Bump bandit from 1.7.7 to 1.7.8

[dependabot[bot]]

Bumps bandit from 1.7.7 to 1.7.8.

Release notes

Sourced from bandit's releases.

1.7.8

What's Changed

• Incorrect tag naming in readme by @​lukehinds in PyCQA/bandit#1105
• Utilize PyPI's trusted publishing by @​ericwb in PyCQA/bandit#1107
• Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 by @​dependabot in PyCQA/bandit#1109
• Add 1.7.7 to versions of bug template by @​ericwb in PyCQA/bandit#1110
• Use datetime to avoid updating copyright year by @​ericwb in PyCQA/bandit#1112
• filter data is safe for tarfile extractall by @​etienneschalk in PyCQA/bandit#1111
• Bump docker/setup-buildx-action from 3.0.0 to 3.1.0 by @​dependabot in PyCQA/bandit#1115
• [B605] Add functions that are vulnerable to shell injection. by @​shihai1991 in PyCQA/bandit#1116
• Add a SARIF output formatter by @​ericwb in PyCQA/bandit#1113

New Contributors

• @​etienneschalk made their first contribution in PyCQA/bandit#1111
• @​shihai1991 made their first contribution in PyCQA/bandit#1116

Full Changelog: https://github.com/PyCQA/bandit/compare/1.7.7...1.7.8

Commits

• 22b4226 Add a SARIF output formatter (#1113)
• b603dce [B605] Add functions that are vulnerable to shell injection. (#1116)
• a682a18 Bump docker/setup-buildx-action from 3.0.0 to 3.1.0 (#1115)
• c8d5f77 filter data is safe for tarfile extractall (#1111)
• e041e12 Use datetime to avoid updating copyright year (#1112)
• 5b16b6a Add 1.7.7 to versions of bug template (#1110)
• 858bfd8 Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 (#1109)
• be5d6ac Utilize PyPI's trusted publishing (#1107)
• c3a07e5 Incorrect tag naming in readme (#1105)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 100.00%. Comparing base (15ab1d5) to head (7ffc19b).

Additional details and impacted files

[](https://app.codecov.io/gh/mdabrowski1990/uds/pull/263?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Maciej+D%C4%85browski) ```diff @@ Coverage Diff @@ ## main #263 +/- ## ========================================= Coverage 100.00% 100.00% ========================================= Files 39 39 Lines 2346 2346 ========================================= Hits 2346 2346 ``` | [Flag](https://app.codecov.io/gh/mdabrowski1990/uds/pull/263/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Maciej+D%C4%85browski) | Coverage Δ | | |---|---|---| | [integration-tests](https://app.codecov.io/gh/mdabrowski1990/uds/pull/263/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Maciej+D%C4%85browski) | `87.97% <ø> (ø)` | | | [unit-tests](https://app.codecov.io/gh/mdabrowski1990/uds/pull/263/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Maciej+D%C4%85browski) | `100.00% <ø> (ø)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Maciej+D%C4%85browski#carryforward-flags-in-the-pull-request-comment) to find out more.