Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[pull] master from kiwitcms:master #378

Open
wants to merge 1,077 commits into
base: master
Choose a base branch
from
Open

Conversation

pull[bot]
Copy link

@pull pull bot commented Feb 15, 2022

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull bot added the ⤵️ pull label Feb 15, 2022
return HttpResponseRedirect(reverse("bugs-get", args=[bug.pk]))
return HttpResponseRedirect(reverse("bugs-get", args=[bug.pk]))

return HttpResponseRedirect(request.META.get("HTTP_REFERER", "/"))

Check warning

Code scanning / CodeQL

URL redirection from remote source Medium

Untrusted URL redirection depends on a
user-provided value
.
@github-advanced-security
Copy link

You have successfully added a new CodeQL configuration /language:javascript. As part of the setup process, we have scanned this repository and found 4 existing alerts. Please check the repository Security tab to see all alerts.

@github-advanced-security
Copy link

You have successfully added a new CodeQL configuration /language:python. As part of the setup process, we have scanned this repository and found 35 existing alerts. Please check the repository Security tab to see all alerts.

atodorov and others added 25 commits March 7, 2024 19:52
including the ones from RobotFramework
snap packages in Ubuntu 22.04 and later are causing issues with
filesystem access because a snap package is a container!

See:
https://github.com/mozilla/geckodriver/releases/tag/v0.34.0 and
https://firefox-source-docs.mozilla.org/testing/geckodriver/Usage.html#running-firefox-in-a-container-based-package

> When Firefox is packaged inside a container (e.g. Snap, Flatpak),
> it may see a different filesystem to the host....

> This is known to affect launching the default Firefox shipped with Ubuntu 22.04+
according to
https://github.com/mozilla/geckodriver/releases/tag/v0.34.0 and
https://firefox-source-docs.mozilla.org/testing/geckodriver/Usage.html#running-firefox-in-a-container-based-package

> When Firefox is packaged inside a container (e.g. Snap, Flatpak),
> it may see a different filesystem to the host....

> This is known to affect launching the default Firefox shipped with Ubuntu 22.04+

while Firefox doesn't seem to hang this may be what's causing the
failure to find an existing file for upload. If FF thinks that that
filesystem is different then that could be it! Therefore generate a
temporary file and use it during testing.
NOTE:

first argument is relative or absolute path to "manage.py" !
Bumps [psf/black](https://github.com/psf/black) from 23.12.1 to 24.3.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@23.12.1...24.3.0)

---
updated-dependencies:
- dependency-name: psf/black
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [webpack](https://github.com/webpack/webpack) from 5.90.3 to 5.91.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.90.3...v5.91.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [es5-ext](https://github.com/medikoo/es5-ext) from 0.10.62 to 0.10.63.
- [Release notes](https://github.com/medikoo/es5-ext/releases)
- [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md)
- [Commits](medikoo/es5-ext@v0.10.62...v0.10.63)

---
updated-dependencies:
- dependency-name: es5-ext
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [eslint](https://github.com/eslint/eslint) from 8.56.0 to 8.57.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.56.0...v8.57.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
atodorov and others added 30 commits January 5, 2025 18:22
Bumps [webpack](https://github.com/webpack/webpack) from 5.97.0 to 5.97.1.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.97.0...v5.97.1)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [python-gitlab](https://github.com/python-gitlab/python-gitlab) from 5.1.0 to 5.3.0.
- [Release notes](https://github.com/python-gitlab/python-gitlab/releases)
- [Changelog](https://github.com/python-gitlab/python-gitlab/blob/main/CHANGELOG.md)
- [Commits](python-gitlab/python-gitlab@v5.1.0...v5.3.0)

---
updated-dependencies:
- dependency-name: python-gitlab
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [webpack-cli](https://github.com/webpack/webpack-cli) from 5.1.4 to 6.0.1.
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/[email protected]@6.0.1)

---
updated-dependencies:
- dependency-name: webpack-cli
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [pdfmake](https://github.com/bpampuch/pdfmake) from 0.2.15 to 0.2.18.
- [Release notes](https://github.com/bpampuch/pdfmake/releases)
- [Changelog](https://github.com/bpampuch/pdfmake/blob/0.2.18/CHANGELOG.md)
- [Commits](bpampuch/pdfmake@0.2.15...0.2.18)

---
updated-dependencies:
- dependency-name: pdfmake
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [django-modern-rpc](https://github.com/alorence/django-modern-rpc) from 1.0.3 to 1.1.0.
- [Release notes](https://github.com/alorence/django-modern-rpc/releases)
- [Changelog](https://github.com/alorence/django-modern-rpc/blob/main/CHANGELOG.md)
- [Commits](alorence/django-modern-rpc@1.0.3...1.1.0)

