chore(deps): update bandit to v1.7.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
bandit (source, changelog)	==1.7.0 -> ==1.7.4

---

Release Notes

PyCQA/bandit

v1.7.4

Compare Source

What's Changed

• Fix traceback in hashlib_insecure_functions by @​ericwb in Fix traceback in hashlib_insecure_functions PyCQA/bandit#834
• Add version 1.7.3 to dropdown by @​ericwb in Add version 1.7.3 to dropdown PyCQA/bandit#833
• core/config: Fix ConfigError missing argument if toml is missing by @​Holzhaus in core/config: Fix ConfigError missing argument if toml is missing PyCQA/bandit#845
• Add 1.7.4 in issue template by @​ericwb in Add 1.7.4 in issue template PyCQA/bandit#846

New Contributors

• @​Holzhaus made their first contribution in core/config: Fix ConfigError missing argument if toml is missing PyCQA/bandit#845

Full Changelog: PyCQA/bandit@1.7.3...1.7.4

v1.7.3

Compare Source

What's Changed

• Rely on toml conditionally by @​sigmavirus24 in Rely on toml conditionally PyCQA/bandit#780
• Update issue template with latest versions by @​ericwb in Update issue template with latest versions PyCQA/bandit#783
• Delete release-drafter.yml by @​ericwb in Delete release-drafter.yml PyCQA/bandit#781
• Use released version of gh-action-pypi-publish by @​ericwb in Use released version of gh-action-pypi-publish PyCQA/bandit#784
• Update publish-to-pypi.yml by @​ericwb in Update publish-to-pypi.yml PyCQA/bandit#785
• Delete releasenotes directory (more openstack leftovers) by @​ericwb in Delete releasenotes directory (more openstack leftovers) PyCQA/bandit#786
• [docs] Add Getting Started chapter (migrate from README) by @​bittner in [docs] Add Getting Started chapter (migrate from README) PyCQA/bandit#773
• Including CWE information by @​julianthome in Including CWE information PyCQA/bandit#613
• Removal of the CWEMAP dict by @​ericwb in Removal of the CWEMAP dict PyCQA/bandit#789
• Fix up warnings in output of tox by @​ericwb in Fix up warnings in output of tox PyCQA/bandit#793
• Avoid printing metrics as float point numbers by @​ericwb in Avoid printing metrics as float point numbers PyCQA/bandit#794
• Add functional test of snmp_security_check by @​ericwb in Add functional test of snmp_security_check PyCQA/bandit#791
• Disable individual tests by @​mikespallino in Disable individual tests PyCQA/bandit#597
• Change up how CWE is formatted by @​ericwb in Change up how CWE is formatted PyCQA/bandit#788
• Check value of usedforsecurity for hashlib by @​ericwb in Check value of usedforsecurity for hashlib PyCQA/bandit#798
• Remove redundant Python 3.6 code by @​ericwb in Remove redundant Python 3.6 code PyCQA/bandit#802
• Add new plugin to check use of pyghmi by @​ericwb in Add new plugin to check use of pyghmi PyCQA/bandit#803
• Check for hardcoded passwords in class attributes by @​noliverio in Check for hardcoded passwords in class attributes PyCQA/bandit#766
• Better hashlib check for Python 3.9 by @​ericwb in Better hashlib check for Python 3.9 PyCQA/bandit#805
• Fix references to the default branch name by @​ericwb in Fix references to the default branch name PyCQA/bandit#810
• Cleanup the README by @​ericwb in Cleanup the README PyCQA/bandit#809
• Show usage with no arguments by @​ericwb in Show usage with no arguments PyCQA/bandit#814
• Respect color environment variables if set by @​ericwb in Respect color environment variables if set PyCQA/bandit#813
• Cannot seek stdin on pipe by @​tylerwince in Cannot seek stdin on pipe PyCQA/bandit#496
• Test on operating systems we can support by @​ericwb in Test on operating systems we can support PyCQA/bandit#804
• Fix up some warnings and errors in docs by @​ericwb in Fix up some warnings and errors in docs PyCQA/bandit#817
• Fix root doc for readthedocs by @​ericwb in Fix root doc for readthedocs PyCQA/bandit#818
• Use versioned links to docs by @​ericwb in Use versioned links to docs PyCQA/bandit#819
• Use CWE link in HTML formatter by @​ericwb in Use CWE link in HTML formatter PyCQA/bandit#825
• Improve performance of linerange by @​Krock21rus in Improve performance of linerange PyCQA/bandit#629
• Inaccurate message in hashlib check by @​ericwb in Inaccurate message in hashlib check PyCQA/bandit#827
• Target Python >= 3.7 in pre-commit hooks by @​mkniewallner in Target Python >= 3.7 in pre-commit hooks PyCQA/bandit#830
• Center the bandit logo in readme by @​ericwb in Center the bandit logo in readme PyCQA/bandit#823
• Build of artifact fails if raw directive used by @​ericwb in Build of artifact fails if raw directive used PyCQA/bandit#831

