Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Production #9508

Open
wants to merge 441 commits into
base: master
Choose a base branch
from
Open

Production #9508

wants to merge 441 commits into from
+120,806 −57,824

Conversation

oslynn
Copy link
Collaborator

@oslynn oslynn commented May 16, 2023

This PR ...

If you are suggesting a fix for a currently exploitable issue, please disclose the issue to the prime-reportstream team directly outside of GitHub instead of filing a PR, so we may immediately patch the affected systems before a disclosure. See SECURITY.md/Reporting a Vulnerability for more information.

Test Steps:

  1. Include steps to test these changes

Changes

  • Include a comprehensive list of changes in this PR
  • (For web UI changes) Include screenshots/video of changes

Checklist

Testing

  • Tested locally?
  • Ran ./prime test or ./gradlew testSmoke against local Docker ReportStream container?
  • (For Changes to /frontend-react/...) Ran npm run lint:write?
  • Added tests?

Process

  • Are there licensing issues with any new dependencies introduced?
  • Includes a summary of what a code reviewer should test/verify?
  • Updated the release notes?
  • Database changes are submitted as a separate PR?
  • DevOps team has been notified if PR requires ops support?

Linked Issues

  • Fixes #issue

To Be Done

Create GitHub issues to track the work remaining, if any

  • #issue

Specific Security-related subjects a reviewer should pay specific attention to

  • Does this PR introduce new endpoints?
    • new endpoint A
    • new endpoint B
  • Does this PR include changes in authentication and/or authorization of existing endpoints?
  • Does this change introduce new dependencies that need vetting?
  • Does this change require changes to our infrastructure?
  • Does logging contain sensitive data?
  • Does this PR include or remove any sensitive information itself?

If you answered 'yes' to any of the questions above, conduct a detailed Review that addresses at least:

  • What are the potential security threats and mitigations? Please list the STRIDE threats and how they are mitigated
    • Spoofing (faking authenticity)
      • Threat T, which could be achieved by A, is mitigated by M
    • Tampering (influence or sabotage the integrity of information, data, or system)
    • Repudiation (the ability to dispute the origin or originator of an action)
    • Information disclosure (data made available to entities who should not have it)
    • Denial of service (make a resource unavailable)
    • Elevation of Privilege (reduce restrictions that apply or gain privileges one should not have)
  • Have you ensured logging does not contain sensitive data?
  • Have you received any additional approvals needed for this change?

@github-actions
Copy link

github-actions bot commented May 16, 2023 •
edited
Loading

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails

Scanned Manifest Files

@oslynn oslynn temporarily deployed to staging May 16, 2023 18:11 — with GitHub Actions Inactive
@kant777 kant777 temporarily deployed to staging May 18, 2023 17:35 — with GitHub Actions Inactive
@kant777 kant777 temporarily deployed to prod May 18, 2023 17:35 — with GitHub Actions Inactive
@github-actions
Copy link

github-actions bot commented May 18, 2023 •
edited
Loading

Test Results

1 268 tests  +21   1 264 ✅ +21   7m 41s ⏱️ +3s
  164 suites + 2       4 💤 ± 0 
  164 files   + 2       0 ❌ ± 0 

Results for commit 22e26c1. ± Comparison against base commit 7895c62.

♻️ This comment has been updated with latest results.

