From 1594a13764d399fc0328bfea417cca73a7418511 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 24 Sep 2024 13:02:41 +0200 Subject: [PATCH] chore(deps-dev): bump bandit from 1.7.9 to 1.7.10 (#5162) Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- poetry.lock | 8 ++++---- pyproject.toml | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/poetry.lock b/poetry.lock index ded250dd53..96f8166c2f 100644 --- a/poetry.lock +++ b/poetry.lock @@ -633,13 +633,13 @@ dev = ["freezegun (>=1.0,<2.0)", "pytest (>=6.0)", "pytest-cov"] [[package]] name = "bandit" -version = "1.7.9" +version = "1.7.10" description = "Security oriented static analyser for python code." optional = false python-versions = ">=3.8" files = [ - {file = "bandit-1.7.9-py3-none-any.whl", hash = "sha256:52077cb339000f337fb25f7e045995c4ad01511e716e5daac37014b9752de8ec"}, - {file = "bandit-1.7.9.tar.gz", hash = "sha256:7c395a436743018f7be0a4cbb0a4ea9b902b6d87264ddecf8cfdc73b4f78ff61"}, + {file = "bandit-1.7.10-py3-none-any.whl", hash = "sha256:665721d7bebbb4485a339c55161ac0eedde27d51e638000d91c8c2d68343ad02"}, + {file = "bandit-1.7.10.tar.gz", hash = "sha256:59ed5caf5d92b6ada4bf65bc6437feea4a9da1093384445fed4d472acc6cff7b"}, ] [package.dependencies] @@ -4570,4 +4570,4 @@ test = ["big-O", "importlib-resources", "jaraco.functools", "jaraco.itertools", [metadata] lock-version = "2.0" python-versions = ">=3.9,<3.13" -content-hash = "26bf3acecf6f5e7611bb20f008e3f8bcc46982d1a55755a0959da766c46f23fe" +content-hash = "d148bfb5d5dbf7a82ac322b55a3eb81770d2bcbad659a16a8359e98a410c3373" diff --git a/pyproject.toml b/pyproject.toml index eff8036a0f..f9eccfe500 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -67,7 +67,7 @@ tabulate = "0.9.0" tzlocal = "5.2" [tool.poetry.group.dev.dependencies] -bandit = "1.7.9" +bandit = "1.7.10" black = "24.8.0" coverage = "7.6.1" docker = "7.1.0"