From f95cb316c8301e19d639b4917570d490cb9d9c95 Mon Sep 17 00:00:00 2001
From: David Baldwin <124309521+justaskdavidb2@users.noreply.github.com>
Date: Thu, 20 Jul 2023 13:42:34 -0500
Subject: [PATCH] #1365 - regular update rev1 (#1384)

* updating dependencies in notification-api include those for lambdas

Co-authored-by: David Baldwin <124309521+justaskdavidb-docme360@users.noreply.github.com>
---
 .../va_profile/requirements-lambda.txt        |  2 +-
 requirements-app.txt                          | 14 ++---
 requirements.txt                              | 51 +++++++++++--------
 requirements_for_test.txt                     |  2 +-
 4 files changed, 38 insertions(+), 31 deletions(-)

diff --git a/lambda_functions/va_profile/requirements-lambda.txt b/lambda_functions/va_profile/requirements-lambda.txt
index 1ec1a17d37..32c3f7f442 100644
--- a/lambda_functions/va_profile/requirements-lambda.txt
+++ b/lambda_functions/va_profile/requirements-lambda.txt
@@ -3,7 +3,7 @@ psycopg2-binary ~= 2.9.6
 
 # https://pyjwt.readthedocs.io/en/stable/installation.html#cryptographic-dependencies-optional
 # When this is upgraded, also upgrade the version in requirements_for_test.txt.
-PyJWT[crypto] ~= 2.7.0
+PyJWT[crypto] ~= 2.8.0
 
 # https://cryptography.io/en/latest/changelog/#v38-0-0
 # 20 April 2023: The current AWS Lambda runtime does not include the version of Rust needed
diff --git a/requirements-app.txt b/requirements-app.txt
index c3e8c70ee3..0e4f76ecc7 100644
--- a/requirements-app.txt
+++ b/requirements-app.txt
@@ -2,14 +2,14 @@
 alembic_utils >= 0.8.1
 
 Authlib >= 1.2.1
-boto3 >= 1.26.165
-botocore >= 1.29.165
+boto3 >= 1.28.7
+botocore >= 1.31.7
 cachelib >= 0.10.2
 celery[sqs] >= 5.3.1
 click-datetime >= 0.2
 
 # Datadog Tracer and Profiler
-ddtrace >= 1.15.1
+ddtrace >= 1.16.1
 
 docopt >= 0.6.2
 eventlet ~= 0.33.3
@@ -38,7 +38,7 @@ gunicorn[eventlet] @ git+https://github.com/benoitc/gunicorn.git@6a8ebb4844b2f28
 
 iso8601 >= 2.0.0
 itsdangerous >= 1.1.0
-jsonschema >= 4.17.3
+jsonschema >= 4.18.4
 kombu >= 5.3.1
 
 # 31 March 2023: marshmallow 2.x has not been supported since 18 August 2020.
@@ -49,7 +49,7 @@ nanoid >= 2.0.0
 notifications-python-client >= 8.0.1
 psycopg2-binary >= 2.9.6
 pwnedpasswords >= 2.0.0
-PyJWT >= 2.7.0
+PyJWT >= 2.8.0
 
 # 19 April 2023: This package is deprecated.  See #1221.
 PyPDF2 ~= 3.0.1
@@ -65,8 +65,8 @@ rfc3339-validator >= 0.1.4
 sentry-sdk[flask] >= 1.26.0
 
 # 10 December 2022: Ignoring security vulnerability 51668 in Makefile.  It is fixed in  >= 2.0.0b1.
-SQLAlchemy ~= 1.4.48
+SQLAlchemy ~= 1.4.49
 
