Skip to content

Commit 10061a3

Browse files
Bump bandit from 1.8.2 to 1.8.3 (#315)
Bumps [bandit](https://github.com/PyCQA/bandit) from 1.8.2 to 1.8.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/PyCQA/bandit/releases">bandit's releases</a>.</em></p> <blockquote> <h2>1.8.3</h2> <h2>What's Changed</h2> <ul> <li>Bump docker/build-push-action from 6.10.0 to 6.11.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1220">PyCQA/bandit#1220</a></li> <li>Bump docker/build-push-action from 6.11.0 to 6.12.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1221">PyCQA/bandit#1221</a></li> <li>Bump docker/build-push-action from 6.12.0 to 6.13.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1222">PyCQA/bandit#1222</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1229">PyCQA/bandit#1229</a></li> <li>Update bug template to include latest released versions by <a href="https://github.com/ericwb"><code>@​ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1218">PyCQA/bandit#1218</a></li> <li>Add markupsafe.Markup XSS plugin by <a href="https://github.com/Daverball"><code>@​Daverball</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1225">PyCQA/bandit#1225</a></li> <li>Warn not error on an nonexistant test given by <a href="https://github.com/ericwb"><code>@​ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1230">PyCQA/bandit#1230</a></li> <li>Bump sigstore/cosign-installer from 3.7.0 to 3.8.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1233">PyCQA/bandit#1233</a></li> <li>Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1234">PyCQA/bandit#1234</a></li> <li>B107: Skip None values in hardcoded password detection by <a href="https://github.com/lukehinds"><code>@​lukehinds</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1232">PyCQA/bandit#1232</a></li> <li>Pytorch fix by <a href="https://github.com/lukehinds"><code>@​lukehinds</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1231">PyCQA/bandit#1231</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Daverball"><code>@​Daverball</code></a> made their first contribution in <a href="https://redirect.github.com/PyCQA/bandit/pull/1225">PyCQA/bandit#1225</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/PyCQA/bandit/compare/1.8.2...1.8.3">https://github.com/PyCQA/bandit/compare/1.8.2...1.8.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/PyCQA/bandit/commit/8ff25e07e487f143571cc305e56dd0253c60bc7b"><code>8ff25e0</code></a> Pytorch fix (<a href="https://redirect.github.com/PyCQA/bandit/issues/1231">#1231</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/def123ac6dc581a4240a0656319251a46ab80d45"><code>def123a</code></a> B107: Skip None values in hardcoded password detection (<a href="https://redirect.github.com/PyCQA/bandit/issues/1232">#1232</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/00b1e9545a5574a440b82a75c48ebeb4c2915e40"><code>00b1e95</code></a> Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 (<a href="https://redirect.github.com/PyCQA/bandit/issues/1234">#1234</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/a324f420e60b72cae9994fdd3725f285be1007b2"><code>a324f42</code></a> Bump sigstore/cosign-installer from 3.7.0 to 3.8.0 (<a href="https://redirect.github.com/PyCQA/bandit/issues/1233">#1233</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/affd4fd1f506819de211797f3ea4e11114c31bf1"><code>affd4fd</code></a> Warn not error on an nonexistant test given (<a href="https://redirect.github.com/PyCQA/bandit/issues/1230">#1230</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/5e3e694325563a0a07053efd162a661f418948bb"><code>5e3e694</code></a> Add markupsafe.Markup XSS plugin (<a href="https://redirect.github.com/PyCQA/bandit/issues/1225">#1225</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/6133e08d26f3c24e279872d0a85d221f078518a9"><code>6133e08</code></a> Update bug template to include latest released versions (<a href="https://redirect.github.com/PyCQA/bandit/issues/1218">#1218</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/7619cc4d787923ed836014e28f8970f2955ff7c0"><code>7619cc4</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/PyCQA/bandit/issues/1229">#1229</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/33487819d4e11ef4d949882dce4a6508f2d46715"><code>3348781</code></a> Bump docker/build-push-action from 6.12.0 to 6.13.0 (<a href="https://redirect.github.com/PyCQA/bandit/issues/1222">#1222</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/ef0090fd2a56dd420d7578a631e5e24bca952a49"><code>ef0090f</code></a> Bump docker/build-push-action from 6.11.0 to 6.12.0 (<a href="https://redirect.github.com/PyCQA/bandit/issues/1221">#1221</a>)</li> <li>Additional commits viewable in <a href="https://github.com/PyCQA/bandit/compare/1.8.2...1.8.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit&package-manager=pip&previous-version=1.8.2&new-version=1.8.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 1353d8e commit 10061a3

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

linter-requirements.txt

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
bandit==1.8.2
1+
bandit==1.8.3
22
black==25.1.0
33
flake8==7.1.2
44
isort==6.0.0

0 commit comments

Comments
 (0)