aduth ( Andrew Duthie )

PR opened 18F/identity-idp

LG-4311 Ahoy logging doesn't account for user overrides

+10 -0

1 commit in 18F/identity-idp/tree/stevegsa-override-ahoy-user 18F/identity-idp/tree/main

0 comment

3 changed files

pr created time in 4 hours

create barnch18F/identity-idp

branch : stevegsa-override-ahoy-user

created branch time in 4 hours

PR opened 18F/identity-style-guide

Bump postcss from 8.1.2 to 8.2.10

Bumps postcss from 8.1.2 to 8.2.10. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>8.2.10</h2> <ul> <li>Fixed ReDoS vulnerabilities in source map parsing.</li> <li>Fixed webpack 5 support (by <a href="https://github.com/barak007"><code>@barak007</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/roelandmoors"><code>@roelandmoors</code></a>).</li> </ul> <h2>8.2.9</h2> <ul> <li>Exported <code>NodeErrorOptions</code> type (by <a href="https://github.com/realityking"><code>@realityking</code></a>)</li> </ul> <h2>8.2.8</h2> <ul> <li>Fixed browser builds in webpack 5 (by <a href="https://github.com/mattcompiles"><code>@mattcompiles</code></a>).</li> </ul> <h2>8.2.7</h2> <ul> <li>Fixed browser builds in webpack 5 (by <a href="https://github.com/mattcompiles"><code>@mattcompiles</code></a>).</li> </ul> <h2>8.2.6</h2> <ul> <li>Fixed <code>Maximum call stack size exceeded</code> in <code>Node#toJSON</code>.</li> <li>Fixed docs (by <a href="https://github.com/inokawa"><code>@inokawa</code></a>).</li> </ul> <h2>8.2.5</h2> <ul> <li>Fixed escaped characters handling in <code>list.split</code> (by <a href="https://github.com/nex3"><code>@nex3</code></a>).</li> </ul> <h2>8.2.4</h2> <ul> <li>Added plugin name to <code>postcss.plugin()</code> warning (by <a href="https://github.com/Alphy11"><code>@Alphy11</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/billcolumbia"><code>@billcolumbia</code></a>).</li> </ul> <h2>8.2.3</h2> <ul> <li>Fixed <code>JSON.stringify(Node[])</code> support (by <a href="https://github.com/mischnic"><code>@mischnic</code></a>).</li> </ul> <h2>8.2.2</h2> <ul> <li>Fixed CSS-in-JS support (by <a href="https://github.com/43081j"><code>@43081j</code></a>).</li> <li>Fixed plugin types (by <a href="https://github.com/ludofischer"><code>@ludofischer</code></a>).</li> <li>Fixed <code>Result#warn()</code> types.</li> </ul> <h2>8.2.1</h2> <ul> <li>Fixed <code>Node#toJSON()</code> and <code>postcss.fromJSON()</code> (by <a href="https://github.com/mischnic"><code>@mischnic</code></a>).</li> </ul> <h2>8.2 “Prince Orobas”</h2>  <p>PostCSS 8.2 added a new API to serialize and deserialize CSS AST to JSON.</p> <pre lang="js"><code>import { parse, fromJSON } from 'postcss' <p>let root = parse('a{}', { from: 'input.css' }) let json = root.toJSON() // save to file, send by network, etc let root2 = fromJSON(json) </code></pre></p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>8.2.10</h2> <ul> <li>Fixed ReDoS vulnerabilities in source map parsing.</li> <li>Fixed webpack 5 support (by Barak Igal).</li> <li>Fixed docs (by Roeland Moors).</li> </ul> <h2>8.2.9</h2> <ul> <li>Exported <code>NodeErrorOptions</code> type (by Rouven Weßling).</li> </ul> <h2>8.2.8</h2> <ul> <li>Fixed browser builds in webpack 4 (by Matt Jones).</li> </ul> <h2>8.2.7</h2> <ul> <li>Fixed browser builds in webpack 5 (by Matt Jones).