From 99b4f570ff7da277c407a86ad809086d433e813b Mon Sep 17 00:00:00 2001 From: Wang Mingyu Date: Tue, 19 Mar 2024 13:45:09 +0800 Subject: [PATCH] python3-bandit: upgrade 1.7.7 -> 1.7.8 Changelog: ============ -Incorrect tag naming in readme -Utilize PyPI's trusted publishing -Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 -Add 1.7.7 to versions of bug template -Use datetime to avoid updating copyright year -filter data is safe for tarfile extractall -Bump docker/setup-buildx-action from 3.0.0 to 3.1.0 -[B605] Add functions that are vulnerable to shell injection -Add a SARIF output formatter Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj --- .../python/{python3-bandit_1.7.7.bb => python3-bandit_1.7.8.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-bandit_1.7.7.bb => python3-bandit_1.7.8.bb} (84%) diff --git a/meta-python/recipes-devtools/python/python3-bandit_1.7.7.bb b/meta-python/recipes-devtools/python/python3-bandit_1.7.8.bb similarity index 84% rename from meta-python/recipes-devtools/python/python3-bandit_1.7.7.bb rename to meta-python/recipes-devtools/python/python3-bandit_1.7.8.bb index 2de7fc7ae6..8b0968857f 100644 --- a/meta-python/recipes-devtools/python/python3-bandit_1.7.7.bb +++ b/meta-python/recipes-devtools/python/python3-bandit_1.7.8.bb @@ -2,7 +2,7 @@ SUMMARY = "Security oriented static analyser for python code." LICENSE = "Apache-2.0" LIC_FILES_CHKSUM = "file://LICENSE;md5=34400b68072d710fecd0a2940a0d1658" -SRC_URI[sha256sum] = "527906bec6088cb499aae31bc962864b4e77569e9d529ee51df3a93b4b8ab28a" +SRC_URI[sha256sum] = "36de50f720856ab24a24dbaa5fee2c66050ed97c1477e0a1159deab1775eab6b" DEPENDS = "python3-pbr-native python3-git python3-pbr python3-pyyaml python3-six python3-stevedore"