-twilio >= 8.4.0
+twilio >= 8.5.0
 Unidecode >= 1.3.6
 validatesns >= 0.1.1
diff --git a/requirements.txt b/requirements.txt
index 31cf3351ca..885f748b89 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,9 +1,10 @@
-aiohttp==3.8.4
+aiohttp==3.8.5
 aiohttp-retry==2.8.3
 aiosignal==1.3.1
 alembic==1.11.1
 alembic-utils==0.8.1
 amqp==5.1.1
+anyio==3.7.1
 asn1crypto==1.5.1
 async-timeout==4.0.2
 attrs==23.1.0
@@ -13,30 +14,31 @@ bcrypt==4.0.1
 billiard==4.1.0
 bleach==6.0.0
 blinker==1.6.2
-boto3==1.26.165
-botocore==1.29.165
+boto3==1.28.7
+botocore==1.31.7
 bytecode==0.14.2
 cachelib==0.10.2
 cattrs==23.1.2
 celery==5.3.1
 certifi==2023.5.7
 cffi==1.15.1
-charset-normalizer==3.1.0
-click==8.1.3
+charset-normalizer==3.2.0
+click==8.1.6
 click-datetime==0.2
 click-didyoumean==0.3.0
 click-plugins==1.1.1
 click-repl==0.3.0
-cryptography==41.0.1
+cryptography==41.0.2
+Cython==0.29.36
 ddsketch==2.0.4
-ddtrace==1.15.1
+ddtrace==1.16.1
 Deprecated==1.2.14
-dnspython==2.3.0
+dnspython==2.4.0
 docopt==0.6.2
 envier==0.4.0
 eventlet==0.33.3
 exceptiongroup==1.1.2
-fido2==1.1.1
+fido2==1.1.2
 Flask==2.3.2
 Flask-Bcrypt==1.0.1
 Flask-Cors==4.0.0
@@ -46,18 +48,21 @@ Flask-Migrate==4.0.4
 flask-redis==0.4.0
 Flask-SQLAlchemy==3.0.5
 flupy==1.2.0
-frozenlist==1.3.3
+frozenlist==1.4.0
 future==0.18.3
 greenlet==2.0.2
 gunicorn @ git+https://github.com/benoitc/gunicorn.git@6a8ebb4844b2f28596ffe7421eb9f7d08c8dc4d8
+h11==0.14.0
+httpcore==0.17.3
 idna==3.4
-importlib-metadata==6.0.1
-importlib-resources==5.12.0
+importlib-metadata==6.8.0
+importlib-resources==6.0.0
 iso8601==2.0.0
 itsdangerous==2.1.2
 Jinja2==3.1.2
 jmespath==1.0.1
-jsonschema==4.17.3
+jsonschema==4.18.4
+jsonschema-specifications==2023.7.1
 kombu==5.3.1
 Mako==1.2.4
 MarkupSafe==2.1.3
@@ -69,21 +74,20 @@ multidict==6.0.4
 nanoid==2.0.0
 notification-utils @ git+https://github.com/department-of-veterans-affairs/notification-utils.git@6c297639c36e2f840660a6ff984d6a774e7427aa
 notifications-python-client==8.0.1
-opentelemetry-api==1.18.0
+opentelemetry-api==1.19.0
 orderedset==2.0.3
 oscrypto==1.3.0
 parse==1.19.1
 phonenumbers==8.12.57
 pkgutil_resolve_name==1.3.10
-prompt-toolkit==3.0.38
-protobuf==4.23.3
+prompt-toolkit==3.0.39
+protobuf==4.23.4
 psycopg2-binary==2.9.6
 pwnedpasswords==2.0.0
 pycparser==2.21
 pycurl==7.45.2
-PyJWT==2.7.0
+PyJWT==2.8.0
 PyPDF2==3.0.1
-pyrsistent==0.19.3
 python-dateutil==2.8.2
 python-dotenv==1.0.0
 python-json-logger==2.0.7
@@ -91,15 +95,18 @@ python-magic==0.4.27
 pytz==2023.3
 PyYAML==5.4.1
 redis==4.6.0
+referencing==0.30.0
 requests==2.31.0
 rfc3339-validator==0.1.4
+rpds-py==0.9.2
 s3transfer==0.6.1
-sentry-sdk==1.26.0
+sentry-sdk==1.28.1
 six==1.16.0
 smartypants==2.0.1
-SQLAlchemy==1.4.48
+sniffio==1.3.0
+SQLAlchemy==1.4.49
 statsd==4.0.1
-twilio==8.4.0
+twilio==8.5.0
 typing_extensions==4.7.1
 tzdata==2023.3
 Unidecode==1.3.6
@@ -112,4 +119,4 @@ Werkzeug==2.3.6
 wrapt==1.15.0
 xmltodict==0.13.0
 yarl==1.9.2
-zipp==3.15.0
+zipp==3.16.2
diff --git a/requirements_for_test.txt b/requirements_for_test.txt
index fa4abc7453..dc76a50747 100644
--- a/requirements_for_test.txt
+++ b/requirements_for_test.txt
@@ -10,7 +10,7 @@ moto >= 4.1.7
 
 # https://pyjwt.readthedocs.io/en/stable/installation.html#cryptographic-dependencies-optional
 # When this is upgraded, also upgrade the version in lambda_functions/va_profile/requirements-lambda.txt.
-PyJWT[crypto] ~= 2.7.0
+PyJWT[crypto] ~= 2.8.0
 
 pytest >= 7.3.1
 pytest-cov >= 4.0.0