---
updated-dependencies:
- dependency-name: django-modern-rpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
WARNING: Postgres 12 is no longer supported
this has been removed in Django 5.1 and is currently failing
(should be fixed in 5.1.5). However Kiwi TCMS has stopped using this
long time ago so just remove it from historical migrations!
Bumps [mysqlclient](https://github.com/PyMySQL/mysqlclient) from 2.2.6 to 2.2.7.
- [Release notes](https://github.com/PyMySQL/mysqlclient/releases)
- [Changelog](https://github.com/PyMySQL/mysqlclient/blob/main/HISTORY.rst)
- [Commits](PyMySQL/mysqlclient@v2.2.6...v2.2.7)

---
updated-dependencies:
- dependency-name: mysqlclient
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [django](https://github.com/django/django) from 5.1.4 to 5.1.5.
- [Commits](django/django@5.1.4...5.1.5)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [python-gitlab](https://github.com/python-gitlab/python-gitlab) from 5.3.0 to 5.3.1.
- [Release notes](https://github.com/python-gitlab/python-gitlab/releases)
- [Changelog](https://github.com/python-gitlab/python-gitlab/blob/main/CHANGELOG.md)
- [Commits](python-gitlab/python-gitlab@v5.3.0...v5.3.1)

---
updated-dependencies:
- dependency-name: python-gitlab
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [pygments](https://github.com/pygments/pygments) from 2.18.0 to 2.19.1.
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.18.0...2.19.1)

---
updated-dependencies:
- dependency-name: pygments
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
white space is now surrounded by
<span class="w">
Bumps [psycopg[binary]](https://github.com/psycopg/psycopg) from 3.2.3 to 3.2.4.
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.2.3...3.2.4)

---
updated-dependencies:
- dependency-name: psycopg[binary]
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
fixes the following warning:
LegacyKeyValueFormat: "ENV key=value" should be used instead of
legacy "ENV key value"
- a base class which can login into Kiwi TCMS (keeps cookies) and
  provides a helper method for JSON-RPC API calls

- an example test case which GETs the Dashboard page and
  calls the User.filter API method!
- this is modeled after perf-script-ng, see
  https://github.com/kiwitcms/api-scripts/blob/master/perf-script-ng,
  which is the initial performance test case simulating a large test
  matrix and recording hundreds/thousands of test execution results.

  Since its results are already part of the documentation it looks like
  a good place to start!

Refs #721
instead of the entire request contents. Otherwise this leads to
traceback recursion in edge cases, for example when Kiwi TCMS is
handling an error!
Bumps [django-simple-captcha](https://github.com/mbi/django-simple-captcha) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/mbi/django-simple-captcha/releases)
- [Changelog](https://github.com/mbi/django-simple-captcha/blob/master/CHANGES)
- [Commits](mbi/django-simple-captcha@v0.6.0...v0.6.1)

---
updated-dependencies:
- dependency-name: django-simple-captcha
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [tzdata](https://github.com/python/tzdata) from 2024.2 to 2025.1.
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](python/tzdata@2024.2...2025.1)

---
updated-dependencies:
- dependency-name: tzdata
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [django-simple-history](https://github.com/jazzband/django-simple-history) from 3.7.0 to 3.8.0.
- [Release notes](https://github.com/jazzband/django-simple-history/releases)
- [Changelog](https://github.com/jazzband/django-simple-history/blob/master/CHANGES.rst)
- [Commits](jazzband/django-simple-history@3.7.0...3.8.0)

---
updated-dependencies:
- dependency-name: django-simple-history
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [django-colorfield](https://github.com/fabiocaccamo/django-colorfield) from 0.11.0 to 0.12.0.
- [Release notes](https://github.com/fabiocaccamo/django-colorfield/releases)
- [Changelog](https://github.com/fabiocaccamo/django-colorfield/blob/0.12.0/CHANGELOG.md)
- [Commits](fabiocaccamo/django-colorfield@0.11.0...0.12.0)

---
updated-dependencies:
- dependency-name: django-colorfield
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [python-gitlab](https://github.com/python-gitlab/python-gitlab) from 5.3.1 to 5.4.0.
- [Release notes](https://github.com/python-gitlab/python-gitlab/releases)
- [Changelog](https://github.com/python-gitlab/python-gitlab/blob/main/CHANGELOG.md)
- [Commits](python-gitlab/python-gitlab@v5.3.1...v5.4.0)

---
updated-dependencies:
- dependency-name: python-gitlab
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
b/c the PlaywrightUser implementation has the notion of logging TASK
(the entire function) and EVENT (a named context manager) but doesn't
show you what happens underneath or when some of the underlying requests
for a page actually start failing.
this makes the reports cleaner b/c we have lots of different small files
requested by the HTML pages and the full report gets obscured!
- tasks simulate most commonly performed actions and can be used for
  some sort of web performance testing/analysis

- task frequency comes from curated plausible.io stats

- reuse the existing JSON-RPC login and add the sessionid cookie
  to the browser context instead of logging in via the browser which
  greatly simplifies the code and uses only publicly available API!
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants