This repository has been archived by the owner on Sep 28, 2022. It is now read-only.

chore(deps): update bandit to v1.7.4 #3

Merged

scop merged 2 commits into main from renovate/bandit-1.x

Mar 12, 2022

Contributor

renovate bot commented Dec 3, 2021 •

edited

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
bandit (source, changelog)	`==1.7.0` -> `==1.7.4`

Release Notes

PyCQA/bandit

`v1.7.4`

What's Changed

Fix traceback in hashlib_insecure_functions by @ericwb in Fix traceback in hashlib_insecure_functions PyCQA/bandit#834
Add version 1.7.3 to dropdown by @ericwb in Add version 1.7.3 to dropdown PyCQA/bandit#833
core/config: Fix ConfigError missing argument if toml is missing by @Holzhaus in core/config: Fix ConfigError missing argument if toml is missing PyCQA/bandit#845
Add 1.7.4 in issue template by @ericwb in Add 1.7.4 in issue template PyCQA/bandit#846

New Contributors

@Holzhaus made their first contribution in core/config: Fix ConfigError missing argument if toml is missing PyCQA/bandit#845

Full Changelog: PyCQA/bandit@1.7.3...1.7.4

`v1.7.3`

What's Changed

Rely on toml conditionally by @sigmavirus24 in Rely on toml conditionally PyCQA/bandit#780
Update issue template with latest versions by @ericwb in Update issue template with latest versions PyCQA/bandit#783
Delete release-drafter.yml by @ericwb in Delete release-drafter.yml PyCQA/bandit#781
Use released version of gh-action-pypi-publish by @ericwb in Use released version of gh-action-pypi-publish PyCQA/bandit#784
Update publish-to-pypi.yml by @ericwb in Update publish-to-pypi.yml PyCQA/bandit#785
Delete releasenotes directory (more openstack leftovers) by @ericwb in Delete releasenotes directory (more openstack leftovers) PyCQA/bandit#786
[docs] Add Getting Started chapter (migrate from README) by @bittner in [docs] Add Getting Started chapter (migrate from README) PyCQA/bandit#773
Including CWE information by @julianthome in Including CWE information PyCQA/bandit#613
Removal of the CWEMAP dict by @ericwb in Removal of the CWEMAP dict PyCQA/bandit#789
Fix up warnings in output of tox by @ericwb in Fix up warnings in output of tox PyCQA/bandit#793
Avoid printing metrics as float point numbers by @ericwb in Avoid printing metrics as float point numbers PyCQA/bandit#794
Add functional test of snmp_security_check by @ericwb in Add functional test of snmp_security_check PyCQA/bandit#791
Disable individual tests by @mikespallino in Disable individual tests PyCQA/bandit#597
Change up how CWE is formatted by @ericwb in Change up how CWE is formatted PyCQA/bandit#788
Check value of usedforsecurity for hashlib by @ericwb in Check value of usedforsecurity for hashlib PyCQA/bandit#798
Remove redundant Python 3.6 code by @ericwb in Remove redundant Python 3.6 code PyCQA/bandit#802
Add new plugin to check use of pyghmi by @ericwb in Add new plugin to check use of pyghmi PyCQA/bandit#803
Check for hardcoded passwords in class attributes by @noliverio in Check for hardcoded passwords in class attributes PyCQA/bandit#766
Better hashlib check for Python 3.9 by @ericwb in Better hashlib check for Python 3.9 PyCQA/bandit#805
Fix references to the default branch name by @ericwb in Fix references to the default branch name PyCQA/bandit#810
Cleanup the README by @ericwb in Cleanup the README PyCQA/bandit#809
Show usage with no arguments by @ericwb in Show usage with no arguments PyCQA/bandit#814
Respect color environment variables if set by @ericwb in Respect color environment variables if set PyCQA/bandit#813
Cannot seek stdin on pipe by @tylerwince in Cannot seek stdin on pipe PyCQA/bandit#496
Test on operating systems we can support by @ericwb in Test on operating systems we can support PyCQA/bandit#804
Fix up some warnings and errors in docs by @ericwb in Fix up some warnings and errors in docs PyCQA/bandit#817
Fix root doc for readthedocs by @ericwb in Fix root doc for readthedocs PyCQA/bandit#818
Use versioned links to docs by @ericwb in Use versioned links to docs PyCQA/bandit#819
Use CWE link in HTML formatter by @ericwb in Use CWE link in HTML formatter PyCQA/bandit#825
Improve performance of linerange by @Krock21rus in Improve performance of linerange PyCQA/bandit#629
Inaccurate message in hashlib check by @ericwb in Inaccurate message in hashlib check PyCQA/bandit#827
Target Python >= 3.7 in pre-commit hooks by @mkniewallner in Target Python >= 3.7 in pre-commit hooks PyCQA/bandit#830
Center the bandit logo in readme by @ericwb in Center the bandit logo in readme PyCQA/bandit#823
Build of artifact fails if raw directive used by @ericwb in Build of artifact fails if raw directive used PyCQA/bandit#831

