Joey Orlando
76a88bc0c1
Revert "upgrade to Python 3.12 ( #3456 )" and "bump uwsgi version to latest #3466 " ( #3483 )
...
# What this PR does
This reverts commits 7c4b40a046cdb22285dbhttps://github.com/grafana/oncall-private/pull/2361 for more
details.
2023-12-01 09:56:26 -05:00
Joey Orlando
7c4b40a046
upgrade to Python 3.12 ( #3456 )
...
# What this PR does
Upgrade to Python 3.12 + fix several invalid test assertions that lead
to test failures in the latest version of `pytest`:
```
AttributeError: 'called_once_with' is not a valid assertion. Use a spec for the mock if 'called_once_with' is meant to be an attribute.. Did you mean: 'assert_called_once_with'?
```
## Checklist
- [ ] Unit, integration, and e2e (if applicable) tests updated
- [x] Documentation added (or `pr:no public docs` PR label added if not
required)
- [x] `CHANGELOG.md` updated (or `pr:no changelog` PR label added if not
required)
2023-11-30 13:47:41 +00:00
dependabot[bot]
d8f111f960
Bump aiohttp from 3.8.6 to 3.9.0 in /dev/scripts/generate-fake-data ( #3436 )
...
Bumps [aiohttp](https://github.com/aio-libs/aiohttp ) from 3.8.6 to
3.9.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aio-libs/aiohttp/releases ">aiohttp's
releases</a>.</em></p>
<blockquote>
<h2>3.9.0</h2>
<h2>Features</h2>
<ul>
<li>
<p>Introduced <code>AppKey</code> for static typing support of
<code>Application</code> storage.
See <a
href="https://docs.aiohttp.org/en/stable/web_advanced.html#application-s-config ">https://docs.aiohttp.org/en/stable/web_advanced.html#application-s-config </a></p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/5864 ">#5864</a>)</p>
</li>
<li>
<p>Added a graceful shutdown period which allows pending tasks to
complete before the application's cleanup is called.
The period can be adjusted with the <code>shutdown_timeout</code>
parameter. -- by :user:<code>Dreamsorcerer</code>.
See <a
href="https://docs.aiohttp.org/en/latest/web_advanced.html#graceful-shutdown ">https://docs.aiohttp.org/en/latest/web_advanced.html#graceful-shutdown </a></p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7188 ">#7188</a>)</p>
</li>
<li>
<p>Added <code>handler_cancellation
<https://docs.aiohttp.org/en/stable/web_advanced.html#web-handler-cancellation> ;</code>_
parameter to cancel web handler on client disconnection. -- by
:user:<code>mosquito</code>
This (optionally) reintroduces a feature removed in a previous release.
Recommended for those looking for an extra level of protection against
denial-of-service attacks.</p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7056 ">#7056</a>)</p>
</li>
<li>
<p>Added support for setting response header parameters
<code>max_line_size</code> and <code>max_field_size</code>.</p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/2304 ">#2304</a>)</p>
</li>
<li>
<p>Added <code>auto_decompress</code> parameter to
<code>ClientSession.request</code> to override
<code>ClientSession._auto_decompress</code>. -- by
:user:<code>Daste745</code></p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/3751 ">#3751</a>)</p>
</li>
<li>
<p>Changed <code>raise_for_status</code> to allow a coroutine.</p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/3892 ">#3892</a>)</p>
</li>
<li>
<p>Added client brotli compression support (optional with runtime
check).</p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/5219 ">#5219</a>)</p>
</li>
<li>
<p>Added <code>client_max_size</code> to
<code>BaseRequest.clone()</code> to allow overriding the request body
size. -- :user:<code>anesabml</code>.</p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/5704 ">#5704</a>)</p>
</li>
<li>
<p>Added a middleware type alias
<code>aiohttp.typedefs.Middleware</code>.</p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/5898 ">#5898</a>)</p>
</li>
<li>
<p>Exported <code>HTTPMove</code> which can be used to catch any
redirection request
that has a location -- :user:<code>dreamsorcerer</code>.</p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/6594 ">#6594</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst ">aiohttp's
changelog</a>.</em></p>
<blockquote>
<h1>3.9.0 (2023-11-18)</h1>
<h2>Features</h2>
<ul>
<li>
<p>Introduced <code>AppKey</code> for static typing support of
<code>Application</code> storage.