</li> </ul> <h2>8.2.6</h2> <ul> <li>Fixed <code>Maximum call stack size exceeded</code> in <code>Node#toJSON</code>.</li> <li>Fixed docs (by inokawa).</li> </ul> <h2>8.2.5</h2> <ul> <li>Fixed escaped characters handling in <code>list.split</code> (by Natalie Weizenbaum).</li> </ul> <h2>8.2.4</h2> <ul> <li>Added plugin name to <code>postcss.plugin()</code> warning (by Tom Williams).</li> <li>Fixed docs (by Bill Columbia).</li> </ul> <h2>8.2.3</h2> <ul> <li>Fixed <code>JSON.stringify(Node[])</code> support (by Niklas Mischkulnig).</li> </ul> <h2>8.2.2</h2> <ul> <li>Fixed CSS-in-JS support (by James Garbutt).</li> <li>Fixed plugin types (by Ludovico Fischer).</li> <li>Fixed <code>Result#warn()</code> types.</li> </ul> <h2>8.2.1</h2> <ul> <li>Fixed <code>Node#toJSON()</code> and <code>postcss.fromJSON()</code> (by Niklas Mischkulnig).</li> </ul> <h2>8.2 “Prince Orobas”</h2> <ul> <li>Added <code>Node#toJSON()</code> and <code>postcss.fromJSON()</code> (by Niklas Mischkulnig).</li> </ul> <h2>8.1.14</h2> <ul> <li>Fixed parser performance regression.</li> </ul> <h2>8.1.13</h2> <ul> <li>Fixed broken AST after moving nodes in visitor API.</li> </ul> <h2>8.1.12</h2> <ul> <li>Fixed Autoprefixer regression.</li> </ul> <h2>8.1.11</h2> <ul> <li>Added PostCSS update suggestion on unknown event in plugin.</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/postcss/commit/8395d9f53efbaae5f3372b6b662a9e9b5b02360b"><code>8395d9f</code></a> Release 8.2.10 version</li> <li><a href="https://github.com/postcss/postcss/commit/f2baaa7e3780bad669814df498e301a47b5307c3"><code>f2baaa7</code></a> Update ESLint config</li> <li><a href="https://github.com/postcss/postcss/commit/b6f3e4d5a8d7504d553267f80384373af3a3dec5"><code>b6f3e4d</code></a> Fix unsafe regexp in getAnnotationURL() too</li> <li><a href="https://github.com/postcss/postcss/commit/4bcd7276d19511ec9ae01d6471c6417533240668"><code>4bcd727</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/postcss/postcss/issues/1553">#1553</a> from barak007/patch-2</li> <li><a href="https://github.com/postcss/postcss/commit/7c2e97aeaaae1faa65f655c09798101b4bc00a44"><code>7c2e97a</code></a> Add covrage ignore on error paths</li> <li><a href="https://github.com/postcss/postcss/commit/8c5843463041a9e76b9af2b76eb54db5faddde64"><code>8c58434</code></a> Apply suggestions from code review</li> <li><a href="https://github.com/postcss/postcss/commit/ff2fd57f6632436426156be63e696529f5ba0504"><code>ff2fd57</code></a> add error for sourcePath</li> <li><a href="https://github.com/postcss/postcss/commit/8f02bdcf62b820c8927a822fad02ffb6fec779d9"><code>8f02bdc</code></a> disable url based features</li> <li><a href="https://github.com/postcss/postcss/commit/a54d0205ef4c4bb127ccd1eaa807498f0534cdcf"><code>a54d020</code></a> Fix browser bundling with webpack 5</li> <li><a href="https://github.com/postcss/postcss/commit/8682b1e4e328432ba692bed52326e84439cec9e4"><code>8682b1e</code></a> Fix unsafe regexp</li> <li>Additional commits viewable in <a href="https://github.com/postcss/postcss/compare/8.1.2...8.2.10">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+14 -30

1 commit in 18F/identity-style-guide/tree/dependabot/npm_and_yarn/postcss-8.2.10 18F/identity-style-guide/tree/main