@kant777 kant777 temporarily deployed to prod May 18, 2023 17:43 — with GitHub Actions Inactive
@oslynn oslynn temporarily deployed to prod May 23, 2023 17:23 — with GitHub Actions Inactive
@oslynn oslynn temporarily deployed to staging May 23, 2023 17:23 — with GitHub Actions Inactive
@oslynn oslynn temporarily deployed to prod May 23, 2023 17:34 — with GitHub Actions Inactive
@brick-green brick-green temporarily deployed to prod May 25, 2023 14:55 — with GitHub Actions Inactive
@brick-green brick-green temporarily deployed to staging May 25, 2023 14:55 — with GitHub Actions Inactive
@brick-green brick-green temporarily deployed to prod May 25, 2023 15:03 — with GitHub Actions Inactive
@thetaurean thetaurean temporarily deployed to prod May 30, 2023 18:43 — with GitHub Actions Inactive
@thetaurean thetaurean temporarily deployed to staging May 30, 2023 18:43 — with GitHub Actions Inactive
@thetaurean thetaurean temporarily deployed to prod May 30, 2023 18:53 — with GitHub Actions Inactive
@thetaurean thetaurean temporarily deployed to staging June 1, 2023 18:14 — with GitHub Actions Inactive
@thetaurean thetaurean temporarily deployed to prod June 1, 2023 18:14 — with GitHub Actions Inactive
@thetaurean thetaurean temporarily deployed to prod June 1, 2023 18:24 — with GitHub Actions Inactive
@jack-h-wang jack-h-wang temporarily deployed to staging June 8, 2023 19:13 — with GitHub Actions Inactive
@jack-h-wang jack-h-wang temporarily deployed to prod June 8, 2023 19:13 — with GitHub Actions Inactive
@jack-h-wang jack-h-wang temporarily deployed to prod June 8, 2023 19:22 — with GitHub Actions Inactive
@jack-h-wang jack-h-wang temporarily deployed to prod June 13, 2023 18:23 — with GitHub Actions Inactive
@jack-h-wang jack-h-wang temporarily deployed to staging June 13, 2023 18:24 — with GitHub Actions Inactive
@jack-h-wang jack-h-wang temporarily deployed to prod June 13, 2023 18:35 — with GitHub Actions Inactive
@jack-h-wang jack-h-wang temporarily deployed to staging June 15, 2023 17:07 — with GitHub Actions Inactive
@jack-h-wang jack-h-wang temporarily deployed to prod June 15, 2023 17:07 — with GitHub Actions Inactive
@jack-h-wang jack-h-wang temporarily deployed to prod June 15, 2023 17:16 — with GitHub Actions Inactive
@jack-h-wang jack-h-wang temporarily deployed to prod June 20, 2023 17:35 — with GitHub Actions Inactive
@jack-h-wang jack-h-wang temporarily deployed to staging June 20, 2023 17:35 — with GitHub Actions Inactive
@jack-h-wang jack-h-wang temporarily deployed to prod June 20, 2023 17:50 — with GitHub Actions Inactive
etanb and others added 23 commits December 24, 2024 15:14
@etanb
Merge pull request #16781 from CDCgov/devs3ecops/matts/fix-foia
1a97ce6 
Fix CDC FOIA URL
@dependabot @jack-h-wang
Bump com.azure.spring:spring-cloud-azure-dependencies in /auth
2aec4b9 
Bumps [com.azure.spring:spring-cloud-azure-dependencies](https://github.com/Azure/azure-sdk-for-java) from 5.18.0 to 5.19.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@spring-cloud-azure_5.18.0...spring-cloud-azure_5.19.0)

---
updated-dependencies:
- dependency-name: com.azure.spring:spring-cloud-azure-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump org.springframework.boot from 3.4.0 to 3.4.1 in /auth
0f5f0f4 
Bumps [org.springframework.boot](https://github.com/spring-projects/spring-boot) from 3.4.0 to 3.4.1.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.0...v3.4.1)

---
updated-dependencies:
- dependency-name: org.springframework.boot
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump io.spring.dependency-management from 1.1.6 to 1.1.7 in /auth
6b0ddc9 
Bumps [io.spring.dependency-management](https://github.com/spring-gradle-plugins/dependency-management-plugin) from 1.1.6 to 1.1.7.
- [Release notes](https://github.com/spring-gradle-plugins/dependency-management-plugin/releases)
- [Commits](spring-gradle-plugins/dependency-management-plugin@v1.1.6...v1.1.7)

---
updated-dependencies:
- dependency-name: io.spring.dependency-management
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump org.springframework.boot from 3.4.0 to 3.4.1 in /submissions
099a3cc 
Bumps [org.springframework.boot](https://github.com/spring-projects/spring-boot) from 3.4.0 to 3.4.1.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.0...v3.4.1)