See <a
href="https://docs.aiohttp.org/en/stable/web_advanced.html#application-s-config ">https://docs.aiohttp.org/en/stable/web_advanced.html#application-s-config </a></p>
<p><code>[#5864 ](https://github.com/aio-libs/aiohttp/issues/5864 )
<https://github.com/aio-libs/aiohttp/issues/5864> ;</code>_</p>
</li>
<li>
<p>Added a graceful shutdown period which allows pending tasks to
complete before the application's cleanup is called.
The period can be adjusted with the <code>shutdown_timeout</code>
parameter. -- by :user:<code>Dreamsorcerer</code>.
See <a
href="https://docs.aiohttp.org/en/latest/web_advanced.html#graceful-shutdown ">https://docs.aiohttp.org/en/latest/web_advanced.html#graceful-shutdown </a></p>
<p><code>[#7188 ](https://github.com/aio-libs/aiohttp/issues/7188 )
<https://github.com/aio-libs/aiohttp/issues/7188> ;</code>_</p>
</li>
<li>
<p>Added <code>handler_cancellation
<https://docs.aiohttp.org/en/stable/web_advanced.html#web-handler-cancellation> ;</code>_
parameter to cancel web handler on client disconnection. -- by
:user:<code>mosquito</code>
This (optionally) reintroduces a feature removed in a previous release.
Recommended for those looking for an extra level of protection against
denial-of-service attacks.</p>
<p><code>[#7056 ](https://github.com/aio-libs/aiohttp/issues/7056 )
<https://github.com/aio-libs/aiohttp/issues/7056> ;</code>_</p>
</li>
<li>
<p>Added support for setting response header parameters
<code>max_line_size</code> and <code>max_field_size</code>.</p>
<p><code>[#2304 ](https://github.com/aio-libs/aiohttp/issues/2304 )
<https://github.com/aio-libs/aiohttp/issues/2304> ;</code>_</p>
</li>
<li>
<p>Added <code>auto_decompress</code> parameter to
<code>ClientSession.request</code> to override
<code>ClientSession._auto_decompress</code>. -- by
:user:<code>Daste745</code></p>
<p><code>[#3751 ](https://github.com/aio-libs/aiohttp/issues/3751 )
<https://github.com/aio-libs/aiohttp/issues/3751> ;</code>_</p>
</li>
<li>
<p>Changed <code>raise_for_status</code> to allow a coroutine.</p>
<p><code>[#3892 ](https://github.com/aio-libs/aiohttp/issues/3892 )
<https://github.com/aio-libs/aiohttp/issues/3892> ;</code>_</p>
</li>
<li>
<p>Added client brotli compression support (optional with runtime
check).</p>
<p><code>[#5219 ](https://github.com/aio-libs/aiohttp/issues/5219 )
<https://github.com/aio-libs/aiohttp/issues/5219> ;</code>_</p>
</li>
<li>
<p>Added <code>client_max_size</code> to
<code>BaseRequest.clone()</code> to allow overriding the request body
size. -- :user:<code>anesabml</code>.</p>
<p><code>[#5704 ](https://github.com/aio-libs/aiohttp/issues/5704 )
<https://github.com/aio-libs/aiohttp/issues/5704> ;</code>_</p>
</li>
<li>
<p>Added a middleware type alias
<code>aiohttp.typedefs.Middleware</code>.</p>
<p><code>[#5898 ](https://github.com/aio-libs/aiohttp/issues/5898 )
<https://github.com/aio-libs/aiohttp/issues/5898> ;</code>_</p>
</li>
<li>
<p>Exported <code>HTTPMove</code> which can be used to catch any
redirection request
that has a location -- :user:<code>dreamsorcerer</code>.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="45b2c2c577https://redirect.github.com/aio-libs/aiohttp/issues/7843 ">#7843</a>)</li>
<li><a
href="5d59d3d6achttps://redirect.github.com/aio-libs/aiohttp/issues/7840 ">#7840</a>)</li>
<li><a
href="c806814a8ahttps://redirect.github.com/aio-libs/aiohttp/issues/7838 ">#7838</a>)</li>
<li><a
href="e07a1bdaachttps://redirect.github.com/aio-libs/aiohttp/issues/7837 ">#7837</a>)</li>
<li><a
href="53476dfd4ehttps://redirect.github.com/aio-libs/aiohttp/issues/7835 ">#7835</a>)
(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7836 ">#7836</a>)</li>
<li><a
href="9d712f2f9chttps://redirect.github.com/aio-libs/aiohttp/issues/7833 ">#7833</a>)</li>
<li><a
href="63a805e1d8https://redirect.github.com/aio-libs/aiohttp/issues/7832 ">#7832</a>)</li>
<li><a
href="cb94533dd5https://redirect.github.com/aio-libs/aiohttp/issues/7815 ">#7815</a>)
(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7826 ">#7826</a>)</li>
<li><a
href="c0f9017a9ahttps://redirect.github.com/aio-libs/aiohttp/issues/7821 ">#7821</a>/366ba40f
backport][3.9] Only check origin if insecure scheme and th...</li>
<li><a
href="9d498ca1e6https://redirect.github.com/aio-libs/aiohttp/issues/7606 ">#7606</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aio-libs/aiohttp/compare/v3.8.6...v3.9.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/grafana/oncall/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-28 06:56:46 -05:00
dependabot[bot]
bb8b88f720
Bump aiohttp from 3.8.5 to 3.8.6 in /dev/scripts/generate-fake-data ( #3354 )
2023-11-14 18:38:48 -05:00
dependabot[bot]
2477859cb6
Bump aiohttp from 3.8.3 to 3.8.5 in /dev/scripts/generate-fake-data ( #2602 )
...