0 comment

1 changed file

pr created time in 8 hours

create barnch18F/identity-style-guide

branch : dependabot/npm_and_yarn/postcss-8.2.10

created branch time in 8 hours

create barnch18F/identity-dashboard

branch : dependabot/npm_and_yarn/lodash-4.17.21

created branch time in 8 hours

PR opened 18F/identity-dashboard

Bump lodash from 4.17.20 to 4.17.21

Bumps lodash from 4.17.20 to 4.17.21. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lodash/lodash/commit/f299b52f39486275a9e6483b60a410e06520c538"><code>f299b52</code></a> Bump to v4.17.21</li> <li><a href="https://github.com/lodash/lodash/commit/c4847ebe7d14540bb28a8b932a9ce1b9ecbfee1a"><code>c4847eb</code></a> Improve performance of <code>toNumber</code>, <code>trim</code> and <code>trimEnd</code> on large input strings</li> <li><a href="https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"><code>3469357</code></a> Prevent command injection through <code>_.template</code>'s <code>variable</code> option</li> <li>See full diff in <a href="https://github.com/lodash/lodash/compare/4.17.20...4.17.21">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+3 -3

1 commit in 18F/identity-dashboard/tree/dependabot/npm_and_yarn/lodash-4.17.21 18F/identity-dashboard/tree/main

0 comment

1 changed file

pr created time in 8 hours

startedjlfwong/speedscope

started time in 8 hours

create barnch18F/identity-dashboard

branch : dependabot/npm_and_yarn/hosted-git-info-2.8.9

created branch time in 9 hours

PR opened 18F/identity-dashboard

Bump hosted-git-info from 2.8.8 to 2.8.9

Bumps hosted-git-info from 2.8.8 to 2.8.9. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md">hosted-git-info's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9">2.8.9</a> (2021-04-07)</h2> <h3>Bug Fixes</h3> <ul> <li>backport regex fix from <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76">#76</a> (<a href="https://github.com/npm/hosted-git-info/commit/29adfe5">29adfe5</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/84">#84</a></li> </ul> <p></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/hosted-git-info/commit/8d4b3697d79bcd89cdb36d1db165e3696c783a01"><code>8d4b369</code></a> chore(release): 2.8.9</li> <li><a href="https://github.com/npm/hosted-git-info/commit/29adfe5ef789784c861b2cdeb15051ec2ba651a7"><code>29adfe5</code></a> fix: backport regex fix from <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76">#76</a></li> <li>See full diff in <a href="https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~nlf">nlf</a>, a new releaser for hosted-git-info since your current version.</p> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+3 -3

1 commit in 18F/identity-dashboard/tree/dependabot/npm_and_yarn/hosted-git-info-2.8.9 18F/identity-dashboard/tree/main

0 comment

1 changed file

pr created time in 9 hours

Pull request review comment18F/identity-idp

LG-4398: Support ActiveModel::Errors instance for FormResponse

 class FormResponse-  def initialize(success:, errors:, extra: {})+  def initialize(success:, errors: {}, extra: {})     @success = success-    @errors = errors.to_hash+    @errors = errors.is_a?(ActiveModel::Errors) ? errors.messages.to_hash : errors     @extra = extra+    @extra.merge!(+      error_details: flatten_details(errors.details),

Maybe some instance_eval to get around the property access? It's ugly but gets the job done... 😬

class A
  attr_accessor :a

  def initialize(a)
    @a = a
    @b = a + 1
  end

  def merge(other)
    self.class.new(self.a + other.a).tap do |merged|
      outer_b = b
      merged.instance_eval { @b = outer_b + other.instance_eval { b } }
    end
  end

  private

  attr_accessor :b
end

puts A.new(1).merge(A.new(2))

aduth

comment created time in 11 hours

create barnch18F/identity-idp

branch : mitchellhenke/async-doc-auth-analytics-lg-4488

created branch time in 11 hours

PR opened 18F/identity-idp

Deploy RC 139 to Prod

+912 -1190

23 commit in 18F/identity-idp/tree/stages/rc-2021-05-13 18F/identity-idp/tree/stages/prod

0 comment

165 changed files

pr created time in 13 hours

create barnch18F/identity-idp

branch : stages/rc-2021-05-13

created branch time in 13 hours

push event18F/identity-pki

Mitchell Henke

commit sha fc9bbb0987e31950bddc35240626f9f9b3fe82f5

do not enforce case insensitive uniqueness for piv_cac uuid or dn_signature (#231) * do not enforce case insensitive uniqueness for piv_cac uuid or dn_signature * update rails