build(deps-dev): update bandit requirement from <1.7.7 to <1.7.8

Updates the requirements on bandit to permit the latest version.

Release notes

1.7.7

What's Changed

Add the new release to bandit versions of bug template by @ericwb in PyCQA/bandit#1075

Bump actions/setup-python from 4 to 5 by @dependabot in PyCQA/bandit#1076

Handle variant in how policy is passed in paramiko by @ericwb in PyCQA/bandit#1078

Flag str.replace as possible sql injection by @costaparas in PyCQA/bandit#1044

defusedxml: Show correct module name by @kajinamit in PyCQA/bandit#1081

Add tidelift to the sponsor funding list by @ericwb in PyCQA/bandit#1089

Create a security policy by @ericwb in PyCQA/bandit#1091

Fix up issues found running Bandit on itself by @ericwb in PyCQA/bandit#1093

Add random.randbytes to blacklist calls by @ericwb in PyCQA/bandit#1096

Prepend ./ for files specified as CLI args by @ericwb in PyCQA/bandit#1094

Rework GitPython dependency to be an extra for bandit-baseline by @ericwb in PyCQA/bandit#1099

Bump actions/dependency-review-action from 3 to 4 by @dependabot in PyCQA/bandit#1101

Introduce Official Bandit Images by @lukehinds in PyCQA/bandit#1088

Remove markdown formatting in reStructuredText formatted README by @ericwb in PyCQA/bandit#1103

Downsize the org:repo name by @lukehinds in PyCQA/bandit#1104

New Contributors

@kajinamit made their first contribution in PyCQA/bandit#1081

Full Changelog: https://github.com/PyCQA/bandit/compare/1.7.6...1.7.7

Commits

4c5b3c8 Downsize the org:repo name (#1104)
3f86e84 Remove markdown formatting in reStructuredText formatted README (#1103)
ff7ed4b Introduce Official Bandit Images (#1088)
99ddf6b Bump actions/dependency-review-action from 3 to 4 (#1101)
22c75a8 Rework GitPython dependency to be an extra for bandit-baseline (#1099)
12e14f6 Prepend ./ for files specified as CLI args (#1094)
0779eb0 Add random.randbytes to blacklist calls (#1096)
7129108 Fix up issues found running Bandit on itself (#1093)
c2bd6d6 Create a security policy (#1091)
a78cafe Add tidelift to the sponsor funding list (#1089)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

common-workflow-language / schema_salad

build(deps-dev): update bandit requirement from <1.7.7 to <1.7.8 #791

1.7.7

What's Changed

New Contributors

Codecov Report