Merge remote-tracking branch 'origin/dev' into stackable

Author: dervoeti

.github/workflows/build_push_dev.yml

@@ -30,7 +30,7 @@ jobs:
         uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
       -
         name: Login to Stackable Harbor
-        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: oci.stackable.tech
           username: robot$stackable+github-action-build
@@ -83,7 +83,7 @@ jobs:
         uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
       -
         name: Login to Stackable Harbor
-        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: oci.stackable.tech
           username: robot$stackable+github-action-build

.github/workflows/build_push_release.yml

@@ -33,7 +33,7 @@ jobs:
         uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
       -
         name: Login to GitHub Container Registry
-        uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4.5.2
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -79,7 +79,7 @@ jobs:
         uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
       -
         name: Login to GitHub Container Registry
-        uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4.5.2
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}

.github/workflows/scorecard.yml

@@ -64,6 +64,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
         with:
           sarif_file: results.sarif

backend/poetry.lock

@@ -31,7 +31,7 @@ django-cors-headers = "4.9.0" # https://github.com/adamchainz/django-cors-header
 # OpenAPI 3
 # ------------------------------------------------------------------------------
 drf-spectacular = "0.30.0" # https://github.com/tfranzel/drf-spectacular
-drf-spectacular-sidecar = "2026.7.1"  # https://github.com/tfranzel/drf-spectacular-sidecar
+drf-spectacular-sidecar = "2026.8.1"  # https://github.com/tfranzel/drf-spectacular-sidecar
 
 # Token authentication
 # ------------------------------------------------------------------------------
@@ -63,7 +63,7 @@ license-expression = "30.4.4"  # https://github.com/aboutcode-org/license-expres
 # Task queue
 # ------------------------------------------------------------------------------
 huey = "3.3.0"  # https://github.com/coleifer/huey
-peewee = "4.2.6"  # https://github.com/coleifer/peewee
+peewee = "4.3.0"  # https://github.com/coleifer/peewee
 
 # Issue tracker
 # ------------------------------------------------------------------------------
@@ -75,9 +75,9 @@ inflect = "7.5.0"  # https://github.com/jaraco/inflect
 validators = "0.35.0"  # https://github.com/python-validators/validators
 py-ocsf-models = "0.10.0"  # https://github.com/prowler-cloud/py-ocsf-models
 spdx-tools = "0.8.5"  # https://github.com/spdx/tools-python
-html-to-markdown = "3.9.1"  # https://github.com/Goldziher/html-to-markdown
+html-to-markdown = "3.10.4"  # https://github.com/Goldziher/html-to-markdown
 cyclonedx-python-lib = "11.11.0"  # https://github.com/CycloneDX/cyclonedx-python-lib
-licenselynx = "2.3.2"  # https://github.com/licenselynx/licenselynx
+licenselynx = "2.3.3"  # https://github.com/licenselynx/licenselynx
 regopy = "1.5.2"  # https://microsoft.github.io/rego-cpp/#python-example
 simplejson = "4.1.1"
 
@@ -92,7 +92,7 @@ django-silk = { version = "5.5.0", optional = true }  # https://github.com/jazzb
 
 # Unittest dependencies
 # ------------------------------------------------------------------------------
-coverage = { version = "7.15.2", optional = true }  # https://github.com/nedbat/coveragepy
+coverage = { version = "7.15.3", optional = true }  # https://github.com/nedbat/coveragepy
 django-coverage-plugin = { version = "3.2.2", optional = true }  # https://github.com/nedbat/django_coverage_plugin
 
 # Code quality dependencies

backend/pyproject.toml

@@ -93,7 +93,8 @@ def test_find_potential_duplicates_components(self):
                 suppress_licenses=False,
                 sbom=False,
             )
-            file_upload_observations(file_upload_parameters)
+            with self.captureOnCommitCallbacks(execute=True):
+                file_upload_observations(file_upload_parameters)
 
             observations = Observation.objects.filter(product=product)
             self.assertEqual(4, len(observations))

backend/unittests/core/services/test_potential_duplicates.py

@@ -148,7 +148,8 @@ def test_settings_post_save_task(self, mock_check_security_gate, mock_product_mo
         mock_product_model.objects.filter.return_value = [mock_product]
 
         # Call the task
-        settings_post_save_task()
+        with self.captureOnCommitCallbacks(execute=True):
+            settings_post_save_task()
 
         # Verify that logger was called
         mock_logger.info.assert_has_calls(

backend/unittests/core/test_signals.py

@@ -54,7 +54,8 @@ def test_push_observations_to_issue_tracker(self, mock_current_user, mock_issue_
     @patch("application.issue_tracker.services.issue_tracker.issue_tracker_factory")
     def test_push_observation_to_issue_tracker_not_active(self, mock):
         observation = Observation.objects.get(pk=1)
-        push_observation_to_issue_tracker(observation, None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_observation_to_issue_tracker(observation, None)
         mock.assert_not_called()
 
     @patch("application.issue_tracker.services.issue_tracker.issue_tracker_factory")
@@ -63,7 +64,8 @@ def test_push_observation_to_issue_tracker_not_default_branch(self, mock):
         observation.product.issue_tracker_active = True
         not_default_branch = Branch.objects.get(pk=2)
         observation.branch = not_default_branch
-        push_observation_to_issue_tracker(observation, None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_observation_to_issue_tracker(observation, None)
         mock.assert_not_called()
 
     @patch("application.issue_tracker.services.issue_tracker.issue_tracker_factory")
@@ -75,7 +77,8 @@ def test_push_observation_to_issue_tracker_open_no_id_no_issue(self, observation
         observation.product.issue_tracker_active = True
         observation.current_status = Status.STATUS_OPEN
 
-        push_observation_to_issue_tracker(observation, None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_observation_to_issue_tracker(observation, None)
 
         expected_calls = [call(observation.product), call().create_issue(observation)]
         mock.assert_has_calls(expected_calls, any_order=False)
@@ -92,7 +95,8 @@ def test_push_observation_to_issue_tracker_open_with_id_with_issue(self, observa
         observation.current_status = Status.STATUS_OPEN
         observation.issue_tracker_issue_id = "123"
 
-        push_observation_to_issue_tracker(observation, None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_observation_to_issue_tracker(observation, None)
 
         observation_mock.assert_not_called()
         expected_calls = [
@@ -111,7 +115,8 @@ def test_push_observation_to_issue_tracker_closed_no_id_no_issue(self, observati
         observation.product.issue_tracker_active = True
         observation.current_status = Status.STATUS_NOT_AFFECTED
 
-        push_observation_to_issue_tracker(observation, None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_observation_to_issue_tracker(observation, None)
 
         expected_calls = [call(observation.product)]
         factory_mock.assert_has_calls(expected_calls, any_order=False)
@@ -128,7 +133,8 @@ def test_push_observation_to_issue_tracker_closed_with_id_with_issue(self, obser
         observation.current_status = Status.STATUS_FALSE_POSITIVE
         observation.issue_tracker_issue_id = "123"
 
-        push_observation_to_issue_tracker(observation, None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_observation_to_issue_tracker(observation, None)
 
         expected_calls = [
             call(observation.product),
@@ -146,7 +152,8 @@ def test_push_observation_to_issue_tracker_exception(self, exception_mock, facto
 
         observation = Observation.objects.get(pk=1)
         observation.product.issue_tracker_active = True
-        push_observation_to_issue_tracker(observation, self.user_internal)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_observation_to_issue_tracker(observation, self.user_internal)
 
         exception_mock.assert_called_with(exception, self.user_internal)
 
@@ -166,7 +173,8 @@ def test_push_observation_to_issue_tracker_with_issue_higher_than_minimum(self,
         observation.numerical_severity = Severity.NUMERICAL_SEVERITIES.get(observation.current_severity, 99)
         observation.issue_tracker_issue_id = "123"
 
-        push_observation_to_issue_tracker(observation, None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_observation_to_issue_tracker(observation, None)
 
         self.assertEqual(observation_mock.call_count, 2)
         expected_calls = [
@@ -190,7 +198,8 @@ def test_push_observation_to_issue_tracker_with_issue_higher_than_minimum(self,
         observation.numerical_severity = Severity.NUMERICAL_SEVERITIES.get(observation.current_severity, 99)
         observation.issue_tracker_issue_id = "123"
 