Bumps [aiohttp](https://github.com/aio-libs/aiohttp ) from 3.8.3 to
3.8.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aio-libs/aiohttp/releases ">aiohttp's
releases</a>.</em></p>
<blockquote>
<h2>3.8.5</h2>
<h2>Security bugfixes</h2>
<ul>
<li>
<p>Upgraded the vendored copy of llhttp_ to v8.1.1 -- by
:user:<code>webknjaz</code>
and :user:<code>Dreamsorcerer</code>.</p>
<p>Thanks to :user:<code>sethmlarson</code> for reporting this and
providing us with
comprehensive reproducer, workarounds and fixing details! For more
information, see
<a
href="https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w ">https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w </a>.</p>
<p>.. _llhttp: <a href="https://llhttp.org ">https://llhttp.org </a></p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7346 ">#7346</a>)</p>
</li>
</ul>
<h2>Features</h2>
<ul>
<li>
<p>Added information to C parser exceptions to show which character
caused the error. -- by :user:<code>Dreamsorcerer</code></p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7366 ">#7366</a>)</p>
</li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>
<p>Fixed a transport is :data:<code>None</code> error -- by
:user:<code>Dreamsorcerer</code>.</p>
<p>(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/3355 ">#3355</a>)</p>
</li>
</ul>
<hr />
<h2>3.8.4</h2>
<h2>Bugfixes</h2>
<ul>
<li>Fixed incorrectly overwriting cookies with the same name and domain,
but different path.
(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/6638 ">#6638</a>)</li>
<li>Fixed <code>ConnectionResetError</code> not being raised after
client disconnection in SSL environments.
(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7180 ">#7180</a>)</li>
</ul>
<hr />
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aio-libs/aiohttp/blob/v3.8.5/CHANGES.rst ">aiohttp's
changelog</a>.</em></p>
<blockquote>
<h1>3.8.5 (2023-07-19)</h1>
<h2>Security bugfixes</h2>
<ul>
<li>
<p>Upgraded the vendored copy of llhttp_ to v8.1.1 -- by
:user:<code>webknjaz</code>
and :user:<code>Dreamsorcerer</code>.</p>
<p>Thanks to :user:<code>sethmlarson</code> for reporting this and
providing us with
comprehensive reproducer, workarounds and fixing details! For more
information, see
<a
href="https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w ">https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w </a>.</p>
<p>.. _llhttp: <a href="https://llhttp.org ">https://llhttp.org </a></p>
<p><code>[#7346 ](https://github.com/aio-libs/aiohttp/issues/7346 )
<https://github.com/aio-libs/aiohttp/issues/7346> ;</code>_</p>
</li>
</ul>
<h2>Features</h2>
<ul>
<li>
<p>Added information to C parser exceptions to show which character
caused the error. -- by :user:<code>Dreamsorcerer</code></p>
<p><code>[#7366 ](https://github.com/aio-libs/aiohttp/issues/7366 )
<https://github.com/aio-libs/aiohttp/issues/7366> ;</code>_</p>
</li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>
<p>Fixed a transport is :data:<code>None</code> error -- by
:user:<code>Dreamsorcerer</code>.</p>
<p><code>[#3355 ](https://github.com/aio-libs/aiohttp/issues/3355 )
<https://github.com/aio-libs/aiohttp/issues/3355> ;</code>_</p>
</li>
</ul>
<hr />
<h1>3.8.4 (2023-02-12)</h1>
<h2>Bugfixes</h2>
<ul>
<li>Fixed incorrectly overwriting cookies with the same name and domain,
but different path.