New Contributors

• @​bittner made their first contribution in [docs] Add Getting Started chapter (migrate from README) PyCQA/bandit#773
• @​julianthome made their first contribution in Including CWE information PyCQA/bandit#613
• @​noliverio made their first contribution in Check for hardcoded passwords in class attributes PyCQA/bandit#766
• @​Krock21rus made their first contribution in Improve performance of linerange PyCQA/bandit#629

Full Changelog: PyCQA/bandit@1.7.2...1.7.3

v1.7.2

Compare Source

What's Changed

• Fix broken reported URL link for B107 by @​bagerard in Fix broken reported URL link for B107 PyCQA/bandit#751
• test_help_arg: remove assert on 'optional arguments' by @​mikelolasagasti in test_help_arg: remove assert on 'optional arguments' PyCQA/bandit#752
• Create FUNDING.yml by @​ericwb in Create FUNDING.yml PyCQA/bandit#774
• Start using auto-formatters by @​sigmavirus24 in Start using auto-formatters PyCQA/bandit#754
• Drop end-of-life Python 3.5 by @​ericwb in Drop end-of-life Python 3.5 PyCQA/bandit#746
• Drop end-of-life Python 3.6 by @​ericwb in Drop end-of-life Python 3.6 PyCQA/bandit#777
• Fixup typo by @​spagh-eddie in Fixup typo PyCQA/bandit#769
• Fix README.rst by @​stannum-l in Fix README.rst PyCQA/bandit#365
• Added snmp_security check plugin for various SNMP checks by @​Jed-Giblin in Added snmp_security check plugin for various SNMP checks PyCQA/bandit#403
• Remove leftover openstack code by @​ericwb in Remove leftover openstack code PyCQA/bandit#778
• Correctly define extras in setup.cfg by @​mkniewallner in Correctly define extras in setup.cfg PyCQA/bandit#755

New Contributors

• @​bagerard made their first contribution in Fix broken reported URL link for B107 PyCQA/bandit#751
• @​mikelolasagasti made their first contribution in test_help_arg: remove assert on 'optional arguments' PyCQA/bandit#752
• @​sigmavirus24 made their first contribution in Start using auto-formatters PyCQA/bandit#754
• @​spagh-eddie made their first contribution in Fixup typo PyCQA/bandit#769
• @​Jed-Giblin made their first contribution in Added snmp_security check plugin for various SNMP checks PyCQA/bandit#403
• @​mkniewallner made their first contribution in Correctly define extras in setup.cfg PyCQA/bandit#755

