From db3917df494c0b37cdb5e483d5b09d59ed6dbcb8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 7 Jul 2025 17:53:48 +0000 Subject: [PATCH] Poetry Dep(deps-dev): Bump bandit from 1.8.5 to 1.8.6 Bumps [bandit](https://github.com/PyCQA/bandit) from 1.8.5 to 1.8.6. - [Release notes](https://github.com/PyCQA/bandit/releases) - [Commits](https://github.com/PyCQA/bandit/compare/1.8.5...1.8.6) --- updated-dependencies: - dependency-name: bandit dependency-version: 1.8.6 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- poetry.lock | 8 ++++---- pyproject.toml | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/poetry.lock b/poetry.lock index 58fc1f9..dabbb69 100644 --- a/poetry.lock +++ b/poetry.lock @@ -2,14 +2,14 @@ [[package]] name = "bandit" -version = "1.8.5" +version = "1.8.6" description = "Security oriented static analyser for python code." optional = false python-versions = ">=3.9" groups = ["dev"] files = [ - {file = "bandit-1.8.5-py3-none-any.whl", hash = "sha256:cb2e57524e99e33ced48833c6cc9c12ac78ae970bb6a450a83c4b506ecc1e2f9"}, - {file = "bandit-1.8.5.tar.gz", hash = "sha256:db812e9c39b8868c0fed5278b77fffbbaba828b4891bc80e34b9c50373201cfd"}, + {file = "bandit-1.8.6-py3-none-any.whl", hash = "sha256:3348e934d736fcdb68b6aa4030487097e23a501adf3e7827b63658df464dddd0"}, + {file = "bandit-1.8.6.tar.gz", hash = "sha256:dbfe9c25fc6961c2078593de55fd19f2559f9e45b99f1272341f5b95dea4e56b"}, ] [package.dependencies] @@ -1473,4 +1473,4 @@ zstd = ["zstandard (>=0.18.0)"] [metadata] lock-version = "2.1" python-versions = ">=3.10" -content-hash = "e4d23a3f1fe6f23001577ac8dfdd1e6837d4a2118ab1bce005ff134d3ba34f83" +content-hash = "3cd22b18dbbef149f97e80f30d8b038eaa92d710fbf2fca980c5d56761498fb2" diff --git a/pyproject.toml b/pyproject.toml index 4f94250..e7670f6 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -29,7 +29,7 @@ pytest = "8.3.5" pytest-cov = ">=3.0.0" flake8 = ">=6.0.0" codecov = ">=2.1.11" -bandit = { extras = ["baseline", "toml"], version = "^1.8.5" } +bandit = { extras = ["baseline", "toml"], version = "^1.8.6" } [tool.poetry.scripts] graphedexcel = "graphedexcel.cli:main"