Merge pull request #670 from GSA/dependabot/pip/bandit-1.7.6

Bump bandit from 1.7.5 to 1.7.6
This commit is contained in:
Steven Reilly
2023-12-12 13:01:24 -05:00
committed by GitHub

10
poetry.lock generated
View File

@@ -223,18 +223,18 @@ s3transfer = ">=0.7.0,<0.8.0"
[[package]]
name = "bandit"
version = "1.7.5"
version = "1.7.6"
description = "Security oriented static analyser for python code."
optional = false
python-versions = ">=3.7"
python-versions = ">=3.8"
files = [
{file = "bandit-1.7.5-py3-none-any.whl", hash = "sha256:75665181dc1e0096369112541a056c59d1c5f66f9bb74a8d686c3c362b83f549"},
{file = "bandit-1.7.5.tar.gz", hash = "sha256:bdfc739baa03b880c2d15d0431b31c658ffc348e907fe197e54e0389dd59e11e"},
{file = "bandit-1.7.6-py3-none-any.whl", hash = "sha256:36da17c67fc87579a5d20c323c8d0b1643a890a2b93f00b3d1229966624694ff"},
{file = "bandit-1.7.6.tar.gz", hash = "sha256:72ce7bc9741374d96fb2f1c9a8960829885f1243ffde743de70a19cee353e8f3"},
]
[package.dependencies]
colorama = {version = ">=0.3.9", markers = "platform_system == \"Windows\""}
GitPython = ">=1.0.1"
GitPython = ">=3.1.30"
PyYAML = ">=5.3.1"
rich = "*"
stevedore = ">=1.20.0"