Production Release (#585)

Sprint 32 Issues:
Update USWDS from 3.8 to 3.8.1 #573
GSPC Report #436
June Separation Report - Remove Admin Access for User #574
Update from Astro 2.0 to 4.0 #471
June Content Updates |Training #569

.vscode/settings.json

@@ -22,6 +22,7 @@
     "Loginless",
     "nanostores",
     "pydantic",
+    "sqlalchemy",
     "USWDS",
     "Vuelidate"
   ]

README.md

@@ -22,9 +22,9 @@ SMTP_USER="<ethereal-account-email-address>"
 ```
 
 #### Update the base url
-For development, we need to update the `BASE_URL` environment value so that confirmation emails link back to the locally running application. By default, our web application will be running locally at port `3000` when in development:
+For development, we need to update the `BASE_URL` environment value so that confirmation emails link back to the locally running application. By default, our web application will be running locally at port `4321` when in development:
 ```config
-BASE_URL="http://localhost:3000"
+BASE_URL="http://localhost:4321"
 ```
 **Note the lack of a trailing slash!**
 
@@ -136,6 +136,14 @@ cd training-frontend
 npm run test:coverage
 ```
 
+## 🇺🇸 USWDS
+This site uses the [U.S. Web Design System (USWDS)](https://designsystem.digital.gov). To customize  USWDS styles you will need to edit the SASS components and styles in the `/sass` directory. Changes here will not be reflected in the site until you rebuild the css. To build the css, cd to the frontend project and run gulp:
+
+```
+npx gulp compile --gulpfile gulpfile.cjs
+```
+This will rebuild the static assests and place them in the `/public` directory. To learn more, visit USWDS [Getting started for developers  ](https://designsystem.digital.gov/documentation/getting-started-for-developers/).
+
 ## Deployment on cloud.gov
 
 Follow these steps to deploy the application on cloud.gov. Your cloud.gov account must have the `SpaceDeveloper` role in each space in order to run these scripts.

SECURITY.md

@@ -0,0 +1,27 @@
+# Security Policy
+
+As a U.S. Government agency, the General Services Administration (GSA) takes
+seriously our responsibility to protect the public's information, including
+financial and personal information, from unwarranted disclosure.
+
+Software developed by the U.S. General Services Administration (GSA)
+is subject to the [GSA Vulnerability Disclosure Policy](https://gsa.gov/vulnerability-disclosure-policy).
+
+Please consult our policy for:
+* How to submit a report if you believe you have discovered a vulnerability.
+* GSA's coordinated disclosure policy.
+* Information on how you may conduct security research on GSA developed
+  software and systems.
+* Important legal and policy guidelines.
+
+## Supported Versions
+
+Please note that only certain branches are supported with security updates.
+
+| Version (Branch) | Supported          |
+| ---------------- | ------------------ |
+| main             | :white_check_mark: |
+| other            | :x:                |
+
+When using this code or reporting vulnerabilities please only use supported
+versions.

dev/uaa/uaa.yml

@@ -65,7 +65,7 @@ oauth:
       authorized-grant-types: authorization_code,refresh_token
       scope: openid
       authorities: uaa.none
-      redirect-uri: http://localhost:3000/auth_callback,http://localhost:3000
+      redirect-uri: http://localhost:4321/auth_callback,http://localhost:4321
       allowpublic: true
 
 issuer:

training-front-end/README.md

@@ -42,9 +42,9 @@ Cloud.gov will look for a `package.json` file in the root of the repo (the paren
 All commands are run from the root of the project, from a terminal:
 
 | Command                | Action                                           |
-| :--------------------- | :----------------------------------------------- |
+| :--------------------- |:-------------------------------------------------|
 | `npm install`          | Installs dependencies                            |
-| `npm run dev`          | Starts local dev server at `localhost:3000`      |
+| `npm run dev`          | Starts local dev server at `localhost:4321`      |
 | `npm run build`        | Build your production site to `../_site_/`       |
 | `npm run preview`      | Preview your build locally, before deploying     |
 | `npm run test:unit`    | Runs unit tests                                  |

training-front-end/astro.config.mjs

@@ -1,8 +1,8 @@
 import { defineConfig } from 'astro/config';
-import {remarkHeadingId} from 'remark-custom-heading-id';
+import { remarkHeadingId } from 'remark-custom-heading-id';
 import mdx from '@astrojs/mdx';
 import vue from "@astrojs/vue";
-import uswds_links from "./src/plugins/uswds_links";
+import { processLinksPlugin } from "./src/plugins/uswds_links";
 
 import sitemap from "@astrojs/sitemap";
 
@@ -14,6 +14,7 @@ export default defineConfig({
   outDir: '../_site',
   markdown: {
     remarkPlugins: [remarkHeadingId],
-    rehypePlugins: [uswds_links]
-  }
+    rehypePlugins: [processLinksPlugin]
+  },
+  trailingSlash: 'always',
 });