Bumps [bandit](https://github.com/PyCQA/bandit) from 1.7.5 to 1.7.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/PyCQA/bandit/releases">bandit's releases</a>.</em></p> <blockquote> <h2>1.7.6</h2> <h2>What's Changed</h2> <ul> <li>Update bug report to include version 1.7.5 by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/993">PyCQA/bandit#993</a></li> <li>Render Python 3.10 in drop down correctly by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/997">PyCQA/bandit#997</a></li> <li>Remove checks for Python2 urllib by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/999">PyCQA/bandit#999</a></li> <li>Improper detection of non-requests module by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1011">PyCQA/bandit#1011</a></li> <li>xmlrpclib replaced with xmlrpc in Python3 by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1012">PyCQA/bandit#1012</a></li> <li>language and linting updates by <a href="https://github.com/marksmayo"><code>@marksmayo</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1015">PyCQA/bandit#1015</a></li> <li>Adds check for crypt module usage as weak hash by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1018">PyCQA/bandit#1018</a></li> <li>Switch to tox 4 by <a href="https://github.com/mportesdev"><code>@mportesdev</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1020">PyCQA/bandit#1020</a></li> <li>Skip unnecessary <code>pip install</code> commands in the pythonpackage.yml workflow by <a href="https://github.com/mportesdev"><code>@mportesdev</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1021">PyCQA/bandit#1021</a></li> <li>Update versions of used GitHub Actions by <a href="https://github.com/mportesdev"><code>@mportesdev</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1024">PyCQA/bandit#1024</a></li> <li>Update pre-commit hooks by <a href="https://github.com/mportesdev"><code>@mportesdev</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1026">PyCQA/bandit#1026</a></li> <li>Add <code>random.Random</code> to B311 checks by <a href="https://github.com/shiftinv"><code>@shiftinv</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/940">PyCQA/bandit#940</a></li> <li>Add a copy button to all code snippets in docs by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1030">PyCQA/bandit#1030</a></li> <li>Replace pbr in favor of importlib by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1016">PyCQA/bandit#1016</a></li> <li>Switch from open collective to PSF by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1031">PyCQA/bandit#1031</a></li> <li>Make pre-commit run Bandit hook using a single process by <a href="https://github.com/Klavionik"><code>@Klavionik</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1029">PyCQA/bandit#1029</a></li> <li>Remove support for Python 3.7 due to end-of-life by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1034">PyCQA/bandit#1034</a></li> <li>Update asserts.py documentation by <a href="https://github.com/deronnax"><code>@deronnax</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1036">PyCQA/bandit#1036</a></li> <li>Simplify <code>wrap_file_object</code> by <a href="https://github.com/mportesdev"><code>@mportesdev</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1037">PyCQA/bandit#1037</a></li> <li>django_rawsql_used: support keyword arguments used in <code>RawSQL</code> by <a href="https://github.com/kevinmarsh"><code>@kevinmarsh</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/765">PyCQA/bandit#765</a></li> <li>Avoid gitpyhon CVE-2022-24439 by <a href="https://github.com/carlosduelo"><code>@carlosduelo</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1048">PyCQA/bandit#1048</a></li> <li>Update blacklist call documentation by <a href="https://github.com/costaparas"><code>@costaparas</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1045">PyCQA/bandit#1045</a></li> <li>Support ignoring blacklists by name by <a href="https://github.com/costaparas"><code>@costaparas</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1046">PyCQA/bandit#1046</a></li> <li>Fix dependabot to update github actions by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1057">PyCQA/bandit#1057</a></li> <li>Bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1058">PyCQA/bandit#1058</a></li> <li>Fix for ReadtheDocs build by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1061">PyCQA/bandit#1061</a></li> <li>fix(plugins/B507): also detect class instances by <a href="https://github.com/mkniewallner"><code>@mkniewallner</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1064">PyCQA/bandit#1064</a></li> <li>Use mirror repository for black pre-commit hook by <a href="https://github.com/mportesdev"><code>@mportesdev</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1070">PyCQA/bandit#1070</a></li> <li>Add official support of Python 3.12 by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1068">PyCQA/bandit#1068</a></li> <li>Fix crash on pyproject.toml without bandit config by <a