Wed Jan 24 06:50:34 2024 UTC (124d)
py-bandit: updated to 1.7.7

1.7.7

* Downsize the org:repo name
* Remove markdown formatting in reStructuredText formatted README
* Introduce Official Bandit Images
* Bump actions/dependency-review-action from 3 to 4
* Rework GitPython dependency to be an extra for bandit-baseline
* Prepend ./ for files specified as CLI args
* Add random.randbytes to blacklist calls
* Fix up issues found running Bandit on itself
* Create a security policy
* Add tidelift to the sponsor funding list
* defusedxml: Show correct module name
* Flag str.replace as possible sql injection
* Handle variant in how policy is passed in paramiko
* Bump actions/setup-python from 4 to 5
* Add the new release to bandit versions of bug template


(adam)
diff -r1.5 -r1.6 pkgsrc/security/py-bandit/Makefile
diff -r1.3 -r1.4 pkgsrc/security/py-bandit/distinfo
cvs diff -r1.5 -r1.6 pkgsrc/security/py-bandit/Makefile (expand / switch to unified diff)

--- pkgsrc/security/py-bandit/Makefile 2023/12/17 08:36:01 1.5
+++ pkgsrc/security/py-bandit/Makefile 2024/01/24 06:50:34 1.6
@@ -1,16 +1,16 @@ @@ -1,16 +1,16 @@
1# $NetBSD: Makefile,v 1.5 2023/12/17 08:36:01 wiz Exp $ 1# $NetBSD: Makefile,v 1.6 2024/01/24 06:50:34 adam Exp $
2 2
3DISTNAME= bandit-1.7.6 3DISTNAME= bandit-1.7.7
4PKGNAME= ${PYPKGPREFIX}-${DISTNAME} 4PKGNAME= ${PYPKGPREFIX}-${DISTNAME}
5CATEGORIES= security python 5CATEGORIES= security python
6MASTER_SITES= ${MASTER_SITE_PYPI:=b/bandit/} 6MASTER_SITES= ${MASTER_SITE_PYPI:=b/bandit/}
7 7
8MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
9HOMEPAGE= https://github.com/PyCQA/bandit 9HOMEPAGE= https://github.com/PyCQA/bandit
10COMMENT= Security oriented static analyser for Python code 10COMMENT= Security oriented static analyser for Python code
11LICENSE= apache-2.0 11LICENSE= apache-2.0
12 12
13TOOL_DEPENDS+= ${PYPKGPREFIX}-pbr>=2.0.0:../../devel/py-pbr 13TOOL_DEPENDS+= ${PYPKGPREFIX}-pbr>=2.0.0:../../devel/py-pbr
14TOOL_DEPENDS+= ${PYPKGPREFIX}-wheel>=0:../../devel/py-wheel 14TOOL_DEPENDS+= ${PYPKGPREFIX}-wheel>=0:../../devel/py-wheel
15DEPENDS+= ${PYPKGPREFIX}-gitpython>=3.1.30:../../devel/py-gitpython 15DEPENDS+= ${PYPKGPREFIX}-gitpython>=3.1.30:../../devel/py-gitpython
16DEPENDS+= ${PYPKGPREFIX}-rich-[0-9]*:../../comms/py-rich 16DEPENDS+= ${PYPKGPREFIX}-rich-[0-9]*:../../comms/py-rich
cvs diff -r1.3 -r1.4 pkgsrc/security/py-bandit/distinfo (expand / switch to unified diff)

--- pkgsrc/security/py-bandit/distinfo 2023/12/11 17:18:36 1.3
+++ pkgsrc/security/py-bandit/distinfo 2024/01/24 06:50:34 1.4
@@ -1,5 +1,5 @@ @@ -1,5 +1,5 @@
1$NetBSD: distinfo,v 1.3 2023/12/11 17:18:36 adam Exp $ 1$NetBSD: distinfo,v 1.4 2024/01/24 06:50:34 adam Exp $
2 2
3BLAKE2s (bandit-1.7.6.tar.gz) = 7a5149088fce6272fd16b6c4c4ca90692b2bdb45b51b7893be5f8c9e2eff4123 3BLAKE2s (bandit-1.7.7.tar.gz) = d5eb89190ef459310d4ce4065299dc352104731b5db35f56cc1cb297d80fe33b
4SHA512 (bandit-1.7.6.tar.gz) = 6635704e2e60e23f5d21de345152e13ef1bde5efb92ccc0e6dde46e8405c1e5dd9530830af4d2a3c5d6e0bb0eb106ccce4cde3a7be678cce499486e752a26428 4SHA512 (bandit-1.7.7.tar.gz) = 32682a9a4c54532be398444799bc6d46d06e2806d3e3e851dd09f0151b21df5974eaa4c940307f32cd6c58b36b99a361cbd8c48f189c27071565be6de63b0db5
5Size (bandit-1.7.6.tar.gz) = 1977532 bytes 5Size (bandit-1.7.7.tar.gz) = 1980358 bytes