From 49146ffddff329b94afe913f65514f63c76eee75 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 14 Jan 2025 14:17:41 -0500 Subject: [PATCH] chore(deps-dev): bump bandit from 1.8.0 to 1.8.2 (#6487) Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- poetry.lock | 8 ++++---- pyproject.toml | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/poetry.lock b/poetry.lock index 76f4b9aacc..299d5dceec 100644 --- a/poetry.lock +++ b/poetry.lock @@ -694,13 +694,13 @@ dev = ["freezegun (>=1.0,<2.0)", "pytest (>=6.0)", "pytest-cov"] [[package]] name = "bandit" -version = "1.8.0" +version = "1.8.2" description = "Security oriented static analyser for python code." optional = false python-versions = ">=3.9" files = [ - {file = "bandit-1.8.0-py3-none-any.whl", hash = "sha256:b1a61d829c0968aed625381e426aa378904b996529d048f8d908fa28f6b13e38"}, - {file = "bandit-1.8.0.tar.gz", hash = "sha256:b5bfe55a095abd9fe20099178a7c6c060f844bfd4fe4c76d28e35e4c52b9d31e"}, + {file = "bandit-1.8.2-py3-none-any.whl", hash = "sha256:df6146ad73dd30e8cbda4e29689ddda48364e36ff655dbfc86998401fcf1721f"}, + {file = "bandit-1.8.2.tar.gz", hash = "sha256:e00ad5a6bc676c0954669fe13818024d66b70e42cf5adb971480cf3b671e835f"}, ] [package.dependencies] @@ -5199,4 +5199,4 @@ type = ["pytest-mypy"] [metadata] lock-version = "2.0" python-versions = ">=3.9,<3.13" -content-hash = "a2518ceabceffa979937068d7d59729373b8a08333fc4d17708896fd4c1fd6a6" +content-hash = "adb24504cb822fc878967d0ef427c17996a8748d0856759a4422896f5317eae7" diff --git a/pyproject.toml b/pyproject.toml index 5651d23f86..1fc95e3b16 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -75,7 +75,7 @@ tabulate = "0.9.0" tzlocal = "5.2" [tool.poetry.group.dev.dependencies] -bandit = "1.8.0" +bandit = "1.8.2" black = "24.10.0" coverage = "7.6.10" docker = "7.1.0"