New Contributors

@bittner made their first contribution in [docs] Add Getting Started chapter (migrate from README) PyCQA/bandit#773
@julianthome made their first contribution in Including CWE information PyCQA/bandit#613
@noliverio made their first contribution in Check for hardcoded passwords in class attributes PyCQA/bandit#766
@Krock21rus made their first contribution in Improve performance of linerange PyCQA/bandit#629

Full Changelog: PyCQA/bandit@1.7.2...1.7.3

`v1.7.2`

What's Changed

Fix broken reported URL link for B107 by @bagerard in Fix broken reported URL link for B107 PyCQA/bandit#751
test_help_arg: remove assert on 'optional arguments' by @mikelolasagasti in test_help_arg: remove assert on 'optional arguments' PyCQA/bandit#752
Create FUNDING.yml by @ericwb in Create FUNDING.yml PyCQA/bandit#774
Start using auto-formatters by @sigmavirus24 in Start using auto-formatters PyCQA/bandit#754
Drop end-of-life Python 3.5 by @ericwb in Drop end-of-life Python 3.5 PyCQA/bandit#746
Drop end-of-life Python 3.6 by @ericwb in Drop end-of-life Python 3.6 PyCQA/bandit#777
Fixup typo by @spagh-eddie in Fixup typo PyCQA/bandit#769
Fix README.rst by @stannum-l in Fix README.rst PyCQA/bandit#365
Added snmp_security check plugin for various SNMP checks by @Jed-Giblin in Added snmp_security check plugin for various SNMP checks PyCQA/bandit#403
Remove leftover openstack code by @ericwb in Remove leftover openstack code PyCQA/bandit#778
Correctly define extras in setup.cfg by @mkniewallner in Correctly define extras in setup.cfg PyCQA/bandit#755

New Contributors

@bagerard made their first contribution in Fix broken reported URL link for B107 PyCQA/bandit#751
@mikelolasagasti made their first contribution in test_help_arg: remove assert on 'optional arguments' PyCQA/bandit#752
@sigmavirus24 made their first contribution in Start using auto-formatters PyCQA/bandit#754
@spagh-eddie made their first contribution in Fixup typo PyCQA/bandit#769
@Jed-Giblin made their first contribution in Added snmp_security check plugin for various SNMP checks PyCQA/bandit#403
@mkniewallner made their first contribution in Correctly define extras in setup.cfg PyCQA/bandit#755

