chore(deps): update dependency bandit to v1.7.7
This MR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
bandit (source, changelog) | dev | patch |
1.7.6 -> 1.7.7
|
Release Notes
PyCQA/bandit (bandit)
v1.7.7
What's Changed
- Add the new release to bandit versions of bug template by @ericwb in https://github.com/PyCQA/bandit/pull/1075
- Bump actions/setup-python from 4 to 5 by @dependabot in https://github.com/PyCQA/bandit/pull/1076
- Handle variant in how policy is passed in paramiko by @ericwb in https://github.com/PyCQA/bandit/pull/1078
- Flag str.replace as possible sql injection by @costaparas in https://github.com/PyCQA/bandit/pull/1044
- defusedxml: Show correct module name by @kajinamit in https://github.com/PyCQA/bandit/pull/1081
- Add tidelift to the sponsor funding list by @ericwb in https://github.com/PyCQA/bandit/pull/1089
- Create a security policy by @ericwb in https://github.com/PyCQA/bandit/pull/1091
- Fix up issues found running Bandit on itself by @ericwb in https://github.com/PyCQA/bandit/pull/1093
- Add random.randbytes to blacklist calls by @ericwb in https://github.com/PyCQA/bandit/pull/1096
- Prepend ./ for files specified as CLI args by @ericwb in https://github.com/PyCQA/bandit/pull/1094
- Rework GitPython dependency to be an extra for bandit-baseline by @ericwb in https://github.com/PyCQA/bandit/pull/1099
- Bump actions/dependency-review-action from 3 to 4 by @dependabot in https://github.com/PyCQA/bandit/pull/1101
- Introduce Official Bandit Images by @lukehinds in https://github.com/PyCQA/bandit/pull/1088
- Remove markdown formatting in reStructuredText formatted README by @ericwb in https://github.com/PyCQA/bandit/pull/1103
- Downsize the org:repo name by @lukehinds in https://github.com/PyCQA/bandit/pull/1104
New Contributors
- @kajinamit made their first contribution in https://github.com/PyCQA/bandit/pull/1081
Full Changelog: https://github.com/PyCQA/bandit/compare/1.7.6...1.7.7
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.