collab

collab copied to clipboard

Bumps [pillow](https://github.com/python-pillow/Pillow) from 3.1.1 to 6.2.2. Release notes Sourced from pillow's releases. 6.2.2 https://pillow.readthedocs.io/en/stable/releasenotes/6.2.2.html 6.2.1 https://pillow.readthedocs.io/en/stable/releasenotes/6.2.1.html 6.2.0 https://pillow.readthedocs.io/en/stable/releasenotes/6.2.0.html 6.1.0 https://pillow.readthedocs.io/en/stable/releasenotes/6.1.0.html 6.0.0 No release notes provided. 5.4.1 No release notes provided....

dependabot[bot]

Bumps [django](https://github.com/django/django) from 1.5.4 to 1.11.28. Commits - [`e09f09b`](https://github.com/django/django/commit/e09f09b965ef47ffd99abd2c26ba7416751cffa6) [1.11.x] Bumped version for 1.11.28 release. - [`001b063`](https://github.com/django/django/commit/001b0634cd309e372edb6d7d95d083d02b8e37bd) [1.11.x] Fixed CVE-2020-7471 -- Properly escaped StringAgg(delimiter) parameter. - [`7fd1ca3`](https://github.com/django/django/commit/7fd1ca3ef63e5e834205a8208f4dc17d80f9a417) [1.11.x] Fixed timezones...

dependabot[bot]

Upgrade requests

1

see https://GHE/CFGOV/platform/issues/3104 for details there are several other out of date dependencies in this project, I will address them in future requests. One PR for django, another grouping the remaining....

cfarm

https://github.com/cfpb/collab/blob/master/core/helpers.py#L34 Phone number parsing assumes the phone number is digits only, with no spaces, dashes, or periods. This would be find if the phone number was cleansed when created, but...

m3brown

Django-cache-tools dependency

1

Add https://github.com/cfpb/django-cache-tools.git as a requirement/dependency for KeyableModel

mehtadev17

Just heard about this project – looks great! It was described to me as "a modular, open-source intranet site", and that concrete example was helpful for understanding how it could...

afeld