666

Thanks to @โ€‹jeffwecan, @โ€‹krish7919 and Krish for their lovely contributions.

0.10.6 (December 14th, 2020)

๐Ÿš€ Features

  • Enable response wrapping of PKI secrets. GH-649
  • Fix OIDC login and add working example. GH-638
  • Add rabbitmq vhost_topics parameter. GH-626
  • Expand auth_methods module to support AppRole. GH-637

๐Ÿ› Bug Fixes

  • Template "auth method not implemented" error message. GH-651
  • Fix health.py read_health_status GET method. GH-653
  • Fix transit constants for "generate_data_key". GH-632
  • Fix PUT method in secrets engine kv_v1 to use PUT instead of POST. GH-629
  • Remove Erroneous json() Calls In rabbitmq Class. GH-624

๐Ÿงฐ Miscellaneous

... (truncated)

Commits
  • c1a88fe Merge pull request #681 from hvac/develop
  • aad0fee Changelog updates for v0.10.9
  • 4910933 Bump version: 0.10.8 โ†’ 0.10.9
  • 56c0bd6 Revert "Changelog updates for v0.10.8"
  • 38ec470 Changelog updates for v0.10.8
  • 0c8bf51 Merge pull request #680 from lperdereau/develop
  • 096eb4d Fix approle's metadata argument type on secret_id generation
  • d6b04b8 Merge pull request #675 from JPoser/develop
  • 8b0d395 Merge pull request #676 from fhemberger/patch-1
  • 3484d73 Docs(secret_engines/pki): Remove 'self' from examples
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Wed Apr 07 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Wed Apr 07 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump boto3 from 1.15.11 to 1.16.56 in /cccatalog-api (original #682)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Jan 18 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps boto3 from 1.15.11 to 1.16.56.

Changelog

Sourced from boto3's changelog.

1.16.56

  • api-change:sns: [botocore] Update sns client to latest version

1.16.55

  • api-change:pinpoint: [botocore] Update pinpoint client to latest version
  • api-change:cognito-identity: [botocore] Update cognito-identity client to latest version
  • api-change:s3control: [botocore] Update s3control client to latest version
  • api-change:sagemaker: [botocore] Update sagemaker client to latest version

1.16.54

  • api-change:frauddetector: [botocore] Update frauddetector client to latest version
  • api-change:personalize: [botocore] Update personalize client to latest version

1.16.53

  • api-change:appstream: [botocore] Update appstream client to latest version
  • api-change:auditmanager: [botocore] Update auditmanager client to latest version
  • api-change:ssm: [botocore] Update ssm client to latest version
  • api-change:elasticache: [botocore] Update elasticache client to latest version
  • api-change:lightsail: [botocore] Update lightsail client to latest version

1.16.52

  • api-change:rds: [botocore] Update rds client to latest version
  • api-change:kms: [botocore] Update kms client to latest version

1.16.51

  • api-change:devops-guru: [botocore] Update devops-guru client to latest version
  • api-change:codepipeline: [botocore] Update codepipeline client to latest version
  • api-change:mediaconvert: [botocore] Update mediaconvert client to latest version

1.16.50

... (truncated)

Commits
  • 60129f4 Merge branch 'release-1.16.56'
  • 7aa48b7 Bumping version to 1.16.56
  • 086e9c0 Add changelog entries from botocore
  • e0fdc04 Python2.7 deprecation (#2726)
  • cd34d6a Merge branch 'release-1.16.55'
  • ace4cd3 Merge branch 'release-1.16.55' into develop
  • 2310e21 Bumping version to 1.16.55
  • 5571313 Add changelog entries from botocore
  • cc4484b Merge branch 'release-1.16.54'
  • 2abf56d Merge branch 'release-1.16.54' into develop
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

Issue author dependabot[bot] commented on Mon Jan 18 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump gevent from 20.9.0 to 21.1.2 in /cccatalog-api (original #686)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Jan 25 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps gevent from 20.9.0 to 21.1.2.