Full Changelog: PyCQA/bandit@1.7.1...1.7.2

v1.7.1

Compare Source

What's Changed

• Specify output_file encoding as utf-8 by @​Brcrwilliams in Specify output_file encoding as utf-8 PyCQA/bandit#364
• Specify language_version in .pre-commit-hooks.yaml by @​jdufresne in Specify language_version in .pre-commit-hooks.yaml PyCQA/bandit#670
• Clearer message for subprocess module use by @​ericwb in Clearer message for subprocess module use PyCQA/bandit#667
• Add the column offset to the issue model by @​tonybaloney in Add the column offset to the issue model PyCQA/bandit#618
• Show column offset on all formatters by @​ericwb in Show column offset on all formatters PyCQA/bandit#673
• More complete removal of Python2 code by @​ericwb in More complete removal of Python2 code PyCQA/bandit#674
• Small syntax and formatting cleanup by @​ericwb in Small syntax and formatting cleanup PyCQA/bandit#676
• Updates to address docstring code scan issues, add flake8 configuration by @​asears in Updates to address docstring code scan issues, add flake8 configuration PyCQA/bandit#671
• More cleanup of license headers by @​ericwb in More cleanup of license headers PyCQA/bandit#679
• Replace http with https URLs by @​ericwb in Replace http with https URLs PyCQA/bandit#680
• Add default labels to issues by @​ericwb in Add default labels to issues PyCQA/bandit#681
• Prevent creation of blank issues by @​ericwb in Prevent creation of blank issues PyCQA/bandit#682
• Include the line number when using HTML output format by @​aludwin1 in Include the line number when using HTML output format PyCQA/bandit#683
• Add support for Python 3.9 by @​ericwb in Add support for Python 3.9 PyCQA/bandit#650
• Add numeric options for severity and confidence by @​nathanstocking in Add numeric options for severity and confidence PyCQA/bandit#702
• #​694 Bandit fails when using importlib with named arguments by @​maciejstromich in #694 Bandit fails when using importlib with named arguments PyCQA/bandit#701
• Add license to package installation metadata by @​RobbeSneyders in Add license to package installation metadata PyCQA/bandit#705
• Mock part of python 3.x by @​ericwb in Mock part of python 3.x PyCQA/bandit#685
• Remove statement about Py3 by @​ericwb in Remove statement about Py3 PyCQA/bandit#713
• Use new issue template format by @​ericwb in Use new issue template format PyCQA/bandit#717
• Fix syntax error in bug report by @​ericwb in Fix syntax error in bug report PyCQA/bandit#718
• Remove steps in reproduce section by @​ericwb in Remove steps in reproduce section PyCQA/bandit#719
• Fix syntax errors in bug report by @​ericwb in Fix syntax errors in bug report PyCQA/bandit#720
• document that random.choices() isn't secure either by @​taybin in document that random.choices() isn't secure either PyCQA/bandit#728
• PEP-518 support: configure bandit via pyproject.toml by @​orsinium in PEP-518 support: configure bandit via pyproject.toml PyCQA/bandit#401
• Always use a Loader in yaml.load by @​ericwb in Always use a Loader in yaml.load PyCQA/bandit#745
• fix reading initial values from .bandit by @​alipqb in fix reading initial values from .bandit PyCQA/bandit#722

New Contributors

• @​Brcrwilliams made their first contribution in Specify output_file encoding as utf-8 PyCQA/bandit#364
• @​jdufresne made their first contribution in Specify language_version in .pre-commit-hooks.yaml PyCQA/bandit#670
• @​tonybaloney made their first contribution in Add the column offset to the issue model PyCQA/bandit#618
• @​asears made their first contribution in Updates to address docstring code scan issues, add flake8 configuration PyCQA/bandit#671
• @​aludwin1 made their first contribution in Include the line number when using HTML output format PyCQA/bandit#683
• @​nathanstocking made their first contribution in Add numeric options for severity and confidence PyCQA/bandit#702
• @​RobbeSneyders made their first contribution in Add license to package installation metadata PyCQA/bandit#705
• @​taybin made their first contribution in document that random.choices() isn't secure either PyCQA/bandit#728
• @​orsinium made their first contribution in PEP-518 support: configure bandit via pyproject.toml PyCQA/bandit#401
• @​alipqb made their first contribution in fix reading initial values from .bandit PyCQA/bandit#722

Full Changelog: PyCQA/bandit@1.7.0...1.7.1

---

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.

[codecov]

Codecov Report

Merging #44 (87b3492) into main (a9f2e96) will not change coverage.
The diff coverage is n/a.

❗ Current head 87b3492 differs from pull request most recent head a7f15d5. Consider uploading reports for the commit a7f15d5 to get more accurate results

@@           Coverage Diff           @@
##             main      #44   +/-   ##
=======================================
  Coverage   92.50%   92.50%           
=======================================
  Files           2        2           
  Lines          80       80           
=======================================
  Hits           74       74           
  Misses          6        6           

📣 Codecov can now indicate which changes are the most critical in Pull Requests. Learn more