Full Changelog: PyCQA/bandit@1.7.1...1.7.2

`v1.7.1`

What's Changed

Specify output_file encoding as utf-8 by @Brcrwilliams in Specify output_file encoding as utf-8 PyCQA/bandit#364
Specify language_version in .pre-commit-hooks.yaml by @jdufresne in Specify language_version in .pre-commit-hooks.yaml PyCQA/bandit#670
Clearer message for subprocess module use by @ericwb in Clearer message for subprocess module use PyCQA/bandit#667
Add the column offset to the issue model by @tonybaloney in Add the column offset to the issue model PyCQA/bandit#618
Show column offset on all formatters by @ericwb in Show column offset on all formatters PyCQA/bandit#673
More complete removal of Python2 code by @ericwb in More complete removal of Python2 code PyCQA/bandit#674
Small syntax and formatting cleanup by @ericwb in Small syntax and formatting cleanup PyCQA/bandit#676
Updates to address docstring code scan issues, add flake8 configuration by @asears in Updates to address docstring code scan issues, add flake8 configuration PyCQA/bandit#671
More cleanup of license headers by @ericwb in More cleanup of license headers PyCQA/bandit#679
Replace http with https URLs by @ericwb in Replace http with https URLs PyCQA/bandit#680
Add default labels to issues by @ericwb in Add default labels to issues PyCQA/bandit#681
Prevent creation of blank issues by @ericwb in Prevent creation of blank issues PyCQA/bandit#682
Include the line number when using HTML output format by @aludwin1 in Include the line number when using HTML output format PyCQA/bandit#683
Add support for Python 3.9 by @ericwb in Add support for Python 3.9 PyCQA/bandit#650
Add numeric options for severity and confidence by @nathanstocking in Add numeric options for severity and confidence PyCQA/bandit#702
#694 Bandit fails when using importlib with named arguments by @maciejstromich in #694 Bandit fails when using importlib with named arguments PyCQA/bandit#701
Add license to package installation metadata by @RobbeSneyders in Add license to package installation metadata PyCQA/bandit#705
Mock part of python 3.x by @ericwb in Mock part of python 3.x PyCQA/bandit#685
Remove statement about Py3 by @ericwb in Remove statement about Py3 PyCQA/bandit#713
Use new issue template format by @ericwb in Use new issue template format PyCQA/bandit#717
Fix syntax error in bug report by @ericwb in Fix syntax error in bug report PyCQA/bandit#718
Remove steps in reproduce section by @ericwb in Remove steps in reproduce section PyCQA/bandit#719
Fix syntax errors in bug report by @ericwb in Fix syntax errors in bug report PyCQA/bandit#720
document that random.choices() isn't secure either by @taybin in document that random.choices() isn't secure either PyCQA/bandit#728
PEP-518 support: configure bandit via pyproject.toml by @orsinium in PEP-518 support: configure bandit via pyproject.toml PyCQA/bandit#401
Always use a Loader in yaml.load by @ericwb in Always use a Loader in yaml.load PyCQA/bandit#745
fix reading initial values from .bandit by @alipqb in fix reading initial values from .bandit PyCQA/bandit#722

New Contributors

@Brcrwilliams made their first contribution in Specify output_file encoding as utf-8 PyCQA/bandit#364
@jdufresne made their first contribution in Specify language_version in .pre-commit-hooks.yaml PyCQA/bandit#670
@tonybaloney made their first contribution in Add the column offset to the issue model PyCQA/bandit#618
@asears made their first contribution in Updates to address docstring code scan issues, add flake8 configuration PyCQA/bandit#671
@aludwin1 made their first contribution in Include the line number when using HTML output format PyCQA/bandit#683
@nathanstocking made their first contribution in Add numeric options for severity and confidence PyCQA/bandit#702
@RobbeSneyders made their first contribution in Add license to package installation metadata PyCQA/bandit#705
@taybin made their first contribution in document that random.choices() isn't secure either PyCQA/bandit#728
@orsinium made their first contribution in PEP-518 support: configure bandit via pyproject.toml PyCQA/bandit#401
@alipqb made their first contribution in fix reading initial values from .bandit PyCQA/bandit#722

Full Changelog: PyCQA/bandit@1.7.0...1.7.1

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by WhiteSource Renovate. View repository job log here.

renovate bot force-pushed the renovate/bandit-1.x branch from 4e8ba1a to 42a2725 Compare

December 4, 2021 11:04

renovate bot force-pushed the renovate/bandit-1.x branch from 42a2725 to 592cc55 Compare

January 26, 2022 02:12

renovate bot changed the title ~~chore(deps): update bandit to v1.7.1~~ chore(deps): update bandit to v1.7.2

renovate bot force-pushed the renovate/bandit-1.x branch from 592cc55 to 9f20991 Compare

February 28, 2022 00:05

renovate bot changed the title ~~chore(deps): update bandit to v1.7.2~~ chore(deps): update bandit to v1.7.3

renovate bot force-pushed the renovate/bandit-1.x branch from 9f20991 to 364f120 Compare

March 4, 2022 08:43

renovate bot changed the title ~~chore(deps): update bandit to v1.7.3~~ chore(deps): update bandit to v1.7.4


          chore(deps): update bandit to v1.7.4

renovate bot force-pushed the renovate/bandit-1.x branch from 364f120 to 3846095 Compare

March 12, 2022 07:13


          chore(deps): update flake8-bandit to v3

bc8b9ba

scop force-pushed the renovate/bandit-1.x branch from 5ca556d to bc8b9ba Compare

March 12, 2022 07:22

scop merged commit de717f0 into main

scop deleted the renovate/bandit-1.x branch

March 12, 2022 07:25

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.