From 001e133202a2c9f2a32d814b841ecc85ca247726 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Mar 2025 14:17:38 +0100 Subject: [PATCH] chore(deps-dev): bump bandit from 1.8.0 to 1.8.3 (#7070) Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- poetry.lock | 8 ++++---- pyproject.toml | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/poetry.lock b/poetry.lock index 6ba05f0046..0d5a1da5d1 100644 --- a/poetry.lock +++ b/poetry.lock @@ -648,13 +648,13 @@ dev = ["freezegun (>=1.0,<2.0)", "pytest (>=6.0)", "pytest-cov"] [[package]] name = "bandit" -version = "1.8.0" +version = "1.8.3" description = "Security oriented static analyser for python code." optional = false python-versions = ">=3.9" files = [ - {file = "bandit-1.8.0-py3-none-any.whl", hash = "sha256:b1a61d829c0968aed625381e426aa378904b996529d048f8d908fa28f6b13e38"}, - {file = "bandit-1.8.0.tar.gz", hash = "sha256:b5bfe55a095abd9fe20099178a7c6c060f844bfd4fe4c76d28e35e4c52b9d31e"}, + {file = "bandit-1.8.3-py3-none-any.whl", hash = "sha256:28f04dc0d258e1dd0f99dee8eefa13d1cb5e3fde1a5ab0c523971f97b289bcd8"}, + {file = "bandit-1.8.3.tar.gz", hash = "sha256:f5847beb654d309422985c36644649924e0ea4425c76dec2e89110b87506193a"}, ] [package.dependencies] @@ -4660,4 +4660,4 @@ test = ["big-O", "importlib-resources", "jaraco.functools", "jaraco.itertools", [metadata] lock-version = "2.0" python-versions = ">=3.9,<3.13" -content-hash = "97c04e0082069e39352972c01388090cf4331c31b5811a806fe6d7d6d4345fee" +content-hash = "0f3b5a5439d44aec740744a96101d1f989fa4b72eb124ed2646ec4f7be022923" diff --git a/pyproject.toml b/pyproject.toml index ae201d0765..f791a17a3c 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -67,7 +67,7 @@ tabulate = "0.9.0" tzlocal = "5.2" [tool.poetry.group.dev.dependencies] -bandit = "1.8.0" +bandit = "1.8.3" black = "24.10.0" coverage = "7.6.12" docker = "7.1.0"