From 0337685b6c521d363163c2c5851a784deeb8e9a7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 23 Sep 2024 14:12:06 -0700 Subject: [PATCH] Bump bandit from 1.7.9 to 1.7.10 (#202) Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- poetry.lock | 8 ++++---- pyproject.toml | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/poetry.lock b/poetry.lock index 2defe6a..8c78e6f 100644 --- a/poetry.lock +++ b/poetry.lock @@ -195,13 +195,13 @@ tests-no-zope = ["attrs[tests-mypy]", "cloudpickle", "hypothesis", "pympler", "p [[package]] name = "bandit" -version = "1.7.9" +version = "1.7.10" description = "Security oriented static analyser for python code." optional = false python-versions = ">=3.8" files = [ - {file = "bandit-1.7.9-py3-none-any.whl", hash = "sha256:52077cb339000f337fb25f7e045995c4ad01511e716e5daac37014b9752de8ec"}, - {file = "bandit-1.7.9.tar.gz", hash = "sha256:7c395a436743018f7be0a4cbb0a4ea9b902b6d87264ddecf8cfdc73b4f78ff61"}, + {file = "bandit-1.7.10-py3-none-any.whl", hash = "sha256:665721d7bebbb4485a339c55161ac0eedde27d51e638000d91c8c2d68343ad02"}, + {file = "bandit-1.7.10.tar.gz", hash = "sha256:59ed5caf5d92b6ada4bf65bc6437feea4a9da1093384445fed4d472acc6cff7b"}, ] [package.dependencies] @@ -2352,4 +2352,4 @@ tensorflow = ["tensorflow"] [metadata] lock-version = "2.0" python-versions = ">=3.9,<3.13" -content-hash = "0f63a0c5b209d3634c1e2fbd9e0ccf6086d90fa6a4b95769f191a4f8ea51d9ba" +content-hash = "d7620be26c4ed4e57f8e3da6b3dba96f31ba02fd1f700846f5d9a9e45c951d82" diff --git a/pyproject.toml b/pyproject.toml index 0748d56..3e70d7c 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -28,7 +28,7 @@ h5py = ["h5py"] [tool.poetry.group.test.dependencies] pytest = ">=7.4,<9.0" -bandit = { version = "1.7.9", extras = ["toml"] } +bandit = { version = "1.7.10", extras = ["toml"] } mypy = "^1.4.1" requests = "^2.31.0" aiohttp = "^3.8.5"