Merge pull request #1811 from GSA/dependabot/pip/bandit-1.8.6

Bump bandit from 1.8.5 to 1.8.6
Merge pull request #1812 from GSA/dependabot/pip/moto-5.1.8
2026-08-23 15:56:45 -04:00 · 2025-07-08 08:29:34 -04:00 · 2025-07-08 08:29:11 -04:00 · 2025-07-08 08:27:42 -04:00 · 2025-07-08 01:53:02 +00:00 · 2025-07-08 01:52:54 +00:00
2 changed files with 11 additions and 11 deletions
--- a/poetry.lock
+++ b/poetry.lock
@@ -266,14 +266,14 @@ s3transfer = ">=0.13.0,<0.14.0"

 [[package]]
 name = "bandit"
-version = "1.8.5"
+version = "1.8.6"
 description = "Security oriented static analyser for python code."
 optional = false
 python-versions = ">=3.9"
 groups = ["dev"]
 files = [
-    {file = "bandit-1.8.5-py3-none-any.whl", hash = "sha256:cb2e57524e99e33ced48833c6cc9c12ac78ae970bb6a450a83c4b506ecc1e2f9"},
-    {file = "bandit-1.8.5.tar.gz", hash = "sha256:db812e9c39b8868c0fed5278b77fffbbaba828b4891bc80e34b9c50373201cfd"},
+    {file = "bandit-1.8.6-py3-none-any.whl", hash = "sha256:3348e934d736fcdb68b6aa4030487097e23a501adf3e7827b63658df464dddd0"},
+    {file = "bandit-1.8.6.tar.gz", hash = "sha256:dbfe9c25fc6961c2078593de55fd19f2559f9e45b99f1272341f5b95dea4e56b"},
 ]

 [package.dependencies]
@@ -959,14 +959,14 @@ testing = ["pytest (>=7.2.1)", "pytest-cov (>=4.0.0)", "tox (>=4.4.3)"]

 [[package]]
 name = "cloudfoundry-client"
-version = "1.38.5"
+version = "1.38.6"
 description = "A client library for CloudFoundry"
 optional = false
 python-versions = ">=3.9"
 groups = ["dev"]
 files = [
-    {file = "cloudfoundry_client-1.38.5-py3-none-any.whl", hash = "sha256:d85a1d7a0d733de0e3f47d4c0bf7c3979cb490b14eeb8decda189a81106d51a0"},
-    {file = "cloudfoundry_client-1.38.5.tar.gz", hash = "sha256:d2292dd3a553de2d65ae5031c1cbdc2243f45771951f990135f240181aa4a206"},
+    {file = "cloudfoundry_client-1.38.6-py3-none-any.whl", hash = "sha256:a04b64dd23aa67069664bc5e28ed2618b0523bc064a8cc4214eb4caa3d2ae48a"},
+    {file = "cloudfoundry_client-1.38.6.tar.gz", hash = "sha256:9c6b4518000226e480b39d873319836716b939f9f72ef411e00a8a8f6b32a63b"},
 ]

 [package.dependencies]
@@ -2677,14 +2677,14 @@ files = [

 [[package]]
 name = "moto"
-version = "5.1.6"
+version = "5.1.8"
 description = "A library that allows you to easily mock out tests based on AWS infrastructure"
 optional = false
 python-versions = ">=3.9"
 groups = ["dev"]
 files = [
-    {file = "moto-5.1.6-py3-none-any.whl", hash = "sha256:e4a3092bc8fe9139caa77cd34cdcbad804de4d9671e2270ea3b4d53f5c645047"},
-    {file = "moto-5.1.6.tar.gz", hash = "sha256:baf7afa9d4a92f07277b29cf466d0738f25db2ed2ee12afcb1dc3f2c540beebd"},
+    {file = "moto-5.1.8-py3-none-any.whl", hash = "sha256:12f3a15100da7de019c671a516dbba33b14072faba103f16ca79a39b8c803b7d"},
+    {file = "moto-5.1.8.tar.gz", hash = "sha256:5c2f63c051b7c13224cb1483917c85a796468d7e37dcd5d1a5b8de66729de3f4"},
 ]

 [package.dependencies]
@@ -5511,4 +5511,4 @@ cffi = ["cffi (>=1.11)"]
 [metadata]
 lock-version = "2.1"
 python-versions = "^3.12.9"
-content-hash = "7675598a63da6e41d0739d7f0c75fb01acb3d010e557ddec6dc3dcd3f1694e3c"
+content-hash = "a1df2339590eac5c1239e4ad84a49705597232f8275b240d66793a5106a104ad"
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -96,7 +96,7 @@ freezegun = "^1.5.2"
 honcho = "*"
 isort = "^6.0.1"
 jinja2-cli = {version = "==0.8.2", extras = ["yaml"]}
-moto = "==5.1.6"
+moto = "==5.1.8"
 pip-audit = "*"
 pre-commit = "^4.2.0"
 pytest = "^8.4.0"
Author	SHA1	Message	Date
Alex Janousek	e67f9eec25	Merge pull request #1811 from GSA/dependabot/pip/bandit-1.8.6 Bump bandit from 1.8.5 to 1.8.6	2025-07-08 08:29:34 -04:00
Alex Janousek	ba4a1fe78e	Merge pull request #1812 from GSA/dependabot/pip/moto-5.1.8 Bump moto from 5.1.6 to 5.1.8	2025-07-08 08:29:11 -04:00
Alex Janousek	5c48de3668	Merge pull request #1813 from GSA/dependabot/pip/cloudfoundry-client-1.38.6 Bump cloudfoundry-client from 1.38.5 to 1.38.6	2025-07-08 08:27:42 -04:00
dependabot[bot]	ce8996850a	Bump cloudfoundry-client from 1.38.5 to 1.38.6 --- updated-dependencies: - dependency-name: cloudfoundry-client dependency-version: 1.38.6 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2025-07-08 01:53:02 +00:00
dependabot[bot]	9a0662974b	Bump moto from 5.1.6 to 5.1.8 --- updated-dependencies: - dependency-name: moto dependency-version: 5.1.8 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2025-07-08 01:52:54 +00:00
dependabot[bot]	cae5d4d5fe	Bump bandit from 1.8.5 to 1.8.6 --- updated-dependencies: - dependency-name: bandit dependency-version: 1.8.6 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2025-07-08 00:20:06 +00:00