href="https://github.com/javajawa"><code>@javajawa</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1073">PyCQA/bandit#1073</a></li> <li>refactor: remove <code>importlib-metadata</code> fallback by <a href="https://github.com/mkniewallner"><code>@mkniewallner</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1066">PyCQA/bandit#1066</a></li> <li>Fixes for sphinx build by <a href="https://github.com/ericwb"><code>@ericwb</code></a> in <a href="https://redirect.github.com/PyCQA/bandit/pull/1063">PyCQA/bandit#1063</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/marksmayo"><code>@marksmayo</code></a> made their first contribution in <a href="https://redirect.github.com/PyCQA/bandit/pull/1015">PyCQA/bandit#1015</a></li> <li><a href="https://github.com/shiftinv"><code>@shiftinv</code></a> made their first contribution in <a href="https://redirect.github.com/PyCQA/bandit/pull/940">PyCQA/bandit#940</a></li> <li><a href="https://github.com/Klavionik"><code>@Klavionik</code></a> made their first contribution in <a href="https://redirect.github.com/PyCQA/bandit/pull/1029">PyCQA/bandit#1029</a></li> <li><a href="https://github.com/deronnax"><code>@deronnax</code></a> made their first contribution in <a href="https://redirect.github.com/PyCQA/bandit/pull/1036">PyCQA/bandit#1036</a></li> <li><a href="https://github.com/kevinmarsh"><code>@kevinmarsh</code></a> made their first contribution in <a href="https://redirect.github.com/PyCQA/bandit/pull/765">PyCQA/bandit#765</a></li> <li><a href="https://github.com/carlosduelo"><code>@carlosduelo</code></a> made their first contribution in <a href="https://redirect.github.com/PyCQA/bandit/pull/1048">PyCQA/bandit#1048</a></li> <li><a href="https://github.com/costaparas"><code>@costaparas</code></a> made their first contribution in <a href="https://redirect.github.com/PyCQA/bandit/pull/1045">PyCQA/bandit#1045</a></li> <li><a href="https://github.com/dependabot"><code>@dependabot</code></a> made their first contribution in <a href="https://redirect.github.com/PyCQA/bandit/pull/1058">PyCQA/bandit#1058</a></li> <li><a href="https://github.com/javajawa"><code>@javajawa</code></a> made their first contribution in <a href="https://redirect.github.com/PyCQA/bandit/pull/1073">PyCQA/bandit#1073</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/PyCQA/bandit/compare/1.7.5...1.7.6">https://github.com/PyCQA/bandit/compare/1.7.5...1.7.6</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/PyCQA/bandit/commit/f3a18ab30bc444e62d02505419ab7059cead0853"><code>f3a18ab</code></a> Fixes for sphinx build (<a href="https://redirect.github.com/PyCQA/bandit/issues/1063">#1063</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/4dea02ec98f0104b9c9e1e21602ee6d16ee76fe8"><code>4dea02e</code></a> refactor: remove <code>importlib-metadata</code> fallback (<a href="https://redirect.github.com/PyCQA/bandit/issues/1066">#1066</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/0d3508660654776e3b440c3b46d708dc3792cd4a"><code>0d35086</code></a> Fix crash on pyproject.toml without bandit config (<a href="https://redirect.github.com/PyCQA/bandit/issues/1073">#1073</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/6b2e24722bdcc40ea37c3bc155b6856961763814"><code>6b2e247</code></a> Add official support of Python 3.12 (<a href="https://redirect.github.com/PyCQA/bandit/issues/1068">#1068</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/9a2884efe130cad0897586e58dcb33bdbb6fbd81"><code>9a2884e</code></a> Use mirror repository for black pre-commit hook (<a href="https://redirect.github.com/PyCQA/bandit/issues/1070">#1070</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/6969489ff711a1762bd44d00eaaba75f0c7102f6"><code>6969489</code></a> fix(plugins/B507): also detect class instances (<a href="https://redirect.github.com/PyCQA/bandit/issues/1064">#1064</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/02faadac77e8901f0367dfea463cba484eaeeec7"><code>02faada</code></a> Fix for ReadtheDocs build (<a href="https://redirect.github.com/PyCQA/bandit/issues/1061">#1061</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/f016e508235d64aff459a60047ab3e079ada6613"><code>f016e50</code></a> Bump actions/checkout from 3 to 4 (<a href="https://redirect.github.com/PyCQA/bandit/issues/1058">#1058</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/0f49be77223c1a89ca80eb8cea911e6ac3e2a52d"><code>0f49be7</code></a> Fix dependabot to update github actions (<a href="https://redirect.github.com/PyCQA/bandit/issues/1057">#1057</a>)</li> <li><a href="https://github.com/PyCQA/bandit/commit/6d1d11c01e7824c04cc5005b4fe6b932c6999b18"><code>6d1d11c</code></a> Support ignoring blacklists by name (<a href="https://redirect.github.com/PyCQA/bandit/issues/1046">#1046</a>)</li> <li>Additional commits viewable in <a href="https://github.com/PyCQA/bandit/compare/1.7.5...1.7.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit&package-manager=pip&previous-version=1.7.5&new-version=1.7.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com>