Production Release (#810)

* Production Release

Sprint 53 issues include:

Dependabot Alert: tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File #803
Dependabot Alert: axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL #802
Dependabot Alert: Gunicorn HTTP Request/Response Smuggling vulnerability #788
UI: Add link to Program Website, Contacts and FAQ on Training Application #696

* Updated Node GitHub actions config as setup-node@v2 relies on deprecated version of setup-node@v2 which resulted in error in CI.

Author: felder101

.github/workflows/frontend-tests.yaml

@@ -17,10 +17,10 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Setup Node.js
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v3
         with:
-          node-version: '18'
-          cache: 'npm'
+          node-version: 18.x
+          cache: npm
           cache-dependency-path: training-front-end/package-lock.json
 
       - name: install dependencies

requirements.txt

@@ -1,7 +1,7 @@
 redis==4.4.4
 fastapi==0.109.1
 uvicorn[standard]==0.23.2
-gunicorn==22.0.0
+gunicorn==23.0.0
 pyjwt[crypto]==2.6.0
 cfenv==0.5.3
 SQLAlchemy==2.0.5.post1

training-front-end/package-lock.json

@@ -70,6 +70,23 @@ import searchIcon from "../assets/images/usa-icons/search--white.svg"
           </li>
         </ul>
         <div class="usa-nav__secondary">
+          <ul class="usa-nav__secondary-links">
+            <li class="usa-nav__secondary-item">
+              <a href="https://smartpay.gsa.gov/">
+                Program
+              </a>
+            </li>
+            <li class="usa-nav__secondary-item">
+              <a href="https://smartpay.gsa.gov/contact/">
+                Contact
+              </a>
+            </li>
+            <li class="usa-nav__secondary-item">
+              <a href="https://smartpay.gsa.gov/faq/">
+                FAQs
+              </a>
+            </li>
+          </ul>
           <section aria-label="Search component">
             <form class="usa-search usa-search--small" role="search" action="https://search.usa.gov/search" accept-charset="UTF-8" method="get">
               <input type="hidden" name="affiliate" id="affiliate" value="gsa_smartpay_training" autocomplete="off" />