-        push_observation_to_issue_tracker(observation, None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_observation_to_issue_tracker(observation, None)
 
         observation_mock.assert_not_called()
         expected_calls = [
@@ -214,7 +223,8 @@ def test_push_observation_to_issue_tracker_no_issue_lower_than_minimum(self, obs
         observation.current_severity = Severity.SEVERITY_MEDIUM
         observation.numerical_severity = Severity.NUMERICAL_SEVERITIES.get(observation.current_severity, 99)
 
-        push_observation_to_issue_tracker(observation, None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_observation_to_issue_tracker(observation, None)
 
         observation_mock.assert_not_called()
         expected_calls = [
@@ -238,7 +248,8 @@ def test_push_observation_to_issue_tracker_with_issue_lower_than_minimum_not_clo
         observation.numerical_severity = Severity.NUMERICAL_SEVERITIES.get(observation.current_severity, 99)
         observation.issue_tracker_issue_id = "123"
 
-        push_observation_to_issue_tracker(observation, None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_observation_to_issue_tracker(observation, None)
 
         observation_mock.assert_called_once()
         expected_calls = [
@@ -265,7 +276,8 @@ def test_push_observation_to_issue_tracker_with_issue_lower_than_minimum_already
         observation.issue_tracker_issue_id = "123"
         observation.issue_tracker_issue_closed = True
 
-        push_observation_to_issue_tracker(observation, None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_observation_to_issue_tracker(observation, None)
 
         observation_mock.assert_not_called()
         expected_calls = [
@@ -279,28 +291,32 @@ def test_push_observation_to_issue_tracker_with_issue_lower_than_minimum_already
     @patch("application.issue_tracker.services.issue_tracker.issue_tracker_factory")
     def test_push_deleted_observation_not_active_no_id(self, mock):
         product = Product.objects.get(pk=1)
-        push_deleted_observation_to_issue_tracker(product, "", None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_deleted_observation_to_issue_tracker(product, "", None)
         mock.assert_not_called()
 
     @patch("application.issue_tracker.services.issue_tracker.issue_tracker_factory")
     def test_push_deleted_observation_active_no_id(self, mock):
         product = Product.objects.get(pk=1)
         product.issue_tracker_active = True
-        push_deleted_observation_to_issue_tracker(product, "", None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_deleted_observation_to_issue_tracker(product, "", None)
         mock.assert_not_called()
 
     @patch("application.issue_tracker.services.issue_tracker.issue_tracker_factory")
     def test_push_deleted_observation_not_active_with_id(self, mock):
         product = Product.objects.get(pk=1)
-        push_deleted_observation_to_issue_tracker(product, "123", None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_deleted_observation_to_issue_tracker(product, "123", None)
         mock.assert_not_called()
 
     @patch("application.issue_tracker.services.issue_tracker.issue_tracker_factory")
     def test_push_deleted_observation_active_with_id_no_issue(self, mock):
         mock.return_value.get_issue.return_value = None
         product = Product.objects.get(pk=1)
         product.issue_tracker_active = True
-        push_deleted_observation_to_issue_tracker(product, "123", None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_deleted_observation_to_issue_tracker(product, "123", None)
         expected_calls = [call(product), call().get_issue(product, "123")]
         mock.assert_has_calls(expected_calls, any_order=False)
 
@@ -310,7 +326,8 @@ def test_push_deleted_observation_active_with_id_with_issue(self, mock):
         mock.return_value.get_issue.return_value = issue
         product = Product.objects.get(pk=1)
         product.issue_tracker_active = True
-        push_deleted_observation_to_issue_tracker(product, "123", None)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_deleted_observation_to_issue_tracker(product, "123", None)
         expected_calls = [
             call(product),
             call().get_issue(product, "123"),
@@ -326,7 +343,8 @@ def test_push_deleted_observation_exception(self, exception_mock, factory_mock):
 
         product = Product.objects.get(pk=1)
         product.issue_tracker_active = True
-        push_deleted_observation_to_issue_tracker(product, "123", self.user_internal)
+        with self.captureOnCommitCallbacks(execute=True):
+            push_deleted_observation_to_issue_tracker(product, "123", self.user_internal)
 
         exception_mock.assert_called_with(exception, self.user_internal)