Commits
  • f567d6b Preparing release 21.1.2
  • 8849b37 Merge pull request #1761 from gevent/issue1760
  • 7d5462e Appveyor: Build and test Python 3.9.
  • 103c4df Merge pull request #1757 from gevent/libuv-1.40
  • 7fa9dec Merge pull request #1756 from gevent/libev-4.33
  • 6ac4a32 Try to workaround bug in libev4.33 on Windows where have_monotonic is not def...
  • 0e403af Update libuv from 1.38.0 to 1.40.0.
  • 78115f0 Update to libev 4.33. Fixes #1754.
  • f7b2b6d Update Cython version pin to at least 3.0a6
  • 9bb7e32 _interfaces.py: Format the description directly as unicode.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Tue Jan 26 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Tue Jan 26 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Bump django from 2.2.13 to 3.1.6 in /cccatalog-api (original #692)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Feb 08 2021
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps django from 2.2.13 to 3.1.6.

Commits
  • 3235a7b [3.1.x] Bumped version for 3.1.6 release.
  • 02e6592 [3.1.x] Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archiv...
  • 03a8678 [3.1.x] Fixed GeoIPTest.test04_city() failure with the latest GeoIP2 database.
  • a271d8c [3.1.x] Modernized custom manager example
  • 82e1294 [3.1.x] Fixed #32391 -- Used CSS flex properties for changelist filter.
  • b920945 [3.1.x] Fixed #32388 -- Clarified QuerySet.bulk_update() caveat about duplica...
  • fa203f1 [3.1.x] Fixed #32348, Refs #29087 -- Corrected tutorial for updated deleting ...
  • 18adc89 [3.1.x] Refs #32372 -- Updated manager name in related objects reference docs.
  • cc5ee23 [3.1.x] Fixed #32372 -- Made examples in related objects reference docs consi...
  • 2a74248 [3.1.x] Fixed #32371 -- Doc'd jquery.init.js dependency for admin widgets.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Sat Feb 20 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Sat Feb 20 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Deduplicate attribution events in analytics database (original #629)

This issue has been migrated from the CC Search api repository

Author: annatuma
Date: Tue Sep 29 2020
Labels: ๐Ÿท status: label work required,๐Ÿ™… status: discontinued

We found an issue in the frontend, where we are triple counting attribution events:
cc-archive/cccatalog-frontend#1231

Once this is fixed, we'll need to go through historical data to deduplicate attribution events, to ensure they're correct historically as well.


Original Comments:

zackkrida commented on Sep 29, 2020:

Noting that the tripled events from the front-end are concurrent, so should all have very similar or even identical timestamps in our db, which could be an easy way to handle deduping.
source

Bump pipdeptree from 1.0.0 to 2.0.0 in /cccatalog-api (original #670)

This issue has been migrated from the CC Search Frontend repository

Author: dependabot[bot]
Date: Mon Dec 28 2020
Labels: dependencies,python,๐Ÿ™… status: discontinued

Bumps pipdeptree from 1.0.0 to 2.0.0.

Changelog

Sourced from pipdeptree's changelog.

2.0.0 (stable)

  • Support for running in the context of a virtualenv (without installing pipdeptree inside the virtualenv)

  • Avoid crash when rendering cyclic dependencies

  • Fix graphviz (dot file) output

  • Handle a (rare) case while guessing version of a package

  • Migrate from travisCI to Github workflows

  • Improve integration tests

2.0.0b1 (beta version)

  • In this first beta release targeting 2.0.0, the underlying code is heavily refactored to make different CLI options work well with each other. This was a serious limitation in older version <=1.0.0 which made it difficult to extend the tool.

    For more information about the plans for 2.0.0 release, please check docs/v2beta-opts.org file.