<code>[#6638 ](https://github.com/aio-libs/aiohttp/issues/6638 )
<https://github.com/aio-libs/aiohttp/issues/6638> ;</code>_</li>
<li>Fixed <code>ConnectionResetError</code> not being raised after
client disconnection in SSL environments.
<code>[#7180 ](https://github.com/aio-libs/aiohttp/issues/7180 )
<https://github.com/aio-libs/aiohttp/issues/7180> ;</code>_</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9c13a52c217c02129567135a45e9d6https://redirect.github.com/aio-libs/aiohttp/issues/7366 ">#7366</a>)
(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7380 ">#7380</a>)</li>
<li><a
href="9337fb3f2ahttps://redirect.github.com/aio-libs/aiohttp/issues/7367 ">#7367</a>)
(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7377 ">#7377</a>)</li>
<li><a
href="f07e9b44b5https://redirect.github.com/aio-libs/aiohttp/issues/7373 ">#7373</a>/66e261a5
backport][3.8] Drop azure mention (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7374 ">#7374</a>)</li>
<li><a
href="01d9b70e54https://redirect.github.com/aio-libs/aiohttp/issues/7370 ">#7370</a>/22c264ce
backport][3.8] fix: Spelling error fixed (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7371 ">#7371</a>)</li>
<li><a
href="3577b1e371https://redirect.github.com/aio-libs/aiohttp/issues/7359 ">#7359</a>/7911f1e9
backport][3.8] Set up secretless publishing to PyPI (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7360 ">#7360</a>)</li>
<li><a
href="8d45f9c995https://redirect.github.com/aio-libs/aiohttp/issues/7333 ">#7333</a>/3a54d378
backport][3.8] Fix TLS transport is <code>None</code> error (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7357 ">#7357</a>)</li>
<li><a
href="dd8e24e773https://redirect.github.com/aio-libs/aiohttp/issues/7343 ">#7343</a>/18057581
backport][3.8] Mention encoding in <code>yarl.URL</code> (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7355 ">#7355</a>)</li>
<li><a
href="40874103ebhttps://redirect.github.com/aio-libs/aiohttp/issues/7346 ">#7346</a>/346fd202
backport][3.8] Bump vendored llhttp to v8.1.1 (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/7352 ">#7352</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aio-libs/aiohttp/compare/v3.8.3...v3.8.5 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/grafana/oncall/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-21 01:33:48 -04:00
Joey Orlando
bb3521b879
upgrade to python 3.11.3 ( #1849 )
...
# What this PR does
Upgrades the backend to Python 3.11.3 (latest stable release) + update
linting step on Drone builds to run **all** the linting steps, not just
the Python ones.
## Checklist
- [ ] Unit, integration, and e2e (if applicable) tests updated (N/A)
- [ ] Documentation added (or `pr:no public docs` PR label added if not
required) (N/A)
- [x] `CHANGELOG.md` updated (or `pr:no changelog` PR label added if not
required)
2023-05-05 15:32:40 +00:00
Joey Orlando
98241b9a10
fake-data generation script + fixes for django-silk and django-debug-toolbar ( #1128 )
...
# What this PR does
## Main stuff
- add Python script to populate local Grafana/OnCall setup w/ large
amounts of fake data. Right now the data types that can be generated
are:
- teams and Admin users via the Grafana API (must be synced manually by
going into the UI before going onto the next step)
- Calendar Schedules which have three 8h oncall-shifts, via the OnCall
public API
- fixes `django-debug-toolbar` when being run in `docker-compose`
locally
## Other stuff
- documents how to easily modify the Grafana `docker-compose` container
provisioning configuration
- document solutions for two backend setup related issues encountered
when running the engine/celery workers locally, outside of
`docker-compose`, on an Apple silicon Mac
- fixes small bug in `grafana_plugin.helpers.client.APIClient.call_api`
where it would call `response.json()` for all requests, regardless of
whether or not the response actually contained data or not
- in `engine/settings/dev.py`, properly setup `django-silk` and document
the steps to use it locally
- make it possible to log out debug SQL queries by specifying
`DEV_DEBUG_VIEW_SQL_QUERIES` env var, rather than having to uncomment
out a section of `settings/dev.py`
## Which issue(s) this PR fixes
- Some local setup issues when trying to use `django-silk` and
`django-debug-toolbar`
- Makes it much easier to populate your local setup with a lot of fake
data
- Makes it possible to easily modify your local grafana's provisioning
configuration
## Checklist
- [ ] Tests updated (N/A)
- [ ] Documentation added (N/A)
- [ ] `CHANGELOG.md` updated (N/A)
2023-01-20 09:19:41 +01:00
Joey Orlando