Bump bandit from 1.7.6 to 1.7.7

[dependabot[bot]]

Bumps bandit from 1.7.6 to 1.7.7.

Release notes

Sourced from bandit's releases.

1.7.7

What's Changed

• Add the new release to bandit versions of bug template by @​ericwb in PyCQA/bandit#1075
• Bump actions/setup-python from 4 to 5 by @​dependabot in PyCQA/bandit#1076
• Handle variant in how policy is passed in paramiko by @​ericwb in PyCQA/bandit#1078
• Flag str.replace as possible sql injection by @​costaparas in PyCQA/bandit#1044
• defusedxml: Show correct module name by @​kajinamit in PyCQA/bandit#1081
• Add tidelift to the sponsor funding list by @​ericwb in PyCQA/bandit#1089
• Create a security policy by @​ericwb in PyCQA/bandit#1091
• Fix up issues found running Bandit on itself by @​ericwb in PyCQA/bandit#1093
• Add random.randbytes to blacklist calls by @​ericwb in PyCQA/bandit#1096
• Prepend ./ for files specified as CLI args by @​ericwb in PyCQA/bandit#1094
• Rework GitPython dependency to be an extra for bandit-baseline by @​ericwb in PyCQA/bandit#1099
• Bump actions/dependency-review-action from 3 to 4 by @​dependabot in PyCQA/bandit#1101
• Introduce Official Bandit Images by @​lukehinds in PyCQA/bandit#1088
• Remove markdown formatting in reStructuredText formatted README by @​ericwb in PyCQA/bandit#1103
• Downsize the org:repo name by @​lukehinds in PyCQA/bandit#1104

New Contributors

• @​kajinamit made their first contribution in PyCQA/bandit#1081

Full Changelog: https://github.com/PyCQA/bandit/compare/1.7.6...1.7.7

Commits

• 4c5b3c8 Downsize the org:repo name (#1104)
• 3f86e84 Remove markdown formatting in reStructuredText formatted README (#1103)
• ff7ed4b Introduce Official Bandit Images (#1088)
• 99ddf6b Bump actions/dependency-review-action from 3 to 4 (#1101)
• 22c75a8 Rework GitPython dependency to be an extra for bandit-baseline (#1099)
• 12e14f6 Prepend ./ for files specified as CLI args (#1094)
• 0779eb0 Add random.randbytes to blacklist calls (#1096)
• 7129108 Fix up issues found running Bandit on itself (#1093)
• c2bd6d6 Create a security policy (#1091)
• a78cafe Add tidelift to the sponsor funding list (#1089)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (6f8dffd) 100.00% compared to head (bfeba35) 100.00%. Report is 1 commits behind head on main.

:exclamation: Current head bfeba35 differs from pull request most recent head 2f82729. Consider uploading reports for the commit 2f82729 to get more accurate results

Additional details and impacted files

[](https://app.codecov.io/gh/mdabrowski1990/uds/pull/260?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Maciej+D%C4%85browski) ```diff @@ Coverage Diff @@ ## main #260 +/- ## ========================================= Coverage 100.00% 100.00% ========================================= Files 39 39 Lines 2346 2346 ========================================= Hits 2346 2346 ``` | [Flag](https://app.codecov.io/gh/mdabrowski1990/uds/pull/260/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Maciej+D%C4%85browski) | Coverage Δ | | |---|---|---| | [integration-tests](https://app.codecov.io/gh/mdabrowski1990/uds/pull/260/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Maciej+D%C4%85browski) | `87.97% <ø> (ø)` | | | [unit-tests](https://app.codecov.io/gh/mdabrowski1990/uds/pull/260/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Maciej+D%C4%85browski) | `100.00% <ø> (ø)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Maciej+D%C4%85browski#carryforward-flags-in-the-pull-request-comment) to find out more.