    • The --reverse, --packages and --exclude flags now work with --json-tree and --graph-output
    • Dropped support for python 3.3 and added support for python 3.7 and 3.8
  • Another problem with older version was that tests setup was convoluted and involved loading packages pickled from one env into the current env (in which tests are run). Moreover there was no separation between unit tests and integration tests (flaky)

    • Tests have been separated into 2 suites (1) unit tests that totally rely on mock objects and run on every commit ( travis.ci) and (2) end-to-end tests that need to be run manually.
    • The test setup for end-to-end tests has been greatly simplified although the "flakyness"" still remains because these tests are run against unpinned versions of pip. However this is by design because we want to know when pipdeptree fails with a new version of pip.
  • Move continuous integration from Travis to Github Actions.

Commits
  • 317256b Prepare for '2.0.0' (stable) release
  • c5c6dc2 Fix e2e-tests
  • fa35c58 Update README
  • 4ec6cd2 Handle a (rare) case while guessing version of a package
  • be26d32 Merge pull request #135 from foreignmeloman/master
  • 536e1a0 Fix github checks due to set-env deprecation
  • 246448c Shield newline symbol when generating labels for graphviz
  • e01462c Merge pull request #128 from gaborbernat/master
  • e273087 Simplify Github check
  • 360ceb7 Handle PyPy different starting dependencies
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
-------- ### Original Comments:

TimidRobot commented on Wed Jan 06 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).
source

Issue author dependabot[bot] commented on Wed Jan 06 2021:

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
source

Error formatting issue (original #675)

This issue has been migrated from the CC Search Frontend repository

Author: Garrettlynch
Date: Sun Jan 10 2021
Labels: ๐Ÿ™… status: discontinued

Description

There is small formatting issue in returned errors for initial registration if the name has already been registered i.e. when the error message is "o auth2 registration with this name already exists.". It's simple to work around but also very simple to correct in the api itself. Currently the error is returned labelled as "name" and its value is a string inside of an array.

Reproduction

  1. Register a name with the api that has already been used:

$ curl -X POST -H "Content-Type: application/json" -d '{"name": "My already used name", "description": "To access CC Catalog API", "email": "[email protected]"}' https://api.creativecommons.engineering/v1/auth_tokens/register

  1. See error (see below in expectation).

Expectation

Currently the error returned is this:
{ "name" : ["o auth2 registration with this name already exists."] }

I would expect to see this, given that this is the error format used when requesting a token:
{ "error" : "o auth2 registration with this name already exists." }

Resolution

  • I would be interested in resolving this bug.

Original Comments:

Cronus1007 commented on Tue Jan 12 2021:

Shall I implement this issue .

source

TimidRobot commented on Fri Jan 22 2021:

๐Ÿ™…๐Ÿป status: discontinued: Project is in maintenance mode (Upcoming Changes to the CC Open Source Community โ€” Creative Commons Open Source).

@Garrettlynch thank you for the detailed issue write-up.
source

Garrettlynch commented on Mon Jan 25 2021:

Hi, is there a timeline for copying this across to the live version? Reason I ask is I'm implementing a php means of searching CC, which I'll probably then release here on Github, but I don't want to release it until the live version is updated. Thanks in advance.
source

TimidRobot commented on Tue Jan 26 2021:

Hi, is there a timeline for copying this across to the live version? Reason I ask is I'm implementing a php means of searching CC, which I'll probably then release here on Github, but I don't want to release it until the live version is updated. Thanks in advance.

@Garrettlynch this issue was closed. No more changes are expected for this repo. See my previous comment.
source

Garrettlynch commented on Wed Jan 27 2021:

@Garrettlynch this issue was closed. No more changes are expected for this repo. See my previous comment.

@TimidRobot yes I understand the issue has been fixed in the repo and the issue is closed - many thanks for that. However, it seems to not have been implemented in the live version running at https://api.creativecommons.engineering/v1/. Do you know when this might happen? Thanks in advance.

source

TimidRobot commented on Wed Jan 27 2021:

Do you know when this might happen?

@Garrettlynch Probably never.
source

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.