I want to push this MR to production as soon as we've verified things work in the dev environment as well as in local testing. Since I forgot to update to 1.13.0 in the last release tag, I'll make this part of 1.13.1.

https://avd.aquasec.com/nvd/cve-2024-12797

Update pytest library and add pytest-asyncio and pytest-mock for better testing. Add pytest unitests for all routes in login.py. Fix a bug where an unauthorized request would error and return a 500 instead of a 401. Remove the depcrecated app.on_event functions in favor of lifespan events.

Upgraded FastAPI and do not seem to be experiencing all the same bugs that were present last time we upgraded fastapi. This also upgraded Starlette to version 0.40.0 which was necessary to build docker image.

Updated poetry lock file to contain updated version of gunicorn 23.0.0. The old version was a vulnerability.

Ignoring vulnerability 71199 as _eventloop.get_asynclib is not used directly or indirectly by FastAPI, HTTPX, or Watchfiles.

Updated the fastapi package which required a few changes to the file pydantic_utcdatetime.py module. The module now contains a workaround to deal with the way pydantic manages the UTCDateTime string. This is a new issue that was caused by updating to fastapi version 0.109.2.