#1857 Dependency Update

.github/workflows/build.yml

@@ -36,7 +36,7 @@ jobs:
           mask-password: 'true'
 
       - name: Docker Build
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           file: ci/Dockerfile
           context: .

.talismanrc

@@ -18,7 +18,7 @@ fileignoreconfig:
 - filename: ci/.local.env
   checksum: a2dca7e8e15af2a98112a405725e0b6f07c6adcb61507d8d32715ee17c383b6b
 - filename: poetry.lock
-  checksum: 556d0c59f58bdc6be2338e82c4dd7defe50548031baa9e6121e4e16f51d3242c
+  checksum: c0e0e9628dd38dc4259427eb25b5c79e0c0eeabbbb7debfc724844c3cf64d0a5
 - filename: tests/app/celery/test_scheduled_tasks.py
   checksum: cb2b003fb3ee404c293632e4bad6754ec6a35c895f392933d9203b5d93edb095
 - filename: tests/app/conftest.py

README.md

@@ -227,7 +227,7 @@ To update the images, change the `FROM` directive at the top of Dockerfiles and
 
 Updating dependencies for the `notification_api` is done by ensuring [Poetry](https://python-poetry.org/) is installed, then running a simple command while within the root of `notification_api`. The `pyroject.toml` file contains all top-level dependencies, and Poetry manages everything else. The full process to upgrade is as follows:
 
-1. From the root directory, and with Poetry 1.7 installed, run `poetry update`
+1. From the root directory, and with Poetry 1.8 installed, run `poetry update`
 2. Run all unit tests with `docker compose -f ci/docker-compose-test.yml up`
 4. Deploy the code and ensure all regressions pass
 

load_testing/requirements.txt

@@ -1,3 +1,3 @@
-locust==2.26.0
+locust==2.29.1
 PyJWT~=2.8.0
 boto3==1.34.92

load_testing/requirements_cli.txt

@@ -1,3 +1,3 @@
-notifications-python-client==8.1.0
+notifications-python-client==10.0.0
 boto3==1.15.9
 click==8.1.7

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "notification-api"
-version = "1.7.3"
+version = "1.8.3"
 description = "VA Enterprise Notification Platform"
 authors = [
     "VA Notify <[email protected]>",
@@ -36,6 +36,9 @@ marshmallow-sqlalchemy = "*"
 nanoid = "*"
 notifications-python-client = "*"
 phonenumbers = "*"
+
+# TODO: protobuf is pinned because version 5.27.2 failed to deploy, see #1886
+protobuf = "^4.25"
 psycopg2-binary = "*"
 pwnedpasswords = "*"
 PyJWT = "*"