New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency bandit to v1.7.4 #10

Merged

strayer merged 1 commit into main from renovate/bandit-1.x-lockfile

Mar 11, 2022

Contributor

renovate bot commented Mar 11, 2022 •

edited

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
bandit (source, changelog)	`1.7.1` -> `1.7.4`

Release Notes

PyCQA/bandit

`v1.7.4`

What's Changed

Fix traceback in hashlib_insecure_functions by @ericwb in Fix traceback in hashlib_insecure_functions PyCQA/bandit#834
Add version 1.7.3 to dropdown by @ericwb in Add version 1.7.3 to dropdown PyCQA/bandit#833
core/config: Fix ConfigError missing argument if toml is missing by @Holzhaus in core/config: Fix ConfigError missing argument if toml is missing PyCQA/bandit#845
Add 1.7.4 in issue template by @ericwb in Add 1.7.4 in issue template PyCQA/bandit#846

New Contributors

@Holzhaus made their first contribution in core/config: Fix ConfigError missing argument if toml is missing PyCQA/bandit#845

Full Changelog: PyCQA/bandit@1.7.3...1.7.4

`v1.7.3`

What's Changed

Rely on toml conditionally by @sigmavirus24 in Rely on toml conditionally PyCQA/bandit#780
Update issue template with latest versions by @ericwb in Update issue template with latest versions PyCQA/bandit#783
Delete release-drafter.yml by @ericwb in Delete release-drafter.yml PyCQA/bandit#781
Use released version of gh-action-pypi-publish by @ericwb in Use released version of gh-action-pypi-publish PyCQA/bandit#784
Update publish-to-pypi.yml by @ericwb in Update publish-to-pypi.yml PyCQA/bandit#785
Delete releasenotes directory (more openstack leftovers) by @ericwb in Delete releasenotes directory (more openstack leftovers) PyCQA/bandit#786
[docs] Add Getting Started chapter (migrate from README) by @bittner in [docs] Add Getting Started chapter (migrate from README) PyCQA/bandit#773
Including CWE information by @julianthome in Including CWE information PyCQA/bandit#613
Removal of the CWEMAP dict by @ericwb in Removal of the CWEMAP dict PyCQA/bandit#789
Fix up warnings in output of tox by @ericwb in Fix up warnings in output of tox PyCQA/bandit#793
Avoid printing metrics as float point numbers by @ericwb in Avoid printing metrics as float point numbers PyCQA/bandit#794
Add functional test of snmp_security_check by @ericwb in Add functional test of snmp_security_check PyCQA/bandit#791
Disable individual tests by @mikespallino in Disable individual tests PyCQA/bandit#597
Change up how CWE is formatted by @ericwb in Change up how CWE is formatted PyCQA/bandit#788
Check value of usedforsecurity for hashlib by @ericwb in Check value of usedforsecurity for hashlib PyCQA/bandit#798
Remove redundant Python 3.6 code by @ericwb in Remove redundant Python 3.6 code PyCQA/bandit#802
Add new plugin to check use of pyghmi by @ericwb in Add new plugin to check use of pyghmi PyCQA/bandit#803
Check for hardcoded passwords in class attributes by @noliverio in Check for hardcoded passwords in class attributes PyCQA/bandit#766
Better hashlib check for Python 3.9 by @ericwb in Better hashlib check for Python 3.9 PyCQA/bandit#805
Fix references to the default branch name by @ericwb in Fix references to the default branch name PyCQA/bandit#810
Cleanup the README by @ericwb in Cleanup the README PyCQA/bandit#809
Show usage with no arguments by @ericwb in Show usage with no arguments PyCQA/bandit#814
Respect color environment variables if set by @ericwb in Respect color environment variables if set PyCQA/bandit#813
Cannot seek stdin on pipe by @tylerwince in Cannot seek stdin on pipe PyCQA/bandit#496
Test on operating systems we can support by @ericwb in Test on operating systems we can support PyCQA/bandit#804
Fix up some warnings and errors in docs by @ericwb in Fix up some warnings and errors in docs PyCQA/bandit#817
Fix root doc for readthedocs by @ericwb in Fix root doc for readthedocs PyCQA/bandit#818
Use versioned links to docs by @ericwb in Use versioned links to docs PyCQA/bandit#819
Use CWE link in HTML formatter by @ericwb in Use CWE link in HTML formatter PyCQA/bandit#825
Improve performance of linerange by @Krock21rus in Improve performance of linerange PyCQA/bandit#629
Inaccurate message in hashlib check by @ericwb in Inaccurate message in hashlib check PyCQA/bandit#827
Target Python >= 3.7 in pre-commit hooks by @mkniewallner in Target Python >= 3.7 in pre-commit hooks PyCQA/bandit#830
Center the bandit logo in readme by @ericwb in Center the bandit logo in readme PyCQA/bandit#823
Build of artifact fails if raw directive used by @ericwb in Build of artifact fails if raw directive used PyCQA/bandit#831

