Bump python-gitlab from 5.1.0 to 5.2.0

[dependabot]

Bumps python-gitlab from 5.1.0 to 5.2.0.

Release notes

Sourced from python-gitlab's releases.

v5.2.0 (2024-12-17)

Chores

• deps: Update all non-major dependencies (1e02f23)

• deps: Update all non-major dependencies (6532e8c)

• deps: Update all non-major dependencies (8046387)

• deps: Update codecov/codecov-action action to v5 (735efff)

• deps: Update dependency commitizen to v4 (9306362)

• deps: Update gitlab/gitlab-ee docker tag to v17.6.1-ee.0 (#3053, f2992ae)

Co-authored-by: renovate[bot]

• deps: Update gitlab/gitlab-ee docker tag to v17.6.2-ee.0 (#3065, db0db26)

Co-authored-by: renovate[bot]

• deps: Update pre-commit hook commitizen-tools/commitizen to v4 (a8518f1)

• docs: Fix CHANGELOG tracebacks codeblocks (9fe372a)

With v5.1.0 CHANGELOG.md was updated that mangled v1.10.0 triple backtick codeblock Traceback output that made sphinx fail [1] with a non-zero return code.

The resulting docs appears to be processes as text after the failing line [2]. While reviewing other backtick codeblocks fix v1.8.0 [3] to the original traceback.

[1] https://github.com/python-gitlab/python-gitlab/actions/runs/12060608158/job/33631303063#step:5:204 [2] https://python-gitlab.readthedocs.io/en/v5.1.0/changelog.html#v1-10-0-2019-07-22 [3] https://python-gitlab.readthedocs.io/en/v5.0.0/changelog.html#id258

• renovate: Pin httpx until respx is fixed (b70830d)

Documentation

• api-usage: Fix link to Gitlab REST API Authentication Docs (#3059, f460d95)

Features

• api: Add project templates (#3057, 0d41da3)

• feat(api): Added project template classes to templates.py
• feat(api): Added project template managers to Project in project.py
• docs(merge_requests): Add example of creating mr with description template
• test(templates): Added unit tests for templates
• docs(templates): added section for project templates

• graphql: Add async client (288f39c)

... (truncated)

Changelog

Sourced from python-gitlab's changelog.

v5.2.0 (2024-12-17)

Chores

• deps: Update all non-major dependencies (1e02f23)

• deps: Update all non-major dependencies (6532e8c)

• deps: Update all non-major dependencies (8046387)

• deps: Update codecov/codecov-action action to v5 (735efff)

• deps: Update dependency commitizen to v4 (9306362)

• deps: Update gitlab/gitlab-ee docker tag to v17.6.1-ee.0 (#3053, f2992ae)

Co-authored-by: renovate[bot]

• deps: Update gitlab/gitlab-ee docker tag to v17.6.2-ee.0 (#3065, db0db26)

Co-authored-by: renovate[bot]

• deps: Update pre-commit hook commitizen-tools/commitizen to v4 (a8518f1)

• docs: Fix CHANGELOG tracebacks codeblocks (9fe372a)

With v5.1.0 CHANGELOG.md was updated that mangled v1.10.0 triple backtick codeblock Traceback output that made sphinx fail [1] with a non-zero return code.

The resulting docs appears to be processes as text after the failing line [2]. While reviewing other backtick codeblocks fix v1.8.0 [3] to the original traceback.

[1] https://github.com/python-gitlab/python-gitlab/actions/runs/12060608158/job/33631303063#step:5:204 [2] https://python-gitlab.readthedocs.io/en/v5.1.0/changelog.html#v1-10-0-2019-07-22 [3] https://python-gitlab.readthedocs.io/en/v5.0.0/changelog.html#id258

• renovate: Pin httpx until respx is fixed (b70830d)

... (truncated)

Commits

• 9439132 chore: release v5.2.0
• 1e02f23 chore(deps): update all non-major dependencies
• db0db26 chore(deps): update gitlab/gitlab-ee docker tag to v17.6.2-ee.0 (#3065)
• 6532e8c chore(deps): update all non-major dependencies
• b70830d chore(renovate): pin httpx until respx is fixed
• 0d41da3 feat(api): add project templates (#3057)
• 735efff chore(deps): update codecov/codecov-action action to v5
• 9306362 chore(deps): update dependency commitizen to v4
• a8518f1 chore(deps): update pre-commit hook commitizen-tools/commitizen to v4
• f460d95 docs(api-usage): fix link to Gitlab REST API Authentication Docs (#3059)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dryrunsecurity]

DryRun Security Summary

The pull request updates the python-gitlab library from version 5.1.0 to 5.2.0 in the requirements.txt file, potentially introducing security improvements but requiring further review to confirm the specific changes and their impact on application security.

Expand for full summary

Summary:

The code change in this pull request is an update to the requirements.txt file, which specifies the Python dependencies required for the DefectDojo application. The specific change is an update to the python-gitlab library from version 5.1.0 to version 5.2.0.

From an application security perspective, the update to the python-gitlab library is worth noting, as library updates can sometimes include security fixes. However, without reviewing the specific changes in the new version, it's difficult to determine if this update addresses any security vulnerabilities. Additionally, the requirements.txt file contains a large number of dependencies, which can increase the attack surface of the application. It's important to review all dependencies and ensure that they are necessary, up-to-date, and secure, as unnecessary or outdated dependencies can introduce security risks.

Files Changed:

• requirements.txt: This file has been updated to include the latest version of the python-gitlab library, which has been upgraded from 5.1.0 to 5.2.0. While this update may include security fixes, it's important to review the specific changes in the new version to ensure that the application remains secure.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

View PR in the DryRun Dashboard.

[mtesauro]

Approved