Schemas v5.39.0

.codecov.yml

@@ -10,5 +10,5 @@ coverage:
     changes:
       default: off
 codecov:
-  branch: master
+  branch: main
 comment: false

.design-system-version

@@ -1 +1 @@
-46.1.4
+70.0.16

.development.env

@@ -1,5 +1,5 @@
 FLASK_APP=application.py
-FLASK_ENV=development
+FLASK_DEBUG=1
 EQ_QUESTIONNAIRE_STATE_TABLE_NAME=dev-questionnaire-state
 EQ_SESSION_TABLE_NAME=dev-eq-session
 EQ_USED_JTI_CLAIM_TABLE_NAME=dev-used-jti-claim
@@ -27,3 +27,6 @@ CDN_ASSETS_PATH=/design-system
 ADDRESS_LOOKUP_API_URL=https://whitelodge-ai-api.census-gcp.onsdigital.uk
 COOKIE_SETTINGS_URL=#
 EQ_SUBMISSION_CONFIRMATION_BACKEND=log
+SDS_API_BASE_URL=http://localhost:5003
+CIR_API_BASE_URL=http://localhost:5004
+OIDC_TOKEN_BACKEND=local

.eslintrc

@@ -22,15 +22,13 @@
     }
   },
   "plugins": [
-    "json",
-    "chai-friendly"
+    "json"
   ],
   "rules": {
     "no-loss-of-precision": 0,
     "no-nonoctal-decimal-escape": 0,
     "no-unsafe-optional-chaining": 0,
     "no-useless-backreference": 0,
-    "chai-friendly/no-unused-expressions": 2,
     "consistent-return": 1,
     "indent": [
       2,
@@ -70,6 +68,7 @@
       {
         "blocks": "never"
       }
-    ]
+    ],
+      "require-await": "error"
   }
 }

.functional-tests.env

@@ -1,5 +1,5 @@
 FLASK_APP=application.py
-FLASK_ENV=development
+FLASK_DEBUG=1
 EQ_QUESTIONNAIRE_STATE_TABLE_NAME=dev-questionnaire-state
 EQ_SESSION_TABLE_NAME=dev-eq-session
 EQ_USED_JTI_CLAIM_TABLE_NAME=dev-used-jti-claim
@@ -24,7 +24,9 @@ WEB_SERVER_THREADS=10
 WEB_SERVER_UWSGI_ASYNC_CORES=10
 CDN_URL=https://cdn.eq.gcp.onsdigital.uk
 CDN_ASSETS_PATH=/design-system
-ADDRESS_LOOKUP_API_URL=https://whitelodge-ai-api.census-gcp.onsdigital.uk
 COOKIE_SETTINGS_URL=#
 EQ_SUBMISSION_CONFIRMATION_BACKEND=log
 VIEW_SUBMITTED_RESPONSE_EXPIRATION_IN_SECONDS=35
+SDS_API_BASE_URL=http://localhost:5003
+CIR_API_BASE_URL=http://localhost:5004
+OIDC_TOKEN_BACKEND=local

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @ONSdigital/eq-runner

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,10 +1,9 @@
 ### What is the context of this PR?
 Describe what you have changed and why, link to other PRs or Issues as appropriate.
 
-### How to review 
+### How to review
 Describe the steps required to test the changes (include screenshots if appropriate).
 
 ### Checklist
-
 * [ ] New static content marked up for translation
 * [ ] Newly defined schema content included in eq-translations repo

