Merge pull request #604 from ASFHyP3/develop

Release v0.3.5
ASFHyP3 · Jul 8, 2024 · 1e26542 · 1e26542
2 parents b0bd0a8 + ed1c591
commit 1e26542
Show file tree

Hide file tree

Showing 13 changed files with 43 additions and 33 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -5,15 +5,15 @@
 
 version: 2
 updates:
-  - package-ecosystem: "pip"
-    directory: "/"
+  - package-ecosystem: pip
+    directory: /
     schedule:
-      interval: "daily"
+      interval: weekly
     labels:
-      - "bumpless"
-  - package-ecosystem: "github-actions"
-    directory: "/"
+      - bumpless
+  - package-ecosystem: github-actions
+    directory: /
     schedule:
-      interval: "daily"
+      interval: weekly
     labels:
-      - "bumpless"
+      - bumpless
diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
@@ -13,6 +13,4 @@ on:
 
 jobs:
   call-changelog-check-workflow:
-    uses: ASFHyP3/actions/.github/workflows/[email protected]
-    secrets:
-      USER_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    uses: ASFHyP3/actions/.github/workflows/[email protected]
diff --git a/.github/workflows/create-jira-issue.yml b/.github/workflows/create-jira-issue.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   call-create-jira-issue-workflow:
-    uses: ASFHyP3/actions/.github/workflows/reusable-create-jira-issue.yml@v0.8.3
+    uses: ASFHyP3/actions/.github/workflows/reusable-create-jira-issue.yml@v0.11.2
     secrets:
       JIRA_BASE_URL: ${{ secrets.JIRA_BASE_URL }}
       JIRA_USER_EMAIL: ${{ secrets.JIRA_USER_EMAIL }}

diff --git a/.github/workflows/deploy-stac-prod.yml b/.github/workflows/deploy-stac-prod.yml
@@ -31,6 +31,6 @@ jobs:
 
   call-bump-version-workflow:
     needs: deploy-stac-api
-    uses: ASFHyP3/actions/.github/workflows/reusable-bump-version.yml@v0.8.3
+    uses: ASFHyP3/actions/.github/workflows/reusable-bump-version.yml@v0.11.2
     secrets:
       USER_TOKEN: ${{ secrets.TOOLS_BOT_PAK }}
diff --git a/.github/workflows/labeled-pr.yml b/.github/workflows/labeled-pr.yml
@@ -12,4 +12,4 @@ on:
 
 jobs:
   call-labeled-pr-check-workflow:
-    uses: ASFHyP3/actions/.github/workflows/reusable-labeled-pr-check.yml@v0.8.3
+    uses: ASFHyP3/actions/.github/workflows/reusable-labeled-pr-check.yml@v0.11.2
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   call-release-workflow:
-    uses: ASFHyP3/actions/.github/workflows/reusable-release.yml@v0.8.3
+    uses: ASFHyP3/actions/.github/workflows/reusable-release.yml@v0.11.2
     with:
       release_prefix: ASF STAC
     secrets:

diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: 3.9
       - run: make install
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: 3.9
       - run: make install

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.5]
+### Changed
+- Dependency upgrades.
+
 ## [0.3.4]
 ### Changed
 - HAND license changed to CC0 from CCBy 4.0 in `collections/glo-30-hand/glo-30-hand.json` to match NASA data publishing guidelines.

diff --git a/Makefile b/Makefile
@@ -64,4 +64,12 @@ flake8:
 	flake8 --max-line-length=120
 
 cfn-lint:
-	cfn-lint --template `find . -name cloudformation.yml` --info --ignore-checks W3002
+	# Ignore "W1011 Use dynamic references over parameters for secrets" because we store secrets
+	# using GitHub Secrets.
+	#
+	# Ignore E3691 for validating the database instance engine and version, because RDS automatically
+	# applies minor version upgrades to keep the deployed database instance up-to-date, so we do not
+	# need to keep the engine version specified in the CloudFormation template up-to-date.
+	#
+	# See https://github.com/aws-cloudformation/cfn-lint/blob/main/docs/rules.md
+	cfn-lint --template `find . -name cloudformation.yml` --info --ignore-checks W3002 W1011 E3691
diff --git a/apps/database/cloudformation.yml b/apps/database/cloudformation.yml
@@ -48,7 +48,7 @@ Resources:
       VPCSecurityGroups:
         - !Ref DatabaseSecurityGroup
       Engine: postgres
-      EngineVersion: '14.4'
+      EngineVersion: '14.10'
       MasterUsername: postgres
       MasterUserPassword: !Ref DatabaseAdminPassword
       Port: '5432'

diff --git a/requirements-apps-api.txt b/requirements-apps-api.txt
@@ -1,5 +1,5 @@
 mangum==0.17.0
-stac-fastapi.api==2.4.8
-stac-fastapi.extensions==2.4.8
-stac-fastapi.pgstac==2.4.10
-stac-fastapi.types==2.4.8
+stac-fastapi.api==2.5.5.post1
+stac-fastapi.extensions==2.5.5.post1
+stac-fastapi.pgstac==2.5.0
+stac-fastapi.types==2.5.5.post1
diff --git a/requirements-run-codebuild.txt b/requirements-run-codebuild.txt
@@ -1 +1 @@
-boto3==1.33.4
+boto3==1.34.140
diff --git a/requirements.txt b/requirements.txt
@@ -1,13 +1,13 @@
 -r requirements-apps-api.txt
 -r requirements-run-codebuild.txt
 ./lib/asf-stac-util/
-boto3==1.33.4
-cfn-lint==0.83.3
-flake8==6.1.0
+boto3==1.34.140
+cfn-lint==1.5.0
+flake8==7.1.0
 pypgstac[psycopg]==0.7.10
-pystac==1.9.0
-pytest==7.4.3
-requests==2.31.0
-shapely==2.0.2
-tqdm==4.66.1
-uvicorn==0.24.0.post1
+pystac==1.10.1
+pytest==8.2.2
+requests==2.32.3
+shapely==2.0.4
+tqdm==4.66.4
+uvicorn==0.30.1