---
updated-dependencies:
- dependency-name: org.springframework.boot
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump com.azure.spring:spring-cloud-azure-dependencies in /submissions
a23c020 
Bumps [com.azure.spring:spring-cloud-azure-dependencies](https://github.com/Azure/azure-sdk-for-java) from 5.18.0 to 5.19.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@spring-cloud-azure_5.18.0...spring-cloud-azure_5.19.0)

---
updated-dependencies:
- dependency-name: com.azure.spring:spring-cloud-azure-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump io.spring.dependency-management from 1.1.6 to 1.1.7 in /submissions
ec83040 
Bumps [io.spring.dependency-management](https://github.com/spring-gradle-plugins/dependency-management-plugin) from 1.1.6 to 1.1.7.
- [Release notes](https://github.com/spring-gradle-plugins/dependency-management-plugin/releases)
- [Commits](spring-gradle-plugins/dependency-management-plugin@v1.1.6...v1.1.7)

---
updated-dependencies:
- dependency-name: io.spring.dependency-management
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump org.springframework.security:spring-security-oauth2-jose
b6498d6 
Bumps [org.springframework.security:spring-security-oauth2-jose](https://github.com/spring-projects/spring-security) from 6.3.4 to 6.4.2.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@6.3.4...6.4.2)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-oauth2-jose
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump plugin.spring from 2.0.21 to 2.1.0 in /auth
9b6b454 
Bumps [plugin.spring](https://github.com/JetBrains/kotlin) from 2.0.21 to 2.1.0.
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/v2.1.0/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.0.21...v2.1.0)

---
updated-dependencies:
- dependency-name: plugin.spring
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump org.springframework.cloud:spring-cloud-dependencies in /auth
8e61924 
Bumps [org.springframework.cloud:spring-cloud-dependencies](https://github.com/spring-cloud/spring-cloud-release) from 2023.0.3 to 2023.0.4.
- [Release notes](https://github.com/spring-cloud/spring-cloud-release/releases)
- [Commits](spring-cloud/spring-cloud-release@v2023.0.3...v2023.0.4)

---
updated-dependencies:
- dependency-name: org.springframework.cloud:spring-cloud-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump plugin.spring from 2.0.21 to 2.1.0 in /submissions
b1b9ed2 
Bumps [plugin.spring](https://github.com/JetBrains/kotlin) from 2.0.21 to 2.1.0.
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/v2.1.0/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.0.21...v2.1.0)

---
updated-dependencies:
- dependency-name: plugin.spring
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump io.github.oshai:kotlin-logging-jvm in /prime-router
4249ffe 
Bumps [io.github.oshai:kotlin-logging-jvm](https://github.com/oshai/kotlin-logging) from 7.0.0 to 7.0.3.
- [Release notes](https://github.com/oshai/kotlin-logging/releases)
- [Changelog](https://github.com/oshai/kotlin-logging/blob/master/ChangeLog-old.md)
- [Commits](https://github.com/oshai/kotlin-logging/commits)

---
updated-dependencies:
- dependency-name: io.github.oshai:kotlin-logging-jvm
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump com.networknt:json-schema-validator in /prime-router
3eb3234 
Bumps [com.networknt:json-schema-validator](https://github.com/networknt/json-schema-validator) from 1.5.2 to 1.5.4.
- [Release notes](https://github.com/networknt/json-schema-validator/releases)
- [Changelog](https://github.com/networknt/json-schema-validator/blob/master/CHANGELOG.md)
- [Commits](networknt/json-schema-validator@1.5.2...1.5.4)

---
updated-dependencies:
- dependency-name: com.networknt:json-schema-validator
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump jacksonVersion from 2.18.1 to 2.18.2 in /prime-router
8344589 
Bumps `jacksonVersion` from 2.18.1 to 2.18.2.

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.18.1 to 2.18.2
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.18.1...jackson-dataformats-text-2.18.2)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.1 to 2.18.2
- [Commits](https://github.com/FasterXML/jackson/commits)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump org.springdoc:springdoc-openapi-starter-webflux-ui in /auth
b24782b 
Bumps [org.springdoc:springdoc-openapi-starter-webflux-ui](https://github.com/springdoc/springdoc-openapi) from 2.6.0 to 2.7.0.
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/main/CHANGELOG.md)
- [Commits](springdoc/springdoc-openapi@v2.6.0...v2.7.0)

---
updated-dependencies:
- dependency-name: org.springdoc:springdoc-openapi-starter-webflux-ui
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump com.zaxxer:HikariCP from 6.2.0 to 6.2.1 in /prime-router
2902741 
Bumps [com.zaxxer:HikariCP](https://github.com/brettwooldridge/HikariCP) from 6.2.0 to 6.2.1.
- [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES)
- [Commits](brettwooldridge/HikariCP@HikariCP-6.2.0...HikariCP-6.2.1)

---
updated-dependencies:
- dependency-name: com.zaxxer:HikariCP
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump commons-io:commons-io from 2.17.0 to 2.18.0 in /prime-router
a55ad67 
Bumps commons-io:commons-io from 2.17.0 to 2.18.0.

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jack-h-wang
Bump io.github.java-diff-utils:java-diff-utils in /prime-router
e9341a2 
Bumps [io.github.java-diff-utils:java-diff-utils](https://github.com/java-diff-utils/java-diff-utils) from 4.11 to 4.15.
- [Release notes](https://github.com/java-diff-utils/java-diff-utils/releases)
- [Changelog](https://github.com/java-diff-utils/java-diff-utils/blob/master/CHANGELOG.md)
- [Commits](java-diff-utils/java-diff-utils@java-diff-utils-parent-4.11...java-diff-utils-parent-4.15)

---
updated-dependencies:
- dependency-name: io.github.java-diff-utils:java-diff-utils
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@jack-h-wang
disambiguate argument type in sshj mocks
166ac13
@dependabot @jack-h-wang
Bump com.hierynomus:sshj from 0.38.0 to 0.39.0 in /prime-router
a9ecd2d 
Bumps [com.hierynomus:sshj](https://github.com/hierynomus/sshj) from 0.38.0 to 0.39.0.
- [Commits](hierynomus/sshj@v0.38.0...v0.39.0)

---
updated-dependencies:
- dependency-name: com.hierynomus:sshj
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@jack-h-wang
Merge pull request #16909 from CDCgov/platform/dependabot/2024-12-26
ba596b5 
platform/dependabot/2024-12-26
@oslynn
Onboard Marshall Island to UP (#16900)
345f93c 
* Onboard Marshall Island to UP

* Setted convertDateTimesToReceiverLocalTime: true

* Add Translation Test to the PR
@jalbinson
Merge pull request #16940 from CDCgov/deployment/2025-01-02
22e26c1 
Deployment of 2025-01-02
@github-actions GitHub Actions
Copy link

github-actions bot commented Jan 2, 2025

Branch deployed to Chromatic 🚀.

  • ⚠️ Detected 0 tests with visual changes.
  • ✅ All tests passed.

View via:

@github-actions GitHub Actions
Copy link

github-actions bot commented Jan 2, 2025

⚠️ Broken Links ⚠️

❌ https://www.hhs.gov/vulnerability-disclosure-policy/index.html

Error: Request failed with status code 403

❌ /assets/xlsm/20241204_ReportStream-Mapping-Template.xlsm

Error: Internal link: Page error

❌ https://www.cdc.gov/poxvirus/mpox/lab-personnel/report-results.html

Error: Request failed with status code 404

@jalbinson jalbinson deployed to prod-router January 2, 2025 16:17 — with GitHub Actions Active
@jalbinson jalbinson deployed to prod-frontend January 2, 2025 16:36 — with GitHub Actions Active
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.