.github/dependabot.yaml

@@ -0,0 +1,137 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+      day: "friday"
+      time: "08:00"
+      timezone: "Europe/London"
+    labels:
+      - "dependencies"
+      - "github-actions"
+
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+      day: "friday"
+      time: "08:00"
+      timezone: "Europe/London"
+    versioning-strategy: increase-if-necessary
+    labels:
+      - "dependencies"
+      - "node"
+    groups:
+      development-dependencies:
+        dependency-type: "development"
+        patterns:
+          - "@wdio*"
+          - "@babel*"
+          - "eslint*"
+          - "json*"
+          - "jsrsasign*"
+          - "livereload*"
+          - "node-forge*"
+          - "prettier*"
+          - "typescript*"
+          - "uuid*"
+          - "webdriverio*"
+    ignore:
+      # temporarily pinned to minor/patch only - eslint v9 not supported in eslint-config-standard v17.1.0: https://github.com/standard/eslint-config-standard/issues/410
+      # This had a knock-on effect with `eslint-plugin-n` and `eslint-plugin-promise`
+      - dependency-name: "eslint*"
+        update-types: [ "version-update:semver-major" ]
+
+      # temporarily pinned to minor/patch only - wdio v9 causes getHTML() to return strings with indentation & newlines, causing assertion errors - needs investigation
+      - dependency-name: "@wdio/local-runner"
+        update-types: [ "version-update:semver-major" ]
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "friday"
+      time: "08:00"
+      timezone: "Europe/London"
+    # Workaround to have two "pip" ecosystems: actively setting "target-branch: main" for one config, and leaving it unset for the other config
+    target-branch: main
+    versioning-strategy: increase-if-necessary
+    labels:
+      - "dependencies"
+      - "python"
+    allow:
+      - dependency-type: "production"
+    groups:
+      production-dependencies:
+        dependency-type: "production"
+        patterns:
+          - "flask*"
+          - "google*"
+          - "python*"
+          - "colorama"
+          - "grpcio"
+          - "gunicorn"
+          - "pika"
+          - "pyyaml"
+          - "requests"
+          - "sdc-cryptography"
+          - "structlog"
+          - "ua-parser"
+          - "blinker"
+          - "boto3"
+          - "humanize"
+          - "marshmallow"
+          - "jsonpointer"
+          - "redis"
+          - "htmlmin"
+          - "coloredlogs"
+          - "uwsgi"
+          - "email-validator"
+          - "itsdangerous"
+          - "simplejson"
+          - "markupsafe"
+          - "pdfkit"
+          - "ordered-set"
+          - "cachetools"
+          - "gevent"
+          - "babel"
+    ignore:
+      # "babel" temporarily pinned to v2.14.0 - problem for translations found in v2.15.0, see: https://github.com/ONSdigital/eq-questionnaire-runner/pull/1384
+      - dependency-name: "babel"
+        update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+      day: "friday"
+      time: "08:00"
+      timezone: "Europe/London"
+    versioning-strategy: increase-if-necessary
+    labels:
+      - "dependencies"
+      - "python-dev"
+    allow:
+      - dependency-type: "development"
+    groups:
+      development-dependencies:
+        dependency-type: "development"
+        patterns:
+          - "pytest*"
+          - "pylint*"
+          - "types*"
+          - "pep8"
+          - "mock"
+          - "jsonschema"
+          - "beautifulsoup4"
+          - "httmock"
+          - "moto"
+          - "freezegun"
+          - "fakeredis"
+          - "mypy"
+          - "responses"
+          - "playwright"
+          - "black"
+          - "djlint"
+          - "ruff"

.github/release.yml

@@ -0,0 +1,20 @@
+changelog:
+  categories:
+    - title: ⚠️ Breaking Changes
+      labels:
+        - Breaking Change
+    - title: New Features
+      labels:
+        - New Feature
+    - title: Enhancements
+      labels:
+        - Enhancement
+    - title: Bug Fixes
+      labels:
+        - Bug Fix
+    - title: Documentation
+      labels:
+        - Documentation
+    - title: Other Changes
+      labels:
+        - "*"

.github/workflows/codeql-analysis.yml

@@ -1,71 +1,49 @@
-# For most projects, this workflow file will not need changing; you simply need
-# to commit it to your repository.
-#
-# You may wish to alter this file to override the set of languages analyzed,
-# or to provide custom queries or build logic.
-name: "CodeQL"
+name: "CodeQL Advanced"
 
 on:
   push:
-    branches: [master]
+    branches: [ "main" ]
   pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [master]
+    branches: [ "main" ]
   schedule:
     - cron: '0 15 * * 3'
 
 jobs:
   analyze:
-    name: Analyze
-    runs-on: ubuntu-latest
+    name: Analyze (${{ matrix.language }})
+    runs-on: [ubuntu-24.04]
+    permissions:
+      security-events: write
+      packages: read
+      actions: read
+      contents: read
 
     strategy:
       fail-fast: false
       matrix:
-        # Override automatic language detection by changing the below list
-        # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
-        language: ['python', 'javascript']
-        # Learn more...
-        # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
+        include:
+        - language: actions
+          build-mode: none
+        - language: javascript-typescript
+          build-mode: none
+        - language: python
+          build-mode: none
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.
         fetch-depth: 2
 
-    # If this run was triggered by a pull request event, then checkout
-    # the head of the pull request instead of the merge commit.
-    - run: git checkout HEAD^2
-      if: ${{ github.event_name == 'pull_request' }}
-
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
       with:
         languages: ${{ matrix.language }}
-        # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file. 
-        # Prefix the list here with "+" to use these queries and those in the config file.
-        # queries: ./path/to/local/query, your-org/your-repo/queries@main
-
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
-
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 https://git.io/JvXDl
-
-    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
-    #    and modify them (or add more) to build your code if your project
-    #    uses a compiled language
-
-    #- run: |
-    #   make bootstrap
-    #   make release
-
+        build-mode: ${{ matrix.build-mode }}
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+      with:
+        category: "/language:${{matrix.language}}"