Q3 Innovation and Planning - Dev Team

[nathankota]

Benefit

The final sprint of the quarter is meant to be an Innovation and Planning (IP) Iteration. Benefits include:

• Allow time for Innovation
• Dedicate time to PI Events (I&A and PI planning)
• Integrate the Complete Solution (presentation of work of all teams on the train)
• Advance Development Infrastructure
• Enable Continuous Learning

Possible tasks include:

• Pay down technical debt
  • app and data dependencies and updates
  • updating CIs
• Other modernization tasks
• Cloud migration
• "Work on whatever with whomever"
• Alignment of best practices

Acceptance Criteria

Dependabot and other modernization possible tasks

• Consider https://github.com/step-security/harden-runner this quarter or another
• Revisit the reactfire npm conflicts
• Some action workflows are not completing since their required checks aren’t running
• Forklift arcpy + warehouse updates
• Push swapper to pypi and automate builds Pypi swapper#19
• Update: black, ruff, palletjack skid#8
• Migrate to actions/create-github-app-token
• Migrate to Artifact Registry
  • geocode-job
  • unclaimed property
  • roadkill
  • masquerade
  • parole
  • [ ] cambiador
• Update all functions to nodejs 20 prior to Jan 30, 2024.
• Palletjack? Palletjack Updates #274
• Masquerade?
  • Masquerade Enhancements #91
  • Masquerade - Search by Coordinates #281
• Upgrade Pro version on Forklift machine
• Skid readme's
  • https://github.com/agrc/uorg-skid/issues/3
  • Update readme dabs-skid#4
  • update readme wmrc-skid#33
  • Update readme broadband-speedtest-skid#5

Notes

Dependabot

UGRC applications have dependencies that are constantly updating to add new features, improve performance, and patch security issues. Keeping applications current with dependencies improves our security posture and allows for easier future enhancements since the amount of breaking changes is smaller and more trivial.

Risks

Insecure applications using deprecated services

Issue Reference

refs #

[stdavis]

I took care of the forklift + arcpy upgrades a few weeks ago.

[nathankota]

Some of the tasks were carried forward to Q4, #376