New Contributors

@bittner made their first contribution in [docs] Add Getting Started chapter (migrate from README) PyCQA/bandit#773
@julianthome made their first contribution in Including CWE information PyCQA/bandit#613
@noliverio made their first contribution in Check for hardcoded passwords in class attributes PyCQA/bandit#766
@Krock21rus made their first contribution in Improve performance of linerange PyCQA/bandit#629

Full Changelog: PyCQA/bandit@1.7.2...1.7.3

`v1.7.2`

What's Changed

Fix broken reported URL link for B107 by @bagerard in Fix broken reported URL link for B107 PyCQA/bandit#751
test_help_arg: remove assert on 'optional arguments' by @mikelolasagasti in test_help_arg: remove assert on 'optional arguments' PyCQA/bandit#752
Create FUNDING.yml by @ericwb in Create FUNDING.yml PyCQA/bandit#774
Start using auto-formatters by @sigmavirus24 in Start using auto-formatters PyCQA/bandit#754
Drop end-of-life Python 3.5 by @ericwb in Drop end-of-life Python 3.5 PyCQA/bandit#746
Drop end-of-life Python 3.6 by @ericwb in Drop end-of-life Python 3.6 PyCQA/bandit#777
Fixup typo by @spagh-eddie in Fixup typo PyCQA/bandit#769
Fix README.rst by @stannum-l in Fix README.rst PyCQA/bandit#365
Added snmp_security check plugin for various SNMP checks by @Jed-Giblin in Added snmp_security check plugin for various SNMP checks PyCQA/bandit#403
Remove leftover openstack code by @ericwb in Remove leftover openstack code PyCQA/bandit#778
Correctly define extras in setup.cfg by @mkniewallner in Correctly define extras in setup.cfg PyCQA/bandit#755

New Contributors

@bagerard made their first contribution in Fix broken reported URL link for B107 PyCQA/bandit#751
@mikelolasagasti made their first contribution in test_help_arg: remove assert on 'optional arguments' PyCQA/bandit#752
@sigmavirus24 made their first contribution in Start using auto-formatters PyCQA/bandit#754
@spagh-eddie made their first contribution in Fixup typo PyCQA/bandit#769
@Jed-Giblin made their first contribution in Added snmp_security check plugin for various SNMP checks PyCQA/bandit#403
@mkniewallner made their first contribution in Correctly define extras in setup.cfg PyCQA/bandit#755

Full Changelog: PyCQA/bandit@1.7.1...1.7.2

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by WhiteSource Renovate. View repository job log here.

renovate bot changed the title ~~Update dependency bandit to v1.7.4~~ Update dependency bandit to v1.7.4 - autoclosed

renovate bot closed this

renovate bot deleted the renovate/bandit-1.x-lockfile branch

March 11, 2022 15:47

renovate bot changed the title ~~Update dependency bandit to v1.7.4 - autoclosed~~ Update dependency bandit to v1.7.4

renovate bot restored the renovate/bandit-1.x-lockfile branch

March 11, 2022 15:48

renovate bot reopened this


          Update dependency bandit to v1.7.4

1473b81

renovate bot force-pushed the renovate/bandit-1.x-lockfile branch from 49e9520 to 1473b81 Compare

March 11, 2022 15:53

strayer merged commit a2b247d into main

strayer deleted the renovate/bandit-1.x-lockfile branch

March 11, 2022 16:23

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment